--- title: "Cloud Insight permissions management" slug: "cloudinsight-cloudinsightsubaccount" tags: ["Cloud Insight", "Sub Account"] updated: 2026-09-17T09:23:56Z published: 2026-09-17T09:23:56Z canonical: "guide.ncloud-docs.com/cloudinsight-cloudinsightsubaccount" --- > ## Documentation Index > Fetch the complete documentation index at: https://guide.ncloud-docs.com/llms.txt > Use this file to discover all available pages before exploring further. # Cloud Insight permissions management Available in Classic and VPC You can set different access permissions for Cloud Insight using NAVER Cloud Platform's Sub Account service. Sub Account offers both system-managed (System Managed) and user-defined (User Created) policies to help you configure management and operation permissions. Note Sub Account is a free service with no additional charges. For more information about Sub Account, see [**Services > Management & Governance > Sub Account**](https://www.ncloud.com/product/management/subAccount) on the NAVER Cloud Platform portal and the [Sub Account user guide](/docs/en/subaccount-overview). ## System-managed policies System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. When you assign one of these policies to a sub account, that account gets access to Cloud Insight. Here are the available system-managed policies for Cloud Insight: | Policy name | Policy description | | --- | --- | | NCP_ADMINISTRATOR | Full access to all services, same as the main account | | NCP_INFRA_MANAGER | Access to all services, except some sections in the console **My Account** > **Manage billing information and expense** > **Manage billing and payment** | | NCP_FINANCE_MANAGER | Access only to Cost Explorer and **My Account** > **Manage billing information and expense** > **Manage billing and payment** in the console | | NCP_CLOUD_INSIGHT_MANAGER | Full access to all Cloud Insight features | | NCP_CLOUD_INSIGHT_VIEWER | View-only access to all Cloud Insight features | ## User-defined policies User-defined policies let you create custom permissions. When you assign a user-defined policy to a sub account, that account can only perform the specific actions you've allowed. Here are the available user-defined policies for Cloud Insight: | Type | Action | Related action | Resource type | Group by resource type | Action description | | ---- | ---- | ---- | ---- | ---- | ---- | | View | View/downloadWidgetData | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Download widget data. | | View | View/getCustomResourceDetail | View/getCustomResourceList | CustomResource | Custom Resource | View user-defined resource details. | | View | View/getCustomResourceList | - | - | Custom Resource | View user-defined resource list. | | View | View/getCustomSchemaDetail | View/getCustomSchemaList | - | Custom Schema | View Custom Schema details. | | View | View/getCustomSchemaList | - | - | Custom Schema | View Custom Schema list. | | View | View/getDashboardDetail | View/getDashboardList | Dashboard | Dashboard | View Dashboard details. | | View | View/getDashboardList | - | - | Dashboard | View Dashboard list. | | View | View/getEventDetail | View/getEventList | Event | Event | View details of the Events that occurred. | | View | View/getEventList | - | - | Event | View the list of events that occurred. | | View | View/getEventRuleDetail | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList | EventRule | Event Rule | View event rule details. | | View | View/getEventRuleGroupByMetricGroup | View/getMetricGroupList | - | Event Rule | View all event rules related to the monitored item group. | | View | View/getEventRuleGroupByMonitorGroup | View/getMetricGroupList View/getMonitorGroupList | - | Event Rule | View all event rules related to the monitored target group. | | View | View/getEventRuleList | - | - | Event Rule | View event rule list. | | View | View/getEventRuleNotification | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList View/getEventRuleDetail | - | Event Rule | View the notification target group. | | View | View/getExtendedMetricStatus | View/getProductSchema | - | Products | View detailed monitoring settings status. | | View | View/getFilePluginDetail | View/getFilePluginList | - | Plugin | View the set File Plugin details. | | View | View/getFilePluginList | - | - | Plugin | View the set File Plugin list. | | View | View/getIntegrationChannelDetail | View/getIntegrationChannelList | - | Integration | View integration channel details. | | View | View/getIntegrationChannelList | - | - | Integration | View integration channel list. | | View | View/getMetric | - | - | Products | View metrics. | | View | View/getMetricExportDetail | - | - | Products | View metric export details. | | View | View/getMetricExportList | - | - | Products | View metric