Managing Ncloud Simple RabbitMQ permissions
- Print
- PDF
Managing Ncloud Simple RabbitMQ permissions
- Print
- PDF
Article Summary
Share feedback
Thanks for sharing your feedback!
Available in VPC
You can use Sub Account, the account management service on NAVER Cloud Platform, to set various access permissions for Ncloud Simple RabbitMQ. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.
Note
Sub Account is a free service provided at no charge upon subscription. For more information on Sub Account, see Service > Management & Governance > Sub Account and Sub Account use guide on the NAVER Cloud Platform portal.
System Managed policies
System Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once System Managed policies are granted to a sub account created in Sub Account, that sub account can use Ncloud Simple RabbitMQ. The following is a brief description about System Managed policies of Ncloud Simple RabbitMQ.
| Policy name | Policy description |
|---|---|
| NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
| NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
| NCP_VPC_NCLOUD_SIMPLE_RABBITMQ_MANAGER | Permission to use all features of VPC-based Ncloud Simple RabbitMQ |
| NCP_VPC_NCLOUD_SIMPLE_RABBITMQ_VIEWER | Permission to only view item list and their details in VPC-based Ncloud Simple RabbitMQ |
User Created policies
User Created policies are policies that users may create. Once User Created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description about User Created policies of Ncloud Simple RabbitMQ.
| Type | Action Name | Related Action | Resource Type | Resource Type Group | Action Description |
|---|---|---|---|---|---|
| View | View/getRabbitMQClusterList | - | - | - | View cluster list |
| View/getRabbitMQClusterDetail | View/getRabbitMQClusterList | Cluster | - | View service details | |
| View/getVPCList | - | - | - | Import VPC resource list | |
| View/getVPCDetail | View/getVPCList | VPC:VPC | - | Select a VPC to place the cluster in | |
| View/getSubnetList | View/getVPCList | - | - | View subnet resource list information | |
| View/getSubnetDetail | View/getVPCList | VPC:Subnet | - | Select subnet to place the cluster in | |
| View/getSubnetList | |||||
| Change | Change/createRabbitMQCluster | View/getRabbitMQClusterList | - | - | Generate RabbitMQ cluster |
| View/getVPCList | |||||
| View/getVPCDetail | |||||
| View/getSubnetList | |||||
| View/getSubnetDetail | |||||
| Change/deleteRabbitMQCluster | View/getRabbitMQClusterList | Cluster | - | Delete RabbitMQ cluster | |
| View/getRabbitMQClusterDetail | |||||
| Change/manageRabbitMQCluster | View/getRabbitMQClusterList | Cluster | - | Manage user account for RabbitMQ cluster | |
| View/getRabbitMQClusterDetail | |||||
| Change/useRabbitMQMgmtUI | View/getRabbitMQClusterList | Cluster | - | Use RabbitMQ Management UI used in RabbitMQ cluster | |
| View/getRabbitMQClusterDetail | |||||
| Change/updateRabbitMQCluster | View/getRabbitMQClusterList | Cluster | - | Change RabbitMQ cluster settings | |
| View/getRabbitMQClusterDetail |
Caution
Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be careful when setting permissions.
Was this article helpful?