更新时间:2025-12-02 gmt 08:00

云桌面workspace-j9九游会登录

云服务在iam预置了常用授权项,称为系统身份策略。如果iam系统身份策略无法满足授权要求,管理员可以根据各j9九游会登录的服务支持的授权项,创建iam自定义身份策略来进行精细的访问控制,iam自定义身份策略是对系统身份策略的扩展和补充。

除iam服务外,organizations服务中的服务控制策略(service control policies,以下简称scp)也可以使用这些授权项元素设置访问控制策略。

scp不直接进行授权,只划定权限边界。将scp绑定到组织单元或者成员账号时,并没有直接对组织单元或成员账号授予操作权限,而是规定了成员账号或组织单元包含的成员账号的授权范围。iam身份策略授予权限的有效性受scp限制,只有在scp允许范围内的权限才能生效。

iam服务与organizations服务在使用这些元素进行访问控制时,存在着一些区别,详情请参见:iam服务与organizations服务权限访问控制的区别

本章节介绍iam服务身份策略授权场景中自定义身份策略和组织服务中scp使用的元素,这些元素包含了操作(action)、资源(resource)和条件(condition)

操作(action)

操作(action)即为身份策略中支持的授权项。

  • “访问级别”列描述如何对操作进行分类(list、read和write等)。此分类可帮助您了解在身份策略中相应操作对应的访问级别。
  • “资源类型”列指每个操作是否支持资源级权限。
    • 资源类型支持通配符号*表示所有。如果此列没有值(-),则必须在身份策略语句的resource元素中指定所有资源类型(“*”)。
    • 如果该列包含资源类型,则必须在具有该操作的语句中指定该资源的urn。
    • 资源类型列中必需资源在表中用星号(*)标识,表示使用此操作必须指定该资源类型。

    关于ecs定义的资源类型的详细信息请参见资源类型(resource)

  • “条件键”列包括了可以在身份策略语句的condition元素中支持指定的键值。
    • 如果该授权项资源类型列存在值,则表示条件键仅对列举的资源类型生效。
    • 如果该授权项资源类型列没有值(-),则表示条件键对整个授权项生效。
    • 如果此列条件键没有值(-),表示此操作不支持指定条件键。

    关于workspace定义的条件键的详细信息请参见条件(condition)

  • 别名”列包括了可以在身份策略中配置的策略授权项。通过这些授权项,可以控制支持策略授权的api访问。详细信息请参见身份策略兼容性说明

您可以在身份策略语句的action元素中指定以下云桌面的相关操作。

表1 workspace支持的授权项

授权项

描述

访问级别

资源类型(*为必须)

条件键

workspace:authconfigs:get

授予查询认证登录方式配置信息的权限。

read

-

-

workspace:authconfigs:update

授予更新认证策略配置信息的权限。

write

-

-

workspace:assistauthconfigs:get

授予查询辅助认证的配置信息的权限。

read

-

-

workspace:assistauthconfigs:update

授予更新辅助认证配置的权限。

write

-

-

workspace:jobs:retry

授予重试任务的权限。

write

-

-

workspace:quotas:get

授予查询租户配额的权限。

read

-

-

workspace:tenants:getroles

授予查询租户角色的权限。

read

-

-

workspace:tenants:listconfig

授予查询租户个性配置列表的权限。

list

-

-

workspace:tenants:updateconfig

授予修改租户个性配置的权限。

write

-

-

workspace:natmappings:getconfig

授予查询租户的nat映射配置项的权限。

read

-

-

workspace:natmappings:updateconfig

授予修改租户的nat映射配置项的权限。

write

-

-

workspace:tenants:get

授予查询云办公服务详情的权限。

read

-

-

workspace:tenants:open

授予开通云办公服务的权限。

write

-

workspace:accessmode

workspace:tenants:delete

授予注销云办公服务的权限。

write

-

-

workspace:tenants:update

授予修改云办公服务属性的权限。

write

-

workspace:accessmode

workspace:tenants:getlockstatus

授予查询云办公服务是否被锁定的权限。

read

-

-

workspace:tenants:unlock

授予解除云办公服务锁定状态的权限。

write

-

-

workspace:agencies:create

授予创建委托的权限。

write

-

-

workspace:agencies:get

授予查询委托的权限。

read

-

-

workspace:desktops:createaiacceleratejob

授予创建渲染加速任务的权限。

write

-

-

workspace:desktops:getaiacceleratejob

授予查询渲染加速任务的权限。

read

-

-

workspace:desktops:getsysprepinfo

授予查询sysprep详情的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:checkbatchchangeimage

授予校验批量切换镜像的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:tenants:listdesktopnamepolicies

