Help & Documentation>Cloud Access Management>Business Use Cases>CLB>Authorizing Sub-account Full CLB Access other than the Payment Permission

Authorizing Sub-account Full CLB Access other than the Payment Permission

Last updated: 2024-09-30 15:34:18

Under the corporate account CompanyExample (ownerUin is 12345678), there is a sub-account named Developer. This sub-account needs to have full management permissions (including creation, management, and all other operations) for the CLB service of the corporate account CompanyExample, excluding payment permissions. That is, it can place orders but cannot make payments.

Scenario A:

The corporate account CompanyExample directly grants the preset policy QcloudCLBFullAccess to the sub-account Developer. For the method of authorization, please see Authorization Management.

Scenario B:

1. Create a policy through policy syntax.
{
"version": "2.0",
"statement":[
{
"effect": "allow",
"action": "clb:*",
"resource": "*"
}
]
}
2. Grant this policy to the sub-account. For the authorization method, please see Authorization Management.