Available in VPC
You can set different access permissions for ARC brain using NAVER Cloud Platform's Sub Account service. The Sub Account service provides System Managed policies for setting management and administration permissions.
Sub Account is a free service with no additional charges. For more information on the Sub Account service, see the Service > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account User Guides.
System-managed policies
System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. When you assign one of these system-managed policies to a sub account created in the Sub Account service, that account can use the ARC brain service. Here are the available system-managed policies for ARC brain:
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Permission to access all services with the same scope as the main account |
| NCP_INFRA_MANAGER | Permission to access all services except the console's My Account > Manage billing information and expense > Manage billing and payment menu |
| NCP_FINANCE_MANAGER | Permission to only access the Cost Explorer service and the console's My Account > Manage billing information and expense > Manage billing and payment menu |
| NCP_VPC_ARC_BRAIN_MANAGER | Full access to all ARC brain features on the VPC platform |
If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be careful when setting permissions.