NAS permissions management

Prev Next

Available in Classic and VPC

You can set different access permissions for NAS using NAVER Cloud Platform's Sub Account service. Sub Account offers both system-managed (System Managed) and user-defined (User Created) policies to help you configure management and operation permissions.

Note

Sub Account is a free service with no additional charges. For more information about Sub Account, see Services > Management & Governance > Sub Account on the NAVER Cloud Platform portal and the Sub Account user guide.

System-managed policies

System-managed policies are pre-built, role-based policies that NAVER Cloud Platform provides for your convenience. When you assign one of these policies to a sub account, that account gets access to NAS. Here are the available system-managed policies for NAS:

Classic

Policy name Policy description
NCP_ADMINISTRATOR Full access to all services, same as the main account.
NCP_INFRA_MANAGER Access to all services, except the My Account > Billing Information & Cost Management > Billing & Payment Management menu on the console.
NCP_FINANCE_MANAGER Access to only Cost Explorer and the My Account > Billing Information & Cost Management > Billing & Payment Management menu on the console.
NCP_NAS_MANAGER Access to all NAS features, except granting ACL permissions.
NCP_NAS_VIEWER View-only access to all NAS features and lists.
NCP_VPC_NAS_MANAGER Full access to all NAS features on the VPC platform, except granting ACL permissions.
NCP_VPC_NAS_VIEWER View-only access to all NAS features and lists on the VPC platform.

VPC

Policy name Policy description
NCP_ADMINISTRATOR Full access to all services, same as the main account.
NCP_INFRA_MANAGER Access to all services, except the My Account > Billing Information & Cost Management > Billing & Payment Management menu on the console.
NCP_FINANCE_MANAGER Access to only Cost Explorer and the My Account > Billing Information & Cost Management > Billing & Payment Management menu on the console.
NCP_NAS_MANAGER Access to all NAS features, except granting ACL permissions.
NCP_NAS_VIEWER View-only access to all NAS features and lists.
NCP_VPC_NAS_MANAGER Full access to all NAS features on the VPC platform, except granting ACL permissions.
NCP_VPC_NAS_VIEWER View-only access to all NAS features and lists on the VPC platform.

User-defined policies

User-defined policies let you create custom permissions. When you assign a user-defined policy to a sub account, that account can only perform the specific actions you've allowed. Here are the available user-defined policies for NAS:

Classic

| Type | Action | Related action | Resource type | Group by resource type | Action description |
| ---- | ---- | ---- | ---- | ---- | ---- |
| View | View/getEventNotificationSetting |

  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | View notification settings for NAS volumes. |
| View | View/getEventSetNASVolumeInstanceList | - | - | Event | View list of NAS volumes with event set. |
| View | View/getNASVolumeInstanceDetail | View/getNASVolumeInstanceList | Volume | Volume | View NAS volume instance details using NAS volume instance number. |
| View | View/getNASVolumeInstanceEventConfigurationLog |
  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | View event setting logs for NAS volumes. |
| View | View/getNASVolumeInstanceEventList | View/getEventSetNASVolumeInstanceList | Volume | Event | View details of NAS volumes with event set. |
| View | View/getNASVolumeInstanceEventOccuringLog |
  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | View events that occurred on NAS volumes. |
| View | View/getNASVolumeInstanceList | - | - | Volume | View NAS volume instance list. |
| View | View/getNASVolumeInstanceMonitoring |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | View monitoring data collected for NAS volume instances. |
| View | View/getNASVolumeInstanceSnapshotConfigurationLog |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | View snapshot data set for NAS volumes in the last 3 months. |
| View | View/getNASVolumeInstanceSnapshotList | View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | View list of snapshots created for NAS volumes. |
| View | View/getServerInstanceDetail | View/getServerInstanceList | Server:Server | Volume | View details of servers that can set access control for NAS volume instances. |
| View | View/getServerInstanceList | - | - | Volume | View list of servers that can set access control for NAS volume instances. |
| View | View/getSnapshotScheduledNASVolumeInstanceList | - | - | Snapshot | View snapshot configuration history for NAS volumes. |
| Change | Change/ChangeEventNotificatoinRecipient | View/getEventNotificationSetting | Volume | Event | Set recipients for NAS volume notifications. |
| Change | Change/changeNASCIFSAuthentication | View/getNASVolumeInstanceList | - | Volume | Authenticate with ID and password to mount NAS volumes on Windows Server. |
| Change | Change/changeNASVolumeAccessControl |
  • View/getNASVolumeInstanceList
  • View/getServerInstanceList
  • View/getServerInstanceDetail
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Add ACL settings to mount NAS volumes on Linux Server. |
| Change | Change/changeNASVolumeInstanceDescription |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Enter description for NAS volumes. |
| Change | Change/changeNASVolumeInstanceEvent |
  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | Change event settings for NAS volumes. |
| Change | Change/changeNASVolumeInstanceSnapshotSchedule |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | Change snapshot settings for NAS volumes. |
| Change | Change/changeNASVolumeSize |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Change the volume size of NAS volume instances. |
| Change | Change/createNASVolumeInstance |
  • View/getServerInstanceList
  • View/getServerInstanceDetail
| - | Volume | Create NAS volume instances. |
| Change | Change/createNASVolumeInstanceDirectSnapshot |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | Create immediate snapshots for NAS volumes. |
| Change | Change/deleteNASVolumeInstances |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Delete NAS volume instance list. |
| Change | Change/removeNASVolumeInstanceEvent |
  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | Disable event settings for NAS volumes. |
| Change | Change/removeNASVolumeInstanceSnapshot |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | Delete snapshots for NAS volumes. |
| Change | Change/restoreNASVolumeInstanceWithSnapshot |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | Restore snapshots for NAS volumes. |
| Change | Change/setNASVolumeInstanceEvent |
  • View/getNASVolumeInstanceList
  • Change/ChangeEventNotificatoinRecipient
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Create event settings for NAS volumes. |
| Change | Change/setNASVolumeInstanceSnapshotSchedule |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Create snapshots for NAS volumes. |
| Change | Change/setNASVolumeTerminationProtection |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Set return protection for NAS volumes. |

