- Print
- PDF
Managing One Click Multi DRM permissions
- Print
- PDF
Available in Classic and VPC
By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for One Click Multi DRM. Sub Account provides system managed policies for setting management and administration permissions.
Sub Account is a service provided free of charge upon subscription. For more details about Sub Account, see Services > Management & Governance > Sub Account in the NAVER Cloud Platform portal, as well as Sub Account user guide.
System managed policies
System managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once system managed policies are granted to a sub account created in Sub Account, that sub account can use One Click Multi DRM. The following is a brief description about the system managed policies of One Click Multi DRM.
Policy name | Policy description |
---|---|
NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform with restricted access to some features (Manage usage, Manage payment, Solution usage status) on My Page in the portal |
User-defined policies
User-defined policies are policies that users can create personally. Once user-defined policies are granted to a sub account created in Sub Account, the sub account can use only the user-assigned action combinations.
The following are brief descriptions of user-defined policies:
Category | Action name | Related action(s) | Resource type | Group by resource type | Action description |
---|---|---|---|---|---|
View | getDRMLicenseList | View/getPolicyDetail View/getPolicyList View/getSiteDetail getSiteList | Site | DRMLicense | Views DRM licensing list |
View | getDRMLicenseListAsExcel | View/getPolicyDetail View/getPolicyList View/getSiteDetail View/getSiteList | Site | DRMLicense | Views DRM licensing history list in Excel |
View | getPolicyAllLogs | - | - | Policy | Views full policy logs |
View | getPolicyDetail | View/getPolicyList | Policy | Policy | Views policy information |
View | getPolicyList | - | - | Policy | Views policy list |
View | getPolicyLogs | - | Policy | Policy | Views policy logs |
View | getSiteAllLogs | View/getPolicyDetail View/getPolicyList View/getSiteDetail View/getSiteList | - | Site | Views full site logs |
View | getSiteDetail | View/getPolicyDetail View/getPolicyList View/getSiteList | Site | Site | Views site information |
View | getSiteList | - | - | Site | Views site list |
View | getSiteLogs | View/getPolicyDetail View/getPolicyList View/getSiteDetail View/getSiteList | Site | Site | Views site logs |
Change | blockSite | View/getPolicyDetail View/getPolicyList View/getSiteDetail View/getSiteList | Site | Site | Forcibly stops a site |
Change | copyPolicy | View/getPolicyDetail View/getPolicyList Change/createPolicy | Policy | Policy | Copy policies |
Change | createDRMLicense | View/getPolicyDetail View/getPolicyList View/getSiteDetail View/getSiteList | Site | DRMLicense | DRM licensing |
Change | createPolicy | View/getPolicyList | - | Policy | Create policies |
Change | createSite | View/getPolicyDetail View/getPolicyList View/getSiteList | - | Site | Create sites |
Change | deletePolicy | View/getPolicyDetail View/getPolicyList View/getSiteDetail View/getSiteList Change/updateSite | Policy | Policy | Delete policies |
Change | unblockSite | View/getPolicyDetail View/getPolicyList View/getSiteDetail View/getSiteList | Site | Site | Unblock sites |
Change | updatePolicy | View/getPolicyDetail View/getPolicyList | Policy | Policy | Edit policies |
Change | updateSite | View/getPolicyDetail View/getPolicyList View/getSiteDetail View/getSiteList | Site | Site | Edit site settings |
Even when you are granted a permission for a specific action, you won't be able to perform the task properly unless you are also granted a permission for the related actions that are required. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you clear the related actions that are automatically granted from the check box, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be cautious when setting permissions.