Available in Classic and VPC
You can set different access permissions for Cloud Insight using NAVER Cloud Platform's Sub Account service. Sub Account offers both system-managed (System Managed) and user-defined (User Created) policies to help you configure management and operation permissions.
Sub Account is a free service with no additional charges. For more information about Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal and the Sub Account user guide.
System-managed policies
System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. When you assign one of these policies to a sub account, that account gets access to Cloud Insight. Here are the available system-managed policies for Cloud Insight:
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Full access to all services, same as the main account |
| NCP_INFRA_MANAGER | Access to all services, except some sections in the console My Account > Manage billing information and expense > Manage billing and payment |
| NCP_FINANCE_MANAGER | Access only to Cost Explorer and My Account > Manage billing information and expense > Manage billing and payment in the console |
| NCP_CLOUD_INSIGHT_MANAGER | Full access to all Cloud Insight features |
| NCP_CLOUD_INSIGHT_VIEWER | View-only access to all Cloud Insight features |
User-defined policies
User-defined policies let you create custom permissions. When you assign a user-defined policy to a sub account, that account can only perform the specific actions you've allowed. Here are the available user-defined policies for Cloud Insight:
| Type | Action | Related action | Resource type | Group by resource type | Action description |
| ---- | ---- | ---- | ---- | ---- | ---- |
| View | View/downloadWidgetData | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Download widget data. |
| View | View/getCustomResourceDetail | View/getCustomResourceList | CustomResource | Custom Resource | View user-defined resource details. |
| View | View/getCustomResourceList | - | - | Custom Resource | View user-defined resource list. |
| View | View/getCustomSchemaDetail | View/getCustomSchemaList | - | Custom Schema | View Custom Schema details. |
| View | View/getCustomSchemaList | - | - | Custom Schema | View Custom Schema list. |
| View | View/getDashboardDetail | View/getDashboardList | Dashboard | Dashboard | View Dashboard details. |
| View | View/getDashboardList | - | - | Dashboard | View Dashboard list. |
| View | View/getEventDetail | View/getEventList | Event | Event | View details of the Events that occurred. |
| View | View/getEventList | - | - | Event | View the list of events that occurred. |
| View | View/getEventRuleDetail | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList | EventRule | Event Rule | View event rule details. |
| View | View/getEventRuleGroupByMetricGroup | View/getMetricGroupList | - | Event Rule | View all event rules related to the monitored item group. |
| View | View/getEventRuleGroupByMonitorGroup | View/getMetricGroupList
View/getMonitorGroupList | - | Event Rule | View all event rules related to the monitored target group. |
| View | View/getEventRuleList | - | - | Event Rule | View event rule list. |
| View | View/getEventRuleNotification | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
View/getEventRuleDetail | - | Event Rule | View the notification target group. |
| View | View/getExtendedMetricStatus | View/getProductSchema | - | Products | View detailed monitoring settings status. |
| View | View/getFilePluginDetail | View/getFilePluginList | - | Plugin | View the set File Plugin details. |
| View | View/getFilePluginList | - | - | Plugin | View the set File Plugin list. |
| View | View/getIntegrationChannelDetail | View/getIntegrationChannelList | - | Integration | View integration channel details. |
| View | View/getIntegrationChannelList | - | - | Integration | View integration channel list. |
| View | View/getMetric | - | - | Products | View metrics. |
| View | View/getMetricExportDetail | - | - | Products | View metric export details. |
| View | View/getMetricExportList | - | - | Products | View metric export list. |
| View | View/getMetricGroupDetail | View/getMetricGroupList | - | Event Rule | View the monitored item group details. |
| View | View/getMetricGroupList | - | - | Event Rule | View the monitored item group. |
| View | View/getMonitorGroupDetail | View/getMonitorGroupList | - | Event Rule | View all resources in the monitored target group. |
| View | View/getMonitorGroupList | - | - | Event Rule | View the monitored target group. |
