NAS permissions management
- Print
- PDF
NAS permissions management
- Print
- PDF
Article summary
Did you find this summary helpful?
Thank you for your feedback
Available in Classic and VPC
By using Sub Account, which is NAVER Cloud Platform's account management service, you can set various access permissions for NAS. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.
Note
The Sub Account service is provided free of charge upon subscription request. For more information on Sub Account, refer to the Service > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account Guide.
System Managed policies
System Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once System Managed policies are granted to a sub account created in Sub Account, that sub account can use NAS. The following is a brief description about System Managed policies of NAS.
Classic
| Policy Name | Policy Description |
|---|---|
| NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
| NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
| NCP_NAS_VIEWER | Permission to only use the search feature in the NAS service |
| NCP_NAS_MANAGER | Permission to use all the features in NAS |
| NCP_KUBERNETES_SERVICE_MANAGER | Permission to use all features of VPC-based Ncloud Kubernetes Service (including Server (MANAGER), NAS (MANAGER), Load Balancer (MANAGER) permissions) |
VPC
| Policy Name | Policy Description |
|---|---|
| NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
| NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
| NCP_VPC_NAS_VIEWER | Permission to only use the search feature in the VPC-based NAS service |
| NCP_VPC_NAS_MANAGER | Permission to use all the features in the VPC-based NAS product |
| NCP_VPC_KUBERNETES_SERVICE_VIEWER | Permission to only use View List and View features of VPC-based Ncloud Kubernetes Service (including Server (VIEWER), Load Balancer (VIEWER), NAS (MANAGER) permissions) |
| NCP_VPC_KUBERNETES_SERVICE_MANAGER | Permission to use all features of VPC-based Ncloud Kubernetes Service (including Server (MANAGER), NAS (MANAGER), Load Balancer (MANAGER) permissions) |
User-defined policy
User-defined policies are policies that users can create. Once User-defined policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description about User-defined policies of NAS.
Classic
| Type | Action Name | Related action(s) | Resource type | Group by resource type | Action Description |
|---|---|---|---|---|---|
| View | View/getEventNotificationSetting | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Views the history of notification settings for the NAS volume. |
| View | View/getEventSetNASVolumeInstanceList | - | - | Event | Views the list of volumes with events set for the NAS volume. |
| View | View/getNASVolumeInstanceDetail | View/getNASVolumeInstanceList | Volume | Volume | Gets the NAS volume instance details by using the NAS volume instance number. |
| View | View/getNASVolumeInstanceEventConfigurationLog | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Views the event setting logs for the NAS volume. |
| View | View/getNASVolumeInstanceEventList | View/getEventSetNASVolumeInstanceList | Volume | Event | Views the details of volumes with events set for the NAS volume. |
| View | View/getNASVolumeInstanceEventOccuringLog | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Can check events occurred in relation to NAS volume |
| View | View/getNASVolumeInstanceList | - | - | Volume | View NAS volume instance list |
| View | View/getNASVolumeInstanceMonitoring | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | View collected monitoring information of NAS volume instance |
| View | View/getNASVolumeInstanceSnapshotConfigurationLog | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Gets the snapshot information that has been set in the past 3 months for the NAS volume. |
| View | View/getNASVolumeInstanceSnapshotList | View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Views the list of snapshots created for the NAS volume. |
| View | View/getServerInstanceDetail | View/getServerInstanceList | Server:Server | Volume | Views the details of servers for access control settings of the NAS volume instance. |
| View | View/getServerInstanceList | - | - | Volume | Views server list for access control settings of NAS volume instance. |
| View | View/getSnapshotScheduledNASVolumeInstanceList | - | - | Snapshot | Views the history of snapshot settings for the NAS volume. |
| Change | Change/ChangeEventNotificatoinRecipient | View/getEventNotificationSetting | Volume | Event | Sets recipient for NAS volume notification settings history |
| Change | Change/changeNASCIFSAuthentication | View/getNASVolumeInstanceList | - | Volume | Verifies ID and password to mount NAS volume in Windows Server |
| Change | Change/changeNASVolumeAccessControl | View/getNASVolumeInstanceList View/getServerInstanceList View/getServerInstanceDetail View/getNASVolumeInstanceDetail | Volume | Volume | Adds ACL settings to mount NAS volume in Linux server |
| Change | Change/changeNASVolumeInstanceDescription | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Provide NAS volume description |
| Change | Change/changeNASVolumeInstanceEvent | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Changes the event settings for the NAS volume. |
| Change | Change/changeNASVolumeInstanceSnapshotSchedule | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Changes the snapshot settings for the NAS volume. |
| Change | Change/changeNASVolumeSize | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Changes the volume size of the NAS volume instances. |
| Change | Change/createNASVolumeInstance | View/getServerInstanceList View/getServerInstanceDetail | - | Volume | Creates NAS volume instances. |
| Change | Change/createNASVolumeInstanceDirectSnapshot | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Immediately creates snapshot of NAS volume |
| Change | Change/deleteNASVolumeInstances | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Deletes NAS volume instance list |
