Docs

Container Registry

Permission management

Custom policies

Custom policies

If the preset artifact repository policies in the system fail to meet your requirements for permission control, you can use custom policies.

Prerequisites

A Volcano Engine root user has been registered. For detailed operations, please refer to How to register an account.

The account has passed the enterprise real-name authentication. For details, see Identity authentication.

Procedure

Log in to the IAM console.

Select Policy Management in the left navigation bar.

On the Policy page, choose the User-defined Policies tab and click Create Policy.

Configure the name, description, and content of the custom policy.

Parameter	Description
Policy Name	Configure the name of the custom policy.
Description	Configure the description of the custom policy. You can provide detailed descriptions of the policy in the notes.
Edit Policy Content	When editing policy content, you need to adhere to the IAM policy syntax. For more details, please refer to Policy Syntax.

Click on the name of the created custom policy to access the Policy Details page.

On the Policy Details page, select the Authorization tab, which supports authorization at both global and project levels.

Select the Global Permissions tab, click Add Authorization, check the users, user groups, or roles for which you want to add permissions, and then add global permissions for them.

Select the Project Permissions tab, click Add Authorization, check the checkbox in front of the target username, and then select the project that requires authorization from the Select Project drop-down list.

Click Confirm.

Last updated: 2025.10.24 11:20:37