| View | View/getPlannedMaintenance | View/getPlannedMaintenanceList | PM | Planned Maintenance | View maintenance plan details. |
| View | View/getPlannedMaintenanceList | - | - | Planned Maintenance | View maintenance plan list. |
| View | View/getPluginDetail | View/getPluginList
View/getPluginProducts
View/getPluginRegions | - | Plugin | View plugin settings details. |
| View | View/getPluginList | View/getPluginProducts
View/getPluginRegions | - | Plugin | View Plugin settings list. |
| View | View/getPluginProducts | View/getPluginList
View/getPluginRegions | - | Plugin | View a list of products that support plugins. |
| View | View/getPluginRegions | View/getPluginList
View/getPluginProducts | - | Plugin | View a list of Regions of plugin-configurable instances. |
| View | View/getPluginTargetGroup | | - | Plugin | View the target group list of products for which plugins can be set. |
| View | View/getPortPluginDetail | View/getPortPluginList | - | Plugin | View the set Port Plugin details. |
| View | View/getPortPluginList | - | - | Plugin | View the set Port Plugin list. |
| View | View/getProcessPluginDetail | View/getProcessPluginList | - | Plugin | View the set process plugin details. |
| View | View/getProcessPluginList | - | - | Plugin | View the set process plugin list. |
| View | View/getProductSchema | - | - | Products | View the user-defined schema. |
| View | View/getSystemSchemaKeyList | View/getProductSchema | - | Products | View the product list collected on Cloud Insight. |
| View | View/getWidgetDetail | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | View widget details. |
| Change | Change/copyDashboard | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Copy dashboard. |
| Change | Change/copyEventRule | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
Change/createMetricGroup
Change/createMonitorGroup
Change/createEventRule
View/getEventRuleDetail | EventRule | Event Rule | Copy event rule to create new event rule. |
| Change | Change/copyWidget | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Copy existing widget and add it to dashboard. |
| Change | Change/createCustomResource | View/getCustomResourceList
View/getCustomResourceDetail | - | Custom Resource | Create user-defined resources. |
| Change | Change/createCustomSchema | View/getCustomSchemaDetail
View/getCustomSchemaList | - | Custom Schema | Create Custom Schema. |
| Change | Change/createDashboard | View/getDashboardDetail | - | Dashboard | Create dashboard. |
| Change | Change/createEventRule | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
Change/createMetricGroup
Change/createMonitorGroup
View/getEventRuleDetail | - | Event Rule | Create new event rule. |
| Change | Change/createIntegrationChannel | View/getIntegrationChannelDetail
View/getIntegrationChannelList | - | Integration | Create new integration channel. |
| Change | Change/createMetricExport | View/getMetricExportDetail
View/getMetricExportList | - | Products | Create new metric export. |
| Change | Change/createMetricGroup | View/getMetricGroupList | - | Event Rule | Create monitored item group. |
| Change | Change/createMonitorGroup | View/getMonitorGroupList | - | Event Rule | Create new monitored target group. |
| Change | Change/createPlannedMaintenance | View/getPlannedMaintenance
View/getPlannedMaintenanceList | - | Planned Maintenance | Create maintenance plan. |
| Change | Change/createProductSchema | View/getProductSchema | - | Products | Create user-defined schema. |
| Change | Change/createWidget | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Create new widget and add to dashboard. |
| Change | Change/deleteCustomResource | View/getCustomResourceList
View/getCustomResourceDetail | CustomResource | Custom Resource | Delete user-defined resources. |
| Change | Change/deleteCustomSchema | View/getCustomSchemaDetail
View/getCustomSchemaList | - | Custom Schema | Delete Custom Schema. |
| Change | Change/deleteDashboard | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Delete dashboard. |
| Change | Change/deleteEventRule | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
View/getEventRuleDetail | EventRule | Event Rule | Delete event rule. |
| Change | Change/deleteEventRuleForce | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
View/getEventRuleDetail | - | Event Rule | Delete all event rules related to the monitored target group. |
| Change | Change/deleteIntegrationChannel | View/getIntegrationChannelDetail
View/getIntegrationChannelList | - | Integration | Delete integration channel. |
