Global Traffic Manager Permission Management
    • PDF

    Global Traffic Manager Permission Management

    • PDF

    Article Summary

    Available in Classic and VPC

    You can use Sub Account, the account management service of NAVER Cloud Platform to set the access permission for Global Traffic Manager in various ways. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.

    Note

    Sub Account is a service provided free of charge upon subscription request. For more details about Sub Account, refer to the Service > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account Guide.

    System Managed Policies

    System Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. If you give the System Managed policy to a sub account you created with Sub Account, the account can use Global Traffic Manager. The following is a simple description of the System Managed policies of Global Traffic Manager.

    Policy namePolicy description
    NCP_ADMINISTRATORPermission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts
    NCP_INFRA_MANAGERPermission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal
    NCP_GLOBAL_TRAFFIC_MANAGER_MANAGERPermission to use all the features of Global Traffic Manager
    NCP_GLOBAL_TRAFFIC_MANAGER_VIEWERPermission to only see the list of Global Traffic Manager and view

    User Created policies

    User-defined policies are policies that users may directly create. Once User Created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a simple description of the User Created policies of Global Traffic Manager.

    ClassificationAction nameRelated action(s)Resource typeGroup by resource typeAction description
    ViewView/getTrafficPolicyList--Global Traffic ManagerView Traffic Policy List
    ViewView/getTrafficPolicyDetailView/getTrafficPolicyListPolicyGlobal Traffic ManagerView Traffic Policy Detail
    ViewView/getTrafficProfileList--Global Traffic ManagerView Traffic Profile List
    ViewView/getTrafficProfileDetailView/getTrafficProfileListProfileGlobal Traffic ManagerView Traffic Profile Detail
    ViewView/getGeoCIDRMapList--Global Traffic ManagerView Geo/CIDR Map List
    ViewView/getGeoCIDRMapDetailView/getGeoCIDRMapListMapGlobal Traffic ManagerView Geo/CIDR Map Detail
    ViewView/getQuerylogView/getTrafficProfileList-Global Traffic ManagerView Number of Queries in Domain Information
    ChangeChange/createTrafficPolicyView/getTrafficPolicyList
    View/getGeoCIDRMapList
    View/getGeoCIDRMapDetail
    -Global Traffic ManagerCreate Traffic Policy
    ChangeChange/updateTrafficPolicyView/getTrafficPolicyList
    View/getTrafficPolicyDetail
    View/getGeoCIDRMapList
    View/getGeoCIDRMapDetail
    PolicyGlobal Traffic ManagerChange Traffic Policy
    ChangeChange/deleteTrafficPolicyView/getTrafficPolicyList
    View/getTrafficPolicyDetail
    PolicyGlobal Traffic MangerDelete Traffic Policy
    ChangeChange/updateTrafficPolicyDescriptionView/getTrafficPolicyList
    View/getTrafficPolicyDetail
    PolicyGlobal Traffic ManagerChange Traffic Policy Memo
    ChangeChange/createTrafficProfileView/getTrafficPolicyList
    View/getTrafficPolicyDetail
    View/getTrafficProfileList
    Change/manageHealthchecklog
    -Global Traffic ManagerCreate Traffic Profile
    ChangeChange/updateTrafficProfileView/getTrafficPolicyList
    View/getTrafficPolicyDetail
    View/getTrafficProfileList
    View/getTrafficProfileDetail
    Change/manageHealthchecklog
    ProfileGlobal Traffic ProfileChange Traffic Profile
    ChangeChange/deleteTrafficProfileView/getTrafficProfileList
    View/getTrafficProfileDetail
    ProfileGlobal Traffic ManagerDelete Traffic Profile
    ChangeChange/createCeoCIDRMapView/getGeoCIDRMapList-Global Traffic ManagerCreate Geo/CIDR Map
    ChangeChange/updateGeoCIDRMapView/getGeoCIDRMapList
    View/getGeoCIDRMapDetail
    MapGlobal Traffic ManagerChange Geo/CIDR Map
    ChangeChange/deleteGeoCIDRMapView/getGeoCIDRMapList
    View/getGeoCIDRMapDetail
    MapGlobal Traffic ManagerDelete Geo/CIDR Map
    ChangeChange/manageHealthchecklog--Global Traffic ManagerCollect health check logs and forward them to Cloud Log Analytics
    Caution

    Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and does not forcibly include them. Thus, be careful when setting permissions.


    Was this article helpful?

    Changing your password will log you out immediately. Use the new password to log back in.
    First name must have atleast 2 characters. Numbers and special characters are not allowed.
    Last name must have atleast 1 characters. Numbers and special characters are not allowed.
    Enter a valid email
    Enter a valid password
    Your profile has been successfully updated.