Last updated: 2020-02-25 16:09:52PDF
Limit Access's scene
When you log in to the console to perform an operation on a Tencent Cloud Service, a message indicating that you have no permission to perform the operation on the resources may be displayed, as shown below:
This is because the sub-user or collaborator account with which you logged in to the console is not granted the relevant permissions. The root account needs to grant permissions for you to view the information or perform the operation.
Confirm that you need to be awarded Permission.
Permission, which you do not have, is indicated in the description of the failure message. As shown in the figure above, you do not have Permission of the DescribeInstances API under the product CVM (Cloud Virtual Machine), which prevents you from viewing the content on the page.
Use the main account or the sub-user with the management Permission to grant the relevant Permission to the corresponding sub-user or collaborator.
- Login Access Management console , enter Policy On the management page, click Create Custom Policy-> create by Policy Builder to grant a specific API Permission (such as DescribeInstances). For detailed steps, please refer to Create a policy through the Policy Builder .
- On the policy management page, query the system policy of the corresponding product, and grant the preset system policy to sub-users, such as Cloud Virtual Machine-related preset policy in this example. For more information, please refer to Through the preset policy Associate user / user group .