授予查询桌面名称策略列表的权限。

list

-

-

workspace:tenants:createdesktopnamepolicy

授予创建桌面名称策略的权限。

write

-

-

workspace:tenants:updatedesktopnamepolicy

授予更新桌面名称策略的权限。

write

-

-

workspace:tenants:batchdeletedesktopnamepolicies

授予批量删除桌面名称策略的权限。

write

-

-

workspace:desktoppools:create

授予创建桌面池的权限。

write

desktoppool *

-

user

-

usergroup

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktoppools:list

授予查询桌面池列表的权限。

list

desktoppool *

-

workspace:desktoppools:update

授予修改桌面池属性的权限。

write

desktoppool *

-

workspace:desktoppools:delete

授予删除桌面池的权限。

write

desktoppool *

-

workspace:desktoppools:get

授予查询桌面池详情的权限。

read

desktoppool *

-

workspace:desktoppools:expand

授予扩容桌面池的权限。

write

desktoppool *

-

workspace:desktoppools:resize

授予桌面池变更规格的权限。

write

desktoppool *

-

workspace:desktoppools:rebuild

授予桌面池重建系统盘的权限。

write

desktoppool *

-

workspace:desktoppools:batchaddvolumes

授予桌面池批量添加磁盘的权限。

write

desktoppool *

-

workspace:desktoppools:batchdeletevolumes

授予桌面池批量删除磁盘的权限。

write

desktoppool *

-

workspace:desktoppools:batchexpandvolumes

授予桌面池批量扩容磁盘的权限。

write

desktoppool *

-

workspace:desktoppools:operate

授予操作桌面池的权限。

write

desktoppool *

-

workspace:desktoppools:listusers

授予查询桌面池授权的用户、用户组的权限。

list

desktoppool *

-

workspace:desktoppools:authorizeusers

授予桌面池授权用户、用户组的权限。

write

desktoppool *

-

user

-

usergroup

-

workspace:desktoppools:listdesktops

授予查询桌面池桌面信息的权限。

list

desktoppool *

-

workspace:desktoppools:listscripttasks

授予查询桌面池的脚本执行任务列表的权限。

list

desktoppool *

-

workspace:desktoppools:executescripts

授予桌面池批量执行脚本的权限。

write

desktoppool *

-

script

-

workspace:desktoppools:sendnotifications

授予发送消息通知的权限。

write

desktoppool *

-

workspace:desktops:export

授予导出桌面列表的权限。

list

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktops:create

授予创建桌面的权限。

write

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid
  • workspace:associatepublicip
  • workspace:accessmode

workspace:desktops:list

授予查询桌面列表的权限。

list

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktops:update

授予更新桌面信息的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:delete

授予删除桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:get

授予查询桌面详情的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchdelete

授予批量删除桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:logoff

授予批量注销桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listdetail

授予查询桌面详情列表的权限。

list

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktops:operate

授予操作桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:resize

授予变更规格的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:getconnectstatus

授予查询桌面登录状态统计数据的权限。

read

-

-

workspace:desktops:liststatus

授予查询桌面登录状态的权限。

list

-

-

workspace:desktops:rebuild

授予重建桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:getactions

授予查询桌面开关机信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:createconsole

授予获取远程登录控制台地址的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:updatesids

授予更新桌面sid的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:rejoindomain

授予重新加入ad域的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:createimage

授予桌面转镜像的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchdetach

授予批量解绑用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:detach

授予解绑用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:attach

授予分配用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:getnetwork

授予查询桌面网络信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:changenetwork

授予切换桌面网络的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:exclusivehosts:listdesktops

授予查询专享桌面详情列表的权限。

list

exclusivehost *

-

-

g:enterpriseprojectid

workspace:desktops:listall

授予查询普通桌面和渲染桌面列表的权限。

list

desktop *

-

workspace:desktopassociate:listdiscovervminfo

授予查询可纳管的虚拟机列表的权限。

list

-

-

workspace:desktopassociate:starttask

授予启动纳管虚拟机任务的权限。

write

-

-

workspace:desktopassociate:switchscantask

授予开启纳管扫描任务的权限。

write

-

-

workspace:desktopassociate:getscantaskswitch

授予查询纳管扫描任务开关的权限。

read

-

-

workspace:desktops:setmaintenancemode

授予批量设置桌面管理员维护模式的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:prepattachusers

