If you no longer need a custom access control policy, you can detach it from the related folders or members. After you detach it, the custom access control policy no longer limits the operations that are performed on resources by using members. Make sure that the detached policy meets your expectations. Otherwise, your business may be affected.

Background information

Both the system and custom access control policies can be detached. If an object has only one access control policy attached, the policy cannot be detached.


  1. Log on to the Resource Management console.
  2. In the left-side navigation pane, choose Resource Directory > Control Policy.
  3. On the Control Policy page, click the Attachments tab. In the navigation tree of the Attachments tab, find the folder or member from which you want to detach an access control policy. Then, click the name of the folder or member.
  4. In the section that appears, find the access control policy that you want to detach and click Detach in the Actions column.
  5. Click OK.