<p class="shortdesc">It is the creation of fine-grained policies for granting permission to users for access management. By creating a custom policy, users can have a fine-grained access control over resources.</p> <section class="section context"><div class="tasklabel"><h2 class="doc-tairway">About this task</h2></div> <p class="p">RAM provides multiple system authorization policies for you to choose from, including ECSFullAcess and ECSReadOnly etc.. However, system authorization policies only have a rough control over access to resources, and thus can only control access to cloud services. A custom policy allow you to grant fine-grained resource access permissions to sub-accounts.</p> <div class="note important note_important"><span class="note__title">Important:</span> <p class="p">Under a master account, at most 50 custom policies can be created, with each custom policy being able to save five history versions.</p> </div> </section> <section><div class="tasklabel"><h2 class="doc-tairway">Procedure</h2></div><ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">Use the master account or a sub-account with relevant permissions to log in to the <a class="xref" href="https://www.pingancloud.com/console/kms" target="_blank">RAM Console</a>.</span> </li><li class="li step stepexpand" id="custompolicy__step_xny_fgj_flb"> <span class="ph cmd">Click <span class="ph uicontrol">Policy</span> in the left navigation bar.</span> </li><li class="li step stepexpand"> <span class="ph cmd">On the <span class="keyword wintitle">Create Policy</span> page, complete the following configuration.</span> <div class="itemgroup info"> <img class="image" id="custompolicy__image_ev1_mgj_flb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201604174728-1a9f91ec9675.png" width="750"> <ul class="ul" id="custompolicy__ul_v1w_3gj_flb"> <li class="li"><span class="ph uicontrol">Template</span>: authorization policy templates.</li> <li class="li"><span class="ph uicontrol">Name</span>: the name of a custom policy.</li> <li class="li"><span class="ph uicontrol">Description</span>: the description of a custom policy.</li> <li class="li"><span class="ph uicontrol">Content</span>: select a template in accordance with notice, and enter the content of the policy.</li> </ul> </div> </li><li class="li step stepexpand"> <span class="ph cmd">When you complete, click <span class="ph uicontrol">Submit</span>.</span> </li></ol></section>