Attaching or Detaching an SCP

Scenarios

An SCP remains inactive until you attach it to the root OU, a specific OU, or an account.

If an SCP is no longer necessary, you can detach it from the root OU, OUs, or accounts. Once detached, the policy immediately ceases to take effect.

The management account of the organization can attach an SCP to or detach it from the root OU, OUs, or accounts.

Constraints

• SCPs affect only member accounts in an organization. They have no effect on the management account, IAM users, and agencies.

• SCPs are applied within 30 minutes after they are attached.

• You cannot attach SCPs to the organization administrator.

Attaching an SCP

Method 1:

1. Log in to Huawei Cloud as the organization administrator or using the management account, navigate to the Organizations console, and access the Organization page.
2. Select the OU or account you want to attach the SCP to.
3. On the details page, click the Policies tab. On the page, expand Service control policies and click Attach.
   Figure 1 Attaching an SCP
   

4. Select the policy to be added and enter "Confirm" in the text box. Then, click OK.

   If the SCP appears in the policy list of the target OU or account, the SCP was attached successfully.

Method 2:

1. On the Organizations console, access the Policies page.
2. Click Service control policies. The list of SCPs is displayed.
3. Locate the SCP you want to attach and click Attach in the Operation column. Then, select the OU or account you want to attach the SCP to.
4. In the displayed dialog box, enter "Confirm". Click OK.
   Figure 2 Attaching an SCP
   

Detaching an SCP

Method 1:

1. Log in to Huawei Cloud as the organization administrator or using the management account, navigate to the Organizations console, and access the Organization page.
2. Select the OU or account you want to detach the SCP from.
3. On the details page, click the Policies tab. On the page, expand Service control policies, locate the target SCP, and click Detach in the Operation column.
4. In the displayed dialog box, enter "Confirm". Click OK.
   Figure 3 Detaching an SCP
   
   

   You cannot detach the last SCP from an OU or account. There must be at least one SCP attached to every OU or account.

Method 2:

1. On the Organizations console, access the Policies page.
2. Click Service control policies. The list of SCPs is displayed.
3. Click the name of the target SCP and click the Targets tab.
4. Locate the OU or account from which the SCP is to be detached and click Detach in the Operation column. In the displayed dialog box, enter "Confirm" and click OK.
   Figure 4 Detaching an SCP