iam身份策略授权参考-j9九游会登录

iam::listaccesskeys

授予列举永久访问密钥的权限。

list

-

-

• iam:credentials:listcredentials

iam::createaccesskey

授予创建永久访问密钥的权限。

write

-

-

• iam:credentials:createcredential

iam::getaccesskey

授予查询永久访问密钥的权限。

read

-

-

• iam:credentials:getcredential

iam::updateaccesskey

授予修改永久访问密钥的权限。

write

-

-

• iam:credentials:updatecredential

iam::deleteaccesskey

授予删除永久访问密钥的权限。

write

-

-

• iam:credentials:deletecredential

iam:projects:list

授予列举项目的权限。

list

-

-

• iam:projects:listprojects

iam:projects:create

授予创建项目的权限。

write

-

-

• iam:projects:createproject

iam:projects:listforuser

授予列举指定用户项目的权限。

list

-

-

• iam:projects:listprojectsforuser

iam:projects:update

授予修改项目的权限。

write

-

-

• iam:projects:updateproject

iam:groups:list

授予列举用户组的权限。

list

-

-

• iam:groups:listgroups

iam:groups:create

授予创建用户组的权限。

write

-

-

• iam:groups:creategroup

iam:groups:get

授予查询用户组的权限。

read

-

-

• iam:groups:getgroup

iam:groups:delete

授予删除用户组的权限。

write

-

-

• iam:groups:deletegroup

iam:groups:update

授予修改用户组的权限。

write

-

-

• iam:groups:updategroup

iam:groups:removeuser

授予从用户组中移除用户的权限。

write

-

-

• iam:permissions:removeuserfromgroup

iam:groups:listusers

授予列举指定用户组中用户的权限。

list

-

-

• iam:users:listusersforgroup

iam:groups:checkuser

授予查询用户是否在用户组中的权限。

read

-

-

• iam:permissions:checkuseringroup

iam:groups:adduser

授予添加用户到用户组的权限。

write

-

-

• iam:permissions:addusertogroup

iam:users:create

授予创建用户的权限。

write

-

-

• iam:users:createuser

iam:users:get

授予查询用户的权限。

read

-

-

• iam:users:getuser

iam:users:update

授予修改用户的权限。

write

-

-

• iam:users:updateuser

iam:users:list

授予列举用户的权限。

list

-

-

• iam:users:listusers

iam:users:delete

授予删除用户的权限。

write

-

-

• iam:users:deleteuser

iam:users:listgroups

授予列举指定用户所属用户组的权限。

list

-

-

• iam:groups:listgroupsforuser

iam:users:listvirtualmfadevices

授予列举指定用户所属虚拟mfa设备的权限。

list

-

-

• iam:mfa:listvirtualmfadevices

iam:users:createvirtualmfadevice

授予创建虚拟mfa设备密钥的权限。

write

-

-

• iam:mfa:createvirtualmfadevice

iam:users:deletevirtualmfadevice

授予删除虚拟mfa设备的权限。

write

-

-

• iam:mfa:deletevirtualmfadevice

iam:users:getvirtualmfadevice

授予查询虚拟mfa设备的权限。

read

-

-

• iam:mfa:getvirtualmfadevice

iam:users:bindvirtualmfadevice

授予绑定虚拟mfa设备的权限。

write

-

-

• iam:mfa:bindmfadevice

iam:users:unbindvirtualmfadevice

授予解绑虚拟mfa设备的权限。

write

-

-

• iam:mfa:unbindmfadevice

iam:identityproviders:list

授予列举身份提供商的权限。

list

-

-

• iam:identityproviders:listidentityproviders

iam:identityproviders:get

授予查询身份提供商的权限。

read

-

-

• iam:identityproviders:getidentityprovider

iam:identityproviders:create

授予创建身份提供商的权限。

write

-

-

• iam:identityproviders:createidentityprovider

iam:identityproviders:delete

授予删除身份提供商的权限。

write

-

-

• iam:identityproviders:deleteidentityprovider

iam:identityproviders:update

授予修改身份提供商的权限。

write

-

-

• iam:identityproviders:updateidentityprovider

iam:identityproviders:listmappings

授予列举身份提供商映射关系的权限。

list

-

-

-

iam:identityproviders:getmapping

授予查询身份提供商映射关系的权限。

read

-

-

-

iam:identityproviders:createmapping

授予创建身份提供商映射关系的权限。

write

-

-

-

iam:identityproviders:deletemapping

授予删除身份提供商映射关系的权限。

write

-

-

-

iam:identityproviders:updatemapping

授予修改身份提供商映射关系的权限。

write

-

-

-

iam:identityproviders:listprotocols

授予列举身份提供商协议的权限。

list

-

-

-

iam:identityproviders:getprotocol

授予查询身份提供商协议的权限。

read

-

-

-

iam:identityproviders:createprotocol

授予创建身份提供商协议的权限。

write

-

-

-

iam:identityproviders:deleteprotocol

授予删除身份提供商协议的权限。

write

-

-

-

iam:identityproviders:updateprotocol

授予修改身份提供商协议的权限。

write

-

-

-

iam:identityproviders:getsamlmetadata

授予查询身份提供商saml metadata文件的权限。

read

-

-

• iam:identityproviders:getidpmetadata

iam:identityproviders:createsamlmetadata

