Scenarios

According to the Group Account Organizational Structure, you can set permitted users or groups for each account, as well as their permission configuration.
This document provides an example on how to deploy a permission configuration for an Identity Center user (user1) to a member account (Account1). The permission configuration defines only CVM access permissions, allowing the Identity Center user (user1) to only access CVM resources in the member account (Account1).

Prerequisites

Please ensure you have created the permission configuration.
In this example, the bound preset policy is used without creating a custom policy.
Please ensure you have created or synchronized users.
In this example, the created user (user1) is from Identity Center. For detailed operations, please refer to User Management.