Cloud Access Management Authorizing Sub-account Full Access to VPCs-Business Use Cases-Help & Documentation-Tencent Cloud

Under the corporate account CompanyExample (with ownerUin as 12345678), there is a sub-account named Developer. This sub-account requires full management permissions (including all operations such as creation, management, and VPC order payment) for the VPC service of the corporate account CompanyExample.
Scenario A:
The corporate account CompanyExample directly grants the preset policies QcloudVPCFullAccess and QcloudVPCFinanceAccess to the sub-account Developer. For the method of authorization, please see Authorization Management.
Scenario B:
1. Create a policy through policy syntax.
{
    "version": "2.0",
    "statement":[
         {
             "effect": "allow",
             "action": "vpc:*",
             "resource": "*"
         },
         {
                "effect": "allow",
                "action": "finance:*",
                "resource": "qcs::vpc:::*"
         }
    ]
}
2. Grant this policy to the sub-account. For the authorization method, please see Authorization Management.