VPC

| Type | Action | Related action | Resource type | Group by resource type | Action description |
| ---- | ---- | ---- | ---- | ---- | ---- |
| View | View/getEventNotificationSetting |

  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | View notification settings for NAS volumes. |
| View | View/getEventSetNASVolumeInstanceList | - | - | Event | View list of NAS volumes with event set. |
| View | View/getNASVolumeInstanceDetail | View/getNASVolumeInstanceList | Volume | Volume | View NAS volume instance details using NAS volume instance number. |
| View | View/getNASVolumeInstanceEventConfigurationLog |
  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | View event setting logs for NAS volumes. |
| View | View/getNASVolumeInstanceEventList | View/getEventSetNASVolumeInstanceList | Volume | Event | View details of NAS volumes with event set. |
| View | View/getNASVolumeInstanceEventOccuringLog |
  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | View events that occurred on NAS volumes. |
| View | View/getNASVolumeInstanceList | - | - | Volume | View NAS volume instance list. |
| View | View/getNASVolumeInstanceMonitoring |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | View monitoring data collected for NAS volume instances. |
| View | View/getNASVolumeInstanceSnapshotConfigurationLog |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | View snapshot data set for NAS volumes in the last 3 months. |
| View | View/getNASVolumeInstanceSnapshotList | View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | View list of snapshots created for NAS volumes. |
| View | View/getServerInstanceDetail | View/getServerInstanceList | Server:Server | Volume | View details of servers that can set access control for NAS volume instances. |
| View | View/getServerInstanceList | - | - | Volume | View list of servers that can set access control for NAS volume instances. |
| View | View/getSnapshotScheduledNASVolumeInstanceList | - | - | Snapshot | View snapshot configuration history for NAS volumes. |
| Change | Change/ChangeEventNotificatoinRecipient | View/getEventNotificationSetting | Volume | Event | Set recipients for NAS volume notifications. |
| Change | Change/changeNASCIFSAuthentication | View/getNASVolumeInstanceList | - | Volume | Authenticate with ID and password to mount NAS volumes on Windows Server. |
| Change | Change/changeNASVolumeAccessControl |
  • View/getNASVolumeInstanceList
  • View/getServerInstanceList
  • View/getServerInstanceDetail
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Add ACL settings to mount NAS volumes on Linux Server. |
| Change | Change/changeNASVolumeInstanceDescription |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Enter description for NAS volumes. |
| Change | Change/changeNASVolumeInstanceEvent |
  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | Change event settings for NAS volumes. |
| Change | Change/changeNASVolumeInstanceSnapshotSchedule |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | Change snapshot settings for NAS volumes. |
| Change | Change/changeNASVolumeSize |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Change the volume size of NAS volume instances. |
| Change | Change/createNASVolumeInstance |
  • View/getServerInstanceList
  • View/getServerInstanceDetail
| - | Volume | Create NAS volume instances. |
| Change | Change/createNASVolumeInstanceDirectSnapshot |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | Create immediate snapshots for NAS volumes. |
| Change | Change/deleteNASVolumeInstances |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Delete NAS volume instance list. |
| Change | Change/removeNASVolumeInstanceEvent |
  • View/getEventSetNASVolumeInstanceList
  • View/getNASVolumeInstanceEventList
| Volume | Event | Disable event settings for NAS volumes. |
| Change | Change/removeNASVolumeInstanceSnapshot |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | Delete snapshots for NAS volumes. |
| Change | Change/restoreNASVolumeInstanceWithSnapshot |
  • View/getNASVolumeInstanceSnapshotList
  • View/getSnapshotScheduledNASVolumeInstanceList
| Volume | Snapshot | Restore snapshots for NAS volumes. |
| Change | Change/setNASVolumeInstanceEvent |
  • View/getNASVolumeInstanceList
  • Change/ChangeEventNotificatoinRecipient
  • View/getNASVolumeInstanceDetail
| Volume | Volume | Create event settings for NAS volumes. |
| Change | Change/setNASVolumeInstanceSnapshotSchedule |
  • View/getNASVolumeInstanceList
  • View/getNASVolumeInstanceDetail | Volume | Volume | Create snapshots for NAS volumes. |
    | Change | Change/setNASVolumeTerminationProtection |
    • View/getNASVolumeInstanceList
    • View/getNASVolumeInstanceDetail | Volume | Volume | Set return protection for NAS volumes. |

      Caution

      If you grant someone access to a specific action but not to the required related actions, they won't be able to complete their tasks. Sub Account automatically includes these related permissions to prevent this issue. However, if you manually uncheck these auto-selected related actions, the system assumes this was intentional and won't override your selection.