Available in Classic and VPC
By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for Cloud Insight. Sub Account provides system managed policies and user created policies for setting management and administration permissions.
Note
Sub Account is a service provided free of charge upon subscription request. For more information on Sub Account, see Services > Management & Governance > Sub Account on NAVER Cloud Platform portal and the Sub Account user guide.
System-managed policies
System-managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once System-managed policies are granted to a sub account created in Sub Account, that sub account can use Cloud Insight. The following is a brief description of the System Managed policies of Cloud Insight.
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
| NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
| NCP_CLOUD_INSIGHT_MANAGER | Permission to use all features of Cloud Insight |
| NCP_CLOUD_INSIGHT_VIEWER | Permission to only use the View list and Search features in Cloud Insight |
User-defined policies
User-defined policies are policies that users may create. Once the user-defined policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description of the user-defined policies of Cloud Insight.
| Type | Action name | Related action | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | View/downloadWidgetData | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Downloads Widget Data |
| View | View/getCustomResourceDetail | View/getCustomResourceList | CustomResource | Custom Resource | Views user-defined resource details |
| View | View/getCustomResourceList | - | - | Custom Resource | Views user-defined resource list |
| View | View/getCustomSchemaDetail | View/getCustomSchemaList | - | Custom Schema | Views custom Schema details |
| View | View/getCustomSchemaList | - | - | Custom Schema | View custom Schema list |
| View | View/getDashboardDetail | View/getDashboardList | Dashboard | Dashboard | Views Dashboard details |
| View | View/getDashboardList | - | - | Dashboard | Views Dashboard list |
| View | View/getEventDetail | View/getEventList | Event | Event | View details of the Events occurred |
| View | View/getEventList | - | - | Event | View the list of Events occurred |
| View | View/getEventRuleDetail | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList |
EventRule | Event Rule | View details of the Event Rule |
| View | View/getEventRuleGroupByMetricGroup | View/getMetricGroupList | - | Event Rule | Views all Event Rules related to monitored item group |
| View | View/getEventRuleGroupByMonitorGroup | View/getMetricGroupList View/getMonitorGroupList |
- | Event Rule | Views all Event Rules related to monitored target group |
| View | View/getEventRuleList | - | - | Event Rule | Views Event Rule list |
| View | View/getEventRuleNotification | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList View/getEventRuleDetail |
- | Event Rule | Views notification target group |
| View | View/getExtendedMetricStatus | View/getProductSchema | - | Products | Views detailed monitoring settings status |
| View | View/getFilePluginDetail | View/getFilePluginList | - | Plugin | Views set File Plugin details |
| View | View/getFilePluginList | - | - | Plugin | Views set File Plugin list |
| View | View/getIntegrationChannelDetail | View/getIntegrationChannelList | - | Integration | Views Integration Channel details |
| View | View/getIntegrationChannelList | - | - | Integration | View Integration Channel list |
| View | View/getMetric | - | - | Products | View Metrics |
| View | View/getMetricGroupDetail | View/getMetricGroupList | - | Event Rule | Views monitored item group details |
| View | View/getMetricGroupList | - | - | Event Rule | Views monitored item group list |
| View | View/getMonitorGroupDetail | View/getMonitorGroupList | - | Event Rule | Views all resources in monitored target group |
| View | View/getMonitorGroupList | - | - | Event Rule | Views monitored target group |
| View | View/getPlannedMaintenance | View/getPlannedMaintenanceList | PM | Planned Maintenance | Views maintenance plan details |
| View | View/getPlannedMaintenanceList | - | - | Planned Maintenance | Views maintenance plan list |
| View | View/getPluginDetail | View/getPluginList View/getPluginProducts View/getPluginRegions |
- | Plugin | Views Plugin settings details |
| View | View/getPluginList | View/getPluginProducts View/getPluginRegions |
- | Plugin | Views Plugin settings list |
| View | View/getPluginProducts | View/getPluginList View/getPluginRegions |
- | Plugin | Views a list of Regions of Plugin-configurable instances |
| View | View/getPluginRegions | View/getPluginList View/getPluginProducts |
- | Plugin | Views a list of products that support Plugins |
| View | View/getPluginTargetGroup | - | Plugin | Views the Target Group list of products for which Plugins can be set | |
| View | View/getPortPluginDetail | View/getPortPluginList | - | Plugin | Views set Port Plugin details |
| View | View/getPortPluginList | - | - | Plugin | Views set Port Plugin list |
| View | View/getProcessPluginDetail | View/getProcessPluginList | - | Plugin | Views set Process Plugin details |
| View | View/getProcessPluginList | - | - | Plugin | Views set Process Plugin list |
| View | View/getProductSchema | - | - | Products | Views user-defined schema |
| View | View/getSystemSchemaKeyList | View/getProductSchema | - | Products | View product list collected on Cloud Insight |
| View | View/getWidgetDetail | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Views Widget details |
| Change | Change/copyDashboard | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Copies Dashboard |
| Change | Change/copyEventRule | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList Change/createMetricGroup Change/createMonitorGroup Change/createEventRule View/getEventRuleDetail |
EventRule | Event Rule | Copies Event Rule to create new Event Rule |
| Change | Change/copyWidget | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Copies existing Widget and adds to Dashboard |
| Change | Change/createCustomResource | View/getCustomResourceList View/getCustomResourceDetail |
- | Custom Resource | Creates user-defined resource |
| Change | Change/createCustomSchema | View/getCustomSchemaDetail View/getCustomSchemaList |