授予预批量分配用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchattachusers

授予批量分配用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:changeusername

授予在windows ad场景下,修改与桌面关联的用户名的权限。

write

-

-

workspace:desktops:sendnotifications

授予发送消息通知的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:migrate

授予迁移桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listagents

授予查询桌面安装agent列表的权限。

list

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchinstallagents

授予批量为桌面安装agent的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listtags

授予查询桌面标签的权限。

list

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:tag

授予创建桌面标签的权限。

tagging

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:desktops:untag

授予删除桌面标签的权限。

tagging

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:desktops:listprojecttags

授予查询项目标签的权限。

list

-

-

workspace:desktops:operatetags

授予批量添加删除标签的权限。

tagging

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:desktops:listbytags

授予使用标签过滤桌面的权限。

list

-

-

workspace:exclusivehosts:create

授予创建专享主机的权限。

write

exclusivehost *

-

-

g:enterpriseprojectid

workspace:exclusivehosts:list

授予查询专享主机列表的权限。

list

exclusivehost *

-

-

g:enterpriseprojectid

workspace:exclusivehosts:check

授予校验是否能创建专享主机的权限。

write

-

-

workspace:exclusivehosts:get

授予查询专享主机详情的权限。

read

exclusivehost *

g:enterpriseprojectid

workspace:exclusivehosts:update

授予更新专享主机信息的权限。

write

exclusivehost *

g:enterpriseprojectid

workspace:exclusivehosts:delete

授予删除专享主机的权限。

write

exclusivehost *

g:enterpriseprojectid

workspace:mkp:listimages

授予查询云市场镜像列表的权限。

list

-

-

workspace:mkp:listcommodityinfos

授予查询云市场商品信息的权限。

list

-

-

workspace:mkp:createorder

授予创建云市场产品订单的权限。

write

-

-

workspace:mkp:listlistproductreserve

授予查询云市场库存信息的权限。

list

-

-

workspace:mkp:listcommoditydetails

授予查询云市场商品详情的权限。

list

-

-

workspace:mkp:listrelationcommoditydetails

授予查询商品的关联商品的权限。

list

-

-

workspace:mkp:listcommodityagreements

授予查询云市场商品协议的权限。

list

-

-

workspace:networks:listeips

授予查询eip列表的权限。

list

-

-

workspace:networks:createeips

授予创建eip的权限。

write

-

-

workspace:networks:bindeips

授予绑定eip的权限。

write

-

-

workspace:networks:unbindeips

授予解绑eip的权限。

write

-

-

workspace:networks:geteipquota

授予查询eip配额的权限。

read

-

-

workspace:networks:listnatgateways

授予查询nat网关列表的权限。

list

-

-

workspace:orders:create

授予包周期下单的权限。

write

-

  • workspace:createordertype
  • workspace:associatepublicip
  • workspace:accessmode

workspace:orders:change

授予创建变更订单的权限。

write

-

workspace:changeordertype

workspace:orders:batchinquiry

授予批量询价的权限。

write

-

-

workspace:quotas:check

授予校验配额的权限。

write

-

-

workspace:renderdesktops:create

授予创建渲染桌面的权限。

write

-

-

workspace:renderdesktops:delete

授予删除渲染桌面的权限。

write

-

-

workspace:renderdesktops:list

授予查询渲染桌面列表的权限。

list

-

-

workspace:renderdesktops:action

授予操作渲染桌面的权限。

write

-

-

workspace:scheduledtasks:list

授予查询定时任务列表的权限。

list

scheduledtask *

-

workspace:scheduledtasks:create

授予创建定时任务的权限。

write

scheduledtask *

-

desktop

-

desktoppool

-

server

-

servergroup

-

workspace:scheduledtasks:get

授予查询定时任务详情的权限。

read

scheduledtask *

-

workspace:scheduledtasks:update

授予更新定时任务的权限。

write

scheduledtask *

-

desktop

-

desktoppool

-

server

-

servergroup

-

workspace:scheduledtasks:delete

授予删除定时任务的权限。

write

scheduledtask *

-

workspace:scheduledtasks:getfuture

授予查询定时任务未来执行时间的权限。

read

-

-

workspace:scheduledtasks:batchdelete

授予批量删除定时任务的权限。

write

scheduledtask *

-

workspace:scheduledtasks:listrecords

授予查询定时任务执行记录的权限。

list

scheduledtask *

-

workspace:scheduledtasks:getrecord

授予查询定时任务执行记录详情的权限。

read

scheduledtask *

-

workspace:scheduledtasks:exportrecords

授予导出定时任务记录及执行详情的权限。

list

scheduledtask *

-

workspace:users:subscribesharer

授予订阅协同资源的权限。

write

user *

-

workspace:desktops:addsubresources

授予购买桌面附属资源的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:deletesubresources

授予删除桌面附属资源的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:createsnapshots

授予创建桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:getsnapshots

授予查询桌面快照的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:deletesnapshots

授予删除桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:restorebysnapshot

授予使用桌面快照恢复桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:statistics:listdesktopstatus

授予统计桌面状态的权限。

list

-

-

workspace:statistics:getunused

授予查询在指定时间段未使用的桌面的权限。

read

-

-

workspace:statistics:getused

授予查询使用桌面的时长的权限。

read

-

-

workspace:bindingpolicies:export

授予导出终端与桌面绑定配置excel的权限。

list

-

-

workspace:bindingpolicies:getconfig

授予查询终端与桌面绑定的开关配置信息的权限。

read

-

-

workspace:bindingpolicies:createconfig

授予设置终端与桌面绑定的开关配置的权限。

write

-

-

workspace:bindingpolicies:get

授予查询终端与桌面绑定配置列表的权限。

read

-

-

workspace:bindingpolicies:add

授予增加终端与桌面绑定配置的权限。

write

-

-

workspace:bindingpolicies:update

授予修改终端与桌面绑定配置的权限。

write

-

-

workspace:bindingpolicies:delete

授予删除终端与桌面绑定配置的权限。

write

-

-

workspace:volumes:delete

授予删除桌面数据盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:batchadd

授予增加桌面磁盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:batchexpand

授予扩容桌面磁盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:wdh:gettype

授予查询云办公主机类型的权限。

read

wdh *

g:enterpriseprojectid

workspace:wdh:get

授予查询云办公主机列表的权限。

read

wdh *

g:enterpriseprojectid

workspace:desktops:getremoteassistance

授予查询远程协助信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:createremoteassistance

