Managing Cloud DB for PostgreSQL permissions
- Print
- PDF
Managing Cloud DB for PostgreSQL permissions
- Print
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
Available in VPC
By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for Cloud DB for PostgreSQL. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.
Note
Sub Account is a service provided free of charge upon subscription. For more information on Sub Account, see the Services > Management & Governance > Sub Account menus of NAVER Cloud Platform and the Sub Account user guide.
System-managed policies
System-managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once system-managed policies are granted to a sub account created in Sub Account, that sub account can use Cloud DB for PostgreSQL. The following is a brief description of the system-managed policies of Cloud DB for PostgreSQL.
| Policy Name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
| NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
| NCP_VPC_CLOUD_DB_FOR_POSTGRESQL_MANAGER | Permission to use all the features in VPC-based Cloud DB for PostgreSQL |
| NCP_VPC_CLOUD_DB_FOR_POSTGRESQL_VIEWER | Permission to use See list and View features in VPC-based Cloud DB for PostgreSQL |
User-created policies
User-created policies are policies that users may create. Once user-created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description of the user-defined policies of Cloud DB for PostgreSQL.
| Division | Action name | Related action(s) | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | View/getDBServiceList | - | - | Service | View service (DB) list |
| View | View/getDBServiceDetail | View/getDBServiceList | Service | Service | View service (DB) details |
| View | View/getVPCList | - | - | Service | View VPC list required for service (DB) |
| View | View/getVPCDetail | View/getVPCList | VPC:VPC | Service | Check accessible VPC for service (DB) |
| View | View/getSubnetList | - | - | Service | View subnet list required for service (DB) |
| View | View/getSubnetDetail | View/getSubnetList | VPC:Subnet | Service | Check accessible subnet for service (DB) |
| View | View/getDBDashboard | View/getDBServiceList View/getDBServiceDetail | Service | Service | View DB dashboard of service (DB) |
| View | View/getOSDashboard | View/getDBServiceList View/getDBServiceDetail | Service | Service | View OS dashboard of service (DB) |
| View | View/getDBLogs | View/getDBServiceList View/getDBServiceDetail | Service | Service | View DB log of service (DB) |
| View | View/getQueryTimeline | View/getDBServiceList View/getDBServiceDetail | Service | Service | View query timeline of service (DB) |
| View | View/getDBServerDetail | View/getDBServiceList View/getDBServiceDetail | Service | Service | View service (DB) server details |
| View | View/getDatabaseList | View/getDBServiceList View/getDBServiceDetail | Service | Service | View database list |
| View | View/getDBConfig | View/getDBServiceList View/getDBServiceDetail | Service | Service | View service (DB) config |
| View | View/getDBUser | View/getDBServiceList View/getDBServiceDetail | Service | Service | View service (DB) users |
| View | View/getPGStatActivity | View/getDBServiceList View/getDBServiceDetail View/getDBServerDetail | Service | Service | View service (DB) session |
| View | View/getSql | View/getDBServiceList View/getDBServiceDetail View/getDBServerDetail | Service | Service | View SQL in progress in service (DB) session |
| View | View/getPGSetting | View/getDBServiceList View/getDBServiceDetail View/getDBServerDetail | Service | Service | View DB server settings |
| View | View/getPGStat | View/getDBServiceList View/getDBServiceDetail View/getDBServerDetail | Service | Service | View DB server stats |
| View | View/getDBServerLogs | View/getDBServiceList View/getDBServiceDetail | Service | Service | View log file for the selected DB server |
| View | View/getDBBackupList | View/getDBServiceList | - | Service | View service (DB) backup list |
| View | View/getDBBackupDetail | View/getDBBackupList View/getDBServiceList View/getDBServiceDetail | Service | Service | View service (DB) backup information |
| View | View/getBucketList | - | - | Service | View bucket list to export selected file |
| View | View/getBucketDetail | View/getBucketList | ObjectStorage:Bucket | Service | Select bucket to export selected file |
| View | View/getServiceServerEventList | View/getDBServiceList | - | Service | View server (DB) event list |
| View | View/getServiceServerEventDetail | View/getDBServiceList View/getDBServiceDetail View/getServiceServerEventList | Service | Service | View server (DB) event details |
