Managing Cloud Functions permissions
- Print
- PDF
Managing Cloud Functions permissions
- Print
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
Available in VPC
By using Sub Account, NAVER Cloud Platform's account management service, you can set various access rights of Cloud Functions. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.
Note
Sub Account is a service provided free of charge upon subscription request. For more information on Sub Account, see the Service > Management & Governance > Sub Account menu and the Sub Account guide menu of the NAVER Cloud Platform portal.
Managed policies
System Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once managed policies are assigned to a sub account created in Sub Account, and that sub account can use Cloud Functions. The following is a brief description of managed policies of Cloud Functions.
| Policy Name | Policy Description |
|---|---|
| NCP_ADMINISTRATOR | The right to access the portal and console in the NAVER Cloud Platform in the same manner as the main account |
| NCP_INFRA_MANAGER | The right to use all services in the NAVER Cloud Platform and access My Page > Notification management in the portal |
| NCP_VPC_CLOUD_FUNCTIONS_MANAGER | The right to use all functions of VPC-based Cloud Functions |
| NCP_VPC_CLOUD_FUNCTIONS_VIEWER | The right to use only the list view function of VPC-based Cloud Functions |
User-defined policies
User-defined policies are policies that users can create themselves. Once User Created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description of user-defined policies of Cloud Functions.
| Classification | Action Name | Related action(s) | Resource type | Group by resource type | Action Description |
|---|---|---|---|---|---|
| View | View/getPackageList | - | - | Package | View package list |
| View | View/getPackageDetail | View/getPackageList | Package | Package | View detailed information on packages |
| View | View/getActionList | View/getPackageList View/getPackageDetail | - | Action | View action list |
| View | View/getActionDetail | View/getPackageList View/getPackageDetail View/getActionList View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail View/getAPIList View/getAPIDetail | Action | Action | View detailed information on actions |
| View | View/getActionActivationList | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail | Action | Activation | Gets an action's execution history list. |
| View | View/getActionActivationDetail | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail View/getActionActivationList | Action | Activation | Gets an action's execution history details. |
| View | View/getTriggerList | - | Trigger | Trigger | View trigger list |
| View | View/getTriggerDetail | View/getTriggerList View/getAPIList View/getAPIDetail View/getEventRuleList View/getEventRuleDetail View/getRuleList View/getRuleDetail View/getObjectStorageBucketList View/getObjectStorageBucketEventRuleList View/getSourceCommitRepositoryList View/getSourceCommitWebhookList | Trigger | Trigger | View detailed information on triggers |
| View | View/getTriggerActivationList | View/getTriggerList View/getTriggerDetail | Trigger | Activation | Gets a trigger's execution history list. |
| View | View/getTriggerActivationDetail | View/getTriggerList View/getTriggerDetail View/getTriggerActivationList | Trigger | Activation | Gets a trigger's execution history details. |
| View | View/getProductList | - | - | ExternalLink | View the list of the products of API Gateway |
| View | View/getProductDetail | View/getProductList | APIGateway:Product | ExternalLink | View detailed information on the products of API Gateway |
| View | View/getAPIList | View/getProductList View/getProductDetail | - | ExternalLink | View the list of APIs of API Gateway |
| View | View/getAPIDetail | View/getProductList View/getProductDetail View/getAPIList | APIGateway:API | ExternalLink | View detailed information on the APIs of API Gateway |
| View | View/getEventRuleList | - | - | Trigger | View the list of event rules for Cloud Insight |
| View | View/getEventRuleDetail | View/getEventRuleList | CloudInsight:EventRule | Trigger | View detailed information on the event rules of Cloud Insight |
| View | View/getRuleList | - | - | Trigger | View the list of rules of Cloud IoT Core |
| View | View/getRuleDetail | View/getRuleList | CloudIoTCore:Rule | Trigger | View detailed information on the rules of Cloud IoT Core |
| View | View/getObjectStorageBucketList | - | - | Trigger | View the list of buckets of Object Storage |
| View | View/getObjectStorageBucketDetail | View/getObjectStorageBucketList | ObjectStorage:Bucket | Trigger | View detailed information on the buckets of Object Storage |
| View | View/getObjectStorageBucketEventRuleList | View/getObjectStorageBucketList View/getObjectStorageBucketDetail | - | Trigger | View the list of bucket event rules of Object Storage |
| View | View/getObjectStorageBucketEventRuleDetail | View/getObjectStorageBucketList View/getObjectStorageBucketDetail View/getObjectStorageBucketEventRuleList | ObjectStorage:Bucket | Trigger | View detailed information on the bucket event rules of Object Storage |
| View | View/getSourceCommitRepositoryList | - | - | Trigger | View the list of repositories of Source Commit |
| View | View/getSourceCommitRepositoryDetail | View/getSourceCommitRepositoryList | SourceCommit:Repository | Trigger | View detailed information on the repositories of Source Commit |
| View | View/getSourceCommitWebhookList | View/getSourceCommitRepositoryList View/getSourceCommitRepositoryDetail | - | Trigger | View the list of repository webhooks of Source Commit |
| View | View/getSourceCommitWebhookDetail | View/getSourceCommitRepositoryList View/getSourceCommitRepositoryDetail View/getSourceCommitWebhookList | SourceCommit:Repository | Trigger | View detailed information on the repository webhooks of Source Commit |
| View | View/getVPCList | - | - | Action | View VPC list |
| View | View/getVPCDetail | View/getVPCList | VPC:VPC | Action | View VPC details |