- | Custom Schema | Creates Custom Schema |
| Change | Change/createDashboard | View/getDashboardDetail | - | Dashboard | Creates Dashboard |
| Change | Change/createEventRule | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList Change/createMetricGroup Change/createMonitorGroup View/getEventRuleDetail |
- | Event Rule | Creates new Event Rule |
| Change | Change/createIntegrationChannel | View/getIntegrationChannelDetail View/getIntegrationChannelList |
- | Integration | Creates new Integration channel |
| Change | Change/createMetricGroup | View/getMetricGroupList | - | Event Rule | Creates monitored item group |
| Change | Change/createMonitorGroup | View/getMonitorGroupList | - | Event Rule | Creates new monitored target group |
| Change | Change/createPlannedMaintenance | View/getPlannedMaintenance View/getPlannedMaintenanceList |
- | Planned Maintenance | Creates maintenance plan |
| Change | Change/createProductSchema | View/getProductSchema | - | Products | Creates user-defined schema |
| Change | Change/createWidget | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Creates new Widget and adds to Dashboard |
| Change | Change/deleteCustomResource | View/getCustomResourceList View/getCustomResourceDetail |
CustomResource | Custom Resource | Deletes user-defined resource |
| Change | Change/deleteCustomSchema | View/getCustomSchemaDetail View/getCustomSchemaList |
- | Custom Schema | Delete Custom Schema |
| Change | Change/deleteDashboard | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Delete Dashboard |
| Change | Change/deleteEventRule | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList View/getEventRuleDetail |
EventRule | Event Rule | Deletes Event Rule |
| Change | Change/deleteEventRuleForce | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList View/getEventRuleDetail |
- | Event Rule | Deletes all Event Rules related to monitored target group |
| Change | Change/deleteIntegrationChannel | View/getIntegrationChannelDetail View/getIntegrationChannelList |
- | Integration | Deletes Integration Channel |
| Change | Change/deleteMetricGroup | View/getMetricGroupList View/getMetricGroupDetail |
- | Event Rule | Deletes monitored item group |
| Change | Change/deleteMetricGroupForce | View/getMetricGroupList View/getMetricGroupDetail |
- | Event Rule | Deletes all Event Rules related to monitored item group |
| Change | Change/deleteMonitorGroup | View/getEventRuleGroupByMonitorGroup View/getMonitorGroupList |
- | Event Rule | Deletes monitored target group |
| Change | Change/deletePlannedMaintenance | View/getPlannedMaintenance View/getPlannedMaintenanceList |
PM | Planned Maintenance | Deletes maintenance plan |
| Change | Change/deleteProductSchema | View/getProductSchema | - | Products | Deletes user-defined schema |
| Change | Change/deleteWidget | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Deletes Widget from Dashboard |
| Change | Change/disableExtendedMetric | View/getProductSchema | - | Products | Disables detailed monitoring settings |
| Change | Change/enableExtendedMetric | View/getProductSchema | - | Products | Enables detailed monitoring settings |
| Change | Change/removeResourceFromRules | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList Change/createMetricGroup Change/createMonitorGroup View/getEventRuleDetail |
- | Event Rule | Deletes specific monitored target from Event Rule monitored target group |
| Change | Change/sendData | - | - | Products | Transfer Metric Data to Cloud Insight |
| Change | Change/setHomeDashboard | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Sets Dashboard as Home Dashboard |
| Change | Change/setLayoutLock | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Turns on/off Dashboard Layout lock settings |
| Change | Change/subscribeProduct | - | - | Subscription | Subscribe to and unsubscribe from Cloud Insight |
| Change | Change/updateCustomResource | View/getCustomResourceList View/getCustomResourceDetail |
CustomResource | Custom Resource | Edits user-defined resource |
| Change | Change/updateCustomSchema | View/getCustomSchemaDetail View/getCustomSchemaList |
- | Custom Schema | Edits Custom Schema |
| Change | Change/updateDashboard | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Edits name and description of Dashboard |
| Change | Change/updateDashboardSource | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Edits Dashboard Source |
| Change | Change/updateEventRule | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList Change/createMetricGroup Change/createMonitorGroup View/getEventRuleDetail |
EventRule | Event Rule | Edits Event Rule |
| Change | Change/updateFilePlugin | View/getFilePluginList View/getFilePluginDetail |
- | Plugin | Edits File Plugin settings |
| Change | Change/updateIntegrationChannel | View/getIntegrationChannelDetail View/getIntegrationChannelList |
- | Integration | Edits Integration Channel |
| Change | Change/updateMetricGroup | View/getMetricGroupList View/getMetricGroupDetail View/getEventRuleGroupByMetricGroup |
- | Event Rule | Edits monitored item group |
| Change | Change/updateMonitorGroup | View/getMonitorGroupList | - | Event Rule | Edits monitored target group |
| Change | Change/updatePlannedMaintenance | View/getPlannedMaintenance View/getPlannedMaintenanceList |
PM | Planned Maintenance | Edits maintenance plan |
| Change | Change/updatePluginConfig | View/getPluginDetail View/getPluginList View/getPluginProducts View/getPluginRegions View/getPluginTargetGroup |
- | Plugin | Edits instance plugin settings |
| Change | Change/updatePortPlugin | View/getPortPluginDetail View/getPortPluginList |
- | Plugin | Edits Port Plugin settings |
| Change | Change/updateProcessPlugin | View/getProcessPluginDetail View/getProcessPluginList |
- | Plugin | Edits Process Plugin settings |
| Change | Change/updateProductSchema | View/getProductSchema | - | Products | Edits user-defined schema |
| Change | Change/updateWidget | View/getDashboardDetail View/getDashboardList |
Dashboard | Dashboard | Edits existing widget |
Caution
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, you will not be able to perform tasks properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and will not forcibly include them. Therefore, use caution when setting permissions.