授予创建远程协助的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:cancelremoteassistance

授予取消远程协助的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:add

授予单个桌面增加磁盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:expand

授予扩容磁盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:listdsspoolsdetail

授予获取专属分布式存储池详情列表的权限。

list

-

-

workspace:common:listtimezones

授予查询时区配置的权限。

list

-

-

workspace:connections:securityexport

授予导出连接记录的权限。

list

-

-

workspace:images:list

授予查询支持的镜像列表的权限。

list

-

-

workspace:policygroups:import

授予导入策略组的权限。

write

-

-

workspace:accesspolicies:create

授予创建接入策略的权限。

write

-

-

workspace:accesspolicies:get

授予查询接入策略的权限。

read

-

-

workspace:accesspolicies:delete

授予删除指定接入策略的权限。

write

-

-

workspace:accesspolicies:gettarget

授予查询指定接入策略的应用对象的权限。

read

-

-

workspace:accesspolicies:updatetarget

授予更新指定接入策略的应用对象的权限。

write

-

-

workspace:products:listdesktopproducts

授予查询支持的产品套餐列表的权限。

list

-

-

workspace:products:listsharerproducts

授予查询协同套餐列表的权限。

list

-

-

workspace:products:listinternetproducts

授予查询上网套餐列表的权限。

list

-

-

workspace:availabilityzones:list

授予查询支持的可用分区列表的权限。

list

-

-

workspace:usergroups:export

授予导出用户组的权限。

list

usergroup *

-

workspace:users:export

授予导出用户的权限。

list

user *

-

workspace:users:import

授予导入用户的权限。

write

user *

-

workspace:usergroups:exportusers

授予导出用户组用户的权限。

list

usergroup *

-

workspace:users:operate

授予操作用户(锁定、解锁和重置密码)的权限。

write

user *

-

workspace:users:randompassword

授予给用户重置随机密码的权限。

write

user *

-

workspace:users:deleteotps

授予解绑otp设备的权限。

write

user *

-

workspace:users:resendemail

授予重新发送邮件的权限。

write

user *

-

workspace:connections:securitylist

授予查询连接信息的权限。

list

-

-

workspace:connections:listonlineusers

授予查询登录人数的权限。

list

-

-

workspace:usergroups:list

授予查询用户组列表的权限。

list

usergroup *

-

workspace:usergroups:create

授予创建用户组的权限。

write

usergroup *

-

workspace:usergroups:batchdelete

授予批量删除用户组的权限。

write

usergroup *

-

workspace:usergroups:delete

授予删除桌面用户组的权限。

write

usergroup *

-

workspace:usergroups:update

授予修改用户组信息的权限。

write

usergroup *

-

workspace:usergroups:operate

授予操作用户组的权限。

write

usergroup *

-

user *

-

workspace:usergroups:getusers

授予查询用户组中的用户的权限。

list

usergroup *

-

workspace:jobs:listsubjobs

授予查询子任务列表的权限。

list

-

-

workspace:jobs:deletesubjobrecords

授予删除子任务记录的权限。

write

-

-

workspace:ou:get

授予查询ou信息的权限。

list

-

-

workspace:ou:create

授予新增ou信息的权限。

write

-

-

workspace:ou:delete

授予删除ou信息的权限。

write

-

-

workspace:ou:update

授予更新ou信息的权限。

write

-

-

workspace:policygroups:list

授予查询策略组列表的权限。

list

policygroup *

-

workspace:policygroups:create

授予新增策略组的权限。

write

policygroup *

-

desktop

-

desktoppool

-

user

-

usergroup

-

appgroup

-

workspace:policygroups:delete

授予删除策略组的权限。

write

policygroup *

-

workspace:policygroups:get

授予查询策略组的权限。

read

policygroup *

-

workspace:policygroups:update

授予修改策略组的权限。

write

policygroup *

-

user

-

usergroup

-

appgroup

-

workspace:policygroups:export

授予导出策略组的权限。

list

policygroup *

-

workspace:policygroups:listpolicies

授予查询策略组中的策略项的权限。

list

policygroup *

-

workspace:policygroups:updatepolicies

授予修改策略组中的策略项的权限。

write

policygroup *

-

workspace:policygroups:listtargets

授予查询策略组应用对象的权限。

list

policygroup *

-

workspace:policygroups:updatetargets

授予修改策略组应用对象的权限。

write

policygroup *

-

desktop

-

desktoppool

-

user

-

usergroup

-

appgroup

-

workspace:policygroups:listdetail

授予查询策略组详情列表的权限。

list

policygroup *

-

workspace:policygroups:getoriginalpolicies

授予查询初始策略项的权限。

read

policygroup *

-

workspace:users:list

授予查询用户列表的权限。

list

user *

-

workspace:users:create

授予创建用户的权限。

write

user *

-

workspace:users:delete

授予删除指定用户的权限。

write

user *

-

workspace:users:get

授予查询用户详情信息的权限。

read

user *

-

workspace:users:update

授予修改用户信息的权限。

write

user *

-

workspace:users:batchdelete

授予批量删除用户的权限。

write

user *

-

workspace:users:resetpassword

授予重置用户密码的权限。

