Preset Policy

Last updated: 2021-02-25 16:28:06

    Note:

    This document describes the access management feature of VOD. For more information on access management for other Tencent Cloud services, please see CAM-Enabled Products.

    Access management is essentially to bind sub-accounts to policies or grant policies to sub-accounts. You can use preset policies directly in the console to implement some simple authorization operations. For more complicated authorization operations, please see Custom Policy.

    Currently, VOD provides the following preset policies:

    Policy Name Description
    QcloudVODFullAccess Full access to VOD
    QcloudVODReadonlyAccess Read-only access to VOD

    Preset Policy Use Cases

    Creating subuser with full access to VOD

    1. Access the User List page in the CAM console as a root account and click Create User.
    2. On the Create User page, click Custom under "Subuser" to enter the Create Subuser page.
    3. Click Next and enter the user information.
      • Enter the username, select Programming Access and Tencent Cloud Console Access, and configure other options as needed.
      • Click Next and complete authentication as prompted.
    4. Set user permissions.
      • Search for and select the preset policy QcloudVODFullAccess.
      • Click Next.
    5. Click Complete in the "Review Info and Permission" column. After the user is created successfully, download the login link and security credentials as shown below and keep them safe.
      Information Source Function Storage Required
      Login link Copy on the page Makes it easier to log in to the console without having to enter the root account No
      Username Security credential file in CSV format Required for console login Yes
      Password Security credential file in CSV format Required for console login Yes
      SecretId Security credential file in CSV format Required for server API call. For more information, please see Access Key Yes
      SecretKey Security credential file in CSV format Required for server API call. For more information, please see Access Key Yes

    With the above login link and security credentials, you can use this subuser to perform all operations in VOD (e.g., accessing the VOD console and calling VOD server APIs).

    Note:

    For more information on how to create a subuser, please see the Creating Subusers document of CAM.

    Granting-full-permissions-of-VOD-to-existing-subusers">

    Granting full permissions of VOD to existing subusers

    1. Access the User List in the CAM console as a root account and click the target sub-account.
    2. Click Add Policy in the Permission column on the User Details page, as shown below (in practice, the information displayed on this page may vary by existing permissions of the sub-account. If the permission of a sub-account is not empty, please click Associate Policy).
    3. Click Select Policy from Policy List to Associate, search for and check the preset policy QcloudVODFullAccess, and complete authorization as prompted.

    Revoking subuser's full access to VOD

    1. Access the User List in the CAM console as a root account and click the target sub-account.
    2. Find the preset policy QcloudVODFullAccess in the Permission column on the User Details page, click Unassociate on the right, and complete deauthorization as prompted.

    Was this page helpful?

    Was this page helpful?

    • Not at all
    • Not very helpful
    • Somewhat helpful
    • Very helpful
    • Extremely helpful
    Send Feedback
    Help