Help Center/ Organizations/ User Guide/ Managing SCPs/ Attaching or Detaching an SCP
Updated on 2024-11-15 GMT+08:00
View PDF
Share

Attaching or Detaching an SCP

You can attach an SCP to or detach it from the root OU, other OUs or accounts from the organization's management account.

Constraints

  • SCPs affect only member accounts in an organization. They have no effect on the management account, IAM users, and agencies.

  • SCPs are applied within 30 minutes after they are attached.

Attaching an SCP

Method 1:

  1. Log in to Huawei Cloud as the organization administrator or using the management account, navigate to the Organizations console, and access the Organization page.
  2. Select the OU or account you want to attach the SCP to.
  3. On the details page, click the Policies tab. On the page, expand Service control policies and click Attach.

    Figure 1 Attaching an SCP

  4. Select the policy to be added and enter "Confirm" in the text box. Then, click Attach.

Method 2:

  1. Access the Policies page on the Organizations console.
  2. Click Service control policies. The list of SCPs is displayed.
  3. Locate the SCP you want to attach and click Attach in the Operation column. Then, select the OU or account you want to attach the SCP to.
  4. In the displayed dialog box, enter "Confirm" and click OK.In the displayed dialog box, click OK.

    Figure 2 Attaching an SCP

Detaching an SCP

Method 1:

  1. Log in to Huawei Cloud as the organization administrator or using the management account, navigate to the Organizations console, and access the Organization page.
  2. Select the OU or account you want to detach the SCP from.
  3. On the details page, click the Policies tab. On the page, expand Service control policies, locate the target SCP and click Detach in the Operation column.
  4. In the displayed dialog box, enter "Confirm" and click OK.In the displayed dialog box, click OK.

    Figure 3 Detaching an SCP

    You cannot detach the last SCP from an OU or account. There must be at least one SCP attached to every OU or account.

Method 2:

  1. Access the Policies page on the Organizations console.
  2. Click Service control policies. The list of SCPs is displayed.
  3. Click the name of the target SCP and click the Targets tab.
  4. Locate the OU or account that you want to detach the SCP from and click Detach in the Operation column.

    Figure 4 Detaching an SCP

  5. In the displayed dialog box, enter "Confirm" and click OK.In the displayed dialog box, click OK.

    Figure 5 Detaching an SCP

Parent topic: Managing SCPs