Authorize the sub-account to have full permissions for the message service

Last Updated At: 2025-10-21 09:10:00

Authorize the sub-account to have full permissions for the message service

The enterprise account CompanyExample has a sub-account Developer, which needs to have all permissions on the message queue under the name of the enterprise account CompanyExample. No matter whether the message queue is a topic model or a queue model, it can be read and written.
Scheme A:
The enterprise account CompanyExample directly grants the sub-account Developer with the predefined policy QCloudCmqQueueFullAccess and QCloudCmqTopicFullAccess. For authorization methods, refer to Authorization Management.
Scheme B:
Step 1: Create the following policies by policy syntax.

 {
    "version": "2.0",
    "statement":
     {
         "effect": "allow",
         "action": ["cmqtopic:*","camqueue:*"]
         "resource": "*"
     }
}

Step 2: Authorize the policy to the sub-account. For authorization methods, refer to Authorization Management.