Preset Policies

Last updated: 2020-06-12 11:09:01

    Access control is essentially to bind subaccounts to policies or grants policies to subaccounts. You can use preset policies directly in the console to implement some simple authorization operations. For more complicated authorization operations, please see Custom Policies.

    Currently, VOD provides the following preset policies:

    Policy Name Description
    QcloudVODFullAccess Full access to VOD
    QcloudVODReadonlyAccess Read-only access to VOD

    Usage Examples of Preset Policies

    Creating a subuser with full access to VOD

    1. Access the User List page in the CAM Console as a root account and click Create User.
    2. On the "Create User" page, click Custom under "Subuser" to enter the "Create Subuser" page.
    3. Enter the user information.
      • Enter the username, select Programming Access and Tencent Cloud Console Access, and configure other options as needed.
      • Click Next and complete authentication as prompted.
    4. Set user permissions.
      • Search for and select the preset policy QcloudVODFullAccess.
      • Click Next.
    5. Click Complete in the "Review Info and Permission" column. After the subuser is created successfully, download the login link and security credentials as shown below and keep them safe.
      Information Source Function Storage Required
      Login link Copy on the page Makes it easier to log in to the console without having to enter the root account No
      Username Security credential file in CSV format Required for console login Yes
      Password Security credential file in CSV format Required for console login Yes
      SecretId Security credential file in CSV format Required for server API call. For more information, please seeAccess Key Yes
      SecretKey Security credential file in CSV format Required for server API call. For more information, please seeAccess Key Yes

    With the above login link and security credentials, you can use this subuser to perform all operations in VOD (e.g., accessing the VOD Console and calling VOD server APIs).

    For more information on how to create a subuser, please see the Creating Subusers document of CAM.

    Granting-full-permissions-of-VOD-to-existing-subusers">

    Granting full permissions of VOD to existing subusers

    1. Access the User List in the CAM Console as a root account and click the desired subaccount.
    2. Click Add Policy in the "Permission" column on the "User Details" page, as shown below (in practice, the information displayed on this page may vary by existing permissions of the sub-account. If the permission of a sub-account is not empty, please click Associate Policy).
    3. Click Select Policy from Policy List to Associate, search for and check the preset policy QcloudVODFullAccess, and complete authorization as prompted.

    Revoking a subuser's full access to VOD

    1. Access the User List in the CAM Console as a root account and click the desired subaccount.
    2. Find the preset policy QcloudVODFullAccess in the "Permission" column on the "User Details" page, click Unassociate on the right, and complete deauthorization as prompted.

    Was this page helpful?

    Was this page helpful?

    • Not at all
    • Not very helpful
    • Somewhat helpful
    • Very helpful
    • Extremely helpful
    Send Feedback
    Help