Sub-user API Key Management

Last Updated At: 2025-10-21 09:10:00

Scenarios

This section describes how to manage cloud API keys of sub-users. Sub-users can call cloud APIs through cloud API keys.

Note: Keys can only be created for sub-users but not for the root account. Using the root account is not recommended in actual projects.

Operation Steps

Creating a Key for a Sub-user

  1. Log in to the CAM console and choose User Management > User to enter the User Management page.
  2. On the User Management page, click a user to enter the User Details page, and click API Key Management.
  3. Click Create Key and select a key creation method: system generation or custom creation.
  4. A newly created key is added to the key list.

Disabling a Sub-user Key

  1. Log in to the CAM console and choose User Management > User to enter the User Management page.
  2. On the User Management page, click a user to enter the User Details page, and click API Key Management.
  3. In the Operation column of the key list, click Disable.
  4. In the operation confirmation pop-up window, click Confirm.
  5. After the key is disabled, the user cannot call cloud APIs through this key.

Enabling a Sub-user Key

  1. Log in to the CAM console and choose User Management > User to enter the User Management page.
  2. On the User Management page, click a user to enter the User Details page, and click API Key Management.
  3. In the Operation column of the key list, click Enable.
  4. After the key is enabled, the user can call cloud APIs through this key.

Deleting a Sub-user Key

  1. Log in to the CAM console and choose User Management > User to enter the User Management page.
  2. On the User Management page, click a user to enter the User Details page, and click API Key Management.
  3. In the Operation column of the key list, click Delete. Note: The key should be disabled before deletion.
  4. After the key is deleted, the user cannot call cloud APIs through this key.