Before associating a CR repository namespace with a project, you need to grant the specified permissions for the target user. This topic describes how to grant project-specific permissions.

Background

Before associating a CR namespace with a project, you need to grant the following permissions to the user.

Global permission: Attach the CRReadOnlyAccess policy.

Project permission: Attach a project-specific policy based on your needs. In this example, the CRFullAccess policy that allows CR read and write access is used.

Prerequisites

A project has been created based on the business scenario. For operating details, see Project management. In this example, the project name is cr-demo-project.

Procedure

Step 1: Attach the CRReadOnlyAccess policy

In the left navigation bar, click Permission policy.

On the Permission policy page, search CRReadOnlyAccess.

Click Authorization in the Actions column.

In the Identity section, select the user, user group, or role to be authorized.

Click Submit to complete the authorization.

Step 2: Grant project-specific permissions

Grant the user CR read and write permissions for a specific project (cr-demo-project in this example) by attaching the CRFullAccess policy at the project level.

In the left navigation bar, select User management and User in sequence.

Click the target user name (in this example, it is cr-demo) to enter the user detail page.

On the User detail page, select Policy > Authorize.

Select the CRFullAccess policy and the target project.

Click Confirm to complete authorization.

Last updated: 2026.09.23 14:37:20

Public security network record in Beijing: No. 11010802032137