<p class="shortdesc">The administrator can create a sub-account for users of a certain role such as a tester and authorize relevant permission to access cloud resource.</p> <section id="create__steps_lvf_b14_xkb"><div class="tasklabel"><h2 class="doc-tairway">Procedure</h2></div><div class="li stepsection"> <p class="p"></p> </div><ol class="ol steps" id="create__steps_lvf_b14_xkb"><li class="li step stepexpand" id="create__step_cv3_yck_flb"> <span class="ph cmd">Use the master account or a sub-account with relevant permissions to log in to the <span class="ph"><a class="xref" href="https://www.pingancloud.com/console/kms" target="_blank">RAM Console</a></span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">User</span> in the left navigation bar.</span> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Create</span> in the upper right corner. </span> </li><li class="li step stepexpand"> <span class="ph cmd">Complete the following conofigration on the <span class="keyword wintitle">Create User</span> page.</span> <div class="itemgroup info"> <img class="image" id="create__image_ltj_2th_flb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201604174727-15f5e9f79246.png" width="750"> <ul class="ul" id="create__ul_xv4_d14_xkb"> <li class="li"><span class="ph uicontrol">Login Name</span>: login name of the sub-account which is used to log in to Ping An Financial Cloud.</li> <li class="li"><span class="ph uicontrol">Display Name</span>: name displayed on the Console.</li> <li class="li"><span class="ph uicontrol">Email</span>: e-mail address of the sub-account user.</li> <li class="li"><span class="ph uicontrol">Password</span>: login password of a sub account. </li> <li class="li"><span class="ph uicontrol">AK/SK</span>: select to automatically generate AK/SK or not. <div class="note note note_note"><span class="note__title">Note:</span> Some cloud resources will identify users by AK/SK symmetric encryption.</div></li> </ul> </div> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Create</span> after the completion of the above information.</span> </li><li class="li step stepexpand"> <span class="ph cmd">Find the newly created sub account in the user list and click <span class="ph uicontrol">Authorization</span> in the <span class="ph uicontrol">Operation</span> column.</span> </li><li class="li step stepexpand" id="create__step_hrz_j2j_flb"> <span class="ph cmd">On the <span class="ph uicontrol">Authorization</span> page, enter the policy name and click<img class="image" id="create__image_qgh_dyh_flb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201604174728-1e2666b59294.png" width="20">.</span> <div class="itemgroup info"> <p class="p">For example, if you enter ECS, a list of authorization policies relevant to ECS will appear below. </p> <img class="image" id="create__image_hn5_zxh_flb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201604174728-1a48f48c973b.png" width="750"> </div> </li><li class="li step stepexpand" id="create__step_rgh_k2j_flb"> <span class="ph cmd">In the list of authorization policies, click the target policy and click<img class="image" id="create__image_lx2_fyh_flb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201604174728-118fd24a9e24.png" width="20">to complete adding the authorization policy.</span> <div class="itemgroup info"> <div class="note important note_important"><span class="note__title">Important:</span> <p class="p">After the authorization policy is added, the account is authorized with the permission of the policy. The same authorization policy cannot be added repeatedly. </p> </div> </div> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Confirm</span> after completing adding all authorization policies.</span> </li></ol></section>