UCloud Global平台，提供主账号对多个子账号的管理能力，子账号通常为企业员工或不同的项目组创建，可以根据子账号使用人员的不同，设置不同操作权限。例如，可以给运维人员提供A项目的管理员权限，那么运维人员就能管理和查看A项目下的所有资源；可以给财务人员只提供财务权限，那么财务人员就只能查看资源账单，而没有资源的操作权限等。

UCloud Global platform provides the ability for the main account to manage multiple sub-accounts. Sub-accounts are usually created for corporate employees or different project teams. Different operation permissions can be set according to the different users of the sub-accounts. For example, the administrator permissions of project A can be provided to the operation and maintenance personnel, so that the operation and maintenance personnel can manage and view all resources under project A; only financial permissions can be provided to the financial personnel, so that the financial personnel can only view the resource bills but have no resource operation permissions, etc.

一、邀请子用户加入 Invite sub-users to join

https://console.ucloud-global.com/uaccount/iam/user_manage

1.1 邀请子用户 Invite Sub Account

点击“邀请子用户”按钮

Click the Invite Sub Account button

填写邮箱，用户名和昵称，其中用户名是全局唯一标识，不可修改。

Fill in your Email address, User Name and Display Name. The user name is a globally unique identifier and cannot be modified.

点击“确认”按钮，会返回邀请的子账号的账号信息和公私钥地址。

Click the "Confirm" button to return the account information and public and private key addresses of the invited sub-account.

1.2 激活子用户 Activate Sub Account

此时查看被邀请的子账号邮箱，可以看到待激活邮件，点击邮件链接即可完成子账号激活。

At this time, check the mailbox of the invited sub-account, you can see the email to be activated, click the email link to complete the sub-account activation.

设置完密码，即可完成激活操作。

After setting the password, the activation operation is completed.

激活成功页面。

Activation success page.

二、为子账号添加权限

子账户添加了具体权限，才能进行账户资源管理操作。

The sub-account must have specific permissions added to it before it can perform account resource management operations.

2.1 点击 “添加权限”按钮 Click the "Add Policy" button

如下图，如果选择给starcto@163.com子账户A项目的超级管理员权限，那么该子账号，可以对主账号A项目下的所有资源进行增删改查。

As shown in the figure below, if you choose to give the super administrator privileges of project A to the starcto@163.com sub-account, then the sub-account can add, delete, modify and check all resources under project A of the main account.

点击“确认”按钮，即可添加成功。Click the "Confirm" button to add it successfully.

2.2 用户组管理

当我们需要创建10个或100个用户，并且要给这些用户设置一样的权限，该怎么操作呢？这就涉及到用户组的概念，我们只需要针对该用户组设置好权限，将需要同样权限的子账号，加入到该用户组即可，不需要针对100个用户逐一设置权限。

What should we do if we need to create 10 or 100 users and set the same permissions for them? This involves the concept of user groups. We only need to set permissions for the user group and add the sub-accounts that need the same permissions to the user group. There is no need to set permissions for 100 users one by one.

https://console.ucloud-global.com/uaccount/iam/user_group_manage 

创建用户组，如下图，设置组名SRE。

Create a user group, as shown below, and set the group name to SRE.

创建完成后，可以为SRE组，添加权限或者子账号信息。

After the creation is complete, you can add permissions or sub-account information to the SRE group.

三、云平台账号组织结构 Cloud platform account organization structure

3.1 主账号 Parent account

3.2 子账号 Sub Account

3.3 用户组User Group