export list. | | View | View/getMetricGroupDetail | View/getMetricGroupList | - | Event Rule | View the monitored item group details. | | View | View/getMetricGroupList | - | - | Event Rule | View the monitored item group. | | View | View/getMonitorGroupDetail | View/getMonitorGroupList | - | Event Rule | View all resources in the monitored target group. | | View | View/getMonitorGroupList | - | - | Event Rule | View the monitored target group. | | View | View/getPlannedMaintenance | View/getPlannedMaintenanceList | PM | Planned Maintenance | View maintenance plan details. | | View | View/getPlannedMaintenanceList | - | - | Planned Maintenance | View maintenance plan list. | | View | View/getPluginDetail | View/getPluginList View/getPluginProducts View/getPluginRegions | - | Plugin | View plugin settings details. | | View | View/getPluginList | View/getPluginProducts View/getPluginRegions | - | Plugin | View Plugin settings list. | | View | View/getPluginProducts | View/getPluginList View/getPluginRegions | - | Plugin | View a list of products that support plugins. | | View | View/getPluginRegions | View/getPluginList View/getPluginProducts | - | Plugin | View a list of Regions of plugin-configurable instances. | | View | View/getPluginTargetGroup | | - | Plugin | View the target group list of products for which plugins can be set. | | View | View/getPortPluginDetail | View/getPortPluginList | - | Plugin | View the set Port Plugin details. | | View | View/getPortPluginList | - | - | Plugin | View the set Port Plugin list. | | View | View/getProcessPluginDetail | View/getProcessPluginList | - | Plugin | View the set process plugin details. | | View | View/getProcessPluginList | - | - | Plugin | View the set process plugin list. | | View | View/getProductSchema | - | - | Products | View the user-defined schema. | | View | View/getSystemSchemaKeyList | View/getProductSchema | - | Products | View the product list collected on Cloud Insight. | | View | View/getWidgetDetail | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | View widget details. | | Change | Change/copyDashboard | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Copy dashboard. | | Change | Change/copyEventRule | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList Change/createMetricGroup Change/createMonitorGroup Change/createEventRule View/getEventRuleDetail | EventRule | Event Rule | Copy event rule to create new event rule. | | Change | Change/copyWidget | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Copy existing widget and add it to dashboard. | | Change | Change/createCustomResource | View/getCustomResourceList View/getCustomResourceDetail | - | Custom Resource | Create user-defined resources. | | Change | Change/createCustomSchema | View/getCustomSchemaDetail View/getCustomSchemaList | - | Custom Schema | Create Custom Schema. | | Change | Change/createDashboard | View/getDashboardDetail | - | Dashboard | Create dashboard. | | Change | Change/createEventRule | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList Change/createMetricGroup Change/createMonitorGroup View/getEventRuleDetail | - | Event Rule | Create new event rule. | | Change | Change/createIntegrationChannel | View/getIntegrationChannelDetail View/getIntegrationChannelList | - | Integration | Create new integration channel. | | Change | Change/createMetricExport | View/getMetricExportDetail View/getMetricExportList | - | Products | Create new metric export. | | Change | Change/createMetricGroup | View/getMetricGroupList | - | Event Rule | Create monitored item group. | | Change | Change/createMonitorGroup | View/getMonitorGroupList | - | Event Rule | Create new monitored target group. | | Change | Change/createPlannedMaintenance | View/getPlannedMaintenance View/getPlannedMaintenanceList | - | Planned Maintenance | Create maintenance plan. | | Change | Change/createProductSchema | View/getProductSchema | - | Products | Create user-defined schema. | | Change | Change/createWidget | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Create new widget and add to dashboard. | | Change | Change/deleteCustomResource | View/getCustomResourceList View/getCustomResourceDetail | CustomResource | Custom Resource | Delete user-defined resources. | | Change | Change/deleteCustomSchema | View/getCustomSchemaDetail View/getCustomSchemaList | - | Custom Schema | Delete Custom Schema. | | Change | Change/deleteDashboard | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Delete dashboard. | | Change | Change/deleteEventRule | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList View/getEventRuleDetail | EventRule | Event Rule | Delete event rule. | | Change | Change/deleteEventRuleForce | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList View/getEventRuleDetail | - | Event