Cloud Access Management Authorizing Sub-account Read-only Access to CVM-related Resources-Business Use Cases-Help & Documentation-Tencent Cloud

Under the corporate account CompanyExample (ownerUin 12345678), there is a sub-account named Developer. This sub-account requires the permission to query CVM services and related resources (VPC, CLB) of the corporate account CompanyExample, but does not possess the permissions of creation, deletion, or powering-on/off.
Scenario A:
The corporate account CompanyExample directly authorizes the preset policy QcloudCVMReadOnlyAccess to the sub-account Developer. For the method of authorization, please see Authorization Management.
Scenario B:
1. Create a policy through policy syntax,
{
    "version": "2.0",
    "statement": [
        {
            "action": [
                "cvm:Describe*",
                "cvm:Inquiry*"
            ],
            "resource": "*",
            "effect": "allow"
        },
        {
            "action": [
                "vpc:Describe*",
                "vpc:Inquiry*",
                "vpc:Get*"
            ],
            "resource": "*",
            "effect": "allow"
        },
        {
            "action": [
                "clb:Describe*"
            ],
            "resource": "*",
            "effect": "allow"
        },
        {
            "effect": "allow",
            "action": "monitor:*",
            "resource": "*"
        }
    ]
}
2. Grant this policy to the sub-account. For the authorization method, please see Authorization Management.