Scenario
This document describes how to configure root account permissions and message channels.
Preparations
You have registered a Tencent Cloud account, also known as the root account. For registration, please refer to Sign Up for Tencent Cloud.
Instructions
Root account does not require authorization
The root account inherently possesses all Tencent Cloud resources under the account and can access any of these resources without authorization. Therefore, it is not recommended to use the root account to manage resources. Instead, create sub-accounts and assign policies based on the principle of least privilege, using these limited-permission sub-accounts to manage your cloud resources. For more recommendations on account permissions, please refer to Security Best Practices.
Root account message channels
The security phone number and email address you provided when registering your Tencent Cloud root account will also serve as the initial message receiving channels. If you modify the security phone number or email address in the Account Center - Console, the contact phone number or email address used for Tencent Cloud message notifications in the Cloud Access Management (CAM) - Console will not be updated synchronously. To modify these, please refer to Root Account Message Subscription.
Note
To prevent any loss due to missed messages, please promptly visit the Cloud Access Management (CAM) - Console to confirm whether the contact phone number or email address used for message subscription meets your expectations.
Associated Documents
If you wish to learn how to modify the security mobile number or email address used for security verification of the root account, please refer to Frequently Asked Questions about Email and Mobile Number.
If you wish to learn how to create a sub-user, please refer to Create a Sub-User.
If you wish to understand how to set permissions for a sub-account, please refer to Authorization Management.