Managing SourcePipeline permissions
  • PDF

Managing SourcePipeline permissions

  • PDF

It is available in a Classic/VPC environment.

By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for SourcePipeline. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.

Note

Sub Account is a service provided free of charge upon subscription request. For more information on Sub Account, refer to the Services > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account Guide.

System Managed policies

System Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once System Managed policies are granted to a sub account created in Sub Account, that sub account can use SourcePipeline. The following is a brief description about System Managed policies of SourcePipeline.

Classic

Policy name Policy description
NCP_ADMINISTRATOR Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts
NCP_INFRA_MANAGER Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal
NCP_SOURCEPIPELINE_MANAGER Permission to use all features in SourcePipeline
NCP_SOURCEPIPELINE_VIEWER Permission to only use the View list and Search features in SourcePipeline
NCP_SOURCEPIPELINE_USER User permission managed in SourcePipeline
NCP_SOURCEPIPELINE_ADMIN Admin permission managed in SourcePipeline

VPC

Policy name Policy description
NCP_ADMINISTRATOR Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts
NCP_INFRA_MANAGER Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal
NCP_VPC_SOURCEPIPELINE_MANAGER Permission to use all features in VPC-based SourcePipeline
NCP_VPC_SOURCEPIPELINE_VIEWER Permission to only use the View list and Search features in VPC-based SourcePipeline
NCP_VPC_SOURCEPIPELINE_USER User permission managed in VPC-based SourcePipeline
NCP_VPC_SOURCEPIPELINE_ADMIN Admin permission managed in VPC-based SourcePipeline

User Created policies

User Created policies are policies that users can create. Once User Created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description about User created policies of SourcePipeline.

Classic

Type Action name Related action(s) Resource type Group by resource type Action description
View View/getProjectList - - SourcePipeline View project list.
View View/getProjectDetail View/getProjectList Project SourcePipeline View project details.
View View/getHistoryList View/getProjectList Project SourcePipeline View task history list.
View View/getRepositoryList View/getProjectList Project SourceCommit View SourceCommit repository list.
View View/getRepositoryDetail View/getRepositoryList SourceCommit:Repository SourceCommit View SourceCommit repository details.
View View/getBuildProjectList View/getRepositoryList SourceCommit:Repository SourceBuild View SourceBuild project list.
View View/getBuildProjectDetail View/getBuildProjectList SourceBuild:Project SourceBuild View SourceBuild project details.
View View/getDeployProjectList View/getBuildProjectList SourceBuild:Project SourceDeploy View SourceDeploy project list.
View View/getDeployProjectDetail View/getDeployProjectList SourceDeploy:Project SourceDeploy View SourceDeploy project details.
Change Change/createProject View/getProjectList
View/getRepositoryList
View/getRepositoryDetail
View/getBuildProjectList
View/getBuildProjectDetail
View/getDeployProjectList
View/getDeployProjectDetail
SourceDeploy:Project SourcePipeline Create project.
Change Change/changeProject View/getProjectList
View/getProjectDetail
View/getRepositoryList
View/getRepositoryDetail
View/getBuildProjectList
View/getBuildProjectDetail
View/getDeployProjectList
View/getDeployProjectDetail
Project SourcePipeline Change project.
Change Change/deleteProject View/getProjectList
View/getProjectDetail
Project SourcePipeline Delete project.
Change Change/doPipeline View/getProjectList
View/getProjectDetail
View/getHistoryList
View/getRepositoryDetail
View/getDeployProjectDetail
Project SourcePipeline Run pipeline.

VPC

Type Action name Related action(s) Resource type Group by resource type Action description
View View/getProjectList - - SourcePipeline View project list.
View View/getProjectDetail View/getProjectList Project SourcePipeline View project details.
View View/getHistoryList View/getProjectList Project SourcePipeline View task history list.
View View/getRepositoryList View/getProjectList Project SourceCommit View SourceCommit repository list.
View View/getRepositoryDetail View/getRepositoryList SourceCommit:Repository SourceCommit View SourceCommit repository details.
View View/getBuildProjectList View/getRepositoryList SourceCommit:Repository SourceBuild View SourceBuild project list.
View View/getBuildProjectDetail View/getBuildProjectList SourceBuild:Project SourceBuild View SourceBuild project details.
View View/getDeployProjectList View/getBuildProjectList SourceBuild:Project SourceDeploy View SourceDeploy project list.
View View/getDeployProjectDetail View/getDeployProjectList VPCSourceDeploy:Project SourceDeploy View SourceDeploy project details.
Change Change/createProject View/getProjectList
View/getRepositoryList
View/getRepositoryDetail
View/getBuildProjectList
View/getBuildProjectDetail
View/getDeployProjectList
View/getDeployProjectDetail
VPCSourceDeploy:Project SourcePipeline Create project.
Change Change/changeProject View/getProjectList
View/getProjectDetail
View/getRepositoryList
View/getRepositoryDetail
View/getBuildProjectList
View/getBuildProjectDetail
View/getDeployProjectList
View/getDeployProjectDetail
Project SourcePipeline Change project.
Change Change/deleteProject View/getProjectList
View/getProjectDetail
Project SourcePipeline Delete project.
Change Change/doPipeline View/getProjectList
View/getProjectDetail
View/getHistoryList
View/getRepositoryDetail
View/getDeployProjectDetail
Project SourcePipeline Run pipeline.
Caution

Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be careful when setting permissions.


Was this article helpful?