Based on the group account organizational structure, you can set allowed access users or user groups for each account, as well as their permission configuration.
This document provides an example of deploying permission configuration on a member account (Account1) for a user (user1) from the Identity Center. The permission configuration defines access only to CVM, ensuring that the user (user1) from the Identity Center can only access CVM resources in the member account (Account1).
Prerequisites
Make sure you have created permission configuration.
In this example, the permission configuration has been bound to preset policies, with no user-defined policies created.
Make sure you have created or synchronized a user.
In this example, a user (user1) is created with the Identity Center. For details, refer to Manage Users.
2. On the CAM Role Login tab, click Show Details in the permission column of the member account (Account1).
3. On the permission panel, click Log in in the Action column of the target permission configuration.
4. Access CVM resources in the member account (Account1) as a CAM Role.
Note:
Since only access to CVM is configured, you can only access CVM Resources. If you need to access other resources, modify policies in the permission configuration and redeploy the permission configuration.
