tencent cloud


Authorizing Sub-Account to Get Buckets by Tag

Last updated: 2022-09-28 15:48:27


    COS allows you to filter buckets by tag in the console, which is powered by the Tencent Cloud Tag service.

    Suppose the enterprise account CompanyExample (OwnerUin: 100000000001, Owner_appid: 1250000000) has a sub-account Developer, and CompanyExample needs to grant the sub-account permissions to get the list of tagged objects. The following describes how to grant the permissions.


    If you want to allow the sub-account to get the list of buckets filtered by tag in the console, you need to grant it the required permissions GetResourceTags, GetResourcesByTags, and GetTags by creating custom policies in the CAM console.


    1. Log in to the CAM console as the enterprise account CompanyExample and enter the policy configuration page.
    2. Grant the sub-account Developer permissions to pull the list of tagged objects through the policy generator or policy syntax.
      1. Go to the Policies page in the CAM console.
      2. Click Create Custom Policy > Create by Policy Generator.
      3. On the permission configuration page, configure the following:
      • Tag:
        • Effect: Use the default option Allow.
        • Service: Select Tag.
        • Action: Select actions based on your business needs. Here, select GetResourceTags, GetResourcesByTags, and GetTags.
        • Resource: Select All resources.
      • Add Permissions: Configure based on your business needs.
      1. Click Next, enter the policy name, and associate users/user groups.
      2. Click Complete.
    3. Associate the policy with the sub-account Developer by locating the policy created in step 2 on the Policies page and clicking Associate Users/Groups on the right.
    4. In the Associate Users/Groups window, select the sub-account Developer and click OK.
    5. Log in to the console with the sub-account Developer. On the Bucket List page, select Tag and enter a tag key to search for buckets with the specified tag:
    Contact Us

    Contact our sales team or business advisors to help your business.

    Technical Support

    Open a ticket if you're looking for further assistance. Our Ticket is 7x24 avaliable.

    7x24 Phone Support