授予创建身份提供商saml metadata文件的权限。

write

-

-

• iam:identityproviders:createidpmetadata

iam:identityproviders:getoidcconfig

授予查询身份提供商oidc配置的权限。

read

-

-

• iam:identityproviders:getopenidconnectconfig

iam:identityproviders:createoidcconfig

授予创建身份提供商oidc配置的权限。

write

-

-

• iam:identityproviders:createopenidconnectconfig

iam:identityproviders:updateoidcconfig

授予修改身份提供商oidc配置的权限。

write

-

-

• iam:identityproviders:updateopenidconnectconfig

iam:securitypolicies:getprotectpolicy

授予查询操作保护策略的权限。

read

-

-

-

iam:securitypolicies:updateprotectpolicy

授予修改操作保护策略的权限。

write

-

-

-

iam:securitypolicies:getpasswordpolicy

授予查询密码策略的权限。

read

-

-

-

iam:securitypolicies:updatepasswordpolicy

授予修改密码策略的权限。

write

-

-

-

iam:securitypolicies:getloginpolicy

授予查询登录策略的权限。

read

-

-

-

iam:securitypolicies:updateloginpolicy

授予修改登录策略的权限。

write

-

-

-

iam:securitypolicies:getconsoleaclpolicy

授予查询控制台访问策略的权限。

read

-

-

-

iam:securitypolicies:updateconsoleaclpolicy

授予修改控制台访问策略的权限。

write

-

-

-

iam:securitypolicies:getapiaclpolicy

授予查询接口访问策略的权限。

read

-

-

-

iam:securitypolicies:updateapiaclpolicy

授予修改接口访问策略的权限。

write

-

-

-

iam:securitypolicies:getprivacytransferpolicy

授予查询账号信息跨境传输策略的权限。

read

-

-

-

iam:securitypolicies:updateprivacytransferpolicy

授予修改账号信息跨境传输策略的权限。

write

-

-

-

iam:users:listloginprotectsettings

授予列举租户下用户登录保护设置的权限。

list

-

-

• iam:users:listuserloginprotects

iam:users:getloginprotectsetting

授予查询登录保护设置的权限。

read

-

-

• iam:users:getuserloginprotect

iam:users:updateloginprotectsetting

授予修改登录保护设置的权限。

write

-

-

• iam:users:setuserloginprotect

iam:quotas:list

授予列举配额的权限。

list

-

-

• iam:quotas:listquotas

iam:quotas:listforproject

授予查询项目配额的权限。

list

-

-

• iam:quotas:listquotasforproject

iam:agencies:pass

授予向云服务传递委托的权限。

permission_management

agency *

-

-

iam:roles:list

授予查询权限列表的权限。

list

-

-

• iam:roles:listroles

iam:roles:get

授予查询权限详情的权限。

read

-

-

• iam:roles:getrole

iam::listroleassignments

授予查询租户授权记录的权限。

list

-

-

• iam:permissions:listroleassignments

iam:groups:listrolesondomain

授予查询全局服务中用户组权限的权限。

list

-

-

• iam:permissions:listrolesforgroupondomain

iam:groups:listrolesonproject

授予查询项目服务中用户组权限的权限。

list

-

-

• iam:permissions:listrolesforgrouponproject

iam:groups:grantroleondomain

授予为用户组授予全局服务权限的权限。

write

-

-

• iam:permissions:grantroletogroupondomain

iam:groups:grantroleonproject

授予为用户组授予项目级服务权限的权限。

write

-

-

• iam:permissions:grantroletogrouponproject

iam:groups:checkroleondomain

授予查询用户组是否拥有全局服务权限的权限。

read

-

-

• iam:permissions:checkroleforgroupondomain

iam:groups:checkroleonproject

授予查询用户组是否拥有项目服务权限的权限。

read

-

-

• iam:permissions:checkroleforgrouponproject

iam:groups:listroles

授予查询用户组的所有权限的权限。

list

-

-

• iam:permissions:listrolesforgroup

iam:groups:checkrole

授予查询用户组是否拥有指定权限的权限。

read

-

-

• iam:permissions:checkroleforgroup

iam:groups:revokerole

授予移除用户组指定权限的权限。

write

-

-

• iam:permissions:revokerolefromgroup

iam:groups:revokeroleondomain

授予移除用户组的全局服务权限的权限。

write

-

-

• iam:permissions:revokerolefromgroupondomain

iam:groups:revokeroleonproject

授予移除用户组的项目服务权限的权限。

write

-

-

• iam:permissions:revokerolefromgrouponproject

iam:groups:grantrole

授予为用户组授予指定权限的权限。

write

-

-

• iam:permissions:grantroletogroup

iam:roles:create

授予创建自定义策略的权限。

write

-

-

• iam:roles:createrole

iam:roles:update

授予修改自定义策略的权限。

write

-

-

• iam:roles:updaterole

iam:roles:delete

授予删除自定义策略的权限。

write

-

-

• iam:roles:deleterole

iam:agencies:list

授予列出委托的权限。

list

-

-

• iam:agencies:listagencies

iam:agencies:listswitchagencyhistories

授予列出切换委托历史的权限。

list

-

-

-

iam:agencies:get

授予查询指定委托详情的权限。

read

-

-

• iam:agencies:getagency

iam:agencies:create

授予创建委托的权限。

write

-

-

• iam:agencies:createagency

iam:agencies:update

授予修改委托的权限。

write

-

-

• iam:agencies:updateagency

iam:agencies:delete

授予删除委托的权限。

write

-

-

• iam:agencies:deleteagency

iam:agencies:listrolesondomain

授予查询委托拥有的全局服务权限的权限。

list

-

-

• iam:permissions:listrolesforagencyondomain

iam:agencies:listrolesonproject

授予查询委托拥有的指定项目权限的权限。

list

-

-

• iam:permissions:listrolesforagencyonproject

iam:agencies:grantroleondomain

授予为委托授予全局服务权限的权限。

write

-

-

• iam:permissions:grantroletoagencyondomain

iam:agencies:grantroleonproject

授予为委托授予项目服务权限的权限。

write

-

-

• iam:permissions:grantroletoagencyonproject

iam:agencies:checkroleondomain

授予查询委托是否拥有全局服务权限的权限。

read

-

-

• iam:permissions:checkroleforagencyondomain

iam:agencies:checkroleonproject

授予查询委托是否拥有项目服务权限的权限。

read

-

-

• iam:permissions:checkroleforagencyonproject

iam:agencies:revokeroleondomain

授予移除委托的全局服务权限的权限。

write

-

-

• iam:permissions:revokerolefromagencyondomain

iam:agencies:revokeroleonproject

授予移除委托的项目服务权限的权限。

write

-

-

• iam:permissions:revokerolefromagencyonproject

iam:agencies:listroles

授予查询委托的所有权限的权限。

list

-

-

• iam:permissions:listrolesforagency

iam:agencies:grantrole

授予为委托授予指定权限的权限。

write

-

-

• iam:permissions:grantroletoagency

iam:agencies:checkrole

授予查询委托是否拥有指定权限的权限。

read

-

-

• iam:permissions:checkroleforagency

iam:agencies:revokerole

授予移除委托的指定权限的权限。

write

-

-

• iam:permissions:revokerolefromagency

iam::listgroupsassignedenterpriseproject

授予查询企业项目关联的用户组的权限。

list

-

-

• iam:permissions:listgroupsonenterpriseproject

iam:groups:listrolesonenterpriseproject

授予查询企业项目已关联用户组的权限的权限。

list

-

-

• iam:permissions:listrolesforgrouponenterpriseproject

iam:groups:grantroleonenterpriseproject

授予基于用户组为企业项目授权的权限。

write

-

-

• iam:permissions:grantroletogrouponenterpriseproject

iam:groups:revokeroleonenterpriseproject

授予删除企业项目关联的用户组权限的权限。

write

-

-

• iam:permissions:revokerolefromgrouponenterpriseproject

iam:groups:listassignedenterpriseprojects

授予查询用户组直接关联的企业项目的权限。

list

-

-

• iam:permissions:listenterpriseprojectsforgroup

iam:users:listassignedenterpriseprojects

授予查询用户直接关联的企业项目的权限。

list

-

-

• iam:permissions:listenterpriseprojectsforuser

iam::listusersassignedenterpriseproject

授予查询企业项目直接关联用户的权限。

list

-

-

• iam:permissions:listusersforenterpriseproject

iam:users:listrolesonenterpriseproject

授予查询企业项目直接关联用户权限的权限。

list

-

-

• iam:permissions:listrolesforuseronenterpriseproject

iam:users:grantroleonenterpriseproject

授予基于用户为企业项目授权的权限。

write

-

-

• iam:permissions:grantroletouseronenterpriseproject

iam:users:revokeroleonenterpriseproject

授予删除企业项目直接关联用户的权限的权限。

write

-

-

• iam:permissions:revokerolefromuseronenterpriseproject

iam:agencies:grantroleonenterpriseproject

授予基于委托为企业项目授权的权限。

write

-

-

• iam:permissions:grantroletoagencyonenterpriseproject

iam:agencies:revokeroleonenterpriseproject

授予删除企业项目关联的委托的权限的权限。

write

-

-

• iam:permissions:revokerolefromagencyonenterpriseproject

iam:mfa:listmfadevicesv5

授予列举mfa设备的权限。

list

mfa *

-

-

iam:mfa:createvirtualmfadevicev5

授予创建虚拟mfa设备的权限。

write

mfa *

-

-

iam:mfa:deletevirtualmfadevicev5

授予删除虚拟mfa设备的权限。

write

mfa *

-

-

iam:mfa:enablev5

授予启用mfa设备的权限。

write

mfa *

-

-

iam:mfa:disablev5

授予禁用mfa设备的权限。

write

mfa *

-

-

iam:securitypolicies:getpasswordpolicyv5

授予获取密码策略信息的权限。

read

-

-

-

iam:securitypolicies:updatepasswordpolicyv5

授予修改密码策略的权限。

write

-

-

-

iam:securitypolicies:getloginpolicyv5

授予获取登录策略信息的权限。

read

-

-

-

iam:securitypolicies:updateloginpolicyv5

授予修改登录策略的权限。

write

-

-

-

iam:credentials:listcredentialsv5

授予权限以列举iam用户的永久访问密钥。

list

user *

g:resourcetag/

-

iam:credentials:showaccesskeylastusedv5

授予获取指定永久访问密钥最后一次使用时间的权限。

read

user *

g:resourcetag/

-

