All Products
Search
Document Center

Resource Management:Detach a custom access control policy

Last Updated:Nov 21, 2025

If you no longer need a custom access control policy, you can detach it from the related folders or members. After you detach it, the custom access control policy no longer limits the operations that are performed on resources by using members. Make sure that the detached policy meets your expectations. Otherwise, your business may be affected.

Background information

Both the system and custom access control policies can be detached. If an object has only one access control policy attached, the policy cannot be detached.

Method

  • Choose Resource Directory > Control Policy in the left-side navigation pane. On the page that appears, click the name of a policy. On the details page of the policy, click the Principals tab. On this tab, detach the policy from a folder or member.

  • Choose Resource Directory > Management in the left-side navigation pane. On the page that appears, click Resource Organization View in the upper-right corner. In the left-side navigation tree, click a folder. On the Policy tab, detach a policy from the folder.

  • Choose Resource Directory > Management in the left-side navigation pane. On the page that appears, click Member List View in the upper-right corner. On the page that appears, click the ID of a member. On the Policy tab of the member details page, detach a policy from the member. In this example, this method is used.

Procedure

  1. Log on to the Resource Management console as a management account.

  2. In the left-side navigation pane, choose Resource Directory > Management.

  3. On the page that appears, click Resource Organization View or Member List View in the upper-right corner. Then, click the ID of a member.

    image

  4. On the Policy tab of the member details page, find the policy that you want to detach and click Unbind in the Actions column.

  5. In the Detach Policy from Object dialog box, click OK.