Manage Policies

Define fine-grained access permission rules per service in IAM → Identity → Policies.

Policy List

The policy list is organized into two tabs:

Tab	Description
Role	Policies attached to roles
Active Grant	Directly granted active policies

Create a Policy

1. Click Create Policy in the Policies list.
2. Enter a Name and Description.
3. Define permission rules:
   • Service: Select the target service
   • Actions: Select allowed actions (e.g., create, read, update, delete)
   • Resources: Specify the target resource scope
4. Click Create.

View Policy Details

Click a policy name to view:

• Permission rules defined in the policy
• Roles this policy is attached to
• Affected users and groups

Attach a Policy to a Role

1. Go to Roles → click a role name → Policies tab → Add Policy.
2. Select the policy and click Save.

Detach a Policy

1. In the role detail view → Policies tab, click Detach on the target policy.
2. Confirm in the dialog.

Delete a Policy

1. Click ⋮ next to the policy → Delete.
2. Confirm in the dialog.

WARNING

Deleting a policy that is attached to roles will reduce those roles' permissions.