The IAM user has been granted cluster administrator permissions via RBAC, but the user is unable to create YAML resources. The system displays the AccessDenied,Code:403 error, with the error details shown below.

Cause analysis

The IAM user has not been assigned an IAM policy that allows managing VKE resources.

Solution

VKE provides two types of IAM policies for authorization: system preset policy and custom policy. You need to authorize the IAM user to manage VKE resources as needed.

For information about IAM policies, see Authorization overview. For information about how to grant permissions, see Granting permissions to IAM users.

Last updated: 2026.07.23 14:31:46

Public security network record in Beijing: No. 11010802032137