Available in Classic and VPC
You can set access permissions for Cloud Insight using Sub Account, NAVER Cloud Platform's account management service. Sub Account offers both system-managed (System Managed) and user-defined (User Created) policies to help you configure management and operation permissions.
Sub Account is a free service with no additional charges. For more information about Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal and the Sub Account user guide.
System-managed policies
System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. A sub-account created through the Sub Account service can be granted access to Cloud Insight by assigning a system-managed policy. Listed below are brief descriptions of the system-managed policies for Cloud Insight.
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Full access to all services, same as the main account |
| NCP_INFRA_MANAGER | Access to all services, except My Account > Billing and Cost Management > Billing and Payments in the console |
| NCP_FINANCE_MANAGER | Access only to Cost Explorer and My Account > Billing and Cost Management > Billing and Payments in the console |
| NCP_CLOUD_INSIGHT_MANAGER | Full access to all features of the Cloud Insight service |
| NCP_CLOUD_INSIGHT_VIEWER | Read-only access to the Cloud Insight service |
User-defined policies
User-defined policies let you create custom permissions. When you assign a user-defined policy to a sub account, that account can only perform the specific actions you've allowed. Here are the available user-defined policies for Cloud Insight:
| Type | Action | Related action | Resource type | Group by resource type | Action description |
| ---- | ---- | ---- | ---- | ---- | ---- |
| View | View/downloadWidgetData | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Download Widget Data |
| View | View/getCustomResourceDetail | View/getCustomResourceList | CustomResource | Custom Resource | View custom resource details |
| View | View/getCustomResourceList | - | - | Custom Resource | View custom resource list |
| View | View/getCustomSchemaDetail | View/getCustomSchemaList | - | Custom Schema | View Custom Schema details |
| View | View/getCustomSchemaList | - | - | Custom Schema | View Custom Schema list |
| View | View/getDashboardDetail | View/getDashboardList | Dashboard | Dashboard | View Dashboard details |
| View | View/getDashboardList | - | - | Dashboard | View Dashboard list |
| View | View/getEventDetail | View/getEventList | Event | Event | View Event details |
| View | View/getEventList | - | - | Event | View Event list |
| View | View/getEventRuleDetail | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList | EventRule | Event Rule | View Event Rule details |
| View | View/getEventRuleGroupByMetricGroup | View/getMetricGroupList | - | Event Rule | View all Metric Group Event Rules |
| View | View/getEventRuleGroupByMonitorGroup | View/getMetricGroupList
View/getMonitorGroupList | - | Event Rule | View all Monitor Group Event Rules |
| View | View/getEventRuleList | - | - | Event Rule | View Event Rule list |
| View | View/getEventRuleNotification | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
View/getEventRuleDetail | - | Event Rule | View notification recipient groups |
| View | View/getExtendedMetricStatus | View/getProductSchema | - | Products | View extended Metric status |
| View | View/getFilePluginDetail | View/getFilePluginList | - | Plugin | View File Plugin configuration details |
| View | View/getFilePluginList | - | - | Plugin | View File Plugin configuration list |
| View | View/getIntegrationChannelDetail | View/getIntegrationChannelList | - | Integration | View Integration Channel details |
| View | View/getIntegrationChannelList | - | - | Integration | View Integration Channel list |
| View | View/getMetric | - | - | Products | View Metrics |
| View | View/getMetricExportDetail | - | - | Products | View Metric Export Details |
| View | View/getMetricExportList | - | - | Products | View Metric Export List |
| View | View/getMetricGroupDetail | View/getMetricGroupList | - | Event Rule | View Metric Group details |
| View | View/getMetricGroupList | - | - | Event Rule | View Metric Group list |
| View | View/getMonitorGroupDetail | View/getMonitorGroupList | - | Event Rule | View all resources in a Monitor Group |
| View | View/getMonitorGroupList | - | - | Event Rule | View Monitor Group list |
| View | View/getPlannedMaintenance | View/getPlannedMaintenanceList | PM | Planned Maintenance | View maintenance plan details |