iam:credentials:createcredentialv5

授予为iam用户创建永久访问密钥的权限。

write

user *

g:resourcetag/

-

iam:credentials:updatecredentialv5

授予为iam用户修改永久访问密钥的权限。

write

user *

g:resourcetag/

-

iam:credentials:deletecredentialv5

授予为iam用户删除永久访问密钥的权限。

write

user *

g:resourcetag/

-

iam:users:changepasswordv5

授予iam用户修改自己密码的权限。

write

user *

g:resourcetag/

-

iam:users:showloginprofilev5

授予获取iam用户登录信息的权限。

read

user *

g:resourcetag/

-

iam:users:createloginprofilev5

授予为iam用户创建登录信息的权限。

write

user *

g:resourcetag/

-

iam:users:updateloginprofilev5

授予为iam用户修改登录信息的权限。

write

user *

g:resourcetag/

-

iam:users:deleteloginprofilev5

授予为iam用户删除登录信息的权限。

write

user *

g:resourcetag/

-

iam:users:listusersv5

授予列举iam用户的权限。

list

user *

-

-

iam:users:getuserv5

授予获取iam用户信息的权限。

read

user *

g:resourcetag/

-

iam:users:showuserlastloginv5

授予获取iam用户最后一次登录时间的权限。

read

user *

g:resourcetag/

-

iam:users:createuserv5

授予创建iam用户的权限。

write

user *

-

-

iam:users:updateuserv5

授予修改iam用户的权限。

write

user *

g:resourcetag/

-

iam:users:deleteuserv5

授予删除iam用户的权限。

write

user *

g:resourcetag/

-

iam:groups:listgroupsv5

授予列举用户组的权限。

list

group *

-

-

iam:groups:getgroupv5

授予获取用户组信息的权限。

read

group *

-

-

iam:groups:creategroupv5

授予创建用户组的权限。

write

group *

-

-

iam:groups:updategroupv5

授予修改用户组的权限。

write

group *

-

-

iam:groups:deletegroupv5

授予删除用户组的权限。

write

group *

-

-

iam:permissions:addusertogroupv5

授予添加iam用户到用户组的权限。

write

group *

-

-

iam:permissions:removeuserfromgroupv5

授予从用户组中移除iam用户的权限。

write

group *

-

-

iam:policies:listv5

授予列举身份策略的权限。

list

policy *

-

-

iam:policies:getv5

授予获取身份策略信息的权限。

read

policy *

-

-

iam:policies:createv5

授予创建自定义身份策略的权限。

permission_management

policy *

-

-

iam:policies:deletev5

授予删除自定义身份策略的权限。

permission_management

policy *

-

-

iam:policies:listversionsv5

授予列举身份策略版本的权限。

list

policy *

-

-

iam:policies:getversionv5

授予获取身份策略版本信息的权限。

read

policy *

-

-

iam:policies:createversionv5

授予为自定义身份策略创建新版本的权限。

permission_management

policy *

-

-

iam:policies:deleteversionv5

授予为自定义身份策略删除版本的权限。

permission_management

policy *

-

-

iam:policies:setdefaultversionv5

授予设置自定义身份策略默认版本的权限。

permission_management

policy *

-

-

iam:agencies:attachpolicyv5

授予为委托或信任委托附加身份策略的权限。

permission_management

agency *

g:resourcetag/

-

-

iam:policyurn

iam:groups:attachpolicyv5

授予为用户组附加身份策略的权限。

permission_management

group *

-

-

-

iam:policyurn

iam:users:attachpolicyv5

授予为iam用户附加身份策略的权限。

permission_management

user *

g:resourcetag/

-

-

iam:policyurn

iam:agencies:detachpolicyv5

授予为委托或信任委托分离身份策略的权限。

permission_management

agency *

g:resourcetag/

-

-

iam:policyurn

iam:groups:detachpolicyv5

授予为用户组分离身份策略的权限。

permission_management

group *

-

-

-

iam:policyurn

iam:users:detachpolicyv5

授予为iam用户分离身份策略的权限。

permission_management

user *

g:resourcetag/

-

-

iam:policyurn

iam:policies:listentitiesv5

授予权限以列举附加在身份策略上的所有实体。

list

policy *

-

-

iam:agencies:listattachedpoliciesv5

授予权限以列举委托或信任委托附加的身份策略。

list

agency *

g:resourcetag/

-

iam:groups:listattachedpoliciesv5

授予权限以列举用户组附加的身份策略。

list

group *

-

-

iam:users:listattachedpoliciesv5

授予权限以列举iam用户附加的身份策略。

list

user *

g:resourcetag/

-

iam:agencies:createservicelinkedagencyv5

授予创建服务关联委托的权限以允许云服务代表您执行操作。

write

agency *

-

-

-

iam:serviceprincipal

iam:agencies:deleteservicelinkedagencyv5

授予删除服务关联委托的权限。

write

agency *

g:resourcetag/

-

-

iam:serviceprincipal

iam:agencies:getservicelinkedagencydeletionstatusv5

授予获取服务关联委托删除状态的权限。

read

agency *

-

-

iam:agencies:listv5

授予列举委托及信任委托的权限。

list

agency *

-

-

iam:agencies:getv5

授予获取委托或信任委托信息的权限。

read

agency *

g:resourcetag/

-

iam:agencies:createv5

授予创建信任委托的权限。

write

agency *

-

-

iam:agencies:updatev5