write

user *

-

workspace:users:checkresetpasswordtoken

授予校验重置域用户密码token的权限。

write

user *

-

workspace:users:gettemplate

授予用户模板下载的权限。

read

-

-

workspace:users:checkexist

授予校验用户是否存在的权限。

write

user *

-

workspace:users:listotps

授予查询otp设备的权限。

list

user *

-

workspace:users:getimporttemplate

授予创建用户模板下载的权限。

read

-

-

workspace:users:batchcreate

授予批量创建用户的权限。

write

user *

-

workspace:products:listvolumeproducts

授予查询磁盘产品列表的权限。

list

-

-

workspace:tenants:listexporttasks

授予查询导出任务列表的权限。

list

-

-

workspace:tenants:deleteexporttasks

授予批量删除导出任务记录的权限。

write

-

-

workspace:tenants:exportdata

授予下载导出的文件的权限。

read

-

-

workspace:statistics:listalarm

授予查询告警列表的权限。

list

-

-

workspace:statistics:getalarm

授予查询告警数的权限。

read

-

-

workspace:statistics:getgrowthrate

授予查询指标环比值的权限。

read

-

-

workspace:statistics:getmetric

授予查询指标的权限。

read

-

-

workspace:statistics:getmetrictrend

授予查询指标趋势的权限。

read

-

-

workspace:statistics:updatenotificationrules

授予更新指标的通知规则的权限。

write

-

-

workspace:statistics:deletenotificationrules

授予删除指标的通知规则的权限。

write

-

-

workspace:statistics:createnotifyrules

授予新增指标的通知规则的权限。

write

-

-

workspace:statistics:listnotificationrules

授予查询指标的通知规则的权限。

list

-

-

workspace:statistics:listnotificationrecords

授予查询指标通知记录的权限。

list

-

-

workspace:statistics:listdesktopmetrics

授予查询桌面使用统计信息的权限。

list

-

-

workspace:statistics:exportdesktopmetrics

授予导出桌面使用统计信息的权限。

list

-

-

workspace:statistics:listusermetrics

授予查询用户使用统计信息的权限。

list

-

-

workspace:statistics:exportusermetrics

授予导出用户使用统计信息;的权限。

list

-

-

workspace:appcenter:createbucketcredential

授予生成obs桶凭证信息信息的权限。

write

-

-

workspace:appcenter:createandauthorizebucket

授予添加并授权默认obs桶的权限。

write

-

-

workspace:appcenter:listapps

授予按照名称分页查询应用的权限。

list

-

-

workspace:appcenter:createapp

授予上传应用的权限。

write

-

-

workspace:appcenter:updateapp

授予修改应用的权限。

write

-

-

workspace:appcenter:deleteapp

授予删除应用的权限。

write

-

-

workspace:appcenter:installapp

授予自动安装应用的权限。

write

-

-

workspace:appcenter:listappauthorizations

授予查询应用授权信息的权限。

list

-

-

workspace:appcenter:batchupdateappauthorizations

授予设置应用授权的权限。

write

-

-

workspace:appcenter:batchdeleteapps

授予批量删除应用的权限。

write

-

-

workspace:appcenter:batchdisableapps

授予批量设置应用不可见的权限。

write

-

-

workspace:appcenter:batchenableapps

授予批量设置应用可见的权限。

write

-

-

workspace:appcenter:batchinstallapps

授予批量自动安装安装应用的权限。

write

-

-

workspace:appcenter:listappcatalogs

授予查询应用分类信息的权限。

list

-

-

workspace:appcenter:listjobs

授予查询应用安装job信息的权限。

list

-

-

workspace:appcenter:batchdeletejobs

授予批量删除job的权限。

write

-

-

workspace:appcenter:retryjobs

授予重试失败job的权限。

write

-

-

workspace:appcenter:createapprule

授予创建应用规则的权限。

write

-

-

workspace:appcenter:listapprule

授予查询应用规则的权限。

list

-

-

workspace:appcenter:updateapprule

授予修改应用规则的权限。

write

-

-

workspace:appcenter:deleteapprule

授予删除应用规则的权限。

write

-

-

workspace:appcenter:batchdeleteapprules

授予批量删除应用规则的权限。

write

-

-

workspace:appcenter:enablerulerestriction

授予启用规则管控的权限。

write

-

-

workspace:appcenter:disablerulerestriction

授予禁用规则管控的权限。

write

-

-

workspace:appcenter:addrestrictedrule

授予增加管控规则的权限。

write

-

-

workspace:appcenter:listrestrictedrule

授予查询管控规则列表的权限。

list

-

-

workspace:appcenter:deleterestrictedrule

授予批量删除管控规则列表的权限。

write

-

-

workspace:appcenter:updatetenantprofile

授予启禁用租户功能的权限。

write

-

-

workspace:appcenter:listtenantprofiles

授予查询租户功能状态的权限。

list

-

-

workspace:scripts:create

授予创建脚本的权限。

write

script *

-

workspace:scripts:list

授予查询脚本列表的权限。

list

script *

-

workspace:scripts:get

授予查询脚本详情的权限。

read

script *

-

workspace:scripts:put

授予更新脚本的权限。

write

script *

-

workspace:scripts:delete

授予删除脚本的权限。

write

script *

-

workspace:scripts:execute

授予批量执行脚本或命令的权限。

write

script *

-

desktop *

-

workspace:scripts:getrecorddetail

授予查询脚本或命令执行记录详情的权限。

read

script *

-

workspace:scripts:listrecords

授予查询脚本执行记录列表的权限。

list

