Authorize the sub-account to have full permissions for the message service
Last Updated At: 2025-10-21 09:10:00
Authorize the sub-account to have full permissions for the message service
The enterprise account CompanyExample has a sub-account Developer, which needs to have all permissions on the message queue under the name of the enterprise account CompanyExample. No matter whether the message queue is a topic model or a queue model, it can be read and written.
Scheme A:
The enterprise account CompanyExample directly grants the sub-account Developer with the predefined policy QCloudCmqQueueFullAccess and QCloudCmqTopicFullAccess. For authorization methods, refer to Authorization Management.
Scheme B:
Step 1: Create the following policies by policy syntax.
{
"version": "2.0",
"statement":
{
"effect": "allow",
"action": ["cmqtopic:*","camqueue:*"]
"resource": "*"
}
}
Step 2: Authorize the policy to the sub-account. For authorization methods, refer to Authorization Management.