The sub-user/collaborator can read the bills of the root account and its sub-accounts, but are not allowed to configure bill storage, confirm bills, apply for stamps, or set cost allocation tags.
Note: If a sub-user/collaborator had been associated with the QCloudResourceFullAccess policy before July 29, 2021, you need to disassociate and associate the policy again; otherwise, all billing-related permissions will be denied.
QcloudFinanceBillFullAccess
Read/Write access to bills
The sub-user/collaborator has read/write access to the bills of the root account and its sub-accounts.
Notes:
If a sub-user/collaborator had been associated with the QCloudResourceFullAccess policy before July 29, 2021, you need to disassociate and associate the policy again; otherwise, all billing-related permissions will be denied.
To allow the sub-user/collaborator to configure bill storage, you also need to associate it with the following policies:
QcloudCOSGetServiceAccess (access to COS buckets)
QcloudCamSubaccountsAuthorizeRoleFullAccess (permission to authorize CAM service roles)
QCloudFinanceFullAccess
All billing-related access
The sub-user/collaborator can perform any billing-related operation, such as payment or invoicing, for the root account and its sub-accounts.
AdministratorAccess
Administrator access
The sub-user/collaborator can manage all users and their permissions, billing information, and resources under the root account.
Yes
No
Was this page helpful?