script *

-

workspace:scripts:listtasks

授予查询脚本任务列表的权限。

list

script *

-

workspace:scripts:retry

授予重试脚本的权限。

write

script *

-

workspace:scripts:stop

授予停止脚本或命令执行任务的权限。

write

script *

-

workspace:scripts:download

授予下载脚本输出记录的权限。

write

script *

-

workspace:tenants:getsharespaceconfig

授予查询协同配置的权限。

read

-

-

workspace:tenants:updatesharespaceconfig

授予修改协同配置的权限。

write

-

-

workspace:authconfigs:getstatus

授予查询认证状态的权限。

read

-

-

workspace:privacystatements:sign

授予签署隐私声明的权限。

write

-

-

workspace:sites:get

授予查询站点信息的权限。

read

-

-

workspace:sites:add

授予新增站点的权限。

write

-

workspace:accessmode

workspace:sites:delete

授予删除站点的权限。

write

-

-

workspace:sites:updateaccessmode

授予修改站点接入方式的权限。

write

-

workspace:accessmode

workspace:sites:updatesubnets

授予修改站点业务子网的权限。

write

-

-

workspace:tenants:checkenterpriseids

授予检查企业id是否已被使用的权限。

write

-

-

workspace:tenants:updateenterpriseid

授予修改企业id的权限。

write

-

-

workspace:bandwidth:create

授予开通云办公带宽的权限。

write

-

-

workspace:bandwidth:list

授予查询云办公带宽列表的权限。

list

-

-

workspace:bandwidth:update

授予修改云办公带宽的权限。

write

-

-

workspace:bandwidth:delete

授予取消云办公带宽的权限。

write

-

-

workspace:bandwidth:getcontrolconfig

授予查询云办公带宽的控制配置的权限。

read

-

-

workspace:bandwidth:updatecontrolconfig

授予修改云办公带宽的控制配置的权限。

write

-

-

workspace:bandwidth:createchangeorder

授予创建云办公带宽变更订单的权限。

write

-

-

workspace:desktops:batchcreatesnapshots

授予批量创建桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchdeletesnapshots

授予批量删除桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchrestoresnapshots

授予批量恢复桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listsnapshots

授予查询桌面快照列表的权限。

list

-

-

workspace:desktops:verifydesktopname

授予校验桌面名称的权限。

write

-

-

workspace:networks:getavailableip

授予根据子网id查询该子网下可用的ip的权限。

read

-

-

workspace:desktops:getadstatus

授予查询ad网络状态的权限。

read

-

-

workspace:networks:checkipifexist

授予检查ip是否存在的权限。

write

-

-

workspace:images:checkifexist

授予检查镜像是否存在的权限。

write

-

-

workspace:wdh:listdesktops

授予查询云办公主机包含桌面信息的权限。

list

wdh *

-

-

g:enterpriseprojectid

workspace:wdh:update

授予更新云办公主机信息的权限。

write

wdh *

g:enterpriseprojectid

workspace:bindingpolicies:gettemplate

授予下载终端与桌面绑定模板的权限。

read

-

-

workspace:bindingpolicies:import

授予批量导入终端与桌面绑定的权限。

write

-

-

workspace:statistics:getrunstate

授予运行状态统计的权限。

read

-

-

workspace:statistics:getloginstate

授予登录状态统计的权限。

read

-

-

workspace:networks:getusingsubnets

授予查询正在被使用的子网列表的权限。

read

-

-

workspace:networks:listports

授予查询端口列表的权限。

list

-

-

workspace:renderdesktops:createconsole

授予获取远程登录控制台地址的权限。

write

-

-

workspace:renderdesktops:resize

授予变更渲染桌面规格的权限。

write

-

-

workspace:exclusivehosts:resizelites

授予变更专享主机规格的权限。

write

exclusivehost *

g:enterpriseprojectid

workspace:desktops:getmonitor

授予查询桌面监控信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listdetachinfo

授予查询桌面历史解绑用户信息的权限。

list

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktops:getsysprepversion

授予查询sysprep版本信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:networks:createnat

授予开通nat网关上网功能的权限。

write

-

-

workspace:networks:listnats

授予查询nat网关上网功能的权限。

list

-

-

workspace:networks:listsubnets

授予查询子网列表的权限。

list

-

-

workspace:networks:listvpcs

授予查询查询vpc的权限。

list

-

-

workspace:policygroups:createtemplate

授予创建策略模板的权限。

write

-

-

workspace:policygroups:listtemplate

授予查询策略模板列表的权限。

list

-

-

workspace:policygroups:updatetemplate

授予更新策略模板的权限。

write

-

-

workspace:networks:listsecuritygroups

授予查询安全组列表的权限。

list

-

-

workspace:availabilityzones:getsummary

授予查询可用分区列表概要的权限。

read

-

-

workspace:availabilityzones:get

授予查询可用分区详情的权限。

read

-

-

workspace:users:importuser

授予导入用户列表的权限。

write

user *

-

workspace:users:uploadtemplate

授予导入桌面用户列表的权限。

write

user *

-

workspace:accesspolicies:update

授予更新指定接入策略的权限。

write

-

-

workspace:desktops:verifysource

授予校验桌面来源的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listdesktopnetworks

