Billing Center
Billing Center
Document
- Documentation
Billing CenterPermission management
Copy page
Download PDFBilling Center
Permission management
Copy pageDownload PDFPermission management
Permission introduction
If you need to set different expense center access permissions for employees in your enterprise to achieve segregation of permissions between different employees, you can use Identity and Access Management (IAM) for fine-grained permission management.
If the Volcano Engine account already meets your requirements and does not require the creation of a separate IAM user for rights management, you can skip this section without affecting your use of expense center.
IAM is the basic service that Volcano Engine provides for rights management. For more information on IAM, see Access Control .
Permission policy description
Adding an IAM user to a user group and granting policies or roles to the user group allows users in the user group to obtain the corresponding permissions. This process is called authorization. Once authorized, users can operate on the Cloud as a Service based on the granted permissions.
1. System default strategy
- System default policies are some common sets of permissions created and managed by Volcano Engine, with coarser granularity. The system default policy can only be used for authorization, and users cannot edit or modify it.
The IAM system presets common policies for expense center, such as full read and write permissions for expense center, which you can use directly.
1) System preset policy description:
policy name | explain |
BillingCenterFullAccess | All read and write permissions of expense center, including all pages of expense center and related OpenAPI administrative permissions |
BillingCenterReadOnlyAccess | All read-only permissions of expense center, including query and export permissions for all pages of expense center and related OpenAPI |
BillingCenterRenewAccess | Expense center renewal read and write permissions, including the management permissions of the renewal management page |
BillingCenterRefundAccess | Expense center unsubscribe read and write permissions, including unsubscribe management pages and related OpenAPI management permissions |
BillingCenterBillAccess | Expense center bill read and write permissions, including bill management pages, automatic bill storage (managing subscriptions), bill consumption alerts, and related OpenAPI administrative permissions |
BillingCenterBillReadOnlyAccess | Expense center bill read-only permission, including bill management page, automatic bill storage, bill consumption warning and related OpenAPI query and export permissions |
BillFullAccess | All read and write permissions of expense center, including all pages of expense center and related OpenAPI administrative permissions tip The old policy is no longer open for new use by customers, and the associated customers are not affected. The permissions are equivalent to BillingCenterFullAccess |
BillingReadOnlyAccess | Expense center bill read-only permission, including bill management page, bill automatic storage, bill consumption warning and related OpenAPI query and export permissions. tip The old policy is no longer open for new use by customers, and the associated customers are not affected. The permissions are equivalent to BillingCenterBillReadOnlyAccess |
2) The relationship between the common operations of the expense center and the system preset strategy:
tip
√ represents authority; × represents no authority;
If the function/page is not in the following list, it is considered that the current system has not done permission control, and the IAM user has permission by default;
2. Customize the policy
- Custom policy: is created by the user to describe a more refined set of rights for resource management, when the system preset policy can not meet the requirements, you can create a custom policy, the definition of permissions fine grain, details refer to the policy overview .
Operation guide
1. No permission prompt
When performing data query and operation, if there is no corresponding permission, it will report "lack of permission" through the following pop-up box, and the information includes a list of specific interfaces without permission, and the relevant data of the page will also be hidden.
2. Copy without permission information
Users can directly click "Copy Information" in the pop-up box to paste the content to the main account.
Example of copy information:
[Volcano Engine] The following is the user (xx) no permission information, you can go to "Access Control" to authorize (address: https://console.volcengine.com/iam).
Services: bill_volcano_engine
Operation: GetBalanceFromTradeBalance
3. Main account authorization
The main account can be authorized through the access control module, and the specific operation steps refer to access control .
Last updated: 2025.07.11 20:27:03
All rights reserved © Beijing Volcano Engine Technology Co., Ltd2024
