Under the corporate account CompanyExample (with ownerUin as 12345678), there is a sub-account named Developer. This sub-account requires full administrative permissions (including creation, management, and all other operations) for the VPC services of the corporate account CompanyExample, excluding payment permissions. That is, it can place orders but cannot process payments.
Scenario A:
The corporate account CompanyExample directly grants the preset policy QcloudVPCFullAccess to the sub-account Developer. For the method of authorization, please see Authorization Management.
Scenario B:
1. Create a policy through policy syntax.
{"version": "2.0","statement":[{"effect": "allow","action": "vpc:*","resource": "*"}]}
2. Grant this policy to the sub-account. For the authorization method, please see Authorization Management.