| View | View/getSubnetList | - | - | Action | View subnet list |
| View | View/getSubnetDetail | View/getSubnetList | VPC:Subnet | Action | Gets subnet details. |
| View | View/getDashboard | View/getActionActivationList | - | Activation | Gets Dashboard. |
| View | View/getMonitoringAction | View/getActionActivationList | Action | Activation | Gets action monitoring information. |
| View | View/getMonitoringTrigger | View/getTriggerActivationList | Trigger | Activation | Gets trigger monitoring information. |
| Change | Change/createAPI | View/getProductList View/getProductDetail View/getAPIList | APIGateway:API | ExternalLink | Create the API of API Gateway |
| Change | Change/createAction | View/getPackageList View/getPackageDetail View/getActionList View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail Change/createNetworkInterface | - | Action | Create action |
| Change | Change/createActionExternalLink | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail Change/updateAPI | Action | Action | Creates an external link URL that can be used to call an action. |
| Change | Change/createActionLinkTrigger | View/getTriggerList View/getTriggerDetail View/getActionList View/getActionDetail | Action | Action | Connect a trigger to an action. |
| Change | Change/createNetworkInterface | - | - | Action | Create network interface |
| Change | Change/createObjectStorageBucketEventRule | - | - | Trigger | Create the bucket event rule of Object Storage |
| Change | Change/createSourceCommitWebhook | - | - | Trigger | Create the repository webhook of Source Commit |
| Change | Change/createPackage | View/getPackageList | - | Package | Create package |
| Change | Change/createProduct | View/getProductList | - | ExternalLink | Create the products of API Gateway |
| Change | Change/createRule | View/getRuleList | - | Trigger | Create the rules of Cloud IoT Core |
| Change | Change/createTrigger | View/getTriggerList View/getTriggerDetail View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail Change/updateAPI Change/createProduct Change/createAPI View/getEventRuleList View/getEventRuleDetail Change/updateEventRule View/getRuleList View/getRuleDetail Change/updateRule View/getObjectStorageBucketList View/getObjectStorageBucketEventRuleList Change/createObjectStorageBucketEventRule View/getSourceCommitRepositoryList View/getSourceCommitRepositoryDetail View/getSourceCommitWebhookList View/getSourceCommitWebhookDetail Change/createSourceCommitWebhook | - | Trigger | Create trigger |
| Change | Change/createTriggerExternalLink | View/getTriggerList View/getTriggerDetail View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail Change/updateAPI | Trigger | Trigger | Creates an external link URL that can be used to call a trigger. |
| Change | Change/createTriggerLinkAction | View/getTriggerList View/getTriggerDetail View/getActionList View/getActionDetail | Trigger | Trigger | Connects an action to a trigger. |
| Change | Change/deleteAction | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail Change/deleteNetworkInterface View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail | Action | Action | Deletes an action. |
| Change | Change/deleteActionLinkTrigger | View/getTriggerList View/getTriggerDetail View/getActionList View/getActionDetail | Action | Action | Disconnect a trigger linked to an action. |
| Change | Change/deleteNetworkInterface | - | VPCServer:NetworkInterface | Action | Terminate network Interface |
| Change | Change/deletePackage | View/getPackageList View/getPackageDetail | Package | Package | Delete package |
| Change | Change/deleteTrigger | View/getTriggerList View/getTriggerDetail View/getEventRuleList View/getEventRuleDetail Change/updateEventRule View/getRuleList View/getRuleDetail Change/updateRule View/getObjectStorageBucketList View/getObjectStorageBucketEventRuleList View/getSourceCommitRepositoryList View/getSourceCommitWebhookList | Trigger | Trigger | Deletes a trigger. |
| Change | Change/deleteTriggerLinkAction | View/getTriggerList View/getTriggerDetail View/getActionList View/getActionDetail | Trigger | Trigger | Disconnect an action linked to a trigger. |
| Change | Change/invokeAction | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail | Action | Action | Runs an action. |
| Change | Change/invokeTrigger | View/getTriggerList View/getTriggerDetail Change/invokeAction | Trigger | Trigger | Runs a trigger. |
| Change | Change/updateAPI | View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail | APIGateway:API | ExternalLink | Modify the API of API Gateway |
| Change | Change/updateAction | View/getPackageList View/getPackageDetail View/getActionList View/getActionDetail Change/createNetworkInterface Change/deleteNetworkInterface View/getVPCList View/getVPCDetail View/getSubnetList View/getSubnetDetail | Action | Action | Modify an action. |
| Change | Change/updateEventRule | View/getEventRuleList View/getEventRuleDetail | CloudInsight:EventRule | Trigger | Modify the event rule of Cloud Insight |
| Change | Change/updatePackage | View/getPackageList View/getPackageDetail | Package | Package | Modify package |
| Change | Change/updateRule | View/getRuleList View/getRuleDetail | CloudIoTCore:Rule | Trigger | Modify the rule of Cloud IoT Core |
| Change | Change/updateTrigger | View/getTriggerList View/getTriggerDetail View/getProductList View/getProductDetail View/getAPIList View/getAPIDetail Change/updateAPI Change/createProduct Change/createAPI View/getEventRuleList View/getEventRuleDetail Change/updateEventRule View/getRuleList View/getRuleDetail Change/updateRule View/getObjectStorageBucketList View/getObjectStorageBucketEventRuleList Change/createObjectStorageBucketEventRule View/getSourceCommitRepositoryList View/getSourceCommitRepositoryDetail View/getSourceCommitWebhookList View/getSourceCommitWebhookDetail Change/createSourceCommitWebhook | Trigger | Trigger | Modifies a trigger. |
Caution
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So be careful when setting rights.
Was this article helpful?