- Print
- PDF
Managing SourcePipeline permissions
- Print
- PDF
Available in Classic and VPC
By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for SourcePipeline. Sub Account provides the system-managed and user-created policies for setting management and administration permissions.
Sub Account is a service provided free of charge upon subscription request. For more information on Sub Account, see Services > Management & Governance > Sub Account of NAVER Cloud Platform portal and the Sub Account user guide.
System-managed policies
System-managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once the system-managed policies are granted to a sub account created in Sub Account, that sub account can use SourcePipeline. The following is a brief description of SourcePipeline's system-managed policies.
Classic
Policy name | Policy description |
---|---|
NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
NCP_SOURCEPIPELINE_MANAGER | Permission to use all the features in SourcePipeline |
NCP_SOURCEPIPELINE_VIEWER | Permission to only use the View list and Search features in SourcePipeline |
NCP_SOURCEPIPELINE_USER | USER permission managed in SourcePipeline |
NCP_SOURCEPIPELINE_ADMIN | ADMIN permission managed in SourcePipeline |
VPC
Policy name | Policy description |
---|---|
NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
NCP_VPC_SOURCEPIPELINE_MANAGER | Permission to use all the features in VPC-based SourcePipeline |
NCP_VPC_SOURCEPIPELINE_VIEWER | Permission to only use the View list and Search features in VPC-based SourcePipeline |
NCP_VPC_SOURCEPIPELINE_USER | USER permission managed in VPC-based SourcePipeline |
NCP_VPC_SOURCEPIPELINE_ADMIN | ADMIN permission managed in VPC-based SourcePipeline |
User-created policies
User-created policies are policies that users may create. Once the user-created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description about User Created policies of SourcePipeline.
Classic
Type | Action name | Related action | Resource type | Group by resource type | Action description |
---|---|---|---|---|---|
View | View/getProjectList | - | - | SourcePipeline | View project list |
View | View/getProjectDetail | View/getProjectList | Project | SourcePipeline | View project details |
View | View/getHistoryList | View/getProjectList | Project | SourcePipeline | View job history list |
View | View/getRepositoryList | View/getProjectList | Project | SourceCommit | View SourceCommit repository list |
View | View/getRepositoryDetail | View/getRepositoryList | SourceCommit:Repository | SourceCommit | View SourceCommit repository details |
View | View/getBuildProjectList | View/getRepositoryList | SourceCommit:Repository | SourceBuild | View SourceBuild project list |
View | View/getBuildProjectDetail | View/getBuildProjectList | SourceBuild:Project | SourceBuild | View SourceBuild project details |
View | View/getDeployProjectList | View/getBuildProjectList | SourceBuild:Project | SourceDeploy | View SourceDeploy project list |
View | View/getDeployProjectDetail | View/getDeployProjectList | SourceDeploy:Project | SourceDeploy | View SourceDeploy project details |
Change | Change/createProject | View/getProjectList View/getRepositoryList View/getRepositoryDetail View/getBuildProjectList View/getBuildProjectDetail View/getDeployProjectList View/getDeployProjectDetail | SourceDeploy:Project | SourcePipeline | Create project |
Change | Change/changeProject | View/getProjectList View/getProjectDetail View/getRepositoryList View/getRepositoryDetail View/getBuildProjectList View/getBuildProjectDetail View/getDeployProjectList View/getDeployProjectDetail | Project | SourcePipeline | Change project |
Change | Change/deleteProject | View/getProjectList View/getProjectDetail | Project | SourcePipeline | Delete project |
Change | Change/doPipeline | View/getProjectList View/getProjectDetail View/getHistoryList View/getRepositoryDetail View/getDeployProjectDetail | Project | SourcePipeline | Run pipeline |
VPC
Type | Action name | Related action | Resource type | Group by resource type | Action description |
---|---|---|---|---|---|
View | View/getProjectList | - | - | SourcePipeline | View project list |
View | View/getProjectDetail | View/getProjectList | Project | SourcePipeline | View project details |
View | View/getHistoryList | View/getProjectList | Project | SourcePipeline | View job history list |
View | View/getRepositoryList | View/getProjectList | Project | SourceCommit | View SourceCommit repository list |
View | View/getRepositoryDetail | View/getRepositoryList | SourceCommit:Repository | SourceCommit | View SourceCommit repository details |
View | View/getBuildProjectList | View/getRepositoryList | SourceCommit:Repository | SourceBuild | View SourceBuild project list |
View | View/getBuildProjectDetail | View/getBuildProjectList | SourceBuild:Project | SourceBuild | View SourceBuild project details |
View | View/getDeployProjectList | View/getBuildProjectList | SourceBuild:Project | SourceDeploy | View SourceDeploy project list |
View | View/getDeployProjectDetail | View/getDeployProjectList | VPCSourceDeploy:Project | SourceDeploy | View SourceDeploy project details |
View | View/getSourceBandOrganizationList | - | - | SourceBand | View SourceBand Organization List |
View | View/getSourceBandOrganizationDetail | View/getSourceBandOrganizationList | SourceBand:Organization | SourceBand | View SourceBand organization details |
View | View/getSourceBandProjectList | View/getSourceBandOrganizationDetail | - | SourceBand | View SourceBand project list |
View | View/getSourceBandProjectDetail | View/getSourceBandProjectList | SourceBand:Project | SourceBand | View SourceBand project details |
Change | Change/createProject | View/getProjectList View/getRepositoryList View/getRepositoryDetail View/getBuildProjectList View/getBuildProjectDetail View/getDeployProjectList View/getDeployProjectDetail | VPCSourceDeploy:Project | SourcePipeline | Create project |
Change | Change/changeProject | View/getProjectList View/getProjectDetail View/getRepositoryList View/getRepositoryDetail View/getBuildProjectList View/getBuildProjectDetail View/getDeployProjectList View/getDeployProjectDetail | Project | SourcePipeline | Change project |
Change | Change/deleteProject | View/getProjectList View/getProjectDetail | Project | SourcePipeline | Delete project |
Change | Change/doPipeline | View/getProjectList View/getProjectDetail View/getHistoryList View/getRepositoryDetail View/getDeployProjectDetail | Project | SourcePipeline | Run pipeline |
Even when you are granted a permission for a specific action, you won't be able to perform the task properly unless you are also granted a permission for the related actions that are required. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system will not forcibly include them since it regards such de-selection done intentionally by the main account user. Thus, caution is advised when setting permissions.