Cloud Access Management (CAM)

Cloud Access Management (CAM) is Tencent Cloud's identity and access management service. CAM controls who can access your resources and what they can do — the equivalent of AWS IAM or Alibaba Cloud RAM.

---

Root Account and Sub-Accounts

Root Account

When you sign up for Tencent Cloud, you receive a root account with full access to all resources and billing.

Root account best practices:

• Never use the root account for daily tasks
• Enable MFA on the root account
• Create sub-accounts for all operational work

Sub-Accounts

CAM supports two types of sub-accounts:

Type	Description	Use Case
Sub-user	An identity with its own login credentials	Team members, developers
Collaborator	Another root account granted access to your resources	Partner companies, cross-account access

Each sub-user gets:

• A unique login (CAM user name)
• Optional console password (web access)
• Optional API keys (SecretId + SecretKey for programmatic access)

---

User Groups

User groups let you manage permissions for multiple users at once: