Help & DocumentationCloud Access ManagementBusiness Use CaseCVM-related CasesAuthorizing Sub-account Full Access to CVMs Except Payment

Authorizing Sub-account Full Access to CVMs Except Payment

Last updated: 2019-05-10 11:03:39

PDF

Authorizing a sub-account with all permissions of CVM except payment

A sub-account Developer under the enterprise account CompanyExample (ownerUin is 12345678) requires full management permissions (such as creation and management) of the enterprise account CompanyExample's CVM service, except the payment permission. The sub-account is allowed to make an order but cannot pay for it.

Solution A:

The enterprise account CompanyExample directly authorizes the preset policy QcloudCVMFullAccess to the sub-account Developer. For more information on authorization, please see Authorization Management.

Solution B:

Step 1: Create the following policy using policy syntax

 {
    "version": "2.0",
    "statement":[
         {
             "effect": "allow",
             "action": "cvm:*",
             "resource": "*"
         }
    ]
}

Step 2: Authorize the policy to the sub-account. For more information on authorization, please see Authorization Management.