- Print
- PDF
Global Traffic Manager Permission Management
- Print
- PDF
Available in Classic and VPC
You can use Sub Account, the account management service of NAVER Cloud Platform to set the access permission for Global Traffic Manager in various ways. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.
Sub Account is a service provided free of charge upon subscription request. For more details about Sub Account, refer to the Service > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account Guide.
System Managed Policies
System Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. If you give the System Managed policy to a sub account you created with Sub Account, the account can use Global Traffic Manager. The following is a simple description of the System Managed policies of Global Traffic Manager.
Policy name | Policy description |
---|---|
NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
NCP_GLOBAL_TRAFFIC_MANAGER_MANAGER | Permission to use all the features of Global Traffic Manager |
NCP_GLOBAL_TRAFFIC_MANAGER_VIEWER | Permission to only see the list of Global Traffic Manager and view |
User Created policies
User-defined policies are policies that users may directly create. Once User Created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a simple description of the User Created policies of Global Traffic Manager.
Classification | Action name | Related action(s) | Resource type | Group by resource type | Action description |
---|---|---|---|---|---|
View | View/getTrafficPolicyList | - | - | Global Traffic Manager | View Traffic Policy List |
View | View/getTrafficPolicyDetail | View/getTrafficPolicyList | Policy | Global Traffic Manager | View Traffic Policy Detail |
View | View/getTrafficProfileList | - | - | Global Traffic Manager | View Traffic Profile List |
View | View/getTrafficProfileDetail | View/getTrafficProfileList | Profile | Global Traffic Manager | View Traffic Profile Detail |
View | View/getGeoCIDRMapList | - | - | Global Traffic Manager | View Geo/CIDR Map List |
View | View/getGeoCIDRMapDetail | View/getGeoCIDRMapList | Map | Global Traffic Manager | View Geo/CIDR Map Detail |
View | View/getQuerylog | View/getTrafficProfileList | - | Global Traffic Manager | View Number of Queries in Domain Information |
Change | Change/createTrafficPolicy | View/getTrafficPolicyList View/getGeoCIDRMapList View/getGeoCIDRMapDetail | - | Global Traffic Manager | Create Traffic Policy |
Change | Change/updateTrafficPolicy | View/getTrafficPolicyList View/getTrafficPolicyDetail View/getGeoCIDRMapList View/getGeoCIDRMapDetail | Policy | Global Traffic Manager | Change Traffic Policy |
Change | Change/deleteTrafficPolicy | View/getTrafficPolicyList View/getTrafficPolicyDetail | Policy | Global Traffic Manger | Delete Traffic Policy |
Change | Change/updateTrafficPolicyDescription | View/getTrafficPolicyList View/getTrafficPolicyDetail | Policy | Global Traffic Manager | Change Traffic Policy Memo |
Change | Change/createTrafficProfile | View/getTrafficPolicyList View/getTrafficPolicyDetail View/getTrafficProfileList Change/manageHealthchecklog | - | Global Traffic Manager | Create Traffic Profile |
Change | Change/updateTrafficProfile | View/getTrafficPolicyList View/getTrafficPolicyDetail View/getTrafficProfileList View/getTrafficProfileDetail Change/manageHealthchecklog | Profile | Global Traffic Profile | Change Traffic Profile |
Change | Change/deleteTrafficProfile | View/getTrafficProfileList View/getTrafficProfileDetail | Profile | Global Traffic Manager | Delete Traffic Profile |
Change | Change/createCeoCIDRMap | View/getGeoCIDRMapList | - | Global Traffic Manager | Create Geo/CIDR Map |
Change | Change/updateGeoCIDRMap | View/getGeoCIDRMapList View/getGeoCIDRMapDetail | Map | Global Traffic Manager | Change Geo/CIDR Map |
Change | Change/deleteGeoCIDRMap | View/getGeoCIDRMapList View/getGeoCIDRMapDetail | Map | Global Traffic Manager | Delete Geo/CIDR Map |
Change | Change/manageHealthchecklog | - | - | Global Traffic Manager | Collect health check logs and forward them to Cloud Log Analytics |
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and does not forcibly include them. Thus, be careful when setting permissions.