Preset Policies

Last updated: 2020-10-29 14:56:21

    Note:

    This document describes the access management feature of SMS. For more information on access management for other Tencent Cloud services, please see CAM-Enabled Products.

    SMS access management essentially binds sub-accounts to policies or grants policies to sub-accounts. You can use preset policies directly in the console to implement some simple authorization operations. For more complicated authorization operations, please see Custom Policies.

    Currently, SMS provides the following preset policies:

    Policy Name Description
    QcloudSMSFullAccess Full access to SMS
    QcloudSMSReadonlyAccess Read-only access to SMS

    Preset Policy Use Cases

    Creating sub-accounts with full access to SMS

    1. Access the User List page in the CAM Console using the Tencent Cloud root account and click Create User.
    2. On the "Create User" page, select Custom Create to enter the "Create Sub-user" page.

      Note:

      Please perform the steps before "User Permissions" as instructed in Creating a Custom Sub-user.

    3. On the "User Permissions" page:
      1. Search for and select the preset policy QcloudSMSFullAccess.
      2. Click Next.
    4. Click Complete in the "Review" column. After the sub-user is created successfully, download the login link and security credentials as shown below and keep them private.
      Information Source Description Storage Required
      Login link Copy it on the page Makes it easier to log in to the console without having to enter the root account No
      Username Security credential file in CSV format Needed for console login Yes
      Password Security credential file in CSV format Needed for console login Yes
      SecretId Security credential file in CSV format Needed for calling server APIs. For more information, please see "Access Key" Yes
      SecretKey Security credential file in CSV format Needed for calling server APIs. For more information, please see "Access Key" Yes
    5. With the above login link and security credentials, you can use this sub-user to perform all operations in SMS (such as accessing the SMS console and calling SMS server APIs).

    Granting Existing Sub-account Full Access to SMS

    1. Access the User List in the CAM console using a Tencent Cloud root account and click the target sub-account.
    2. Click Add Policy under the "Permissions" tab on the "User Details" page. If the permission of a sub-account is not empty, click Associate Policy.
    3. Click Select policies from the policy list, search for and check the preset policy QcloudSMSFullAccess, and complete the authorization as prompted.

    Removing a Sub-account’s Full Access to SMS

    1. Access the User List in the CAM console using a Tencent Cloud root account and click the target sub-account.
    2. Find the preset policy QcloudSMSFullAccess under the "Permissions" tab on the "User Details" page, click Unassociate on the right, and complete deauthorization as prompted.

    Was this page helpful?

    Was this page helpful?

    • Not at all
    • Not very helpful
    • Somewhat helpful
    • Very helpful
    • Extremely helpful
    Send Feedback
    Help