Authorize Sub-account Full Permissions to CVM

Authorize Sub-account Full Permissions to CVM

The enterprise account CompanyExample (ownerUin: 12345678) has a sub-account Developer, which needs to have full administrative permissions on the CVM service of the enterprise account CompanyExample (all operation permissions such as creation, management, order placement and payment for cloud server).

Scheme A:

The enterprise account CompanyExample directly authorizes the predefined policy QcloudCVMFullAccess and QcloudCVMFinanceAccess to the sub-account Developer.

Scheme B:

Step 1: Create the following policies by policy syntax

{
    "version": "2.0",
    "statement":[
         {
             "effect": "allow",
             "action": "cvm:*",
             "resource": "*"
         },
         {
                "effect": "allow",
                "action": "finance:*",
                "resource": "qcs::cvm:::*"
         }
    ]
}

Step 2: Authorize the policy to the sub-account. For authorization methods, refer to Authorization Management.