授予批量查询桌面网络信息的权限。

list

desktop *

-

workspace:desktops:batchchangenetwork

授予批量切换桌面网络的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:jobs:get

授予查询任务详情的权限。

read

-

-

workspace:accesspolicies:importip

授予导入ip列表的权限。

write

-

-

workspace:accesspolicies:getipimporttemplate

授予下载ip导入模板的权限。

read

-

-

workspace:sites:listedgesites

授予查询边缘站点的权限。

list

-

-

workspace:sites:checkedgesiteresources

授予校验边缘站点资源的权限。

write

-

-

workspace:ou:listadous

授予查询ad域下ou信息的权限。

list

-

-

workspace:ou:listouusers

授予查询ou下用户信息的权限。

list

-

-

workspace:ou:importusersbyou

授予导入ou用户的权限。

write

-

-

workspace:appgroup:list

授予查询应用组的权限。

list

appgroup *

-

workspace:appgroup:create

授予创建应用组的权限。

write

appgroup *

-

servergroup

-

workspace:appgroup:delete

授予应用组删除的权限。

write

appgroup *

-

workspace:appgroup:get

授予查询应用组详情的权限。

read

appgroup *

-

workspace:appgroup:update

授予修改应用组的权限。

write

appgroup *

-

servergroup

-

workspace:app:listpublishedapp

授予查询已发布应用的权限。

list

app *

-

appgroup *

-

workspace:app:publish

授予发布应用的权限。

write

app *

-

appgroup *

-

workspace:app:get

授予查询应用详细信息的权限。

read

app *

-

appgroup *

-

workspace:app:update

授予修改应用信息的权限。

write

app *

-

appgroup *

-

workspace:app:deleteicon

授予删除自定义应用图标的权限。

write

app *

-

appgroup *

-

workspace:app:uploadicon

授予修改自定义应用图标的权限。

write

app *

-

appgroup *

-

workspace:app:check

授予校验应用的权限。

write

app *

-

appgroup *

-

workspace:app:batchdisable

授予批量禁用应用的权限。

write

app *

-

appgroup *

-

workspace:app:batchenable

授予批量启用应用的权限。

write

app *

-

appgroup *

-

workspace:app:unpublish

授予批量取消应用发布的权限。

write

app *

-

appgroup *

-

workspace:appgroup:listpublishableapp

授予可发布应用列表的权限。

list

appgroup *

-

workspace:appgroup:batchdeleteauthorization

授予移除应用组授权的权限。

write

appgroup *

-

user

-

usergroup

-

workspace:appgroup:disassociate

授予解除服务组关联的所有应用组的权限。

write

-

-

workspace:appgroup:listauthorization

授予查询应用组授权记录的权限。

list

appgroup *

-

workspace:appgroup:addauthorization

授予增加应用组授权的权限。

write

appgroup *

-

user

-

usergroup

-

workspace:appgroup:batchdelete

授予批量删除应用组的权限。

write

appgroup *

-

workspace:appgroup:check

授予校验应用组的权限。

write

-

-

workspace:servergroup:list

授予查询服务器组列表的权限。

list

servergroup *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:servergroup:create

授予创建服务器组的权限。

write

servergroup *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:servergroup:delete

授予删除服务器组的权限。

write

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:servergroup:get

授予查询指定服务器组的权限。

read

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:servergroup:update

授予修改服务器组的权限。

write

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:servergroup:getserverstate

授予查询指定服务器组内服务器状态的权限。

read

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:servergroup:listdetail

授予查询租户服务器组基础信息列表的权限。

list

servergroup *

-

workspace:servergroup:getrestrict

授予指定租户服务器组限制查询的权限。

read

servergroup *

-

workspace:servergroup:validate

授予校验服务器组的权限。

write

servergroup *

-

workspace:servergroup:tagresource

授予服务器组添加标签的权限。

tagging

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:servergroup:untagresource

授予服务器组删除标签的权限。

tagging

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:servergroup:listtagsforresource

授予查询服务器组标签的权限。

list

servergroup *

-

-

g:enterpriseprojectid

workspace:servergroup:listtags

授予查询租户所有服务器上标签的权限。

list

servergroup *

-

workspace:servergroup:batchcreatetags

授予批量添加服务器组标签的权限。

tagging

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:servergroup:batchdeletetags

授予批量删除服务器组标签的权限。

tagging

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:server:list

授予查询服务器列表的权限。

list

server *

-

workspace:server:delete

授予删除服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:get

授予查询指定服务器的权限。

read

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:update

授予修改服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:changeimage

授予修改服务器的镜像的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:reinstall

授予重装服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:getvncurl

授予获取vnc远程登录地址的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:accessagent:list

