Help Center> Document Database Service> FAQs> Creation and Deletion> How Do I Create a Custom Policy?
View PDF

How Do I Create a Custom Policy?

Scenarios

When using the enterprise project management function, you need to add system rights (DDS FullAccess or DDS ManageAccess) and customize policies for the user groups under the enterprise project. This section describes how to create a custom policy on the IAM console.

Procedure

  1. Log in to the management console.
  2. Click in the upper left corner and select a region and a project.
  3. Under Management & Deployment, click Identity and Access Management.
  4. On the Policies page, click Create Custom Policy.
  5. On the displayed page, specify information in the Basic Information and Policy Information areas. Then, click OK.

    • Policy Name: Enter a custom policy name.
    • Scope: Select Project-level service.
    • Description: Enter the custom policy description.
    • Policy Information: Enter the following content. 
      {
        "Version": "1.1",
        "Statement": [
                {
                        "Action": [
                                "vpc:ports:*",
                                "vpc:privateIps:*",
                                "vpc:floatingIps:*",
                                "ecs:cloudServerNics:update",
                                "ecs:serverInterfaces:use"
                        ],
                        "Effect": "Allow"
                }
        ]
}

  6. On the User Group page, locate the target user group and click Modify in the Operation column.
  7. In the User Group Permissions area, locate the target project and click Modify in the Operation column.
  8. In the displayed Modify Policy dialog box, select the custom policy you have created and click OK.
Parent topic: Creation and Deletion