CAM provides the following support features:
Authorized access to root account resources
Allows you to authorize resources of the root account to other users, including sub-accounts and other root accounts, without sharing the identity credentials of the root account.
Refined permission management
You can grant different levels of access permissions for different resources to different users. For example, some sub-accounts can be granted permission to operate a specific CVM virtual machine, while other accounts or root accounts can be granted permission to operate CVM in a specific region. Resources, access permissions, and users can all be packaged in batches.
Final consistency
CAM currently supports multiple regions of the cloud platform. It achieves cross-region data synchronization by replicating policy data. Although CAM policy changes are submitted promptly, cross-region policy synchronization may cause a delay in policy enforcement. Additionally, CAM uses caching to improve performance (currently a one-minute cache), so updates take effect after the cache expires.