Authorize sub-accounts to have the operation permission of a specific CVM
The enterprise account CompanyExample (ownerUin: 12345678) has a sub-account Developer, which needs to have the operation permissions on the specified CVM machine (ID: ins-1, Luzon region) of the enterprise account CompanyExample.
Step 1: Create the following policies by policy syntax
{
"version": "2.0",
"statement": [
{
"action": "cvm:*",
"resource": "qcs::cvm:gz::instance/ins-1",
"effect": "allow"
}
]
}
Step 2: Authorize the policy to the sub-account.