<p class="shortdesc"></p> <table class="table" id="term__table_ylw_lzc_flb"><caption></caption><colgroup><col style="width:25.510204081632654%"><col style="width:74.48979591836735%"></colgroup><thead class="thead"> <tr class="row"> <th class="entry" id="term__table_ylw_lzc_flb__entry__1">Concept</th> <th class="entry" id="term__table_ylw_lzc_flb__entry__2">Description</th> </tr> </thead><tbody class="tbody"> <tr class="row"> <td class="entry" headers="term__table_ylw_lzc_flb__entry__1 "> <p class="p">Master Account</p> </td> <td class="entry" headers="term__table_ylw_lzc_flb__entry__2 "> <p class="p">A master account is a basic subject that own all resources and on which billing of resource usage is counted. Users need to sign up a master account before using cloud services (<a class="xref" href="https://pingancloud.com/register" target="_blank">Sign up to Ping An Cloud</a>for real-name authentication). A master account will be charged for resources it owns and has full permission of its all resources. </p> </td> </tr> <tr class="row"> <td class="entry" headers="term__table_ylw_lzc_flb__entry__1 "> <p class="p">Sub-account</p> </td> <td class="entry" headers="term__table_ylw_lzc_flb__entry__2 "> <p class="p">A sub-account is created and authorized by a master account or another sub-account that has relevant administration permission. The operations of sub-account vary based on its permission. A master account bears the cost for purchasing cloud services by a sub-account and is able to modify the permission of the sub-account or delete the sub-account at any time. </p> </td> </tr> <tr class="row"> <td class="entry" headers="term__table_ylw_lzc_flb__entry__1 "> <p class="p">Group </p> </td> <td class="entry" headers="term__table_ylw_lzc_flb__entry__2 "> <p class="p">A group is created and authorized by a master account or a sub account that has relevant administration permission. Multiple sub-accounts will have the permission of a group when added to the group. </p> </td> </tr> <tr class="row"> <td class="entry" headers="term__table_ylw_lzc_flb__entry__1 "> <p class="p">Authorization Policy</p> </td> <td class="entry" headers="term__table_ylw_lzc_flb__entry__2 "> <p class="p">Authorization policy refers to the simple language specification that describes a set of permission. The language specification that is supported by RAM can be referred to<a class="xref" href="https://pingancloud.com/ssr/help/manage/ram/appendix.authorizepolicy" target="_blank">Authorization Policy Language</a>.</p> </td> </tr> <tr class="row"> <td class="entry" headers="term__table_ylw_lzc_flb__entry__1 "> <p class="p">Cloud Resource</p> </td> <td class="entry" headers="term__table_ylw_lzc_flb__entry__2 "> <p class="p">Cloud resource is the abstract of object entity that presents to users. For example ECS (Elastic Compute Service) and OBS (Object Based Storage) etc..</p> </td> </tr> <tr class="row"> <td class="entry" headers="term__table_ylw_lzc_flb__entry__1 "> <p class="p">Permission </p> </td> <td class="entry" headers="term__table_ylw_lzc_flb__entry__2 "> <p class="p">Permission is to allow or deny a user to execute certain operations to certain resources.</p> </td> </tr> <tr class="row"> <td class="entry" headers="term__table_ylw_lzc_flb__entry__1 "> <p class="p">Key </p> </td> <td class="entry" headers="term__table_ylw_lzc_flb__entry__2 "> <p class="p">Key provides identification authentication certificate when using OPEN API request to operate resource. </p> </td> </tr> </tbody></table>