Rule | Delete all event rules related to the monitored target group. | | Change | Change/deleteIntegrationChannel | View/getIntegrationChannelDetail View/getIntegrationChannelList | - | Integration | Delete integration channel. | | Change | Change/deleteMetricExport | View/getMetricExportDetail View/getMetricExportList | - | Products | Delete metric exporter. | | Change | Change/deleteMetricGroup | View/getMetricGroupList View/getMetricGroupDetail | - | Event Rule | Delete monitored item group. | | Change | Change/deleteMetricGroupForce | View/getMetricGroupList View/getMetricGroupDetail | - | Event Rule | Delete all event rules related to the monitored item group. | | Change | Change/deleteMonitorGroup | View/getEventRuleGroupByMonitorGroup View/getMonitorGroupList | - | Event Rule | Delete monitored target group. | | Change | Change/deletePlannedMaintenance | View/getPlannedMaintenance View/getPlannedMaintenanceList | PM | Planned Maintenance | Delete maintenance plan. | | Change | Change/deleteProductSchema | View/getProductSchema | - | Products | Delete user-defined schema. | | Change | Change/deleteWidget | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Delete widget from dashboard. | | Change | Change/disableExtendedMetric | View/getProductSchema | - | Products | Disable detailed monitoring settings. | | Change | Change/enableExtendedMetric | View/getProductSchema | - | Products | Enable detailed monitoring settings. | | Change | Change/removeResourceFromRules | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList Change/createMetricGroup Change/createMonitorGroup View/getEventRuleDetail | - | Event Rule | Delete specific monitored target from event rule monitored target group. | | Change | Change/sendData | - | - | Products | Transfer metric data to Cloud Insight. | | Change | Change/setHomeDashboard | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Set dashboard as home dashboard. | | Change | Change/setLayoutLock | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Turn on/off dashboard layout lock settings. | | Change | Change/subscribeProduct | - | - | Subscription | Manage Cloud Insight subscriptions. | | Change | Change/updateCustomResource | View/getCustomResourceList View/getCustomResourceDetail | CustomResource | Custom Resource | Edit user-defined resources. | | Change | Change/updateCustomSchema | View/getCustomSchemaDetail View/getCustomSchemaList | - | Custom Schema | Edit Custom Schema. | | Change | Change/updateDashboard | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Edit dashboard name and description. | | Change | Change/updateDashboardSource | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Edit dashboard source. | | Change | Change/updateEventRule | View/getMetricGroupList View/getMonitorGroupList View/getEventRuleList Change/createMetricGroup Change/createMonitorGroup View/getEventRuleDetail | EventRule | Event Rule | Edit event rule. | | Change | Change/updateFilePlugin | View/getFilePluginList View/getFilePluginDetail | - | Plugin | Edit File Plugin settings. | | Change | Change/updateIntegrationChannel | View/getIntegrationChannelDetail View/getIntegrationChannelList | - | Integration | Edit integration channel. | | Change | Change/updateMetricExport | View/getMetricExportDetail View/getMetricExportList | - | Products | Edit metric exporter. | | Change | Change/updateMetricGroup | View/getMetricGroupList View/getMetricGroupDetail View/getEventRuleGroupByMetricGroup | - | Event Rule | Edit the monitored item group. | | Change | Change/updateMonitorGroup | View/getMonitorGroupList | - | Event Rule | Edit the monitored target group. | | Change | Change/updatePlannedMaintenance | View/getPlannedMaintenance View/getPlannedMaintenanceList | PM | Planned Maintenance | Edit the maintenance plan. | | Change | Change/updatePluginConfig | View/getPluginDetail View/getPluginList View/getPluginProducts View/getPluginRegions View/getPluginTargetGroup | - | Plugin | Edit instance plugin settings. | | Change | Change/updatePortPlugin | View/getPortPluginDetail View/getPortPluginList | - | Plugin | Edit Port Plugin settings. | | Change | Change/updateProcessPlugin | View/getProcessPluginDetail View/getProcessPluginList | - | Plugin | Edit process plugin settings. | | Change | Change/updateProductSchema | View/getProductSchema | - | Products | Edit user-defined schema. | | Change | Change/updateWidget | View/getDashboardDetail View/getDashboardList | Dashboard | Dashboard | Edit existing widget. | Caution If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. Sub Account automatically includes these related permissions to prevent this issue. However, if you manually uncheck these auto-selected related actions, the system assumes this was intentional and won't override your selection.