授予修改信任委托的权限。

write

agency *

g:resourcetag/

-

iam:agencies:deletev5

授予删除信任委托的权限。

write

agency *

g:resourcetag/

-

iam:agencies:updatetrustpolicyv5

授予修改信任委托信任策略的权限。

write

agency *

g:resourcetag/

-

iam::listtagsforresourcev5

授予列举资源标签的权限。

list

agency

g:resourcetag/

-

user

g:resourcetag/

iam::tagforresourcev5

授予设置资源标签的权限。

tagging

agency

g:resourcetag/

-

user

g:resourcetag/

-

• g:requesttag/
• g:tagkeys

iam::untagforresourcev5

授予删除资源标签的权限。

tagging

agency

g:resourcetag/

-

user

g:resourcetag/

-

• g:requesttag/
• g:tagkeys

iam::getaccountsummaryv5

授予获取此账号中iam实体使用情况和iam配额的摘要信息的权限。

list

-

-

-

iam::getasymmetricsignatureswitchv5

授予获取临时令牌非对称签名开关状态的权限。

read

-

-

-

iam::setasymmetricsignatureswitchv5

授予设置临时令牌非对称签名开关状态的权限。

write

-

-

-

get /v3.0/os-credential/credentials

iam::listaccesskeys

-

post /v3.0/os-credential/credentials

iam::createaccesskey

-

get /v3.0/os-credential/credentials/{access_key}

iam::getaccesskey

-

put /v3.0/os-credential/credentials/{access_key}

iam::updateaccesskey

-

delete /v3.0/os-credential/credentials/{access_key}

iam::deleteaccesskey

-

get /v3.0/os-quota/domains/{domain_id}

iam:quotas:list

-

get /v3.0/os-quota/projects/{project_id}

iam:quotas:listforproject

-

get /v3/projects

iam:projects:list

-

post /v3/projects

iam:projects:create

-

get /v3/users/{user_id}/projects

iam:projects:listforuser

-

patch /v3/projects/{project_id}

iam:projects:update

-

put /v3-ext/projects/{project_id}

iam:projects:update

-

get /v3/groups

iam:groups:list

-

post /v3/groups

iam:groups:create

-

get /v3/groups/{group_id}

iam:groups:get

-

delete /v3/groups/{group_id}

iam:groups:delete

-

patch /v3/groups/{group_id}

iam:groups:update

-

get /v3/groups/{group_id}/users

iam:groups:listusers

-

head /v3/groups/{group_id}/users/{user_id}

iam:groups:checkuser

-

put /v3/groups/{group_id}/users/{user_id}

iam:groups:adduser

-

delete /v3/groups/{group_id}/users/{user_id}

iam:groups:removeuser

-

post /v3.0/os-user/users

iam:users:create

-

get /v3.0/os-user/users/{user_id}

iam:users:get

-

put /v3.0/os-user/users/{user_id}

iam:users:update

-

put /v3.0/os-user/users/{user_id}/info

iam:users:update

-

get /v3/users

iam:users:list

-

post /v3/users

iam:users:create

-

get /v3/users/{user_id}

iam:users:get

-

delete /v3/users/{user_id}

iam:users:delete

-

patch /v3/users/{user_id}

iam:users:update

-

get /v3/users/{user_id}/groups

iam:users:listgroups

-

get /v3.0/os-mfa/virtual-mfa-devices

iam:users:listvirtualmfadevices

-

post /v3.0/os-mfa/virtual-mfa-devices

iam:users:createvirtualmfadevice

-

delete /v3.0/os-mfa/virtual-mfa-devices

iam:users:deletevirtualmfadevice

-

get /v3.0/os-mfa/users/{user_id}/virtual-mfa-device

iam:users:getvirtualmfadevice

-

put /v3.0/os-mfa/mfa-devices/bind

iam:users:bindvirtualmfadevice

-

put /v3.0/os-mfa/mfa-devices/unbind

iam:users:unbindvirtualmfadevice

-

get /v3.0/os-user/login-protects

iam:users:listloginprotectsettings

-

get /v3.0/os-user/users/{user_id}/login-protect

iam:users:getloginprotectsetting

-

put /v3.0/os-user/users/{user_id}/login-protect

iam:users:updateloginprotectsetting

-

get /v3/os-federation/identity_providers

iam:identityproviders:list

-

get /v3/os-federation/identity_providers/{id}

iam:identityproviders:get

-

put /v3/os-federation/identity_providers/{id}

iam:identityproviders:create

-

delete /v3/os-federation/identity_providers/{id}

iam:identityproviders:delete

-

patch /v3/os-federation/identity_providers/{id}

iam:identityproviders:update

-

get /v3/os-federation/mappings

iam:identityproviders:listmappings

-

get /v3/os-federation/mappings/{id}

iam:identityproviders:getmapping

-

put /v3/os-federation/mappings/{id}