| Change | Change/removeNASVolumeInstanceEvent | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Clears the event settings for the NAS volume. |
| Change | Change/removeNASVolumeInstanceSnapshot | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Deletes snapshot of NAS volume |
| Change | Change/restoreNASVolumeInstanceWithSnapshot | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Recovers the snapshot for the NAS volume. |
| Change | Change/setNASVolumeInstanceEvent | View/getNASVolumeInstanceList Change/ChangeEventNotificatoinRecipient View/getNASVolumeInstanceDetail | Volume | Volume | Creates the event setting for the NAS volume. |
| Change | Change/setNASVolumeInstanceSnapshotSchedule | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Creates a snapshot for the NAS volume. |
| Change | Change/setNASVolumeTerminationProtection | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Sets the termination protection feature for the NAS volume. |
VPC
| Type | Action Name | Related action(s) | Resource type | Group by resource type | Action Description |
|---|---|---|---|---|---|
| View | View/getEventNotificationSetting | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Views the history of notification settings for the NAS volume. |
| View | View/getEventSetNASVolumeInstanceList | - | - | Event | Views the list of volumes with events set for the NAS volume. |
| View | View/getNASVolumeInstanceDetail | View/getNASVolumeInstanceList | Volume | Volume | Gets the NAS volume instance details by using the NAS volume instance number. |
| View | View/getNASVolumeInstanceEventConfigurationLog | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Views the event setting logs for the NAS volume. |
| View | View/getNASVolumeInstanceEventList | View/getEventSetNASVolumeInstanceList | Volume | Event | Views the details of volumes with events set for the NAS volume. |
| View | View/getNASVolumeInstanceEventOccuringLog | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Can check events occurred in relation to NAS volume |
| View | View/getNASVolumeInstanceList | - | - | Volume | View NAS volume instance list |
| View | View/getNASVolumeInstanceMonitoring | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | View collected monitoring information of NAS volume instance |
| View | View/getNASVolumeInstanceSnapshotConfigurationLog | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Gets the snapshot information that has been set in the past 3 months for the NAS volume. |
| View | View/getNASVolumeInstanceSnapshotList | View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Views the list of snapshots created for the NAS volume. |
| View | View/getServerInstanceDetail | View/getServerInstanceList | Server:Server | Volume | Views the details of servers for access control settings of the NAS volume instance. |
| View | View/getServerInstanceList | - | - | Volume | Views server list for access control settings of NAS volume instance. |
| View | View/getSnapshotScheduledNASVolumeInstanceList | - | - | Snapshot | Views the history of snapshot settings for the NAS volume. |
| Change | Change/ChangeEventNotificatoinRecipient | View/getEventNotificationSetting | Volume | Event | Sets recipient for NAS volume notification settings history |
| Change | Change/changeNASCIFSAuthentication | View/getNASVolumeInstanceList | - | Volume | Verifies ID and password to mount NAS volume in Windows Server |
| Change | Change/changeNASVolumeAccessControl | View/getNASVolumeInstanceList View/getServerInstanceList View/getServerInstanceDetail View/getNASVolumeInstanceDetail | Volume | Volume | Adds ACL settings to mount NAS volume in Linux server |
| Change | Change/changeNASVolumeInstanceDescription | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Provide NAS volume description |
| Change | Change/changeNASVolumeInstanceEvent | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Changes the event settings for the NAS volume. |
| Change | Change/changeNASVolumeInstanceSnapshotSchedule | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Changes the snapshot settings for the NAS volume. |
| Change | Change/changeNASVolumeSize | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Changes the volume size of the NAS volume instances. |
| Change | Change/createNASVolumeInstance | View/getServerInstanceList View/getServerInstanceDetail | - | Volume | Creates NAS volume instances. |
| Change | Change/createNASVolumeInstanceDirectSnapshot | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Immediately creates snapshot of NAS volume |
| Change | Change/deleteNASVolumeInstances | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Deletes NAS volume instance list |
| Change | Change/removeNASVolumeInstanceEvent | View/getEventSetNASVolumeInstanceList View/getNASVolumeInstanceEventList | Volume | Event | Clears the event settings for the NAS volume. |
| Change | Change/removeNASVolumeInstanceSnapshot | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Deletes snapshot of NAS volume |
| Change | Change/restoreNASVolumeInstanceWithSnapshot | View/getNASVolumeInstanceSnapshotList View/getSnapshotScheduledNASVolumeInstanceList | Volume | Snapshot | Recovers the snapshot for the NAS volume. |
| Change | Change/setNASVolumeInstanceEvent | View/getNASVolumeInstanceList Change/ChangeEventNotificatoinRecipient View/getNASVolumeInstanceDetail | Volume | Volume | Creates the event setting for the NAS volume. |
| Change | Change/setNASVolumeInstanceSnapshotSchedule | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Creates a snapshot for the NAS volume. |
| Change | Change/setNASVolumeTerminationProtection | View/getNASVolumeInstanceList View/getNASVolumeInstanceDetail | Volume | Volume | Sets the termination protection feature for the NAS volume. |
Caution
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be careful when setting permissions.
Was this article helpful?