Login
      Contents x
      Managing Security Monitoring permissions
        • Print
        • PDF
        Contents

        Managing Security Monitoring permissions

          • Print
          • PDF
          Article Summary

          Available in Classic

          By using Sub Account, NAVER Cloud Platform's account management service, you can set various access permissions for Security Monitoring. Sub Account provides System Managed policies and User Created policies for setting management and administration permissions.

          Note

          Sub Account is a service provided free of charge upon subscription request. For more information on Sub Account, refer to the Services > Management & Governance > Sub Account menu in the NAVER Cloud Platform portal, as well as the Sub Account Guide.

          System Managed policies

          System Managed policies are role-based policies defined by NAVER Cloud Platform for user convenience. Once System Managed policies are granted to a sub account created in Sub Account, that sub account can use Security Monitoring. The following is a brief description about System Managed policies of Security Monitoring.

          Policy namePolicy description
          NCP_ADMINISTRATORPermission to access the portal and console in NAVER Cloud Platform in the same manner as main accounts
          NCP_INFRA_MANAGERPermission to use all services in NAVER Cloud Platform and access My Page > Manage notifications in the portal
          NCP_SECURITY_MONITORING_MANAGERPermission to use all the features in Security Monitoring
          NCP_SECURITY_MONITORING_VIEWERPermission to only use the View list and Search features in Security Monitoring

          User Created policies

          User Created policies are policies that users can create. Once User Created policies are granted to a sub account created in Sub Account, that sub account can only use the user-assigned action combinations. The following is a brief description about User Created policies of Security Monitoring.

          TypeAction nameRelated action(s)Resource typeGroup by resource typeAction description
          ViewView/getIDSList---View IDS security event list.
          ViewView/getIDSEventDetailView/getIDSList--View IDS security event details.
          ViewView/getAVList---View anti-virus security event list.
          ViewView/getDDoSList---View anti-DDoS security event list.
          ViewView/getDDoSEventDetailView/getDDoSList--View anti-DDoS security event details.
          ViewView/getWAFList---View WAF security event list.
          ViewView/getWAFEventDetailView/getWAFList--View WAF security event details.
          ViewView/getIPSList---View IPS security event list.
          ViewView/getNotificationSetting---View notification recipient settings list.
          ChangeChange/requestIDSEventExceptView/getIDSList
          View/getIDSEventDetail          		--Request IDS security event exception.
          ChangeChange/requestAVEventExceptView/getAVList--Request anti-virus security event exception.
          ChangeChange/requestDDoSEventExceptView/getDDoSList
          View/getDDoSEventDetail          		--Request anti-DDoS security event exception.
          ChangeChange/requestWAFEventExceptView/getWAFList
          View/getWAFEventDetai          		--Request WAF security event exception.
          ChangeChange/requestIPSEventExceptView/getIPSList--Request IPS security event exception.
          ChangeChange/manageNotificationSettingView/getNotificationSetting--Manage notification recipient settings.
          ChangeChange/subscribeProduct---Request subscription to Security Monitoring.
          Caution

          Even when you are granted permission for a specific action, if you are not also granted permissions for the related actions that are required, then you won't be able to perform jobs properly. To prevent such issues, Sub Account provides a feature that automatically grants permissions for related actions when granting action permissions. However, if you deselect related actions that are automatically granted, then the system determines that it was done intentionally by the main account user and won't forcibly include them. So, be careful when setting permissions.

          Was this article helpful?
          What's Next
          Change password!
          Changing your password will log you out immediately. Use the new password to log back in.
          Change profile
          Success!
          First name must have atleast 2 characters. Numbers and special characters are not allowed.
          Last name must have atleast 1 characters. Numbers and special characters are not allowed.
          Enter a valid email
          Enter a valid password
          Your profile has been successfully updated.
          Logout