Application scenarios

Enterprise IAM user management and permission separation

Account A under an enterprise may purchase multiple cloud resources (like Baidu Cloud Compute (BCC), Baidu Object Storage (BOS), Content Delivery Network (CDN)). With a diverse team of employees—developers, testers, and operations staff—each with differing job responsibilities, the required permissions vary while avoiding additional operational cost burdens.

Scenario description:

• Enterprise Account A can grant staff different permissions for products (e.g., read-only, operations, management) and apply refined controls at the resource level (e.g., permissions for specific BCC instance operations).
• Enterprise employees log in and use resources through IAM user accounts without requiring additional operational payments.

Resource management and authorization references among enterprises

• [Enterprise Organization](Reference/Enterprise Organization/Product Introduction.md)
• [Enterprise Organization vs. Identity and Access Management](IAM/Product Description/Enterprise Organization vs. Identity and Access Management.md)