<p class="shortdesc">Grant permission policies to a group to allow / restrict sub-accounts in the group to access / prohibit access to certain resources.</p> <section class="section context"><div class="tasklabel"><h2 class="doc-tairway">About this task</h2></div> <p class="p">Grant permission policies to a group to allow / restrict sub-accounts in the group to access / prohibit access to certain resources. Permission policies include system policies and custom policies. If the system policies cannot meet your authorization requirements, you can customize a finer-grained permission policies. For details, please refer to <a class="xref" href="https://www.pingancloud.com/ssr/help/manage/ram/manual.policymgt.custom.custompolicy" target="_blank">Create Custom Policy</a>.</p> <div class="note note note_note"><span class="note__title">Note:</span> Each group can be granted up to 5 permission policies.</div> </section> <section><div class="tasklabel"><h2 class="doc-tairway">Procedure</h2></div><ol class="ol steps"><li class="li step stepexpand"> <span class="ph cmd">Use the master account or a sub-account with relevant permissions to log in to the <a class="xref" href="https://www.pingancloud.com/console/kms" target="_blank">RAM Console</a>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Group</span> in the left nagivation bar.</span> </li><li class="li step stepexpand" id="Authorization2__step_mgw_v2j_flb"> <span class="ph cmd">In the group list, find the target group and click <span class="ph uicontrol">Authorization</span> in the operation column.</span> </li><li class="li step stepexpand"> <span class="ph cmd">On the <span class="ph uicontrol">Authorization</span> page, enter the policy name and click<img class="image" id="Authorization2__d7e107" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201604174728-1e2666b59294.png" width="20">.</span> <div class="itemgroup info"> <p class="p">For example, you can enter ECS, and the authorization policies related to ECS will be listed below.</p> <img class="image" id="Authorization2__d7e115" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201604174728-1a48f48c973b.png" width="750"> </div> </li><li class="li step stepexpand"> <span class="ph cmd">In the optional authorization policies found, select the target policy, and then click <img class="image" id="Authorization2__d7e123" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20201604174728-118fd24a9e24.png" width="20"> to complete the addition of authorization policies.</span> <div class="itemgroup info"> <div class="note important note_important"><span class="note__title">Important:</span> <p class="p">After adding an authorization policy, the account will have the permission of the policy, and the same authorization policy cannot be added repeatedly.</p> </div> </div> </li><li class="li step stepexpand"> <span class="ph cmd">After all authorization policies are added, click <span class="ph uicontrol">Confirm</span>.</span> </li></ol></section>