Available in VPC
You can set different access permissions for SourceBand using NAVER Cloud Platform's Sub Account service. Sub Account offers both system-managed (System Managed) and user-defined (User Created) policies to help you configure management and operation permissions.
Sub Account is a free service with no additional charges. For more information about Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal and the Sub Account user guide.
System-managed policies
System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. When you assign one of these policies to a sub account, that account gets access to SourceBand. Here are the available system-managed policies for SourceBand:
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Full access to all services, same as the main account |
| NCP_INFRA_MANAGER | Access to all services, except My Account > Billing Information and Cost Management > Billing and Payment Management in the console |
| NCP_FINANCE_MANAGER | Access to only the Cost Explorer service and the console menu My Account > Billing Information and Cost Management > Billing and Payment Management |
| NCP_VPC_SOURCEBAND_MANAGER | Full access to all SourceBand features |
| NCP_VPC_SOURCEBAND_VIEWER | View-only access to all SourceBand features and lists |
User-defined policies
User-created policies let you create custom permissions. When you assign a user-defined policy to a sub account, that account can only perform the specific actions you've allowed. Here are the available user-defined policies for SourceBand:
| Type | Action | Related action | Resource type | Group by resource type | Action description |
| ---- | ---- | ---- | ---- | ---- | ---- |
| View | View/getOrganizationList | - | - | Organization | View organization list. |
| View | View/getOrganizationDetail | View/getOrganizationList | Organization | Organization | View organization details. |
| View | View/manageOrganizationBoard | View/getOrganizationList
View/getOrganizationDetail | Organization | Organization | Manage integrated board. |
| View | View/getProjectList | View/getOrganizationList
View/getOrganizationDetail | Organization | Project | View project list. |
| View | View/getProjectDetail | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList | Project | Project | View project details. |
| View | View/manageProjectBoard | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | Project | Project | Manage project board. |
| View | View/manageTag | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/manageProjectBoard | Project | Tag | Manage tags. |
| View | View/getWorkflowList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | - | Workflow | View the list of workflows. |
| View | View/getWorkflowDetail | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getWorkflowList | Workflow | Workflow | View details of a workflow. |
| View | View/getWorkflowHistoryList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getWorkflowList
View/getWorkflowDetail | Workflow | Workflow | View the list of workflow execution history. |
| View | View/getSourceCommitRepositoryList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | - | SourceCommit | View SourceCommit repository list. |
| View | View/getSourceCommitRepositoryDetail | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getSourceCommitRepositoryList | SourceCommit:Repository | SourceCommit | View SourceCommit repository details. |
| View | View/getSubAccountList | View/getOrganizationList
View/getOrganizationDetail
View/manageOrganizationBoard
View/getProjectList
View/getProjectDetail
View/manageProjectBoard | - | SubAccount | View the list of sub accounts. |
| View | View/getSubAccountDetail | View/getOrganizationList
View/getOrganizationDetail
View/manageOrganizationBoard
View/getProjectList
View/getProjectDetail
View/manageProjectBoard
View/getSubAccountList | IAM:SubAccount | SubAccount | View a specific sub account. |
| View | View/getSourceBuildProjectList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | - | SourceBuild | View SourceBuild project list. |
| View | View/getSourceBuildProjectDetail | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getSourceBuildProjectList | SourceBuild:Project | SourceBuild | View details of a SourceBuild project. |
| View | View/getSourceBuildHistoryList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getSourceBuildProjectList | SourceBuild:Project | SourceBuild | View the task history of SourceBuild projects. |
| View | View/getSourceDeployProjectList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | - | SourceDeploy | View SourceDeploy project list. |
| View | View/getSourceDeployProjectDetail | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getSourceDeployProjectList | SourceDeploy:Project | SourceDeploy | View details of a SourceDeploy project. |
| View | View/getSourceDeployHistoryList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getSourceDeployProjectList | SourceDeploy:Project | SourceDeploy | View the task history of SourceDeploy projects. |
| View | View/getSourcePipelineProjectList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | - | SourcePipeline | View the list of SourcePipeline projects. |
| View | View/getSourcePipelineHistoryList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getSourcePipelineProjectList | SourcePipeline:Project | SourcePipeline | View the task history of SourcePipeline projects. |
| View | View/getRegistryList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | - | Container Registry | View the list of Container Registry registries. |
| View | View/getRegistryDetail | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getRegistryList | ContainerRegistry:Registry | Container Registry | View details of a Container Registry. |
| View | View/getBucketList | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetaill | - | Object Storage | View the list of Object Storage buckets. |
| View | View/getBucketDetail | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getBucketList | ObjectStorage:Bucket | Object Storage | View details of an Object Storage bucket. |
| Change | Change/createOrganization | View/getOrganizationList | - | Organization | Create organization. |
| Change | Change/updateOrganization | View/getOrganizationList
View/getOrganizationDetail | Organization | Organization | Edit organization. |
| Change | Change/deleteOrganization | View/getOrganizationList
View/getOrganizationDetail | Organization | Organization | Delete organization. |
| Change | Change/createProject | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList | Organization | Project | Create project. |
| Change | Change/updateProject | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | Project | Project | Edit project. |
| Change | Change/deleteProject | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail | Project | Project | Delete project. |
| Change | Change/createKanbanColumn | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/manageProjectBoard | Project | KanbanColumn | Create Kanban column. |
| Change | Change/updateKanbanColumn | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/manageProjectBoard | Project | KanbanColumn | Edit Kanban column. |
| Change | Change/deleteKanbanColumn | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/manageProjectBoard | Project | KanbanColumn | Delete Kanban column. |
| Change | Change/createIssue | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/manageProjectBoard | Project | Issue | Create issue. |
| Change | Change/updateIssue | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/manageProjectBoard | Project | Issue | Edit issue. |
| Change | Change/deleteIssue | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/manageProjectBoard | Project | Issue | Delete issue. |
| Change | Change/createWorkflow | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getWorkflowList | - | Workflow | Create workflow. |
| Change | Change/updateWorkflow | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getWorkflowList
View/getWorkflowDetail | Workflow | Workflow | Edit workflow information. |
| Change | Change/deleteWorkflow | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getWorkflowList
View/getWorkflowDetail | Workflow | Workflow | Delete workflow. |
| Change | Change/doWorkflow | View/getOrganizationList
View/getOrganizationDetail
View/getProjectList
View/getProjectDetail
View/getWorkflowList
View/getWorkflowDetail | Workflow | Workflow | Run workflow. |
| Change | Change/subscribeProduct | - | - | - | Manage subscriptions for SourceBand. |
If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. Sub Account automatically includes these related permissions to prevent this issue. However, if you manually uncheck these auto-selected related actions, the system assumes this was intentional and won't override your selection.
Regardless of workflow permissions, workflows can be created, edited, or deleted through SourceCommit. If you have commit access to the repository, you can also modify the workflow. Therefore, use caution when managing changes to the workflow definition files in YAML format.