iam:identityproviders:createmapping

-

delete /v3/os-federation/mappings/{id}

iam:identityproviders:deletemapping

-

patch /v3/os-federation/mappings/{id}

iam:identityproviders:updatemapping

-

get /v3/os-federation/identity_providers/{idp_id}/protocols

iam:identityproviders:listprotocols

-

get /v3/os-federation/identity_providers/{idp_id}/protocols/{protocol_id}

iam:identityproviders:getprotocol

-

put /v3/os-federation/identity_providers/{idp_id}/protocols/{protocol_id}

iam:identityproviders:createprotocol

-

delete /v3/os-federation/identity_providers/{idp_id}/protocols/{protocol_id}

iam:identityproviders:deleteprotocol

-

patch /v3/os-federation/identity_providers/{idp_id}/protocols/{protocol_id}

iam:identityproviders:updateprotocol

-

get /v3-ext/os-federation/identity_providers/{idp_id}/protocols/{protocol_id}/metadata

iam:identityproviders:getsamlmetadata

-

post /v3-ext/os-federation/identity_providers/{idp_id}/protocols/{protocol_id}/metadata

iam:identityproviders:createsamlmetadata

-

get /v3.0/os-federation/identity-providers/{idp_id}/openid-connect-config

iam:identityproviders:getoidcconfig

-

post /v3.0/os-federation/identity-providers/{idp_id}/openid-connect-config

iam:identityproviders:createoidcconfig

-

put /v3.0/os-federation/identity-providers/{idp_id}/openid-connect-config

iam:identityproviders:updateoidcconfig

-

get /v3.0/os-securitypolicy/domains/{domain_id}/protect-policy

iam:securitypolicies:getprotectpolicy

-

put /v3.0/os-securitypolicy/domains/{domain_id}/protect-policy

iam:securitypolicies:updateprotectpolicy

-

get /v3.0/os-securitypolicy/domains/{domain_id}/password-policy

iam:securitypolicies:getpasswordpolicy

-

put /v3.0/os-securitypolicy/domains/{domain_id}/password-policy

iam:securitypolicies:updatepasswordpolicy

-

get /v3.0/os-securitypolicy/domains/{domain_id}/login-policy

iam:securitypolicies:getloginpolicy

-

put /v3.0/os-securitypolicy/domains/{domain_id}/login-policy

iam:securitypolicies:updateloginpolicy

-

get /v3.0/os-securitypolicy/domains/{domain_id}/console-acl-policy

iam:securitypolicies:getconsoleaclpolicy

-

put /v3.0/os-securitypolicy/domains/{domain_id}/console-acl-policy

iam:securitypolicies:updateconsoleaclpolicy

-

get /v3.0/os-securitypolicy/domains/{domain_id}/api-acl-policy

iam:securitypolicies:getapiaclpolicy

-

put /v3.0/os-securitypolicy/domains/{domain_id}/api-acl-policy

iam:securitypolicies:updateapiaclpolicy

-

get /v3/roles

iam:roles:list

-

get /v3/roles/{role_id}

iam:roles:get

-

get /v3.0/os-permission/role-assignments

iam::listroleassignments

-

get /v3/domains/{domain_id}/groups/{group_id}/roles

iam:groups:listrolesondomain

-

get /v3/projects/{project_id}/groups/{group_id}/roles

iam:groups:listrolesonproject

-

put /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}

iam:groups:grantroleondomain

-

put /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}

iam:groups:grantroleonproject

-

head /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}

iam:groups:checkroleondomain

-

head /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}

iam:groups:checkroleonproject

-

get /v3/os-inherit/domains/{domain_id}/groups/{group_id}/roles/inherited_to_projects

iam:groups:listroles

-

head /v3/os-inherit/domains/{domain_id}/groups/{group_id}/roles/{role_id}/inherited_to_projects

iam:groups:checkrole

-

delete /v3/os-inherit/domains/{domain_id}/groups/{group_id}/roles/{role_id}/inherited_to_projects

iam:groups:revokerole

-

delete /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}

iam:groups:revokeroleondomain

-

delete /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}

iam:groups:revokeroleonproject

-

put /v3/os-inherit/domains/{domain_id}/groups/{group_id}/roles/{role_id}/inherited_to_projects

