{"componentChunkName":"component---src-templates-acg-portal-new-template-tsx","path":"/jmpnpixk5","result":{"data":{"markdownRemark":{"html":"<h2 id=\"概述\"><a href=\"#%E6%A6%82%E8%BF%B0\" aria-label=\"概述 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>概述</h2>\n<p>多用户访问控制，主要用于帮助用户管理云账户下资源的访问权限，适用于企业内的不同角色，可以对不同的工作人员赋予使用产品的不同权限，当您的企业存在多用户协同操作资源时，推荐您使用多用户访问控制。</p>\n<h2 id=\"使用场景\"><a href=\"#%E4%BD%BF%E7%94%A8%E5%9C%BA%E6%99%AF\" aria-label=\"使用场景 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>使用场景</h2>\n<ul>\n<li>中大型企业客户：对公司内多个员工授权管理；</li>\n<li>偏技术型 vendor 或 SAAS 的平台商：对代理客户进行资源和权限管理；</li>\n<li>中小开发者或小企业：添加项目成员或协作者，进行资源管理。</li>\n</ul>\n<h2 id=\"创建用户\"><a href=\"#%E5%88%9B%E5%BB%BA%E7%94%A8%E6%88%B7\" aria-label=\"创建用户 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>创建用户</h2>\n<ol>\n<li>\n<p>主账号用户登录后在控制台选择“多用户访问控制”进入用户管理页面。</p>\n<p><img src=\"https://bce.bdstatic.com/doc/bce-doc/BLB/image_bc96ef4.png\" alt=\"image.png\"></p>\n</li>\n<li>\n<p>在左侧导航栏点击“用户管理”，在“子用户管理列表”页，点击“新建用户”。</p>\n<p><img src=\"https://bce.bdstatic.com/doc/bce-doc/BLB/image_abb4381.png\" alt=\"image.png\"></p>\n</li>\n<li>\n<p>在弹出的“新建用户”对话框中，完成填写“用户名”和确认，返回“子用户管理列表”区可以查看到刚刚创建的子用户。</p>\n<p><img src=\"https://bce.bdstatic.com/doc/bce-doc/BLB/image_25ca0ae.png\" alt=\"image.png\"></p>\n</li>\n</ol>\n<h2 id=\"配置策略\"><a href=\"#%E9%85%8D%E7%BD%AE%E7%AD%96%E7%95%A5\" aria-label=\"配置策略 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>配置策略</h2>\n<p>EO 当前仅支持系统策略，实现 EO 的产品级权限控制。</p>\n<ul>\n<li>系统策略：百度智能云系统为管理资源而预定义的权限集，这类策略可直接为子用户授权，用户只能使用而不能修改。</li>\n</ul>\n<h3 id=\"系统策略\"><a href=\"#%E7%B3%BB%E7%BB%9F%E7%AD%96%E7%95%A5\" aria-label=\"系统策略 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>系统策略</h3>\n<p> 系统策略包含完全控制权限和只读权限两种策略，权限范围说明如下：</p>\n<table>\n<thead>\n<tr>\n<th>策略名称</th>\n<th>权限说明</th>\n<th>权限范围</th>\n</tr>\n</thead>\n<tbody>\n<tr>\n<td>EOFullControlAccessPolicy</td>\n<td>边缘安全加速平台（EO）完全控制权限</td>\n<td>EO 平台所有操作权限 <br> • 创建/删除/启用/停用站点<br> • 创建/删除/启用/停用域名<br> • 创建/删除 web 防护的一系列规则</td>\n</tr>\n<tr>\n<td>EOReadAccessPolicy</td>\n<td>边缘安全加速平台只读权限</td>\n<td>EO 平台查看权限，不可操作变更 <br> • 查看站点配置<br> • 查看域名配置<br> • 查看站点列表<br> • 查看域名列表<br> • 下载离线日志<br> • 查询 web 防护的一系列规则</td>\n</tr>\n</tbody>\n</table>\n<blockquote>\n<p>注：子账户所支持功能的操作步骤均与对应主账户功能的操作步骤相同。</p>\n</blockquote>\n<h3 id=\"自定义策略\"><a href=\"#%E8%87%AA%E5%AE%9A%E4%B9%89%E7%AD%96%E7%95%A5\" aria-label=\"自定义策略 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>自定义策略</h3>\n<p>当前 EO 平台暂不支持自定义权限配置</p>\n<h2 id=\"用户授权\"><a href=\"#%E7%94%A8%E6%88%B7%E6%8E%88%E6%9D%83\" aria-label=\"用户授权 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>用户授权</h2>\n<p>在“用户管理->子用户管理列表页”的对应子用户的“操作”列选择“添加权限”，并为用户选择系统权限策略进行授权。</p>\n<p><img src=\"https://bce.bdstatic.com/doc/bce-doc/GEO/%E5%AD%90%E7%94%A8%E6%88%B7_f7e5610.png\" alt=\"子用户.png\"></p>\n<p><img src=\"https://bce.bdstatic.com/doc/bce-doc/GEO/%E5%AD%90%E7%94%A8%E6%88%B73_0f4cfc5.png\" alt=\"子用户3.png\"></p>\n<blockquote>\n<p><strong>说明：</strong>如果在不修改已有策略规则的情况下修改某子用户的权限，只能通过删除已有的策略并添加新的策略来实现，不能取消勾选已经添加过的策略权限。