- Print
- PDF
Certificate Manager permissions management
- Print
- PDF
Available in Classic and VPC
By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for Certificate Manager. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.
Sub Account is a free service provided upon subscription request for free. For more information about Sub Account, see Services > Management & Governance > Sub Account in NAVER Cloud Platform portal, as well as the Sub Account user guide.
System managed policies
Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once System Managed policies are granted to a sub account created in Sub Account, that sub account can use Certificate Manager. The following is a brief description about System Managed policies of Certificate Manager:
Policy name | Policy description |
---|---|
NCP_ADMINISTRATOR | Permission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts |
NCP_INFRA_MANAGER | Permission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal |
NCP_CERTIFICATE_MANAGER_MANAGER | Permission to use all the functions in Certificate Manager |
NCP_CERTIFICATE_MANAGER_VIEWER | Permission to only use the View list and Search functions in Certificate Manager |
User-defined policies
User-defined policies are policies that users can create. Once user-defined policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description about user-defined policies of Certificate Manager:
Classification | Action name | Related action | Resource type | Group by resource type | Action description |
---|---|---|---|---|---|
View | View/getCertificateList | - | - | - | View certificate list |
View | View/getCertificateDetail | View/getCertificateList | Certificate | - | View certificate details |
View | View/downloadCertificate | View/getCertificateList View/getCertificateDetail | Certificate | - | Download certificate |
View | View/getNotificationSetting | - | - | - | View notification recipient settings list |
Change | Change/requestCertificateIssuance | View/getCertificateList | - | - | Apply for a certificate |
Change | Change/resendValidationEmail | View/getCertificateList View/getCertificateDetail | Certificate | - | Resend domain validation email |
Change | Change/createExternalCertificate | View/getCertificateList | - | - | Register external certificate |
Change | Change/deleteCertificate | View/getCertificateList View/getCertificateDetail | Certificate | - | Delete certificate |
Change | Change/manageNotificationSetting | View/getNotificationSetting | - | - | Manage notification recipient settings |
Change | Change/subscribeProduct | - | - | - | Subscribe and unsubscribe Certificate Manager |
Even when you are granted a permission for a specific action, you won't be able to perform the task properly unless you are also granted a permission for the related actions that are required. To prevent such issues, Sub Account provides a function that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, the system will determine that it was done intentionally by the main account user and will not forcibly include them. Therefore, be careful when setting permissions.