Managing Auto Scaling permissions
- Print
- PDF
Managing Auto Scaling permissions
- Print
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
Available in Classic and VPC
By using Sub Account, the account management service of the NAVER Cloud Platform, you can set various access permissions of Auto Scaling. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.
Note
Sub Account is a service provided free of charge upon subscription request. For more details about Sub Account, refer to the Service > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account Guide.
System Managed policies
System Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once System Managed policies are granted to a sub account created in Sub Account, that sub account can use Auto Scaling. The following is a brief description of system managed policies of Auto Scaling.
| Policy Name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
| NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
| NCP_AUTOSCALING_MANAGER | Permission to use all the functions of Auto (including Monitoring MANAGER permission) |
| NCP_VPC_AUTOSCALING_MANAGER | Permission to use all the functions of VPC-based Auto Scaling |
| NCP_VPC_AUTOSCALING_VIEWER | Permission to use only the functions to view the Auto Scaling list and Search functions of VPC-based Auto Scaling |
User-defined policies (VPC)
User-defined policies are policies that users may directly create. Once User Created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description of user-defined policies of Auto Scaling.
Launch configuration-related actions
Launch Configuration-related actions are as follows:
| Classification | Action name | Related action(s) | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | View/getLaunchConfigurationList | - | - | LaunchConfiguration | Views launch configuration list |
| View | View/getLaunchConfigurationDetail | View/getLaunchConfigurationList | LaunchConfiguration | LaunchConfiguration | View launch configuration details |
| View | View/getMemberServerImageList | - | - | LaunchConfiguration | Get the server Image list |
| View | View/getMemberServerImageDetail | View/getMemberServerImageList | VPCServer:ServerImage | LaunchConfiguration | View detailed information about the server image |
| View | View/getLogInKeyList | - | - | LaunchConfiguration | Search authentication key list |
| View | View/getInitScriptList | - | - | LaunchConfiguration | View the init script list |
| View | View/getInitScriptDetail | View/getInitScriptList | VPCServer:InitScript | LaunchConfiguration | View init script details |
| Change | Change/createLaunchConfiguration | Change/createLoginKey View/getLaunchConfigurationList View/getMemberServerImageList View/getMemberServerImageDetail View/getLogInKeyList View/getInitScriptList View/getInitScriptDetail | - | LaunchConfiguration | Create Launch Configuration |
| Change | Change/deleteLaunchConfiguration | View/getLaunchConfigurationList View/getLaunchConfigurationDetail | LaunchConfiguration | LaunchConfiguration | Delete Launch Configuration |
| Change | Change/createLoginKey | View/getLogInKeyList | LaunchConfiguration | LaunchConfiguration | Create a new authentication key to use for the server |
Actions related to the Auto Scaling Group
Auto Scaling Group-related actions are as follows:
| Classification | Action name | Related action(s) | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | View/getAutoScalingGroupList | - | - | AutoScalingGroup | Search the Auto Scaling Group list |
| View | View/getAutoScalingGroupDetail | View/getAutoScalingGroupList | AutoScalingGroup | AutoScalingGroup | Search for detailed information on the Auto Scaling Group |
| View | View/getAutoScalingLog | View/getAutoScalingGroupList View/getAutoScalingGroupDetail | AutoScalingGroup | AutoScalingGroup | Search the Auto Scaling execution history |
| View | View/getAutoScalingGroupServerList | View/getAutoScalingGroupList View/getAutoScalingGroupDetail | AutoScalingGroup | AutoScalingGroup | Search the list of servers included in the Auto Scaling Group |
| View | View/getAutoScalingPolicyList | View/getAutoScalingGroupList View/getAutoScalingGroupDetail | AutoScalingGroup | AutoScalingGroup | View a created fluctuation policy list |
| View | View/getAutoScalingScheduleList | View/getAutoScalingGroupList View/getAutoScalingGroupDetail | AutoScalingGroup | AutoScalingGroup | View a fluctuation policy execution schedule list |
| View | View/getAutoScalingNotificateList | View/getAutoScalingGroupList View/getAutoScalingGroupDetail | AutoScalingGroup | AutoScalingGroup | Search the list of recipients for notifications when Auto Scaling occurs |
| View | View/getAutoScalingProcessStatus | View/getAutoScalingGroupList View/getAutoScalingGroupDetail | AutoScalingGroup | AutoScalingGroup | Check the process status of the Auto Scaling Group |