| View | View/getExtensionList | View/getDBServiceList View/getDBServiceDetail View/getDatabaseList | Service | Service | View extension information |
| Change | Change/createDBService | View/getVPCList View/getSubnetList View/getDBServiceList View/getVPCDetail View/getSubnetDetail | - | Service | Create service (DB) |
| Change | Change/restartDBService | View/getDBServiceList View/getDBServiceDetail | Service | Service | Restart service (DB) |
| Change | Change/deleteDBService | View/getDBServiceList View/getDBServiceDetail | Service | Service | Delete service (DB) (primary, secondary, standalone) |
| Change | Change/addReadReplica | View/getDBServiceList View/getDBServiceDetail View/getSubnetList View/getSubnetDetail | Service | Service | Add read replica of service (DB) |
| Change | Change/setHA | View/getDBServiceList View/getDBServiceDetail View/getSubnetList View/getSubnetDetail | Service | Service | Change service (DB) to high availability configuration |
| Change | Change/changeDBSpec | View/getDBServiceList View/getDBServiceDetail | Service | Service | Change service (DB) specifications |
| Change | Change/manageDBConfig | View/getDBServiceList View/getDBServiceDetail View/getDBConfig | Service | Service | Manage service (DB) config |
| Change | Change/manageDBUser | View/getDBServiceList View/getDBServiceDetail View/getDBUser | Service | Service | Manage service (DB) users |
| Change | Change/upgradeDBEngine | View/getDBServiceList View/getDBServiceDetail | Service | Service | Upgrade the PostgreSQL engine version of the service (DB). |
| Change | Change/managePublicDomain | View/getDBServiceList View/getDBServiceDetail | Service | Service | Request public domain for external access to DB server |
| Change | Change/changeDBServerLogConfig | View/getDBServiceList View/getDBServiceDetail | Service | Service | Change DB server log settings for service (DB) |
| Change | Change/changeMasterDB | View/getDBServiceList View/getDBServiceDetail | Service | Service | Execute service (DB) primary-secondary failover |
| Change | Change/manageDatabase | View/getDBServiceList View/getDBServiceDetail View/getDatabaseList View/getDBUser | Service | Service | Manage database |
| Change | Change/manageBackup | View/getDBServiceList View/getDBServiceDetail | Service | Service | Manage service (DB) backup settings |
| Change | Change/terminateBackend | View/getDBServiceList View/getDBServiceDetail View/getDBServerDetail View/getPGStatActivity | Service | Service | End service (DB) session |
| Change | Change/cancelBackend | View/getDBServiceList View/getDBServiceDetail View/getDBServerDetail View/getPGStatActivity | Service | Service | Stop SQL in progress in service (DB) session |
| Change | Change/exportDBServerLogsToObjectStorage | View/getDBServiceList View/getDBServiceDetail View/getBucketList View/getBucketDetail View/getDBServerLogs | Service | Service | Export the selected log file to Object Storage |
| Change | Change/deleteDBServerLogs | View/getDBServiceList View/getDBServiceDetail View/getDBServerLogs | Service | Service | Delete log file for the selected DB server |
| Change | Change/manageDBServiceName | View/getDBServiceList View/getDBServiceDetail | Service | Service | Change DB service name |
| Change | Change/createDBServiceOnRecoveryTime | View/getDBServiceList View/getDBServiceDetail View/getDBBackupList View/getDBBackupDetail View/getSubnetList View/getSubnetDetail | Service | Service | Create a server that has restored the service (DB) to a specific point in time |
| Change | Change/exportBackupToObjectStorage | View/getDBServiceList View/getDBServiceDetail View/getBucketList View/getBucketDetail View/getDBBackupDetail View/getDBBackupList | Service | Service | Export the selected backup file to object storage |
| Change | Change/deleteDBServer | View/getDBServiceList View/getDBServiceDetail | Service | Service | Delete read replica server of service (DB) |
| Change | Change/setStandalone | View/getDBServiceList View/getDBServiceDetail View/getSubnetList View/getSubnetDetail | Service | Service | Change service (DB) to the standalone configuration |
| Change | Change/manageExtension | View/getDBServiceList View/getDBServiceDetail View/getDatabaseList View/getExtensionList | Service | Service | Install and delete extensions |
Caution
Even when you are granted permission for a specific action, you cannot perform jobs properly if you are not also granted permissions for the related actions that are required. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and does not forcibly include them. Thus, caution is advised when setting permissions.
Was this article helpful?