Available in VPC
You can set different access permissions for Cloud DB for MySQL using NAVER Cloud Platform's Sub Account service. Sub Account offers both system-managed (System Managed) and user-defined (User Created) policies to help you configure management and operation permissions.
Note
Sub Account is a free service with no additional charges. For more information about Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal and the Sub Account user guide.
System-managed policies
System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. When you assign one of these policies to a sub account, that account gets access to Cloud DB for MySQL. Here are the available system-managed policies for Cloud DB for MySQL:
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Full access to all services, same as the main account. |
| NCP_INFRA_MANAGER | Access to all services, except My Account > Manage billing information and expense > Manage billing and payment menu on the console. |
| NCP_FINANCE_MANAGER | Access to only Cost Explorer service and My Account > Manage billing information and expense > Manage billing and payment menu on the console. |
| NCP_VPC_CLOUD_DB_FOR_MYSQL_MANAGER | Full access to all Cloud DB for MySQL features on the VPC platform. |
| NCP_VPC_CLOUD_DB_FOR_MYSQL_VIEWER | View-only access to all Cloud DB for MySQL features and list on the VPC platform. |
User-defined policies
User-defined policies let you create custom permissions. When you assign a user-defined policy to a sub account, that account can only perform the specific actions you've allowed. Here are the available user-defined policies for Cloud DB for MySQL:
| Type | Action | Related action | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | View/getDBBackupDetail |
|
Service | Service | View backup information for the service (DB). |
| View | View/getDBBackupList | View/getDBServiceList | - | Service | View backup information for the service (DB). |
| View | View/getDBDashboard |
|
Service | Service | View the DB dashboard of the service (DB). |
| View | View/getDBLogs |
|
Service | Service | View DB logs for the service (DB). |
| View | View/getDBServerEventDetail | View/getDBServerEventList | Service | Service | View server (DB) event details. |
| View | View/getDBServerEventList | - | - | Service | View the list of server (DB) events. |
| View | View/getDBServiceDetail | View/getDBServiceList | Service | Service | View service (DB) details. |
| View | View/getDBServiceList | - | - | Service | View a list of services (DB). |
| View | View/getExecutingBinary |
|
Service | Service | View running binary logs of the selected DB server. |
| View | View/getOSDashboard |
|
Service | Service | View the OS dashboard of the service (DB). |
| View | View/getQueryTimeline |
|
Service | Service | View the query timeline of the service (DB). |
| View | View/exportQueryTimeline |
|
Service | Service | Download searched query timeline results of services (DB). |
| View | View/getSubnetDetail | View/getSubnetList | VPC:Subnet | Service | View subnets accessible for services (DB). |
| View | View/getSubnetList | - | - | Service | View the list of subnets required for services (DB). |
| View | View/getVPCDetail | View/getVPCList | VPC:VPC | Service | View VPCs accessible for services (DB). |
| View | View/getVPCList | - | - | Service | View the list of VPCs required for services (DB). |
| View | View/getDBServerLogs |
|
Service | Service | View log files of the selected DB server. |
| View | View/getBucketList | - | - | Service | View the list of buckets to which the selected file can be exported. |
| View | View/getBucketDetail | View/getBucketList | ObjectStorage:Bucket | Service | Select a bucket to which the selected file can be exported. |
| View | View/exportDBServiceList | View/getDBServiceList | - | Service | Download a list of services (DB). |
| View | View/getSystemConfig |
|
Service | Service | View system config options of services (DB). |
| View | View/getOperatingSystemConfig |
|
Service | Service | View the settings required for upgrading the operating system of the service (DB). |
| View | View/getconfigTemplateList | - | Config Template | Config Template | View the list of config templates. |
| View | View/getconfigTemplateDetail | View/getconfigTemplateList | Config Template | Config Template | View config template details. |
| Change | Change/addSlave |
|
Service | Service | Add a slave DB to the service (DB). |
| Change | Change/changeDBServerLogConfig |
|
Service | Service | Change DB server log settings of services (DB). |
| Change | Change/changeDBSpec |
|
Service | Service | Change specifications of the service (DB). |
| Change | Change/changeMasterDB |