iam:groups:grantrole

-

get /v3.0/os-role/roles

iam:roles:list

-

get /v3.0/os-role/roles/{role_id}

iam:roles:get

-

post /v3.0/os-role/roles

iam:roles:create

-

post /v3.0/os-role/roles

iam:roles:create

-

patch /v3.0/os-role/roles/{role_id}

iam:roles:update

-

patch /v3.0/os-role/roles/{role_id}

iam:roles:update

-

delete /v3.0/os-role/roles/{role_id}

iam:roles:delete

-

get /v3.0/os-agency/agencies

iam:agencies:list

-

get /v3.0/os-agency/agencies/{agency_id}

iam:agencies:get

-

post /v3.0/os-agency/agencies

iam:agencies:create

-

put /v3.0/os-agency/agencies/{agency_id}

iam:agencies:update

-

delete /v3.0/os-agency/agencies/{agency_id}

iam:agencies:delete

-

get /v3.0/os-agency/domains/{domain_id}/agencies/{agency_id}/roles

iam:agencies:listrolesondomain

-

get /v3.0/os-agency/projects/{project_id}/agencies/{agency_id}/roles

iam:agencies:listrolesonproject

-

put /v3.0/os-agency/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}

iam:agencies:grantroleondomain

-

put /v3.0/os-agency/projects/{project_id}/agencies/{agency_id}/roles/{role_id}

iam:agencies:grantroleonproject

-

head /v3.0/os-agency/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}

iam:agencies:checkroleondomain

-

head /v3.0/os-agency/projects/{project_id}/agencies/{agency_id}/roles/{role_id}

iam:agencies:checkroleonproject

-

delete /v3.0/os-agency/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}

iam:agencies:revokeroleondomain

-

delete /v3.0/os-agency/projects/{project_id}/agencies/{agency_id}/roles/{role_id}

iam:agencies:revokeroleonproject

-

get /v3.0/os-inherit/domains/{domain_id}/agencies/{agency_id}/roles/inherited_to_projects

iam:agencies:listroles

-

put /v3.0/os-inherit/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects

iam:agencies:grantrole

-

head /v3.0/os-inherit/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects

iam:agencies:checkrole

-

delete /v3.0/os-inherit/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects

iam:agencies:revokerole

-

get /v3.0/os-permission/enterprise-projects/{enterprise_project_id}/groups

iam::listgroupsassignedenterpriseproject

-

get /v3.0/os-permission/enterprise-projects/{enterprise_project_id}/groups/{group_id}/roles

iam:groups:listrolesonenterpriseproject

-

put /v3.0/os-permission/enterprise-projects/{enterprise_project_id}/groups/{group_id}/roles/{role_id}

iam:groups:grantroleonenterpriseproject

-

delete /v3.0/os-permission/enterprise-projects/{enterprise_project_id}/groups/{group_id}/roles/{role_id}

iam:groups:revokeroleonenterpriseproject

-

get /v3.0/os-permission/groups/{group_id}/enterprise-projects

iam:groups:listassignedenterpriseprojects

-

get /v3.0/os-permission/users/{user_id}/enterprise-projects

iam:users:listassignedenterpriseprojects

-

get /v3.0/os-permission/enterprise-projects/{enterprise_project_id}/users

iam::listusersassignedenterpriseproject

-

get /v3.0/os-permission/enterprise-projects/{enterprise_project_id}/users/{user_id}/roles

iam:users:listrolesonenterpriseproject

-

put /v3.0/os-permission/enterprise-projects/{enterprise_project_id}/users/{user_id}/roles/{role_id}

iam:users:grantroleonenterpriseproject

-

delete /v3.0/os-permission/enterprise-projects/{enterprise_project_id}/users/{user_id}/roles/{role_id}

iam:users:revokeroleonenterpriseproject

-

put /v3.0/os-permission/subjects/agency/scopes/enterprise-project/role-assignments

iam:agencies:grantroleonenterpriseproject

-

delete /v3.0/os-permission/subjects/agency/scopes/enterprise-project/role-assignments

