- Print
- PDF
Cloud Functions permissions management
- Print
- PDF
Available in VPC
By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for Cloud Functions. Sub Account provides system managed policies and user created policies for setting management and administration permissions.
Sub Account is a service provided free of charge upon subscription request. For more information on Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal, as well as the Sub Account user guide.
System-managed policies
System-managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once system managed policies are granted to a sub account created in Sub Account, that sub account can use Cloud Functions. The following describes Cloud Functions managed policies:
Policy name | Policy description |
---|---|
NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
NCP_VPC_CLOUD_FUNCTIONS_MANAGER | Permission to use the full Cloud Functions feature sets in VPC |
NCP_VPC_CLOUD_FUNCTIONS_VIEWER | Permission to only use the View list and Search features in Cloud Functions in VPC |
User-defined policies
User-defined policies are policies that users may create. Once the user-defined policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following describes Cloud Functions user created policies:
Type | Action name | Related action | Resource type | Group by resource type | Action description |
---|---|---|---|---|---|
View | View/getPackageList | - | - | Package | View Package list |
View | View/getPackageDetail | View/getPackageList | Package | Package | View Package details |
View | View/getActionList | View/getPackageList View/getPackageDetail | - | Action | View Action list |
View | View/getActionDetail | View/getPackageList View/getPackageDetail View/getActionList View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail View/getAPIList View/getAPIDetail | Action | Action | View Action details |
View | View/getActionActivationList | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail | Action | Activation | View list of Action execution history |
View | View/getActionActivationDetail | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail View/getActionActivationList | Action | Activation | View Action execution history details |
View | View/getTriggerList | - | Trigger | Trigger | View Trigger list |
View | View/getTriggerDetail | View/getTriggerList View/getAPIList View/getAPIDetail View/getEventRuleList View/getEventRuleDetail View/getObjectStorageBucketList View/getObjectStorageBucketEventRuleList View/getSourceCommitRepositoryList View/getSourceCommitWebhookList | Trigger | Trigger | View Trigger details |
View | View/getTriggerActivationList | View/getTriggerList View/getTriggerDetail | Trigger | Activation | View list of Trigger execution history |
View | View/getTriggerActivationDetail | View/getTriggerList View/getTriggerDetail View/getTriggerActivationList | Trigger | Activation | View Trigger execution history details |
View | View/getProductList | - | - | ExternalLink | View list of API Gateway Products |
View | View/getProductDetail | View/getProductList | APIGateway:Product | ExternalLink | View API Gateway Product details |
View | View/getAPIList | View/getProductList View/getProductDetail | - | ExternalLink | View list of API Gateway APIs |
View | View/getAPIDetail | View/getProductList View/getProductDetail View/getAPIList | APIGateway:API | ExternalLink | View API Gateway API details |
View | View/getEventRuleList | - | - | Trigger | View list of Cloud Insight Event Rules |
View | View/getEventRuleDetail | View/getEventRuleList | CloudInsight:EventRule | Trigger | View Cloud Insight Event Rule details |
View | View/getObjectStorageBucketList | - | - | Trigger | View list of Object Storage Buckets |
View | View/getObjectStorageBucketDetail | View/getObjectStorageBucketList | ObjectStorage:Bucket | Trigger | View Object Storage Bucket details |
View | View/getObjectStorageBucketEventRuleList | View/getObjectStorageBucketList View/getObjectStorageBucketDetail | - | Trigger | View list of Object Storage Bucket Event Rules |
View | View/getObjectStorageBucketEventRuleDetail | View/getObjectStorageBucketList View/getObjectStorageBucketDetail View/getObjectStorageBucketEventRuleList | ObjectStorage:Bucket | Trigger | View Object Storage Bucket Event Rule details |
View | View/getSourceCommitRepositoryList | - | - | Trigger | View list of Source Commit Repositories |
View | View/getSourceCommitRepositoryDetail | View/getSourceCommitRepositoryList | SourceCommit:Repository | Trigger | View Source Commit Repository details |
View | View/getSourceCommitWebhookList | View/getSourceCommitRepositoryList View/getSourceCommitRepositoryDetail | - | Trigger | View Source Commit Repository Webhook list |
View | View/getSourceCommitWebhookDetail | View/getSourceCommitRepositoryList View/getSourceCommitRepositoryDetail View/getSourceCommitWebhookList | SourceCommit:Repository | Trigger | View Source Commit Repository Webhook details |
View | View/getVPCList | - | - | Action | View VPC list |
View | View/getVPCDetail | View/getVPCList | VPC:VPC | Action | View VPC details |
View | View/getSubnetList | - | - | Action | View Subnet list |
View | View/getSubnetDetail | View/getSubnetList | VPC:Subnet | Action | View Subnet details |
