Help Center/ Identity and Access Management_Identity and Access Management (New Edition)/ FAQs/ Permissions Management/ Why Can Users with Permissions to View Resources in an Enterprise Project View All Resources of the Account?
Updated on 2025-11-06 GMT+08:00

Why Can Users with Permissions to View Resources in an Enterprise Project View All Resources of the Account?

Symptom

An administrator used enterprise project authorization to grant a user the permission to view only resources in an enterprise project, and then attached the identity policy for viewing resources to the user. As a result, the user can view all resources in enterprise project created under the account.

Possible Causes

The identity policy allows the user to view all resources of the account.

Solutions

If you want the user to view only the resources allowed by the enterprise project authorization, detach the identity policy.