Cloud Functions permissions management
    • PDF

    Cloud Functions permissions management

    • PDF

    Article summary

    Available in VPC

    By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for Cloud Functions. Sub Account provides system managed policies and user created policies for setting management and administration permissions.

    Note

    Sub Account is a service provided free of charge upon subscription request. For more information on Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal, as well as the Sub Account user guide.

    System-managed policies

    System-managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once system managed policies are granted to a sub account created in Sub Account, that sub account can use Cloud Functions. The following describes Cloud Functions managed policies:

    Policy namePolicy description
    NCP_ADMINISTRATORPermission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts
    NCP_INFRA_MANAGERPermission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal
    NCP_VPC_CLOUD_FUNCTIONS_MANAGERPermission to use the full Cloud Functions feature sets in VPC
    NCP_VPC_CLOUD_FUNCTIONS_VIEWERPermission to only use the View list and Search features in Cloud Functions in VPC

    User-defined policies

    User-defined policies are policies that users may create. Once the user-defined policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following describes Cloud Functions user created policies:

    TypeAction nameRelated actionResource typeGroup by resource typeAction description
    ViewView/getPackageList--PackageView Package list
    ViewView/getPackageDetailView/getPackageListPackagePackageView Package details
    ViewView/getActionListView/getPackageList
    View/getPackageDetail
    -ActionView Action list
    ViewView/getActionDetailView/getPackageList
    View/getPackageDetail
    View/getActionList
    View/getVPCList
    View/getVPCDetail
    View/getSubnetList
    View/getSubnetDetail
    View/getAPIList
    View/getAPIDetail
    ActionActionView Action details
    ViewView/getActionActivationListView/getPackageList
    View/getPackageDetail
    View/getActionList
    View/getActionDetail
    ActionActivationView list of Action execution history
    ViewView/getActionActivationDetailView/getPackageList
    View/getPackageDetail
    View/getActionList
    View/getActionDetail
    View/getActionActivationList
    ActionActivationView Action execution history details
    ViewView/getTriggerList-TriggerTriggerView Trigger list
    ViewView/getTriggerDetailView/getTriggerList
    View/getAPIList
    View/getAPIDetail
    View/getEventRuleList
    View/getEventRuleDetail
    View/getObjectStorageBucketList
    View/getObjectStorageBucketEventRuleList
    View/getSourceCommitRepositoryList
    View/getSourceCommitWebhookList
    TriggerTriggerView Trigger details
    ViewView/getTriggerActivationListView/getTriggerList
    View/getTriggerDetail
    TriggerActivationView list of Trigger execution history
    ViewView/getTriggerActivationDetailView/getTriggerList
    View/getTriggerDetail
    View/getTriggerActivationList
    TriggerActivationView Trigger execution history details
    ViewView/getProductList--ExternalLinkView list of API Gateway Products
    ViewView/getProductDetailView/getProductListAPIGateway:ProductExternalLinkView API Gateway Product details
    ViewView/getAPIListView/getProductList
    View/getProductDetail
    -ExternalLinkView list of API Gateway APIs
    ViewView/getAPIDetailView/getProductList
    View/getProductDetail
    View/getAPIList
    APIGateway:APIExternalLinkView API Gateway API details
    ViewView/getEventRuleList--TriggerView list of Cloud Insight Event Rules
    ViewView/getEventRuleDetailView/getEventRuleListCloudInsight:EventRuleTriggerView Cloud Insight Event Rule details
