Enterprise Project Permissions

Administrator: The administrator can perform any operations on the Enterprise Project Management Service page.

IAM user: An IAM user's permissions are granted by the administrator. The enterprise project information displayed on the Enterprise Project Management Service page varies for each IAM user based on the permissions assigned. Each IAM user can only access resources that they are allowed to If the administrator can use default and custom policies to assign permissions.

The administrator can grant permissions specified in the default policies or custom policies to users. Policies related to enterprise projects include EPS FullAccess, EPS ReadOnlyAccess and Enterprise Project BSS FullAccess. You can configure enterprise project permissions for users in IAM. For details, see the Identity and Access Management User Guide.

The enterprise project permission management feature has been integrated into IAM. You can grant enterprise project permissions to users and user groups on the IAM console. For details, see Assigning Permissions to an IAM User and Creating a User Group and Assigning Permissions.

**Table 1** Enterprise Management permissions
Service Name	Permission Name	Permission Description	Typically Associated Personnel
Enterprise Management	EPS FullAccess	Full permissions for EPS. Users with these permissions can create enterprise projects, migrate resources, and manage tags of resources in enterprise projects.	Enterprise asset administrators
	EPS ReadOnlyAccess	Read-only permissions for enterprise project management. Users with these permissions can only perform query operations.	Enterprise asset query personnel
	Enterprise Project BSS FullAccess	Permissions for operations management of enterprise projects. The detailed permissions are as follows: Viewing fund quota settings of enterprise projects Viewing and exporting cost breakdowns of enterprise projects Viewing fund quota adjustment records of enterprise projects Viewing renewals of enterprise projects Enabling or disabling auto-renewal and manual renewal, changing billing mode from pay-per-use to yearly/monthly, and releasing resources Viewing yearly/monthly orders Placing yearly/monthly orders Unsubscribing from resources and viewing unsubscription records Viewing the expenditure summary of enterprise projects Exporting the expenditure summary of enterprise projects Viewing expenditure details of enterprise projects Exporting expenditure details of enterprise projects NOTE: The permissions for paying for yearly/monthly products are of the account level, and the Enterprise Project BSS FullAccess permissions are specific to IAM users. That is why the Enterprise Project BSS FullAccess policy cannot include the permissions for paying for yearly/monthly products.	Enterprise asset administrators

**Table 2** Common operations and required permissions
Operation	EPS FullAccess	EPS ReadOnlyAccess	Enterprise Project BSS FullAccess
Viewing resources in an enterprise project	√	√	×
Creating an enterprise project	√	×	×
Modifying an enterprise project	√	×	×
Enabling an enterprise project	√	×	×
Disabling an enterprise project	√	×	×
Adding a resource to an enterprise project	√	×	×
Removing a resource from an enterprise project	√	×	×
Viewing fund quota settings of an enterprise project	×	×	√
Viewing fund quota adjustment records of an enterprise project	×	×	√
Viewing renewal details of an enterprise project	×	×	√
Enabling or disabling auto-renewal and manual renewal for a resource, changing billing mode from pay-per-use to yearly/monthly for a resource, and releasing a resource	×	×	√
Viewing a yearly/monthly order	×	×	√
Placing a yearly/monthly order	×	×	√
Unsubscribing from resources and viewing unsubscription records	×	×	√
Viewing the expenditure summary of an enterprise project	×	×	√
Exporting the expenditure summary of an enterprise project	×	×	√
Viewing expenditure details of an enterprise project	×	×	√
Exporting expenditure details of an enterprise project	×	×	√
Viewing the cost breakdown information of an enterprise project	×	×	√
Exporting the cost breakdown information of an enterprise project	×	×	√