Authorizing a sub-account with all permissions of CLB except payment
A sub-account Developer under the enterprise account CompanyExample (ownerUin is 12345678) requires full management permissions (such as creation and management) of the enterprise account CompanyExample's CLB service, except the payment permission. The sub-account is allowed to place an order but cannot pay for it.
Solution A:
The enterprise account CompanyExample directly authorizes the preset policy QcloudCLBFullAccess to the sub-account Developer. For more information on authorization, please see Authorization Management. Solution B:
Step 1: Create the following policy using policy syntax
{
"version": "2.0",
"statement":[
{
"effect": "allow",
"action": "clb:*",
"resource": "*"
}
]
}
Step 2: Authorize the policy to the sub-account. For more information on authorization, please see Authorization Management.