| Change | Change/deleteMetricExport | View/getMetricExportDetail
View/getMetricExportList | - | Products | Delete metric exporter. |
| Change | Change/deleteMetricGroup | View/getMetricGroupList
View/getMetricGroupDetail | - | Event Rule | Delete monitored item group. |
| Change | Change/deleteMetricGroupForce | View/getMetricGroupList
View/getMetricGroupDetail | - | Event Rule | Delete all event rules related to the monitored item group. |
| Change | Change/deleteMonitorGroup | View/getEventRuleGroupByMonitorGroup
View/getMonitorGroupList | - | Event Rule | Delete monitored target group. |
| Change | Change/deletePlannedMaintenance | View/getPlannedMaintenance
View/getPlannedMaintenanceList | PM | Planned Maintenance | Delete maintenance plan. |
| Change | Change/deleteProductSchema | View/getProductSchema | - | Products | Delete user-defined schema. |
| Change | Change/deleteWidget | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Delete widget from dashboard. |
| Change | Change/disableExtendedMetric | View/getProductSchema | - | Products | Disable detailed monitoring settings. |
| Change | Change/enableExtendedMetric | View/getProductSchema | - | Products | Enable detailed monitoring settings. |
| Change | Change/removeResourceFromRules | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
Change/createMetricGroup
Change/createMonitorGroup
View/getEventRuleDetail | - | Event Rule | Delete specific monitored target from event rule monitored target group. |
| Change | Change/sendData | - | - | Products | Transfer metric data to Cloud Insight. |
| Change | Change/setHomeDashboard | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Set dashboard as home dashboard. |
| Change | Change/setLayoutLock | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Turn on/off dashboard layout lock settings. |
| Change | Change/subscribeProduct | - | - | Subscription | Manage Cloud Insight subscriptions. |
| Change | Change/updateCustomResource | View/getCustomResourceList
View/getCustomResourceDetail | CustomResource | Custom Resource | Edit user-defined resources. |
| Change | Change/updateCustomSchema | View/getCustomSchemaDetail
View/getCustomSchemaList | - | Custom Schema | Edit Custom Schema. |
| Change | Change/updateDashboard | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Edit dashboard name and description. |
| Change | Change/updateDashboardSource | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Edit dashboard source. |
| Change | Change/updateEventRule | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
Change/createMetricGroup
Change/createMonitorGroup
View/getEventRuleDetail | EventRule | Event Rule | Edit event rule. |
| Change | Change/updateFilePlugin | View/getFilePluginList
View/getFilePluginDetail | - | Plugin | Edit File Plugin settings. |
| Change | Change/updateIntegrationChannel | View/getIntegrationChannelDetail
View/getIntegrationChannelList | - | Integration | Edit integration channel. |
| Change | Change/updateMetricExport | View/getMetricExportDetail
View/getMetricExportList | - | Products | Edit metric exporter. |
| Change | Change/updateMetricGroup | View/getMetricGroupList
View/getMetricGroupDetail
View/getEventRuleGroupByMetricGroup | - | Event Rule | Edit the monitored item group. |
| Change | Change/updateMonitorGroup | View/getMonitorGroupList | - | Event Rule | Edit the monitored target group. |
| Change | Change/updatePlannedMaintenance | View/getPlannedMaintenance
View/getPlannedMaintenanceList | PM | Planned Maintenance | Edit the maintenance plan. |
| Change | Change/updatePluginConfig | View/getPluginDetail
View/getPluginList
View/getPluginProducts
View/getPluginRegions
View/getPluginTargetGroup | - | Plugin | Edit instance plugin settings. |
| Change | Change/updatePortPlugin | View/getPortPluginDetail
View/getPortPluginList | - | Plugin | Edit Port Plugin settings. |
| Change | Change/updateProcessPlugin | View/getProcessPluginDetail
View/getProcessPluginList | - | Plugin | Edit process plugin settings. |
| Change | Change/updateProductSchema | View/getProductSchema | - | Products | Edit user-defined schema. |
| Change | Change/updateWidget | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Edit existing widget. |
If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. Sub Account automatically includes these related permissions to prevent this issue. However, if you manually uncheck these auto-selected related actions, the system assumes this was intentional and won't override your selection.