By defining permission policy, Baidu AI Cloud IAM attaches the policy to users, and provides the users with flexible permission management and control. The administrator can authorize the IAM user directly by predefined system policy; meanwhile, the administrator can customize the user's permission policy according to the actual business needs, and grant different resource access permission to each IAM user. This section focuses on the methods to use IAM permissions and policies and the issues that can be solved.