A CAM user is an entity you created on the cloud platform, and each CAM user is associated with only one cloud account. The identity of your registered cloud account is the root account. You can use User Management to create sub-accounts with different permissions for assistance. Sub-accounts are categorized into sub-users and message recipients.
| Account Type | Root account | Sub-account | |
| Sub-user | Message Recipient | ||
| Definition | Possess all resources of the cloud platform and can access any of its resources. You are not advised to use the root account for resource operations. Instead, you should create sub-accounts, assign policies based on the principle of least privilege, and use sub-accounts with limited permissions to manage your cloud resources. | Created by the root account and fully owned by the root account that creates the sub-user. | Only has the message receiving feature. |
| Console Access | ✔ | ✔ | - |
| Programmatic Access | Default has full policy access. | ✔ | - |
| Policy Authorization | ✔ | ✔ | - |
| Message Notification | ✔ | ✔ | ✔ |