| View | View/getVPCList | - | - | AutoScalingGroup | Search the VPC list for creating servers |
| View | View/getVPCDetail | View/getVPCList | VPC:VPC | AutoScalingGroup | View VPC details |
| View | View/getSubnetList | - | - | AutoScalingGroup | View the subnet list for creating a server |
| View | View/getSubnetDetail | View/getSubnetList | VPC:Subnet | AutoScalingGroup | Gets subnet details |
| View | View/getACGList | - | - | AutoScalingGroup | View the ACG list |
| View | View/getACGDetail | View/getACGList | VPCServer:ACG | AutoScalingGroup | View ACG details |
| View | View/getLoadBalancerInstanceList | - | - | AutoScalingGroup | View a load balancer list |
| View | View/getLoadBalancerInstanceDetail | View/getLoadBalancerInstanceList | VPCLoadBalancer:LoadBalancer | AutoScalingGroup | View load balancer details |
| Change | Change/createAutoScalingGroup | View/getAutoScalingGroupList View/getAutoScalingGroupDetail View/getAutoScalingPolicyList View/getAutoScalingScheduleList View/getAutoScalingNotificateList View/getAutoScalingProcessStatus View/getLaunchConfigurationList View/getLaunchConfigurationDetail View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail View/getACGList View/getACGDetail View/getLoadBalancerInstanceList Change/changeAutoScalingGroupConfiguration Change/manageAutoScalingPolicy Change/manageAutoScalingSchedule Change/manageAutoScalingNotificate Change/manageAutoScalingProcessStatus | - | AutoScalingGroup | Create Auto Scaling Group |
| Change | Change/changeAutoScalingGroupProperties | View/getAutoScalingGroupList View/getAutoScalingGroupDetail | AutoScalingGroup | AutoScalingGroup | Edit the detailed information on the Auto Scaling Group (including capacity and health check settings) |
| Change | Change/deleteAutoScalingGroup | View/getAutoScalingGroupList View/getAutoScalingGroupDetail | AutoScalingGroup | AutoScalingGroup | Delete Auto Scaling Group |
| Change | Change/changeAutoScalingGroupConfiguration | View/getAutoScalingGroupList View/getAutoScalingGroupDetail View/getAutoScalingPolicyList View/getAutoScalingScheduleList View/getAutoScalingNotificateList View/getAutoScalingProcessStatus View/getLaunchConfigurationList View/getLaunchConfigurationDetail Change/manageAutoScalingPolicy Change/manageAutoScalingSchedule Change/manageAutoScalingNotificate Change/manageAutoScalingProcessStatus | AutoScalingGroup | AutoScalingGroup | Edit the settings of the Auto Scaling Group (including the increase/decrease policy, schedule, and notification settings) |
| Change | Change/manageAutoScalingPolicy | View/getAutoScalingGroupList View/getAutoScalingGroupDetail View/getAutoScalingPolicyList View/getAutoScalingScheduleList View/getAutoScalingNotificateList View/getAutoScalingProcessStatus View/getLaunchConfigurationList View/getLaunchConfigurationDetail Change/changeAutoScalingGroupConfiguration Change/manageAutoScalingSchedule Change/manageAutoScalingNotificate Change/manageAutoScalingProcessStatus | AutoScalingGroup | AutoScalingGroup | Setting a fluctuation policy |
| Change | Change/manageAutoScalingSchedule | View/getAutoScalingGroupList View/getAutoScalingGroupDetail View/getAutoScalingPolicyList View/getAutoScalingScheduleList View/getAutoScalingNotificateList View/getAutoScalingProcessStatus View/getLaunchConfigurationList View/getLaunchConfigurationDetail Change/changeAutoScalingGroupConfiguration Change/manageAutoScalingPolicy Change/manageAutoScalingNotificate Change/manageAutoScalingProcessStatus | AutoScalingGroup | AutoScalingGroup | Set a fluctuation policy execution schedule |
| Change | Change/manageAutoScalingNotificate | View/getAutoScalingGroupList View/getAutoScalingGroupDetail View/getAutoScalingPolicyList View/getAutoScalingScheduleList View/getAutoScalingNotificateList View/getAutoScalingProcessStatus View/getLaunchConfigurationList View/getLaunchConfigurationDetail Change/changeAutoScalingGroupConfiguration Change/manageAutoScalingPolicy Change/manageAutoScalingSchedule Change/manageAutoScalingProcessStatus | AutoScalingGroup | AutoScalingGroup | Set the list of recipients for notifications when Auto Scaling occurs |
| Change | Change/manageAutoScalingProcessStatus | View/getAutoScalingGroupList View/getAutoScalingGroupDetail View/getAutoScalingPolicyList View/getAutoScalingScheduleList View/getAutoScalingNotificateList View/getAutoScalingProcessStatus View/getLaunchConfigurationList View/getLaunchConfigurationDetail Change/changeAutoScalingGroupConfiguration Change/manageAutoScalingPolicy Change/manageAutoScalingSchedule Change/manageAutoScalingNotificate | AutoScalingGroup | Manage the Auto Scaling Group process (including schedule suspension and restart) |
Caution
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and does not forcibly include them. Thus, be careful when setting permissions.
Was this article helpful?