How to correctly configure the service catalog permissions for users?

Step 1: Configure organization policies (to control operation permissions of cloud services) 

This step is completed in the enterprise backend, which determines what operations all sub-accounts under the organization can perform on which cloud services. 

Step 2: Configure the visible scope of the service catalog (to control product menus visible to users) 

This step is carried out in the operation backend (integrated operation and management platform) to hide products that ordinary users do not need to view. 

Step 3: Configure user permissions (IAM, to control user operations with finer granularity) 

This step is performed in the user console by the sub-account administrator of the target organization, so as to precisely manage the permissions of IAM users under it.