平安云|Ping An Cloud- Building Your Smart Future

Create Authorization Policy

Access control supports two types of authorization policies: customized policy and system policy. Customized Policy Please perform the following steps to create a customized authorization policy: 1.     Log on to Ping An Cloud Console to select All Products → Resource Access Management → Policy in the left navigation bar, and select Customized Policy. 2.   Click Create in the upper-right corner and the Create Policy window pops up. 3.   Select Blank Template and we can edit based on this blank template as shown below. <img src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20191204114439-1793aa9b9d35.png" style="height:377px; width:830px" /> •     Name: set the name of the authorization policy. In this example, the name of the customized policy is GetRamSummar. •     Content: input the content of the authorization policy. In this example, the content shown below refers to the information on the object-based storage bucket obtained by the user or user group. -        Resource (a list of operation objects): It is the abstract of the object entity presented by the cloud service to the user for interaction, e.g. RAM and ECS instance. -        Action (a list of operation names): Action supports multiple values, which are the API operation names defined by cloud services. -        Effect (authorization type): the value of Effect is Allow or Deny. Note: When creating a customized authorization policy, you need to understand the basic structure and syntax of the authorization policy language. For further details of the authorization policy language, please refer to <a href="https://pingancloud.com/ssr/help/manage/ram/manual">Authorization Policy Language</a>. 4.   After the policy is edited, click Submit to complete the creation of the customized authorization policy. Note: •     After being created, all customized policies can be found on the Policy page, where policies can be edited and deleted. •     Click the name of a policy to enter the Policy Information page for the CURRENT VERSION and HISTORY VERSIONS of the policy and the current version can be edited.   System Policy The system authorization policy is a common set of authorization policies provided by Ping An Cloud. It is mainly for the read-only permission or all permissions of different products. For this set of authorization policies provided by Ping An Cloud, users can only use them for authorization rather than editing or modifying them. Ping An Cloud will automatically update or modify these system authorization policies.

Did the above content solve your problem? Yes No