Managing Sub-account

Last updated: 2019-11-28 17:20:37



This document describes how to create a sub-account and grant it permission to manage KMS.


Step 1. Create a sub-account

  1. Log in to the CAM Console with your root account.
  2. On the User List page, click Create User to create a sub-account.

Step 2. Create an API key

  1. Click the sub-account name to enter the details page.
  2. Select API Key > Create Key to create SecketId and SecretKey. The API key is used to access KMS.

Step 3. Authorize the sub-account

The newly created sub-account can be granted with the access to KMS by associating a KMS policy.

  1. Go to Permission > Associate Policy > Select Policy in Policy List and select the appropriate KMS policy.
  2. Click Next > OK to grant KMS permission to the sub-account.