    ViewView/getObjectStorageBucketList--TriggerView list of Object Storage Buckets
    ViewView/getObjectStorageBucketDetailView/getObjectStorageBucketListObjectStorage:BucketTriggerView Object Storage Bucket details
    ViewView/getObjectStorageBucketEventRuleListView/getObjectStorageBucketList
    View/getObjectStorageBucketDetail
    -TriggerView list of Object Storage Bucket Event Rules
    ViewView/getObjectStorageBucketEventRuleDetailView/getObjectStorageBucketList
    View/getObjectStorageBucketDetail
    View/getObjectStorageBucketEventRuleList
    ObjectStorage:BucketTriggerView Object Storage Bucket Event Rule details
    ViewView/getSourceCommitRepositoryList--TriggerView list of Source Commit Repositories
    ViewView/getSourceCommitRepositoryDetailView/getSourceCommitRepositoryListSourceCommit:RepositoryTriggerView Source Commit Repository details
    ViewView/getSourceCommitWebhookListView/getSourceCommitRepositoryList
    View/getSourceCommitRepositoryDetail
    -TriggerView Source Commit Repository Webhook list
    ViewView/getSourceCommitWebhookDetailView/getSourceCommitRepositoryList
    View/getSourceCommitRepositoryDetail
    View/getSourceCommitWebhookList
    SourceCommit:RepositoryTriggerView Source Commit Repository Webhook details
    ViewView/getVPCList--ActionView VPC list
    ViewView/getVPCDetailView/getVPCListVPC:VPCActionView VPC details
    ViewView/getSubnetList--ActionView Subnet list
    ViewView/getSubnetDetailView/getSubnetListVPC:SubnetActionView Subnet details
    ViewView/getDashboardView/getActionActivationList-ActivationView Dashboard
    ViewView/getMonitoringActionView/getActionActivationListActionActivationView Action monitoring information
    ViewView/getMonitoringTriggerView/getTriggerActivationListTriggerActivationView Trigger monitoring information
    ChangeChange/createAPIView/getProductList
    View/getProductDetail
    View/getAPIList
    APIGateway:APIExternalLinkCreate API Gateway API
    ChangeChange/createActionView/getPackageList
    View/getPackageDetail
    View/getActionList
    View/getVPCList
    View/getVPCDetail
    View/getSubnetList
    View/getSubnetDetail
    Change/createNetworkInterface
    -ActionCreate Action
    ChangeChange/createActionExternalLinkView/getPackageList
    View/getPackageDetail
    View/getActionList
    View/getActionDetail
    View/getProductList
    View/getProductDetail
    View/getAPIList
    View/getAPIDetail
    Change/updateAPI
    ActionActionCreate external connection URL to call Action
    ChangeChange/createActionLinkTriggerView/getTriggerList
    View/getTriggerDetail
    View/getActionList
    View/getActionDetail
    ActionActionConnect Trigger to Action
    ChangeChange/createNetworkInterface--ActionCreate Network Interface
    ChangeChange/createObjectStorageBucketEventRule--TriggerCreate Object Storage Bucket Event Rule
    ChangeChange/createSourceCommitWebhook--TriggerCreate Source Commit Repository Webhook
    ChangeChange/createPackageView/getPackageList-PackageCreate Package
    ChangeChange/createProductView/getProductList-ExternalLinkCreate API Gateway Product
    ChangeChange/createTriggerView/getTriggerList
    View/getTriggerDetail
    View/getProductList
    View/getProductDetail
    View/getAPIList
    View/getAPIDetail
    Change/updateAPI
    Change/createProduct
    Change/createAPI
    View/getEventRuleList
    View/getEventRuleDetail
    Change/updateEventRule
    View/getObjectStorageBucketList
    View/getObjectStorageBucketEventRuleList
    Change/createObjectStorageBucketEventRule
    View/getSourceCommitRepositoryList
    View/getSourceCommitRepositoryDetail
    View/getSourceCommitWebhookList
    View/getSourceCommitWebhookDetail
    Change/createSourceCommitWebhook
    -TriggerCreate Trigger
    ChangeChange/createTriggerExternalLinkView/getTriggerList
    View/getTriggerDetail
    View/getProductList
