Available in Classic and VPC
You can set different access permissions for the ARC eye service using NAVER Cloud Platform's Sub Account service. The Sub Account service provides System Managed policies for setting management and administration permissions.
Sub Account is a free service with no additional charges. For more information on the Sub Account service, see the Service > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account User Guides.
System-managed policies
System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. When you assign one of these system-managed policies to a sub account created in the Sub Account service, that account can use the ARC eye service. The following is the brief description of the system-managed policies of ARC eye.
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Permission to access all services with the same scope as the main account |
| NCP_INFRA_MANAGER | Permission to access all services except the console's My Account > Manage billing information and expense > Manage billing and payment menu |
| NCP_FINANCE_MANAGER | Permission to only access the Cost Explorer service and the console's My Account > Manage billing information and expense > Manage billing and payment menu |
| NCP_ARC_EYE_VIEWER | Permission to use the view feature of ARC eye |
| NCP_VPC_ARC_EYE_MANAGER | Permission to use the full ARC eye feature sets |
User-defined policies
User-defined policies let you create custom permissions. When you assign a user-defined policy to a Sub Account, that account can only perform the specific actions you've allowed. Here are the available user-defined policies for ARC eye:
| Type | Action name | Related action(s) | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | getAPIKey | View/getAPIList | - | API | Check API key. |
| View | getAPIList | - | - | API | Check API list. |
| View | getDataDetail | View/getDataList View/getLocationList View/getProjectDetail View/getProjectList View/getTaskList |
VLTask | VLTask | View detailed list of space image data. |
| View | getDataList | View/getLocationList View/getProjectDetail View/getProjectList View/getTaskList |
VLTask | VLTask | View list of space image data. |
| View | getLocationList | View/getProjectDetail View/getProjectList |
Location | Location | View location list. |
| View | getMapDataDetail | View/getLocationList View/getMapDataList View/getProjectDetail View/getProjectList View/getTaskDetail View/getTaskList |
- | Map Data | View Map Data conversion details. |
| View | getMapDataList | View/getLocationList View/getProjectDetail View/getProjectList View/getTaskDetail View/getTaskList |
- | Map Data | View Map Data conversion list. |
| View | getNotificationList | - | - | Notification | View notification recipients. |
| View | getProjectDetail | View/getProjectList | Project | Project | View project details. |
| View | getProjectList | - | Project | Project | View project list. |
| View | getTaskDetail | View/getLocationList View/getProjectDetail View/getProjectList |
VLTask | VLTask | View task details. |
| View | getTaskList | View/getLocationList View/getProjectDetail View/getProjectList |
VLTask | VLTask | View task list. |
| Change | addNotificationRecipient | View/getNotificationList | Notification | Notification | Add notification recipients. |
| Change | createLocation | View/getLocationList View/getProjectDetail View/getProjectList |
Location | Location | Create location. |
| Change | createMapData | View/getLocationList View/getMapDataList View/getProjectDetail View/getProjectList View/getTaskDetail View/getTaskList |
MapData | Map Data | Set Map Data conversion. |
| Change | createProject | View/getProjectList | - | Project | Create project. |
| Change | deleteAPI | View/getAPIList | APIs | API | Delete API. |
| Change | deleteData | View/getDataDetail View/getDataList View/getLocationList View/getProjectDetail View/getProjectList View/getTaskList |
- | VLTask | Delete space image data. |
| Change | deleteLocation | View/getLocationList View/getProjectDetail View/getProjectList |
Location | Location | Delete location. |
| Change | deleteMapData | View/getLocationList View/getMapDataList View/getProjectDetail View/getProjectList View/getTaskDetail View/getTaskList |
MapData | Map Data | Delete Map Data conversion. |
| Change | deleteNotificationRecipient | View/getNotificationList | Notification | Notification | Delete notification recipients. |
| Change | deleteProject | View/getProjectList | Project | Project | Delete a project. |
| Change | deleteTask | View/getLocationList View/getProjectDetail View/getProjectList View/getTaskList |
VLTask | VLTask | Delete VL task. |
| Change | downloadMapData | View/getLocationList View/getMapDataList View/getProjectDetail View/getProjectList View/getTaskDetail View/getTaskList |
MapData | Map Data | Download Map Data conversion results. |
| Change | editLocation | View/getLocationList View/getProjectDetail View/getProjectList |
Location | Location | Edit location. |
| Change | editProject | View/getProjectList View/getProjectDetail |
Project | Project | Modify project. |
| Change | manageMapViewer | View/getLocationList View/getMapDataList View/getMapDataDetail View/getProjectDetail View/getProjectList View/getTaskDetail View/getTaskList |
MapData | Map Data | Check Map Data Viewer results. |
| Change | managePotree | View/getLocationList View/getProjectDetail View/getProjectList View/getTaskList |
VLTask | VLTask | View with Potree Viewer. |
| Change | manageTask | View/getDataList View/getLocationList View/getProjectDetail View/getProjectList View/getTaskList |
VLTask | VLTask | Run VL task. |
| Change | releaseAPI | View/getAPIList | APIs | API | Deploy API. |
| Change | stopAPI | View/getAPIList | APIs | API | Stop API. |
| Change | subscribeService | - | - | Subscription | Subscribe to the service. |
| Change | unsubscribeService | - | - | Subscription | Unsubscribe from service. |
| Change | uploadData | View/getDataList View/getTaskList |
VLTask | VLTask | Upload data. |
If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. To prevent such issues, the Sub Account service provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you manually uncheck these auto-selected related actions, the system assumes this was intentional and won't override your selection.