Available in Classic and VPC
You can set different access permissions for the ARC eye service using NAVER Cloud Platform's Sub Account service. The Sub Account service provides System Managed policies for setting management and administration permissions.
Sub Account is a free service with no additional charges. For more information on the Sub Account service, see the Service > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account User Guides.
System-managed policies
System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. When you assign one of these system-managed policies to a sub account created in the Sub Account service, that account can use the ARC eye service. The following is the brief description of the system-managed policies of ARC eye.
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Permission to access all services with the same scope as the main account |
| NCP_INFRA_MANAGER | Permission to access all services except the console's My Account > Manage billing information and expense > Manage billing and payment menu |
| NCP_FINANCE_MANAGER | Permission to only access the Cost Explorer service and the console's My Account > Manage billing information and expense > Manage billing and payment menu |
| NCP_ARC_EYE_VIEWER | Permission to use the view feature of ARC eye |
| NCP_VPC_ARC_EYE_MANAGER | Permission to use the full ARC eye feature sets |
User-defined policies
User-defined policies let you create custom permissions. When you assign a user-defined policy to a Sub Account, that account can only perform the specific actions you've allowed. Here are the available user-defined policies for ARC eye:
| Type | Action name | Related action(s) | Resource type | Group by resource type | Action description |
| ---- | ---- | ---- | ---- | ---- | ---- |
| View | getAPIKey | View/getAPIList | - | API | Check API key. |
| View | getAPIList | - | - | API | Check API list |
| View | getDataDetail | View/getDataList
View/getLocationList
View/getProjectDetail
View/getProjectList
getTaskList | VLTask | VLTask | View detailed list of space image data. |
| View | getDataList | View/getLocationList
View/getProjectDetail
View/getProjectList
View/getTaskList |VLTask| VLTask | View list of space image data. |
| View | getLocationtList | View/getProjectDetail
View/getProjectList | Location | Location | View location list. |
| View | getMapDataDetail | View/getLocationList
getMapDataList
View/getProjectDetail
View/getProjectList
View/getTaskDetail
View/getTaskList | - | Map Data | View Map Data conversion details. |
| View | getMapDataList | View/getLocationList
View/getProjectDetail
View/getProjectList
View/getTaskList View/getTaskDetail
View/getTaskList | - | Map Data | View Map Data conversion list. |
| View | getNotificationList | - | - | Notification | View notification recipients. |
| View | getProjectDetail | View/getProjectList | Project | Project | View project details. |
| View | getProjectList | - | Project | Project | View project list |
| View | getTaskDetail | View/getLocationList
View/getProjectDetail
View/getProjectList | VLTask | VLTask | View task details. |
| View | getTaskList | View/getgetLocationList
View/getProjectDetail
View/ProjectList | VLTask | VLTask | View task list. |
| Change | addNotificationRecipient | View/getNotificationList | Notification | Notification | Add notification recipients. |
| Change | createLocation | View/getLocationList
View/getProjectDetail
View/getProjectList | Location | Location | Create location. |
| Change | createProject | View/getProjectList | - | Project | Create project. |
| Change | deleteAPI | View/getAPIList | APIs | API | Delete API. |
| Change | deleteData | View/getDataDetail
View/getDataList
View/getLocationList
View/getProjectDetail
View/getProjectList
View/getTaskList | -| VLTask | Delete space image data. |
| Change | deleteLocation | View/getLocationList
View/getProjectDetail
View/getProjectList |Location | Location| Delete location. |
| Change | deleteMapData | View/getLocationList
View/getMapDataList
View/getProjectDetail
View/getProjectList
View/getTaskDetail
View/getTaskList | MapData | Map Data | Delete Map Data conversion. |
| Change | deleteNotificationRecipient | View/getNotificationList | Notification | Notification | Delete notification recipients. |
| Change | deleteProject | View/getProjectList| Project | Project | Delete a project. |
| Change | deleteTask | View/getLocationList
View/getProjectDetail
View/getProjectList
View/getTaskList | VLTask | VLTask | Delete VL task. |
| Change | editLocation | View/getLocationList
View/getProjectDetail
View/getProjectList | Location | Location | Edit location. |
| Change | editProject | View/getProjectList
View/getProjectDetail| Project | Project| Modify project. |
| Change | managePotree | View/getLocationList
View/getProjectDetail
getProjectList
getTaskList | VLTask | Task | View with Potree Viewer. |
| Change | manageTask | View/getDataList
View/getLocationList
View/getProjectDetail
View/getProjectList
View/getTaskList | VLTask | VLTask | Run VL task. |
| Change | releaseAPI | getAPIList | APIs | API | Deploy API. |
| Change | stopAPI | View/getAPIList | APIs | API | Stop API. |
| Change | subscribeService | -| - | Subscription | Subscribe to the service. |
| Change | unsubscribeService | -|- | Subscription | Unsubscribe from service. |
| Change | uploadData | View/getDataList
View/getTaskList | VLTask | VLTask | Upload data. |
| Change | uploadJson | View/getLocationList
View/getMapDataList
View/getProjectDetail
View/getProjectList
View/getTaskDetail
View/getTaskList |- | Map Data | Upload JSON file. |
If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. To prevent such issues, the Sub Account service provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be careful when setting permissions.