| View | View/getPlannedMaintenanceList | - | - | Planned Maintenance | View maintenance plan list |
| View | View/getPluginDetail | View/getPluginList
View/getPluginProducts
View/getPluginRegions | - | Plugin | View Plugin configuration details |
| View | View/getPluginList | View/getPluginProducts
View/getPluginRegions | - | Plugin | View Plugin configuration list |
| View | View/getPluginProducts | View/getPluginList
View/getPluginRegions | - | Plugin | View the Region list of Plugin-configurable instances |
| View | View/getPluginRegions | View/getPluginList
View/getPluginProducts | - | Plugin | View a list of products that support Plugins |
| View | View/getPluginTargetGroup | | - | Plugin | View the Target Group list for Plugin-configurable products |
| View | View/getPortPluginDetail | View/getPortPluginList | - | Plugin | View Port Plugin configuration details |
| View | View/getPortPluginList | - | - | Plugin | View Port Plugin configuration list |
| View | View/getProcessPluginDetail | View/getProcessPluginList | - | Plugin | View Process Plugin configuration details |
| View | View/getProcessPluginList | - | - | Plugin | View Process Plugin configuration list |
| View | View/getProductSchema | - | - | Products | View custom schema |
| View | View/getSystemSchemaKeyList | View/getProductSchema | - | Products | View list of products collected by Cloud Insight |
| View | View/getWidgetDetail | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | View Widget details |
| Change | Change/copyDashboard | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Copy a Dashboard |
| Change | Change/copyEventRule | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
Change/createMetricGroup
Change/createMonitorGroup
Change/createEventRule
View/getEventRuleDetail | EventRule | Event Rule | Copy an Event Rule to create a new Event Rule |
| Change | Change/copyWidget | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Copy an existing Widget and add it to a Dashboard |
| Change | Change/createCustomResource | View/getCustomResourceList
View/getCustomResourceDetail | - | Custom Resource | Create a custom resource |
| Change | Change/createCustomSchema | View/getCustomSchemaDetail
View/getCustomSchemaList | - | Custom Schema | Create a Custom Schema |
| Change | Change/createDashboard | View/getDashboardDetail | - | Dashboard | Create a Dashboard |
| Change | Change/createEventRule | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
Change/createMetricGroup
Change/createMonitorGroup
View/getEventRuleDetail | - | Event Rule | Create a new Event Rule |
| Change | Change/createIntegrationChannel | View/getIntegrationChannelDetail
View/getIntegrationChannelList | - | Integration | Create a new Integration channel |
| Change | Change/createMetricExport | View/getMetricExportDetail
View/getMetricExportList | - | Products | Create a new Metric Export |
| Change | Change/createMetricGroup | View/getMetricGroupList | - | Event Rule | Create a new monitoring item group |
| Change | Change/createMonitorGroup | View/getMonitorGroupList | - | Event Rule | Create a new monitoring target group |
| Change | Change/createPlannedMaintenance | View/getPlannedMaintenance
View/getPlannedMaintenanceList | - | Planned Maintenance | Create a new maintenance plan |
| Change | Change/createProductSchema | View/getProductSchema | - | Products | Create a Custom Schema |
| Change | Change/createWidget | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Create a new Widget and add it to a Dashboard |
| Change | Change/deleteCustomResource | View/getCustomResourceList
View/getCustomResourceDetail | CustomResource | Custom Resource | Delete a custom resource |
| Change | Change/deleteCustomSchema | View/getCustomSchemaDetail
View/getCustomSchemaList | - | Custom Schema | Delete a Custom Schema |
| Change | Change/deleteDashboard | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Delete a Dashboard |
| Change | Change/deleteEventRule | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
View/getEventRuleDetail | EventRule | Event Rule | Delete an Event Rule |
| Change | Change/deleteEventRuleForce | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
View/getEventRuleDetail | - | Event Rule | Delete all Event Rules for a Monitor Group |
| Change | Change/deleteIntegrationChannel | View/getIntegrationChannelDetail
View/getIntegrationChannelList | - | Integration | Delete an Integration Channel |
