Available in Classic and VPC
You can use Sub Account, the account management service on NAVER Cloud Platform, to set various access permissions for Ncloud Chat. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.
Sub Account is a service provided free of charge upon subscription request. For more information about Sub Account, see Services > Management & Governance > Sub Account in NAVER Cloud Platform portal, as well as the Sub Account user guide.
System-managed policies
System-managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once system-managed policies are granted to a sub account created in Sub Account, that sub account can use Ncloud Chat. The following is a brief description about system-managed policies of Ncloud Chat.
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Full access to all services with the same scope as the main account |
| NCP_INFRA_MANAGER | Permission to access all services, except the My Account > Billing information and cost management > Billing and payment management menu in the console, which is restricted. |
| NCP_FINANCE_MANAGER | Permission to access only the Cost Explorer service and the My Account > Billing information and cost management > Billing and payment management menu in the console. |
| NCP_NCLOUDCHAT_MANAGER | Permission to use all the features in Ncloud Chat |
| NCP_NCLOUDCHAT_VIEWER | Permission to only use the View list and Search features in Ncloud Chat |
User-defined policies
User-defined policies are policies that users may create. Once the user-defined policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description about User-defined policies of Ncloud Chat.
| Classification | Action name | Related action(s) | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | View/getProjectList | - | - | Project | View project list |
| Change | Change/changeAccount | View/getProjectList | Project | Project | Change project admin account |
| Change | Change/changeProjectName | View/getProjectList | Project | Project | Change project name |
| Change | Change/createProject | View/getProjectList | - | Project | Create project |
| Change | Change/deleteProject | View/getProjectList | Project | Project | Delete project |
| Change | Change/initialize | View/getProjectList | Project | Project | Initialize project |
| Change | Change/initializePassword | View/getProjectList | Project | Project | Initialize project admin password |
| Change | Change/subscribeProduct | - | - | Project | Subscribe Ncloud Chat |
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be careful when setting permissions.