SourceBuild permissions management
- Print
- PDF
SourceBuild permissions management
- Print
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
Available in Classic and VPC
You may set various access permissions for SourceBuild using Sub Account, which is an account management service provided by NAVER Cloud Platform. Sub Account provides System Managed policies and user-defined policies for setting management and administration permissions.
Note
Sub Account is a service provided free of charge upon subscribing. For more information on Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal and the Sub Account user guide.
System-managed policies
System-managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once the system-managed policies are granted to a sub account created in Sub Account, that sub account can use SourceBuild. The following is a brief description of the system-managed policies of SourceBuild.
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
| NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
| NCP_SOURCEBUILD_MANAGER | Permission to use the full SourceBuild feature sets |
| NCP_SOURCEBUILD_VIEWER | Permission to only use the View list and Search features in SourceBuild |
| NCP_SOURCEBUILD_ADMIN | ADMIN permissions template managed in SourceBuild. Permission to create the ADMIN permissions policy managed in SourceBuild through the Load policy feature |
| NCP_SOURCEBUILD_USER | USER permissions template managed in SourceBuild. Permission to create the USER permissions policy managed in SourceBuild through the Load policy feature |
User-defined policies
User-defined policies are policies that users may create. Once the user-defined policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description of the user-defined policies of SourceBuild.
| Type | Action name | Related action | Resource type | Group by resource type | Action description |
|---|---|---|---|---|---|
| View | View/getProjectList | - | - | SourceBuild | View project list |
| View | View/getProjectDetail | View/getProjectList View/downloadArtifact | Project | SourceBuild | View project details |
| View | View/getHistoryList | View/getProjectList View/getProjectDetail View/downloadArtifact | Project | SourceBuild | View build task result list |
| View | View/downloadArtifact | View/getProjectList View/getProjectDetail | Project | SourceBuild | Download build result |
| View | View/getRepositoryList | - | Project | SourceCommit | View SourceCommmit repository list |
| View | View/getRepositoryDetail | View/getRepositoryList | SourceCommit:Repository | SourceCommit | View SourceCommmit repository details |
| View | View/getBucketList | - | SourceCommit:Repository | Object Storage | View Object Storage bucket list |
| View | View/getBucketDetail | View/getBucketList | ObjectStorage:Bucket | Object Storage | Select Object Storage bucket to save build result |
| View | View/getRegistryList | - | ObjectStorage:Bucket | Container Registry | View Container Registry list |
| View | View/getRegistryDetail | View/getRegistryList | ContainerRegistry:Registry | Container Registry | View Container Registry details |
| View | View/accessFileSafer | - | ContainerRegistry:Registry | File Safer | Connect to File Safer |
| View | View/accessCloudLogAnalytics | - | ContainerRegistry:Registry | Cloud Log Analytics | Cloud Log Analytics integration |
| View | View/getNotificationList | - | Project | SourceBuild | View notification recipient list |
| View | View/getSourceBandOrganizationList | - | - | SourceBand | View SourceBand Organization List |
| View | View/getSourceBandOrganizationDetail | View/getSourceBandOrganizationList | SourceBand:Organization | SourceBand | View SourceBand Organization details |
| View | View/getSourceBandProjectList | View/getSourceBandOrganizationList View/getSourceBandOrganizationDetail | - | SourceBand | View SourceBand project list |
| View | View/getSourceBandProjectDetail | View/getSourceBandOrganizationList View/getSourceBandOrganizationDetail View/getSourceBandProjectList | SourceBand:Project | SourceBand | View SourceBand project details |
| Change | Change/createProject | View/getProjectList View/getRepositoryList View/getRepositoryDetail View/getBucketList View/getBucketDetail View/getRegistryList View/getRegistryDetail View/accessFileSafer View/accessCloudLogAnalytics View/getNotificationList | ContainerRegistry:Registry | SourceBuild | Create project |
| Change | Change/changeProject | View/getProjectList View/getProjectDetail View/downloadArtifact View/getRepositoryList View/getRepositoryDetail View/getBucketList View/getBucketDetail View/getRegistryList View/getRegistryDetail View/accessFileSafer View/accessCloudLogAnalytics View/getNotificationList | Project | SourceBuild | Change project settings |
| Change | Change/deleteProject | View/getProjectList View/getProjectDetail View/downloadArtifact | Project | SourceBuild | Delete project |
| Change | Change/doBuild | View/getProjectList View/getProjectDetail View/downloadArtifact View/getRepositoryList View/getHistoryList View/getRepositoryDetail View/getBucketList View/getBucketDetail View/getRegistryList View/getRegistryDetail | Project | SourceBuild | Execute/cancel project (build) |
Caution
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, you will not be able to perform tasks properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be careful when setting permissions.
Was this article helpful?