Help & Documentation>Cloud Access Management>Business Use Cases>CLB>Authorizing Sub-account Full Access to CLB (Includes payment permission)

Authorizing Sub-account Full Access to CLB (Includes payment permission)

Last updated: 2024-09-30 16:59:44
Under the corporate account CompanyExample (with ownerUin 12345678), there is a sub-account named Developer. This sub-account requires full management permissions for the CLB service of the corporate account CompanyExample, including all operations such as creation, management, and CLB order payment.

Scenario A:

The corporate account CompanyExample directly grants the preset policies QcloudCLBFullAccess and QcloudCLBFinanceAccess to the sub-account Developer. For the method of authorization, please see Authorization Management.

Scenario B:

1. Create a policy through policy syntax.
{
"version": "2.0",
"statement":[
{
"effect": "allow",
"action": "clb:*",
"resource": "*"
},
{
"effect": "allow",
"action": "finance:*",
"resource": "qcs::clb:::*"
}
]
}
2. Grant this policy to the sub-account. For the authorization method, please see Authorization Management.