Creating and Authorizing Sub-account

Last updated: 2021-07-19 17:53:04

    Overview

    Sub-accounts include sub-users, collaborators, and message recipients. The differences between different types of users are as follows (for more information, please see User Types) :

    • Sub-user: it is created and fully owned by a root account.
    • Collaborator: it has the identity of a root account. After it is added as a collaborator of the current root account, it becomes one of the sub-accounts of the current root account and can switch back to its root account identity.
    • Message recipient: it can only receive messages.

    This document describes how to use the root account or admin user to create a sub-account (sub-user/collaborator) in the CAM console and bind it to a permission policy.

    Prerequisites

    Directions

    You can click the following tabs to view the directions to create and authorize different types of sub-accounts.

    1. Log in to the CAM console and select User > User List on the left sidebar.
    2. On the user list page, click Create User.
    3. On the user creation page, select the creation method. Taking custom creation as an example, the steps are as follows:
    4. On the user type selection page, select Access Resources and Receive Messages and click Next to enter the user information.
    5. On the user information configuration page, set the user information, access, and other information and click Next to set the user permissions.
    6. On the user permission configuration page, bind policies to the sub-user and click Next to review the information and permissions.
    7. On the information and permissions review page, confirm that the configuration information is correct and click Done.
    8. You will be redirected to the page prompting that the user is successfully created, and you can get the sub-user information in the following two methods:
      • Click Copy to directly get and copy the login information of the sub-user.
      • Click Send, enter the email address, and the system will send the complete sub-user information to the specified email address.