| Change | Change/deleteMetricExport | View/getMetricExportDetail
View/getMetricExportList | - | Products | Delete a Metric Export |
| Change | Change/deleteMetricGroup | View/getMetricGroupList
View/getMetricGroupDetail | - | Event Rule | Delete a Metric Group |
| Change | Change/deleteMetricGroupForce | View/getMetricGroupList
View/getMetricGroupDetail | - | Event Rule | Delete all Event Rules for a Metric Group |
| Change | Change/deleteMonitorGroup | View/getEventRuleGroupByMonitorGroup
View/getMonitorGroupList | - | Event Rule | Delete a Monitor Group |
| Change | Change/deletePlannedMaintenance | View/getPlannedMaintenance
View/getPlannedMaintenanceList | PM | Planned Maintenance | Delete a maintenance plan |
| Change | Change/deleteProductSchema | View/getProductSchema | - | Products | Delete a Custom Schema |
| Change | Change/deleteWidget | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Delete a Widget from a Dashboard |
| Change | Change/disableExtendedMetric | View/getProductSchema | - | Products | Disable Extended Metric settings |
| Change | Change/enableExtendedMetric | View/getProductSchema | - | Products | Enable Extended Metric settings |
| Change | Change/removeResourceFromRules | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
Change/createMetricGroup
Change/createMonitorGroup
View/getEventRuleDetail | - | Event Rule | Delete a specific Metric Group from Event Rule’s Monitor Group |
| Change | Change/sendData | - | - | Products | Transfer Metric Data to Cloud Insight |
| Change | Change/setHomeDashboard | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Set a Dashboard as Home Dashboard |
| Change | Change/setLayoutLock | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Lock/Unlock Dashboard Layout |
| Change | Change/subscribeProduct | - | - | Subscription | Sign up for/cancel Cloud Insight subscription |
| Change | Change/updateCustomResource | View/getCustomResourceList
View/getCustomResourceDetail | CustomResource | Custom Resource | Edit a Custom Resource |
| Change | Change/updateCustomSchema | View/getCustomSchemaDetail
View/getCustomSchemaList | - | Custom Schema | Edit a Custom Schema |
| Change | Change/updateDashboard | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Edit the name and description of a Dashboard |
| Change | Change/updateDashboardSource | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Edit the Source code for a Dashboard |
| Change | Change/updateEventRule | View/getMetricGroupList
View/getMonitorGroupList
View/getEventRuleList
Change/createMetricGroup
Change/createMonitorGroup
View/getEventRuleDetail | EventRule | Event Rule | Edit an Event Rule |
| Change | Change/updateFilePlugin | View/getFilePluginList
View/getFilePluginDetail | - | Plugin | Edit a File Plugin configuration |
| Change | Change/updateIntegrationChannel | View/getIntegrationChannelDetail
View/getIntegrationChannelList | - | Integration | Edit an Integration Channel |
| Change | Change/updateMetricExport | View/getMetricExportDetail
View/getMetricExportList | - | Products | Edit a Metric Export |
| Change | Change/updateMetricGroup | View/getMetricGroupList
View/getMetricGroupDetail
View/getEventRuleGroupByMetricGroup | - | Event Rule | Edit a Metric Group |
| Change | Change/updateMonitorGroup | View/getMonitorGroupList | - | Event Rule | Edit a Monitor Group |
| Change | Change/updatePlannedMaintenance | View/getPlannedMaintenance
View/getPlannedMaintenanceList | PM | Planned Maintenance | Edit a maintenance plan |
| Change | Change/updatePluginConfig | View/getPluginDetail
View/getPluginList
View/getPluginProducts
View/getPluginRegions
View/getPluginTargetGroup | - | Plugin | Edit an instance plugin configuration |
| Change | Change/updatePortPlugin | View/getPortPluginDetail
View/getPortPluginList | - | Plugin | Edit a Port Plugin configuration |
| Change | Change/updateProcessPlugin | View/getProcessPluginDetail
View/getProcessPluginList | - | Plugin | Edit a Process Plugin configuration |
| Change | Change/updateProductSchema | View/getProductSchema | - | Products | Edit a Custom Schema |
| Change | Change/updateWidget | View/getDashboardDetail
View/getDashboardList | Dashboard | Dashboard | Edit an existing Widget |
If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. Sub Account automatically includes these related permissions to prevent this issue. However, if you manually uncheck these auto-selected related actions, the system assumes this was intentional and won't override your selection.