检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
Table 1 System-defined permissions for Organizations Role/Policy Name Description Type Dependencies Organizations FullAccess Users with these permissions can create, modify, delete, and view any information about Organizations.
You can delete this agency in the new account. Before deleting the agency, enable IAM Identity Center and configure related identities and permissions to ensure that the service owner can access the account.
and agencies from making changes to resource shares created in all accounts in your organization except for specified accounts. { "Version": "5.0", "Statement": [ { "Effect": "Deny", "Action": [ "ram:resourceShares:update", "ram:resourceShares:delete
Write resourceShare * g:ResourceTag/<tag-key> ram:AllowExternalPrincipals - - ram:RequestedAllowExternalPrincipals ram:resourceShares:delete Grants permission to delete a resource share.
You can use this operator to effectively lock the values defined in a parent policy so that the child policies cannot add, append, or delete those values. Parent topic: Managing Tag Policies
Write instance * g:EnterpriseProjectId g:ResourceTag/tag-key - cbh:instance:deleteInstance Grants the permission to delete a faulty CBH instance.
Disabling automatic renewal for yearly/monthly resources DELETE /v2/orders/subscriptions/resources/autorenew/{resource_id} billing:subscription:renew Grants the permission to place orders, cancel orders, and modify recipient information.
Table 2 Actions and dependencies supported by CDN APIs API Action Dependencies GET /v1.0/cdn/domains cdn:configuration:queryDomainList - POST /v1.0/cdn/domains cdn:configuration:createDomains - DELETE /v1.0/cdn/domains/{domain_id} cdn:configuration:deleteDomains - PUT /v1.0/cdn/domains
ou-qqq/ou-*" } } }] } g:ResourceTag/<tag-key> For example, the following policy prevents users from modifying resource shares tagged with {"team": "engineering"}. { "Version": "5.0", "Statement": [ { "Effect": "Deny", "Action": [ "ram:resourceShares:delete
