tencent cloud

Feedback

Authorizing Sub-account Access to Perform Operations on Specific VPC and Resources of This VPC

Last updated: 2024-01-23 18:02:53
The enterprise account, CompanyExample (ownerUin: 12345678), has a sub-account, Developer, that requires operating permissions for a specific VPC (ID: vpc-id1) and relevant resources (e.g., subnets, routing tables, but not CVMs and databases) of the VPC service belonging to the CompanyExample enterprise account.
Step 1: create the following policy according to policy syntax.
{
"version": "2.0",
"statement": [
{
"action": "vpc:*",
"resource": "*",
"effect": "allow",
"condition": {
"string_equal_if_exist": {
"vpc:vpc": [
"vpc-id1"
],
"vpc:accepter_vpc": [
"vpc-id1"
],
"vpc:requester_vpc": [
"vpc-id1"
]
}
}
}
]
}
Step 2: associate the sub-account with the policy. To learn how to associate a policy with a user account, see Authorization Management.
Contact Us

Contact our sales team or business advisors to help your business.

Technical Support

Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

7x24 Phone Support