tencent cloud

Note：

This document describes the access management feature of VOD. For more information on access management for other Tencent Cloud services, please see CAM-Enabled Products.

Access management is essentially to bind sub-accounts to policies or grant policies to sub-accounts. You can use preset policies directly in the console to implement some simple authorization operations. For more complicated authorization operations, please see Custom Policy.

Currently, VOD provides the following preset policies:

Preset Policy Use Cases

Creating subuser with full access to VOD

1. Access the User List page in the CAM console as a root account and click Create User.
   
2. On the Create User page, click Custom Creation.
   
3. Click Next and enter the user information.
   • Enter the username, select Programming Access and Tencent Cloud Console Access, and configure other options as needed.
   • Click Next and complete authentication as prompted.
     
4. Set user permissions.
   • Search for and select the preset policy QcloudVODFullAccess.
   • Click Next.
5. Click Complete in the "Review Info and Permission" column. After the user is created successfully, download the login link and security credentials as shown below and keep them safe.
   

   Information	Source	Function	Storage Required
   Login link	Copy on the page	Makes it easier to log in to the console without having to enter the root account	No
   Username	Security credential file in CSV format	Required for console login	Yes
   Password	Security credential file in CSV format	Required for console login	Yes
   SecretId	Security credential file in CSV format	Required for server API call. For more information, please see Access Key	Yes
   SecretKey	Security credential file in CSV format	Required for server API call. For more information, please see Access Key	Yes

With the above login link and security credentials, you can use this subuser to perform all operations in VOD (e.g., accessing the VOD console and calling VOD server APIs).

Note：

For more information on how to create a subuser, please see the Creating Subusers document of CAM.

Granting full permissions of VOD to existing subusers

1. Access the User List in the CAM console as a root account and click the target sub-account.
   
2. Click Add Policy in the Permission column on the User Details page, as shown below (in practice, the information displayed on this page may vary by existing permissions of the sub-account. If the permission of a sub-account is not empty, please click Associate Policy).
   
3. Click Select Policy from Policy List to Associate, search for and check the preset policy QcloudVODFullAccess, and complete authorization as prompted.

Revoking subuser's full access to VOD

1. Access the User List in the CAM console as a root account and click the target sub-account.
   
2. Find the preset policy QcloudVODFullAccess in the Permission column on the User Details page, click Unassociate on the right, and complete deauthorization as prompted.