Enterprise Organization - Financial Management
Financial management for enterprise organizations
Enterprise organizations provide you with refined permission control for managing each account under a multi-account system, covering business modules such as resource management and financial settlement. This document aims to explain the permission coverage and usage cases of finance-related modules. For specific usage and operations of Enterprise Organizations, you can refer to the Enterprise Organization documentation for details.
All the following permissions and their corresponding practical cases only apply to finance-related modules. The permissions for activating cloud resources also involve pre-configured independent permission controls for each product. Please use these permissions together with specific product management or operation and maintenance permissions.
Financial permissions of various enterprise organizations and their corresponding operable scopes
| Permission policies | Permission name | Permission description |
|---|---|---|
| FCFullAccessScp | Allow all operations in the financial center |
✅Allowed operations defined by the permission
|
| FCOrderAccessScp | Allow permission to view, pay, and cancel orders |
✅Allowed operations defined by the permission
|
| FCOrderCreateAccessScp | Allow permission to create orders |
✅Allowed operations defined by the permission
|
| FCOrderCreateDenyScp | Deny permission to create orders |
❌Prohibited operations defined by the permission
Note: This permission will block all order placement requests, including prepaid manual orders, postpaid manual orders, and automatic renewal orders. If a sub-account in the organization has resources with automatic renewal enabled, it is not recommended to check this permission |
| FCReadDenyScp | Deny read-only permission to the financial center |
❌Prohibited operations defined by the permission
|
Practice
| Practical cases | Recommended permission combinations |
|---|---|
| I need my sub-accounts to independently activate resources | Allow permission to create orders (FCOrderCreateAccessScp) ➕ Permission to view, pay, and cancel orders (FCOrderAccessScp) |
| I need sub-accounts to only perform resource operation and maintenance, without financial permissions | Deny permission to create orders (FCOrderCreateDenyScp) ➕ Target product operation and maintenance permissions |
| I need sub-accounts to perform all operations on finance-related modules, including order placement | Allow all operations in the financial center (FCFullAccessScp) ➕ Allow permission to create orders (FCOrderCreateAccessScp) |
