SourcePipeline permissions management

Prev Next

Available in Classic and VPC

By using Sub Account, NAVER Cloud Platform's account management service, you can set different access permissions for SourcePipeline. Sub Account offers both system-managed (System Managed) and user-defined (User Created) policies to help you configure management and operation permissions.

Note

Sub Account is a free service with no additional charges. For more information about Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal and the Sub Account user guide.

System-managed policies

System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. Once the system-managed policies are granted to a sub account created in Sub Account, that sub account can use SourcePipeline. Here are the available system-managed policies for SourcePipeline.

Classic

Policy name Policy description
NCP_ADMINISTRATOR Full access to all services, same as the main account
NCP_INFRA_MANAGER Access to all services, except My Account > Billing Information and Cost Management > Billing and Payment Management in the console
NCP_FINANCE_MANAGER Access to only the Cost Explorer service and the console menu My Account > Billing Information and Cost Management > Billing and Payment Management
NCP_SOURCEPIPELINE_MANAGER Full access to all SourcePipeline features
NCP_SOURCEPIPELINE_VIEWER Permission to only use the View list and Search features in SourcePipeline
NCP_SOURCEPIPELINE_USER USER permission managed in SourcePipeline
NCP_SOURCEPIPELINE_ADMIN ADMIN permission managed in SourcePipeline

VPC

Policy name Policy description
NCP_ADMINISTRATOR Full access to all services, same as the main account
NCP_INFRA_MANAGER Access to all services, except My Account > Billing Information and Cost Management > Billing and Payment Management in the console
NCP_FINANCE_MANAGER Access to only the Cost Explorer service and the console menu My Account > Billing Information and Cost Management > Billing and Payment Management
NCP_VPC_SOURCEPIPELINE_MANAGER Full access to all SourcePipeline features on the VPC platform
NCP_VPC_SOURCEPIPELINE_VIEWER Permission to only use the View list and Search features in VPC-based SourcePipeline
NCP_VPC_SOURCEPIPELINE_USER USER permission managed in VPC-based SourcePipeline
NCP_VPC_SOURCEPIPELINE_ADMIN ADMIN permission managed in VPC-based SourcePipeline

User-defined policies

User-created policies let you create custom permissions. When you assign a user-defined policy to a sub account, that account can only perform the specific actions you've allowed. The following is a brief description about user-created policies of SourcePipeline:

Classic

| Type | Action | Related action | Resource type | Group by resource type | Action description |
| ---- | ---- | ---- | ---- | ---- | ---- |
| View | View/getProjectList | - | - | SourcePipeline | View project list. |
| View | View/getProjectDetail | View/getProjectList | Project | SourcePipeline | View project details. |
| View | View/getHistoryList | View/getProjectList | Project | SourcePipeline | View task history list. |
| View | View/getRepositoryList | - | - | SourceCommit | View SourceCommit repository list. |
| View | View/getRepositoryDetail | View/getRepositoryList | SourceCommit:Repository | SourceCommit | View SourceCommit repository details. |
| View | View/getBuildProjectList | - | - | SourceBuild | View SourceBuild project list. |
| View | View/getBuildProjectDetail | View/getBuildProjectList | SourceBuild:Project | SourceBuild | View SourceBuild project details. |
| View | View/getDeployProjectList | - | - | SourceDeploy | View SourceDeploy project list. |
| View | View/getDeployProjectDetail | View/getDeployProjectList | SourceDeploy:Project | SourceDeploy | View SourceDeploy project details. |
| Change | Change/createProject | View/getProjectList
View/getRepositoryList
View/getRepositoryDetail
View/getBuildProjectList
View/getBuildProjectDetail
View/getDeployProjectList
View/getDeployProjectDetail | Project | SourcePipeline | Create project. |
| Change | Change/changeProject | View/getProjectList
View/getProjectDetail
View/getRepositoryList
View/getRepositoryDetail
View/getBuildProjectList
View/getBuildProjectDetail
View/getDeployProjectList
View/getDeployProjectDetail | Project | SourcePipeline | Change project. |
| Change | Change/deleteProject | View/getProjectList
View/getProjectDetail | Project | SourcePipeline | Delete project. |
| Change | Change/doPipeline | View/getProjectList
View/getProjectDetail
View/getHistoryList
View/getRepositoryDetail
View/getDeployProjectDetail | Project | SourcePipeline | Run pipeline. |

VPC

| Type | Action | Related action | Resource type | Group by resource type | Action description |
| ---- | ---- | ---- | ---- | ---- | ---- |
| View | View/getProjectList | - | - | SourcePipeline | View project list. |
| View | View/getProjectDetail | View/getProjectList | Project | SourcePipeline | View project details. |
| View | View/getHistoryList | View/getProjectList | Project | SourcePipeline | View task history list. |
| View | View/getRepositoryList | - | - | SourceCommit | View SourceCommit repository list. |
| View | View/getRepositoryDetail | View/getRepositoryList | SourceCommit:Repository | SourceCommit | View SourceCommit repository details. |
| View | View/getBuildProjectList | - | - | SourceBuild | View SourceBuild project list. |
| View | View/getBuildProjectDetail | View/getBuildProjectList | SourceBuild:Project | SourceBuild | View SourceBuild project details. |
| View | View/getDeployProjectList | - | - | SourceDeploy | View SourceDeploy project list. |
| View | View/getDeployProjectDetail | View/getDeployProjectList | VPCSourceDeploy:Project | SourceDeploy | View SourceDeploy project details. |
| View | View/getSourceBandOrganizationList | - | - | SourceBand | View SourceBand organization list. |
| View | View/getSourceBandOrganizationDetail | View/getSourceBandOrganizationList | SourceBand:Organization | SourceBand | View SourceBand organization details. |
| View | View/getSourceBandProjectList | View/getSourceBandOrganizationDetail | - | SourceBand | View SourceBand project list. |
| View | View/getSourceBandProjectDetail | View/getSourceBandProjectList | SourceBand:Project | SourceBand | View SourceBand project details. |
| Change | Change/createProject | View/getProjectList
View/getRepositoryList
View/getRepositoryDetail
View/getBuildProjectList
View/getBuildProjectDetail
View/getDeployProjectList
View/getDeployProjectDetail | Project | SourcePipeline | Create project. |
| Change | Change/changeProject | View/getProjectList
View/getProjectDetail
View/getRepositoryList
View/getRepositoryDetail
View/getBuildProjectList
View/getBuildProjectDetail
View/getDeployProjectList
View/getDeployProjectDetail | Project | SourcePipeline | Change project. |
| Change | Change/deleteProject | View/getProjectList
View/getProjectDetail | Project | SourcePipeline | Delete project. |
| Change | Change/doPipeline | View/getProjectList
View/getProjectDetail
View/getHistoryList
View/getRepositoryDetail
View/getDeployProjectDetail | Project | SourcePipeline | Run pipeline. |

Caution

If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. Sub Account automatically includes these related permissions to prevent this issue. However, if you manually uncheck these auto-selected related actions, the system assumes this was intentional and won't override your selection.