Docs

Container Registry

Authorization management

Granting full management permissions of a specific namespace

This topic describes how to grant users management permissions of a specified CR namespace.

Application scenarios

In daily development, namespaces are often used to differentiate business resources. Similarly, you may need to manage resource access permissions based on namespaces. You can use the Volcano Engine project management feature to add members from different business teams to different projects, and then attach policies granting namespace access to the projects.

Prerequisites

A project has been created. For operating details, see Project management.

Procedure

Step 1: Create a project and configure permissions

First, create a project and attach the CRFullAccess policy to it to grant users full CR management access.

In the left navigation pane, click Resource project > Project management.

In the Actions column of the target project, click Permission policy > Authorize.

Configure the project policy.

On the Select identity page, select the user or role to be authorized, and click Next.

On the Authorize page, select CRFullAccess and click Next.

On the Confirm adding page, click OK.

On the Check result page, click Complete.

Step 2: Associate the CR namespace

Associate the created project with the target namespace to complete the authorization.

Select the target region in the top navigation bar.

In the left navigation bar, click Instance list. On the Instance list page, find the instance for which you need to modify the namespace resources, and click Enter instance.

In the left navigation pane of the instance page, click Namespace.

On the Namespace page, find the target namespace and click ... in the Actions column. Then, select Modify.

In the Associated project section, select the created project.

Click Confirm to complete the modification.

Last updated: 2026.09.23 14:37:21