    View/getProductDetail
    View/getAPIList
    View/getAPIDetail
    Change/updateAPI
    TriggerTriggerCreate external connection URL to call Trigger
    ChangeChange/createTriggerLinkActionView/getTriggerList
    View/getTriggerDetail
    View/getActionList
    View/getActionDetail
    TriggerTriggerConnect Action to Trigger
    ChangeChange/deleteActionView/getPackageList
    View/getPackageDetail
    View/getActionList
    View/getActionDetail
    Change/deleteNetworkInterface
    View/getVPCList
    View/getVPCDetail
    View/getSubnetList
    View/getSubnetDetail
    ActionActionDelete Action
    ChangeChange/deleteActionLinkTriggerView/getTriggerList
    View/getTriggerDetail
    View/getActionList
    View/getActionDetail
    ActionActionDisconnect Trigger from Action
    ChangeChange/deleteNetworkInterface-VPCServer:NetworkInterfaceActionReturn Network Interface
    ChangeChange/deletePackageView/getPackageList
    View/getPackageDetail
    PackagePackageDelete Package
    ChangeChange/deleteTriggerView/getTriggerList
    View/getTriggerDetail
    View/getEventRuleList
    View/getEventRuleDetail
    Change/updateEventRule
    View/getObjectStorageBucketList
    View/getObjectStorageBucketEventRuleList
    View/getSourceCommitRepositoryList
    View/getSourceCommitWebhookList
    TriggerTriggerDelete Trigger
    ChangeChange/deleteTriggerLinkActionView/getTriggerList
    View/getTriggerDetail
    View/getActionList
    View/getActionDetail
    TriggerTriggerDisconnect Action from Trigger
    ChangeChange/invokeActionView/getPackageList
    View/getPackageDetail
    View/getActionList
    View/getActionDetail
    ActionActionExecute Action
    ChangeChange/invokeTriggerView/getTriggerList
    View/getTriggerDetail
    Change/invokeAction
    TriggerTriggerExecute Trigger
    ChangeChange/updateAPIView/getProductList
    View/getProductDetail
    View/getAPIList
    View/getAPIDetail
    APIGateway:APIExternalLinkEdit API Gateway API
    ChangeChange/updateActionView/getPackageList
    View/getPackageDetail
    View/getActionList
    View/getActionDetail
    Change/createNetworkInterface
    Change/deleteNetworkInterface
    View/getVPCList
    View/getVPCDetail
    View/getSubnetList
    View/getSubnetDetail
    ActionActionEdit Action
    ChangeChange/updateEventRuleView/getEventRuleList
    View/getEventRuleDetail
    CloudInsight:EventRuleTriggerEdit Cloud Insight Event Rule
    ChangeChange/updatePackageView/getPackageList
    View/getPackageDetail
    PackagePackageEdit Package
    ChangeChange/updateTriggerView/getTriggerList
    View/getTriggerDetail
    View/getProductList
    View/getProductDetail
    View/getAPIList
    View/getAPIDetail
    Change/updateAPI
    Change/createProduct
    Change/createAPI
    View/getEventRuleList
    View/getEventRuleDetail
    Change/updateEventRule
    View/getObjectStorageBucketList
    View/getObjectStorageBucketEventRuleList
    Change/createObjectStorageBucketEventRule
    View/getSourceCommitRepositoryList
    View/getSourceCommitRepositoryDetail
    View/getSourceCommitWebhookList
    View/getSourceCommitWebhookDetail
    Change/createSourceCommitWebhook
    TriggerTriggerEdit Trigger
    Caution

    Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, you will not be able to perform tasks properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and will not forcibly include them. Therefore, use caution when setting permissions.


    Was this article helpful?

    Changing your password will log you out immediately. Use the new password to log back in.
    First name must have atleast 2 characters. Numbers and special characters are not allowed.
    Last name must have atleast 1 characters. Numbers and special characters are not allowed.
    Enter a valid email
    Enter a valid password
    Your profile has been successfully updated.