If you want to use an existing sub-user, you can also grant the preset permission policy for QcloudCloudappInstallationAccess to the existing sub-user individually.
Note:
Console access and programmatic access, sub-users need to log in to the cloud application console.
Sub-user key is used to log in to the CLI developer tool and push the installation package.