|
Service | Service | Perform master DB failover for services (DB). |
| Change | Change/createDBService |
|
- | Service | Create a service (DB). |
| Change | Change/createDBServiceWithRecoveryServer |
|
Service | Service | Create a new service using a recovery server. |
| Change | Change/deleteDBService |
|
Service | Service | Delete the service (DB) (Master, Standalone). |
| Change | Change/deleteDBServer |
|
Service | Service | Delete slave or recovery servers of services (DB). |
| Change | Change/deleteDBServerLog |
|
Service | Service | Delete log files for the selected DB server. |
| Change | Change/killDBServiceSession |
|
Service | Service | Forcefully terminate all sessions (ID) of the service (DB). |
| Change | Change/manageBackup |
|
Service | Service | Manage backup settings for the service (DB). |
| Change | Change/manageDatabase |
|
Service | Service | Manage database. |
| Change | Change/manageDBConfig |
|
Service | Service | Manage config settings of services (DB). |
| Change | Change/manageDBServiceName |
|
Service | Service | Change DB service name. |
| Change | Change/manageDBServerName |
|
Service | Service | Change the DB server name. |
| Change | Change/manageDBUser |
|
Service | Service | Manage users for the service (DB). |
| Change | Change/recoveryToTime |
|
Service | Service | Recover the service (DB) to a specific point in time. |
| Change | Change/recoveryWithBackupFile |
|
Service | Service | Restore the service (DB) to a backup file. |
| Change | Change/reinstallSlaveDB |
|
Service | Service | Reinstall the slave DB. |
| Change | Change/reinstallStandbyMasterDB |
|
Service | Service | Reinstall the standby master DB. |
| Change | Change/restartDBService |
|
Service | Service | Restart the service (DB). |
| Change | Change/setHA |
|
Service | Service | Change the service (DB) to a high availability configuration. |
| Change | Change/setStandalone |
|
Service | Service | Change the service (DB) to a standalone configuration. |
| Change | Change/skipReplicationError |
|
Service | Service | Resolve replication errors by skipping queries that caused replication errors on the slave DB. |
| Change | Change/upgradeDBEngine |
|
Service | Service | Upgrade the MySQL engine version of the service (DB). |
| Change | Change/managePublicDomain |
|
Service | Service | Request a public domain to allow external access to the DB server. |
| Change | Change/exportBackupToObjectStorage |
|
Service | Service | Export selected backup files to Object Storage. |
| Change | Change/exportDBServerLogsToObjectStorage |
|
Service | Service | Export selected log files to Object Storage. |
| Change | Change/manageDBServiceSwap |
|
Service | Service | Manage swap memory of the service (DB). |
| Change | Change/resetDBService |
|
Service | Service | Initialize the service (DB). |
| Change | Change/killDBServiceMultipleSession |
|
Service | Service | Forcefully terminate multiple sessions (IDs) of the service (DB). |
| Change | Change/changeMultizoneConfig |
|
- | Service | Change the multizone configuration of the service (DB). |
| Change | Change/managePasswordPlugin |
|
Service | Service | Configure password plugin options of the service (DB). |
| Change | Change/manageAuditPlugin |
|
Service | Service | Configure audit plugin options of the service (DB). |
| Change | Change/manageSystemConfig |
|
Service | Service | Configure system config options of the service (DB). |
| Change | Change/changeDeleteProtectionConfig |
|
Service | Service | Change return protection settings of the service (DB). |
| Change | Change/manageOperatingSystem |
|
Service | Service | Upgrade the operating system of the service (DB). |
| Change | Change/importBackupFromObjectStorage |
|
Service | Service | Import selected backup files from a bucket. |
| Change | Change/createconfigTemplate |
|
Config Template | Config Template | Create a config template. |
| Change | Change/manageconfigTemplate |
|
Config Template | Config Template | Modify a config template. |
| Change | Change/deleteconfigTemplate |
|
Config Template | Config Template | Delete a config template. |
| Change | Change/manageFailoverCondition |
|
Config Template | Service | Change failover conditions. |
| Change | Change/createManualBackup |
|
Service | Service | Create a Manual Backup of the service (DB). |
| Change | Change/deleteManualBackup |
|
Service | Service | Delete a manual backup of the service (DB). |
Caution
If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. Sub Account automatically includes these related permissions to prevent this issue. However, if you manually uncheck these auto-selected related actions, the system assumes this was intentional and won't override your selection.