View | View/getDashboard | View/getActionActivationList | - | Activation | View Dashboard |
View | View/getMonitoringAction | View/getActionActivationList | Action | Activation | View Action monitoring information |
View | View/getMonitoringTrigger | View/getTriggerActivationList | Trigger | Activation | View Trigger monitoring information |
Change | Change/createAPI | View/getProductList View/getProductDetail View/getAPIList | APIGateway:API | ExternalLink | Create API Gateway API |
Change | Change/createAction | View/getPackageList View/getPackageDetail View/getActionList View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail Change/createNetworkInterface | - | Action | Create Action |
Change | Change/createActionExternalLink | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail Change/updateAPI | Action | Action | Create external connection URL to call Action |
Change | Change/createActionLinkTrigger | View/getTriggerList View/getTriggerDetail View/getActionList View/getActionDetail | Action | Action | Connect Trigger to Action |
Change | Change/createNetworkInterface | - | - | Action | Create Network Interface |
Change | Change/createObjectStorageBucketEventRule | - | - | Trigger | Create Object Storage Bucket Event Rule |
Change | Change/createSourceCommitWebhook | - | - | Trigger | Create Source Commit Repository Webhook |
Change | Change/createPackage | View/getPackageList | - | Package | Create Package |
Change | Change/createProduct | View/getProductList | - | ExternalLink | Create API Gateway Product |
Change | Change/createTrigger | View/getTriggerList View/getTriggerDetail View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail Change/updateAPI Change/createProduct Change/createAPI View/getEventRuleList View/getEventRuleDetail Change/updateEventRule View/getObjectStorageBucketList View/getObjectStorageBucketEventRuleList Change/createObjectStorageBucketEventRule View/getSourceCommitRepositoryList View/getSourceCommitRepositoryDetail View/getSourceCommitWebhookList View/getSourceCommitWebhookDetail Change/createSourceCommitWebhook | - | Trigger | Create Trigger |
Change | Change/createTriggerExternalLink | View/getTriggerList View/getTriggerDetail View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail Change/updateAPI | Trigger | Trigger | Create external connection URL to call Trigger |
Change | Change/createTriggerLinkAction | View/getTriggerList View/getTriggerDetail View/getActionList View/getActionDetail | Trigger | Trigger | Connect Action to Trigger |
Change | Change/deleteAction | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail Change/deleteNetworkInterface View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail | Action | Action | Delete Action |
Change | Change/deleteActionLinkTrigger | View/getTriggerList View/getTriggerDetail View/getActionList View/getActionDetail | Action | Action | Disconnect Trigger from Action |
Change | Change/deleteNetworkInterface | - | VPCServer:NetworkInterface | Action | Return Network Interface |
Change | Change/deletePackage | View/getPackageList View/getPackageDetail | Package | Package | Delete Package |
Change | Change/deleteTrigger | View/getTriggerList View/getTriggerDetail View/getEventRuleList View/getEventRuleDetail Change/updateEventRule View/getObjectStorageBucketList View/getObjectStorageBucketEventRuleList View/getSourceCommitRepositoryList View/getSourceCommitWebhookList | Trigger | Trigger | Delete Trigger |
Change | Change/deleteTriggerLinkAction | View/getTriggerList View/getTriggerDetail View/getActionList View/getActionDetail | Trigger | Trigger | Disconnect Action from Trigger |
Change | Change/invokeAction | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail | Action | Action | Execute Action |
Change | Change/invokeTrigger | View/getTriggerList View/getTriggerDetail Change/invokeAction | Trigger | Trigger | Execute Trigger |
Change | Change/updateAPI | View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail | APIGateway:API | ExternalLink | Edit API Gateway API |
Change | Change/updateAction | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail Change/createNetworkInterface Change/deleteNetworkInterface View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail | Action | Action | Edit Action |
Change | Change/updateEventRule | View/getEventRuleList View/getEventRuleDetail | CloudInsight:EventRule | Trigger | Edit Cloud Insight Event Rule |
Change | Change/updatePackage | View/getPackageList View/getPackageDetail | Package | Package | Edit Package |
Change | Change/updateTrigger | View/getTriggerList View/getTriggerDetail View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail Change/updateAPI Change/createProduct Change/createAPI View/getEventRuleList View/getEventRuleDetail Change/updateEventRule View/getObjectStorageBucketList View/getObjectStorageBucketEventRuleList Change/createObjectStorageBucketEventRule View/getSourceCommitRepositoryList View/getSourceCommitRepositoryDetail View/getSourceCommitWebhookList View/getSourceCommitWebhookDetail Change/createSourceCommitWebhook | Trigger | Trigger | Edit Trigger |
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, you will not be able to perform tasks properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and will not forcibly include them. Therefore, use caution when setting permissions.