</p>\n</blockquote>\n<h2 id=\"子用户登录\"><a href=\"#%E5%AD%90%E7%94%A8%E6%88%B7%E7%99%BB%E5%BD%95\" aria-label=\"子用户登录 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>子用户登录</h2>\n<p>主账号完成对子用户的授权后，可以将链接发送给子用户；子用户可以通过IAM用户登录链接登录主账号的管理控制台，根据被授权的策略对主账户资源进行操作和查看。</p>\n<p><img src=\"https://bce.bdstatic.com/doc/bce-doc/GEO/%E5%AD%90%E7%94%A8%E6%88%B72_acd155f.png\" alt=\"子用户2.png\"></p>\n<h2 id=\"相关文档\"><a href=\"#%E7%9B%B8%E5%85%B3%E6%96%87%E6%A1%A3\" aria-label=\"相关文档 permalink\" class=\"anchor\"><svg aria-hidden=\"true\" focusable=\"false\" height=\"16\" version=\"1.1\" viewBox=\"0 0 16 16\" width=\"16\"><path fill-rule=\"evenodd\" d=\"M4 9h1v1H4c-1.5 0-3-1.69-3-3.5S2.55 3 4 3h4c1.45 0 3 1.69 3 3.5 0 1.41-.91 2.72-2 3.25V8.59c.58-.45 1-1.27 1-2.09C10 5.22 8.98 4 8 4H4c-.98 0-2 1.22-2 2.5S3 9 4 9zm9-3h-1v1h1c1 0 2 1.22 2 2.5S13.98 12 13 12H9c-.98 0-2-1.22-2-2.5 0-.83.42-1.64 1-2.09V6.25c-1.09.53-2 1.84-2 3.25C6 11.31 7.55 13 9 13h4c1.45 0 3-1.69 3-3.5S14.5 6 13 6z\"></path></svg></a>相关文档</h2>\n<p>其他操作请参考<a href=\"https://cloud.baidu.com/doc/IAM/index.html\" target=\"_blank\" rel=\"nofollow noopener noreferrer\">多用户访问控制</a>。</p>","fields":{"slug":"jmpnpixk5","title":"多用户访问控制","date":"2026-05-27","extractedHeadings":[]},"headings":[{"value":"概述","depth":2},{"value":"使用场景","depth":2},{"value":"创建用户","depth":2},{"value":"配置策略","depth":2},{"value":"系统策略","depth":3},{"value":"自定义策略","depth":3},{"value":"用户授权","depth":2},{"value":"子用户登录","depth":2},{"value":"相关文档","depth":2}]}},"pageContext":{"isCreatedByStatefulCreatePages":false,"slug":"jmpnpixk5","prev":{"id":"4mpyx5xnl","name":"API参考","path":"4mpyx5xnl","filePath":"API参考/附录.md","seo":null,"parentIds":["Bmhk21cux"],"parents":[{"id":"Bmhk21cux","documentId":"edee1557-6226-438b-89d4-02d457b6b7b1","name":"API参考","repoName":"GEO","filePath":"API参考","disabled":false,"path":"Bmhk21cux","lastMergeTime":null,"isApiDoc":null,"httpMethod":null,"seo":null,"sourceOrgName":null,"sourceRepoName":null,"sourceDocumentId":""}]},"next":{"id":"8mq0jihy3","name":"SDK","path":"8mq0jihy3","filePath":"SDK/Go-SDK/概述.md","seo":null,"parentIds":["Tmn42qnpj","5mq0jfy9v"],"parents":[{"id":"Tmn42qnpj","documentId":"63f266aa-c55e-4121-ab61-1978c39e36b9","name":"SDK","repoName":"GEO","filePath":"SDK","disabled":false,"path":"Tmn42qnpj","lastMergeTime":null,"isApiDoc":null,"httpMethod":null,"seo":null,"sourceOrgName":null,"sourceRepoName":null,"sourceDocumentId":""},{"id":"5mq0jfy9v","documentId":"b4d33fc5-75f2-4391-a7c3-676e30294452","name":"Go-SDK","repoName":"GEO","filePath":"SDK/Go-SDK","disabled":false,"path":"5mq0jfy9v","lastMergeTime":null,"isApiDoc":null,"httpMethod":null,"seo":null,"sourceOrgName":null,"sourceRepoName":null,"sourceDocumentId":""}]},"parents":[{"id":"3mpnpinw8","documentId":"04f4baf9-4fda-4da4-ad4b-cc77d07fbc4d","name":"操作指南","repoName":"GEO","filePath":"操作指南","disabled":false,"path":"3mpnpinw8","lastMergeTime":null,"isApiDoc":null,"httpMethod":null,"seo":null,"sourceOrgName":null,"sourceRepoName":null,"sourceDocumentId":""}],"specificSeo":null}}}