创建RAM子账号并授权
<p class="shortdesc">管理员可以通过RAM服务为某个角色的用户,如测试人员,创建一个子账号,并授予相关的权限来访问云资源。</p>
<section id="create__steps_lvf_b14_xkb"><div class="tasklabel"><h2 class="doc-tairway">操作步骤</h2></div><ol class="ol steps" id="create__steps_lvf_b14_xkb"><li class="li step stepexpand" id="create__step_cv3_yck_flb">
<span class="ph cmd"> 使用主账号或具有相关RAM管理权限的子账号登录<span class="ph"><a class="xref" href="https://pinganyun.com/console/ram/overview" target="_blank">访问控制RAM控制台</a></span>。</span>
</li><li class="li step stepexpand">
<span class="ph cmd">在左侧导航栏中单击<span class="ph uicontrol">用户管理</span>。</span>
</li><li class="li step stepexpand">
<span class="ph cmd">单击页面右上角的<span class="ph uicontrol">+创建</span>。</span>
</li><li class="li step stepexpand">
<span class="ph cmd">在<span class="keyword wintitle">创建用户</span>页面,完成如下配置。</span>
<div class="itemgroup info">
<img class="image" id="create__image_ltj_2th_flb" src="https://pcp-portal-sca.obs-cn-shenzhen.pinganyun.com/pcp-portal-sca/20201604174727-18a96e7097f0.png" width="750">
<ul class="ul" id="create__ul_xv4_d14_xkb">
<li class="li"><span class="ph uicontrol">登录名</span>:子账号的登录名,即在使用子账号登录平安金融云时所使用的用户名。</li>
<li class="li"><span class="ph uicontrol">显示名称</span>:在控制台上显示的名称。</li>
<li class="li"><span class="ph uicontrol">Email</span>:子账号用户的邮箱。</li>
<li class="li"><span class="ph uicontrol">密码</span>:子账号的登录密码。</li>
<li class="li"><span class="ph uicontrol">AK/SK</span>:选择是否为用户自动生成AK和SK。<div class="note note note_note"><span class="note__title">说明:</span> 一些云资源会通过使用 AK和SK对称加密的方法来验证某个用户的身份。</div></li>
</ul>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">完成后,单击<span class="ph uicontrol">创建</span>。</span>
</li><li class="li step stepexpand">
<span class="ph cmd">在用户列表中,找到刚刚创建的子账号,单击<span class="ph uicontrol">操作</span>列中的<span class="ph uicontrol">授权</span>。</span>
</li><li class="li step stepexpand" id="create__step_hrz_j2j_flb">
<span class="ph cmd">在<span class="ph uicontrol">授权</span>页面中,输入策略名称,单击<img class="image" id="create__image_qgh_dyh_flb" src="https://pcp-portal-sca.obs-cn-shenzhen.pinganyun.com/pcp-portal-sca/20201604174728-13b126c29ddb.png" width="20">。</span>
<div class="itemgroup info">
<p class="p">例如,您可以输入ECS,下方可联想出与ECS相关的授权策略。</p>
<img class="image" id="create__image_hn5_zxh_flb" src="https://pcp-portal-sca.obs-cn-shenzhen.pinganyun.com/pcp-portal-sca/20201604174728-1502aebf958a.png" width="750">
</div>
</li><li class="li step stepexpand" id="create__step_rgh_k2j_flb">
<span class="ph cmd">在搜索到的可选授权策略中,单击选中目标策略,然后单击<img class="image" id="create__image_lx2_fyh_flb" src="https://pcp-portal-sca.obs-cn-shenzhen.pinganyun.com/pcp-portal-sca/20201604174728-1382cefd9b7f.png" width="20">,完成授权策略的添加。</span>
<div class="itemgroup info">
<div class="note important note_important"><span class="note__title">重要:</span>
<p class="p">添加授权策略后,该账户即具有该条策略的权限,同一条授权策略不能被重复添加。</p>
</div>
</div>
</li><li class="li step stepexpand">
<span class="ph cmd">所有的授权策略添加完成后,单击<span class="ph uicontrol">确定</span>。</span>
</li></ol></section>
提交成功!非常感谢您的反馈,我们会继续努力做到更好!