The organization admin can authorize sub-users to log in to and manage member accounts by creating organization management policies. This document describes how to do so in the console.
Note:
If the member account is newly created, please wait for 15 minutes before logging in, otherwise, you may not be able to enter the Tencent Cloud Console normally.
Directions
1、Adding authorization
1. Log in to the TCO console and select Member login on the left sidebar.
2. Select the Add member authorization and click Add authorization. The details are as shown below:
3. In the pop-up window, select members and permissions and enter the authorization policy name. The details are as shown below:
Note:
The policy created in this step is an organization management policy.
Member selection: You cannot authorize members invited before the sub-user authorization feature was released. To do so, contact the sales rep.
Permission selection: When you select multiple members, the permission list will display the intersection of the login permissions of the selected members.
Authorization policy name: Enter a custom policy name.
4. Click Next and select the sub-accounts you want to authorize. The details are as shown below:
5. Click Complete to complete the authorization.
2、Logging in to the console with the sub-account
After completing the authorization, you can log in to the console with the sub-account to perform management operations.
1. Log in to the TCO console with the authorized sub-account and select Member login on the left sidebar.
2. On the member login page, select the member account to which you want to log in and click Log in in the Operation column. In the pop-up window, select a login permission. The details are as shown below:
Note:
You can select one permission at a time.
You can only log in to the member account as an authorized sub-user.
3、Canceling authorization
1. Log in to the TCO console and select Member login on the left sidebar.
2. On the Add member authorization page, click Unbind in the Operation column.
3. Click OK to cancel the authorization.
Note:
If you cancel the authorization, this operation will also apply to all other members who have authorized this policy.
4、Managing sub-users' permission to log in to member accounts
The root account of the organization admin can view the list of all member accounts to which the sub-user can log in and can revoke the sub-user's login permission.
1. Log in to the TCO console and select Member login on the left sidebar.
2. On the Authorized member list page, select the target member and click Revoke permission in the Operation column.
3. On the Add member authorization page, select the permission to be revoked and click Unbind in the Operation column.
Yes
No
Was this page helpful?