Actions Supported by Policy-based Authorization

This section describes the actions supported by Enterprise Center in policy-based authorization.

Supported Actions

Enterprise Center provides system-defined policies that can be directly used in IAM. You can also create custom policies to supplement system-defined policies for more refined access control.

Enterprise Center supports the following actions in custom policies.

**Table 1** Actions supported by Enterprise Center
Permission	Action	Description
Grants permission to enable and disable Enterprise Center.	bss:enterpriseOrganizationFunction:update	Grants permissions to enable or disable Enterprise Center.
Performing operations on members' bills	bss:bill:update	Grants permission to perform operations on bills of enterprise members, such as exporting bills.
Viewing member bills	bss:bill:view	Grants permission to view bills of enterprise members.
Performing operations on details of members' bills	bss:billDetail:update	Grants permission to perform operations on details of members' bills, such as exporting information about usage and resources.
Viewing details of member bills	bss:billDetail:view	Grants permission to view details (such as usage and resources) of members' bills.
Modifying accounting information for an organization	bss:enterpriseFinance:update	Grants permission to modify accounting information related to allocating or revoking funds, coupons, or credits.
Viewing organization accounting information	bss:enterpriseFinance:view	Grants permission to view the accounting information and fund transfer details of member accounts
Modifying organizations and member accounts	bss:enterpriseOrganization:update	Grants permission to create or associate with member accounts; add, delete, or modify organization units; and transfer accounts between organizations.
Viewing organizations and member accounts	bss:enterpriseOrganization:view	Grants permission to view organization information
Performing operations on organization budgets	bss:enterpriseOrganizationBudget:update	Grants permission to set budgets for organizations and accounts.
Viewing organization budgets	bss:enterpriseOrganizationBudget:view	Grants permission to view budget details of organizations and accounts.
Modifying organization policies	bss:enterpriseOrganizationControlPolicy:update	Grants permissions to create, modify, or delete organization policies.