# Create Policies for Service Account

In a general overview, the process of creating a policy has similarities for both IAM User Accounts and Service Accounts. However, we will reiterate the steps to make it easy for you to observe and execute.

To create a policy for accessing vStorage resources, follow these steps:

1. Log in to [https://iam.console.vngcloud.vn](https://iam.console.vngcloud.vn/]\(https://iam.console.vngcloud.vn/\)) with your Root User Account.
2. Choose the **Policy** menu.
3. Select **Create a Policy**.
4. Enter the **Name** and **Description** for the Policy.
5. Click **Next step**.
6. Choose the **Product** as **vstorage-hcm03**.
7. Choose **Actions**:
   1. Select **Allow permissions**: By default, the vIAM system will always enable permissions to be applied in the policy. If you disable this mode, the system will deny (reverse) the corresponding permissions.
      1. **Allow permissions**: Allow access based on the selected action.
      2. **Deny permissions**: Deny access based on the selected action.
   2. Choose **All vstorage-hcm03 actions** if you want to create a policy with permission for all actions on vStorage. For detailed meanings of actions, refer to the Features, vStorage Resources, and Access Permissions.
8. Choose **Resources**:
   1. Select **All resources** if you want the selected permissions to be allowed access to all resources in your SSO account.
   2. Choose **Specify resources**: Select the specific project, container, or object you want to allow access to. You can enter information for each resource type in one of the following ways:
      1. **Enter \*** if you want to select all resources.
      2. **Enter the specific ID** of the project, the name of the container, or the name of the object if you want to specify the exact project, container, or object.
      3. **Enter a prefix** if you want to specify a set of projects, containers, or objects starting with the declared prefix.
   3. You can also choose **Any** to allow access to all projects, containers, or objects in your SSO account.
   4. Choose **Request conditions**: Enter special conditions for the policy if any.

After completing the above 8 steps, the policy for vStorage has been created. Next, assign it to the Service Account as instructed in [Attach Policies with Service Account](https://docs.vngcloud.vn/display/VSEN/Attach+Policies+with+Service+Account).

In addition to the specific policy creation steps provided above, we also offer you a set of default policies with diverse permissions. You can use this policy set and directly link them to your Service Account. For more information on the list of default policies, please refer to [Features, vStorage Resources, and Access Permissions](https://docs.vngcloud.vn/display/VSEN/Features%2C+vStorage+Resources%2C+and+Access+Permissions).

\\


---

# Agent Instructions: Querying This Documentation

If you need additional information that is not directly available in this page, you can query the documentation dynamically by asking a question.

Perform an HTTP GET request on the current page URL with the `ask` query parameter:

```
GET https://docs.vngcloud.vn/vng-cloud-document/vstorage/object-storage/vstorage-hcm03/identity-and-access-management/managing-vstorage-access-account/service-account/create-policies-for-service-account.md?ask=<question>
```

The question should be specific, self-contained, and written in natural language.
The response will contain a direct answer to the question and relevant excerpts and sources from the documentation.

Use this mechanism when the answer is not explicitly present in the current page, you need clarification or additional context, or you want to retrieve related documentation sections.