Policies

A read-facing view of the access rules configured for the subuser across all their buckets, organized into three tabs:

• Allocated — the rules currently granted, with bucket, scope, permission preset, and status (Active/Suspended/Expired). Click one to see its full list of allowed S3 actions.

• Requested — permission requests the subuser has submitted that are still pending, with an option to cancel.

• Rejected — requests the account owner declined, along with any remarks, which can be dismissed.

From a rule's detail view, a subuser can click Request Policy to ask for additional actions beyond what's currently granted on that bucket; the account owner approves or rejects these from their own Policies section.