Available in Classic and VPC
Sub Account, the account management service of NAVER Cloud Platform, allows you to set the access permissions for Cloud search in various levels. Sub Account provides system managed policies and user created policies for setting management and administration permissions.
Sub Account is a service provided free of charge upon subscription. For more details about Sub Account, see the Service > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account Guide.
System managed policies
System managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once system managed policies are granted to a sub account created in Sub Account, that sub account can use Cloud Search. The following is a brief description about system managed policies of Cloud Search.
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Full access to all services with the same scope as the main account |
| NCP_INFRA_MANAGER | Permission to access all services, except the My Account > Billing information and cost management > Billing and payment management menu in the console, which is restricted. |
| NCP_FINANCE_MANAGER | Permission to access only the Cost Explorer service and the My Account > Billing information and cost management > Billing and payment management menu in the console. |
| NCP_CLOUD_SEARCH_MANAGER | Permission to use all features of Cloud Search |
| NCP_CLOUD_SEARCH_VIEWER | Permission to use only the view list and search function of Cloud Search |
User created policies
User created policies are policies that users can create. Once user created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description about user created policies of Cloud Search.
| Classification | Action name | Related action(s) | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | View/getDomainList | - | - | - | View list of Cloud Search domain |
| View | View/getDomainDetail | View/getDomainList | Domain | - | View details of Cloud Search domain |
| View | View/getSchemaDetail | View/getDomainList View/getDomainDetail |
Domain | - | View schema (section, index) details |
| View | View/searchQuery | View/getDomainList View/getDomainDetail |
Domain | - | Check search query execution and result |
| View | View/getRankingList | View/getDomainList View/getDomainDetail |
Domain | - | View ranking module list |
| View | View/getRankingDetail | View/getDomainList View/getDomainDetail View/getRankingList |
Domain | - | View ranking module details |
| View | View/searchAutocompleteQuery | View/getDomainList View/getDomainDetail View/getSchemaDetail |
Domain | - | Check the results upon running search term auto-complete |
| View | View/getRuleList | View/getDomainList View/getDomainDetail |
Domain | - | View list of stopword rules |
| View | View/getRuleDetail | View/getDomainList View/getDomainDetail |
Domain | - | View details of stopword rules |
| View | View/getSynonymDetail | View/getDomainList View/getDomainDetail |
Domain | - | View details of thesaurus |
| View | View/getMonitoring | View/getDomainList | - | - | Monitoring usage data of Cloud Search |
| View | View/getQueryAnalysis | View/getDomainList | - | - | Check search keyword analysis information |
| Change | Change/createDomain | View/getDomainList | - | - | Create domain of Cloud Search |
| Change | Change/updateDomain | View/getDomainList View/getDomainDetail |
Domain | - | Edit domain of Cloud Search |
| Change | Change/deleteDomain | View/getDomainList View/getDomainDetail |
Domain | - | Delete domain of Cloud Search |
| Change | Change/updateSchema | View/getDomainList View/getDomainDetail View/getSchemaDetail |
Domain | - | Edit schema (section, index) details |
| Change | Change/updateRanking | View/getDomainList View/getDomainDetail View/getRankingList View/getRankingDetail |
Domain | - | Add and edit ranking module |
| Change | Change/addRule | View/getDomainList View/getDomainDetail View/getRuleList |
Domain | - | Add stopword rules |
| Change | Change/updateRule | View/getDomainList View/getDomainDetail View/getRuleList View/getRuleDetail |
Domain | - | Edit stopword rules |
| Change | Change/deleteRule | View/getDomainList View/getDomainDetail View/getRuleList View/getRuleDetail |
Domain | - | Delete stopword rules |
| Change | Change/addSynonymVersion | View/getDomainList View/getDomainDetail View/getSynonymDetail |
Domain | - | Add thesaurus |
| Change | Change/deleteSynonymVersion | View/getDomainList View/getDomainDetail View/getSynonymDetail |
Domain | - | Delete thesaurus |
| Change | Change/uploadDocumentAsFile | View/getDomainList View/getDomainDetail |
Domain | - | Upload document file |
| Change | Change/uploadDocumentFromObjectStorage | View/getDomainList View/getDomainDetail |
Domain | - | Upload documents of Object Storage |
| Change | Change/uploadDocumentFromServerInstance | View/getDomainList View/getDomainDetail |
Domain | - | Upload database server document |
| Change | Change/setLimitUsage | View/getDomainList View/getDomainDetail |
Domain | - | Set usage limits of Cloud Search service |
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you clear related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and does not forcibly include them. Thus, be careful when setting permissions.