Help & Documentation>Cloud Access Management>Business Use Cases>CMQ>Authorizing a Sub-account Full Permissions to Use Messaging Services

Authorizing a Sub-account Full Permissions to Use Messaging Services

Last updated: 2024-09-30 16:59:45
Under the corporate account CompanyExample, there is a sub-account named Developer. This sub-account requires full permissions for all message queues under the corporate account CompanyExample. Regardless of whether the message queue is based on a topic model or a queue model, it should be readable and writable.

Scenario A:

The corporate account CompanyExample directly grants the preset policies QCloudCmqQueueFullAccess and QCloudCmqTopicFullAccess to the sub-account Developer. For the method of authorization, please see Authorization Management.

Scenario B:

1. Create a policy through policy syntax.
{
"version": "2.0",
"statement":[
{
"effect": "allow",
"action": ["cmqtopic:","cmqqueue:"],
"resource": "*"
}
]
}
2. Grant this policy to the sub-account. For the authorization method, please see Authorization Management.