iam:agencies:revokeroleonenterpriseproject

-

get /v5/asymmetric-signature-switch

iam::getasymmetricsignatureswitchv5

-

put /v5/asymmetric-signature-switch

iam::setasymmetricsignatureswitchv5

-

get /v5/mfa-devices

iam:mfa:listmfadevicesv5

-

post /v5/virtual-mfa-devices

iam:mfa:createvirtualmfadevicev5

-

delete /v5/virtual-mfa-devices

iam:mfa:deletevirtualmfadevicev5

-

post /v5/mfa-devices/enable

iam:mfa:enablev5

-

post /v5/mfa-devices/disable

iam:mfa:disablev5

-

get /v5/password-policy

iam:securitypolicies:getpasswordpolicyv5

-

put /v5/password-policy

iam:securitypolicies:updatepasswordpolicyv5

-

get /v5/login-policy

iam:securitypolicies:getloginpolicyv5

-

put /v5/login-policy

iam:securitypolicies:updateloginpolicyv5

-

get /v5/users/{user_id}/access-keys

iam:credentials:listcredentialsv5

-

get /v5/users/{user_id}/access-keys/{access_key_id}/last-used

iam:credentials:showaccesskeylastusedv5

-

post /v5/users/{user_id}/access-keys

iam:credentials:createcredentialv5

-

put /v5/users/{user_id}/access-keys/{access_key_id}

iam:credentials:updatecredentialv5

-

delete /v5/users/{user_id}/access-keys/{access_key_id}

iam:credentials:deletecredentialv5

-

post /v5/caller-password

iam:users:changepasswordv5

-

get /v5/users/{user_id}/login-profile

iam:users:showloginprofilev5

-

post /v5/users/{user_id}/login-profile

iam:users:createloginprofilev5

-

put /v5/users/{user_id}/login-profile

iam:users:updateloginprofilev5

-

delete /v5/users/{user_id}/login-profile

iam:users:deleteloginprofilev5

-

get /v5/users

iam:users:listusersv5

-

get /v5/users/{user_id}

iam:users:getuserv5

-

get /v5/users/{user_id}/last-login

iam:users:showuserlastloginv5

-

post /v5/users

iam:users:createuserv5

-

put /v5/users/{user_id}

iam:users:updateuserv5

-

delete /v5/users/{user_id}

iam:users:deleteuserv5

-

get /v5/groups

iam:groups:listgroupsv5

-

get /v5/groups/{group_id}

iam:groups:getgroupv5

-

post /v5/groups

iam:groups:creategroupv5

-

put /v5/groups/{group_id}

iam:groups:updategroupv5

-

delete /v5/groups/{group_id}

iam:groups:deletegroupv5

-

post /v5/groups/{group_id}/add-user

iam:permissions:addusertogroupv5

-

post /v5/groups/{group_id}/remove-user

iam:permissions:removeuserfromgroupv5

-

get /v5/policies

iam:policies:listv5

-

get /v5/policies/{policy_id}

iam:policies:getv5

-

post /v5/policies

iam:policies:createv5

-

delete /v5/policies/{policy_id}

iam:policies:deletev5

-

get /v5/policies/{policy_id}/versions

iam:policies:listversionsv5

-

get /v5/policies/{policy_id}/versions/{version_id}

iam:policies:getversionv5

-

post /v5/policies/{policy_id}/versions

iam:policies:createversionv5

-

delete /v5/policies/{policy_id}/versions/{version_id}

iam:policies:deleteversionv5

-

post /v5/policies/{policy_id}/versions/{version_id}/set-default

iam:policies:setdefaultversionv5

-

post /v5/policies/{policy_id}/attach-agency

iam:agencies:attachpolicyv5

-

post /v5/policies/{policy_id}/attach-group

iam:groups:attachpolicyv5

-

post /v5/policies/{policy_id}/attach-user

iam:users:attachpolicyv5

-

post /v5/policies/{policy_id}/detach-agency

iam:agencies:detachpolicyv5

-

post /v5/policies/{policy_id}/detach-group

iam:groups:detachpolicyv5

-

post /v5/policies/{policy_id}/detach-user

iam:users:detachpolicyv5

-

get /v5/policies/{policy_id}/attached-entities

iam:policies:listentitiesv5

-

get /v5/agencies/{agency_id}/attached-policies

iam:agencies:listattachedpoliciesv5

-

get /v5/groups/{group_id}/attached-policies

iam:groups:listattachedpoliciesv5

-

get /v5/users/{user_id}/attached-policies

iam:users:listattachedpoliciesv5

-

put /v5/service-linked-agencies

iam:agencies:createservicelinkedagencyv5

-

delete /v5/service-linked-agencies/{agency_id}

iam:agencies:deleteservicelinkedagencyv5

-

get /v5/service-linked-agencies/deletion-task/{deletion_task_id}

iam:agencies:getservicelinkedagencydeletionstatusv5

-

get /v5/agencies

iam:agencies:listv5

-

get /v5/agencies/{agency_id}

iam:agencies:getv5

-

post /v5/agencies

iam:agencies:createv5

-

put /v5/agencies/{agency_id}

iam:agencies:updatev5

-

delete /v5/agencies/{agency_id}

iam:agencies:deletev5

-

put /v5/agencies/{agency_id}/trust-policy

iam:agencies:updatetrustpolicyv5

-

get /v5/{resource_type}/{resource_id}/tags

iam::listtagsforresourcev5

-

post /v5/{resource_type}/{resource_id}/tags/create

iam::tagforresourcev5

-

delete /v5/{resource_type}/{resource_id}/tags/delete

iam::untagforresourcev5

-

get /v5/account-summary

iam::getaccountsummaryv5

-

agency

iam:::agency:

policy

iam:::policy:

mfa

iam:::mfa:

user

iam:::user:

group

iam:::group:

iam:policyurn

string

单值

按照身份策略的urn筛选访问权限。

iam:serviceprincipal

string

单值

按照服务关联委托传递的云服务对应的服务标识筛选访问权限。