Help Center> Cloud Container Instance> User Guide> Permissions Management> Granting Namespace Permissions to an Agency Account
Updated on 2023-02-07 GMT+08:00
View PDF

Granting Namespace Permissions to an Agency Account

Namespaced resource permissions management is an authorization method based on Kubernetes RBAC roles. You can authorize agency accounts to perform operations on Kubernetes resources under specific namespace.

This section describes how to grant CCI agency accounts the permissions to various namespaced resources.

Procedure

  1. Log in to the CCI console. In the navigation pane, choose Permissions Management.
  2. Click Add Permissions.

    Figure 1 Adding permissions

  3. Select the namespace whose access you want to manage. In this example, select rbac-test-3.

    Figure 2 Selecting a namespace

  4. Add the admin permissions policy for Account.

    • User/User Group: Select Account from the drop-down list and then select the target delegated account from the account list.
    • Permissions Policy: Select admin.

  5. Click OK. The namespaced permissions are granted to the delegated account.
Parent topic: Permissions Management