授予查询租户的所有hda最新版本的权限。

list

-

-

workspace:accessagent:batchupgrade

授予批量升级服务器hda版本的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:accessagent:listlatestversion

授予查询租户的hda最新版本的权限。

list

-

-

workspace:server:listaccessagentdetails

授予查询服务器的hda相关信息的权限。

list

server *

-

workspace:accessagent:getupgradeflag

授予查询hda升级提醒标识的权限。

read

-

-

workspace:accessagent:updateupgradeflag

授予更新hda升级通知标识的权限。

write

-

-

workspace:accessagent:listupgraderecords

授予查询服务器的hda升级跟踪记录的权限。

list

-

-

workspace:server:batchdelete

授予批量删除服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchchangemaintainmode

授予标记服务器维护状态的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchreboot

授予重启服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchrejoindomain

授予批量服务器重新加域的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchstart

授予启动服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchstop

授予关闭服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchupdatetsvi

授予批量更新服务器虚拟会话ip配置的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:create

授予创建应用服务器的权限。

write

server *

-

servergroup *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:server:batchmigratehosts

授予迁移云办公主机下面的服务器到目标云办公主机的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

wdh *

-

workspace:server:getmetricdata

授予查询云应用服务器监控信息的权限。

read

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:jobs:batchdeletesubjobs

授予批量删除子任务的权限。

write

-

-

workspace:jobs:countsubjobs

授予子任务数量查询的权限。

list

-

-

workspace:appwarehouse:authorizeobs

授予获取上传至obs桶的ak/sk的权限。

write

-

-

workspace:appwarehouse:batchdeleteapp

授予批量删除应用仓库中的指定应用的权限。

write

-

-

workspace:appwarehouse:listwarehouseapps

授予查询租户应用仓库中的应用列表的权限。

list

-

-

workspace:appwarehouse:createapp

授予在应用仓库中新增应用的权限。

write

-

-

workspace:appwarehouse:deleteapp

授予删除应用仓库中的指定应用的权限。

write

-

-

workspace:appwarehouse:uploadappicon

授予在应用仓库中上传图标文件的权限。

write

-

-

workspace:appwarehouse:createbucketoracl

授予添加桶或者桶授权的权限。

write

-

-

workspace:images:listimagejobs

授予查询租户的任务列表的权限。

list

-

-

workspace:images:getimagejob

授予查询任务详情的权限。

read

-

-

workspace:imageserver:list

授予查询镜像实例列表的权限。

list

imageserver *

-

-

g:enterpriseprojectid

workspace:imageserver:create

授予创建镜像实例的权限。

write

imageserver *

-

-

g:enterpriseprojectid

workspace:imageserver:get

授予查询指定镜像实例的权限。

read

imageserver *

g:enterpriseprojectid

workspace:imageserver:update

授予修改镜像实例的权限。

write

imageserver *

g:enterpriseprojectid

workspace:imageserver:attachapp

授予分发软件信息至镜像实例的权限。

write

imageserver *

g:enterpriseprojectid

workspace:imageserver:listlatestattachedapp

授予查询最近一次分发软件信息列表的权限。

list

imageserver *

-

workspace:imageserver:recreate

授予构建云应用镜像的权限。

write

imageserver *

g:enterpriseprojectid

workspace:imageserver:batchdelete

授予批量删除镜像实例的权限。

write

imageserver *

g:enterpriseprojectid

workspace:imageserver:listimagesubjobs

授予子任务查询的权限。

list

-

-

workspace:imageserver:batchdeleteimagesubjobs

授予批量删除子任务的权限。

write

-

-

workspace:imageserver:countimagesubjobs

授予子任务数量查询的权限。

read

-

-

workspace:appgroup:listmailrecord

授予查询应用组授权邮件发送记录的权限。

list

-

-

workspace:appgroup:resendmail

授予重发应用组授权邮件(根据授权邮件记录)的权限。

write

-

-

workspace:storage:listpersistentstorage

授予查询wks存储的权限。

list

storage *

-

workspace:storage:createpersistentstorage

授予创建wks存储的权限。

write

storage *

-

workspace:storage:deletepersistentstorage

授予删除wks存储的权限。

write

storage *

-

workspace:storage:updateuserfolderassignment

授予创建个人存储目录的权限。

write

storage *

-

workspace:storage:updatesharefolderassignment

授予修改共享目录成员的权限。

write

storage *

-

workspace:storage:createsharefolder

授予创建共享存储目录的权限。

write

storage *

-

workspace:storage:deletestorageclaim

授予删除共享目录的权限。

write

storage *

-

workspace:storage:deleteuserstorageattachment

授予删除个人存储目录的权限。

write

storage *

-

workspace:storage:batchdeletepersistentstorage

授予批量删除wks存储的权限。

write

storage *

-

workspace:storage:liststorageassignment

授予查询个人存储目录的权限。

list

storage *

-

workspace:storage:listsharefolder

授予查询共享存储目录的权限。

list

storage *

-

workspace:policygroups:deletetemplate

授予删除策略模板的权限。

write

-

-

workspace:privacystatements:get

授予查询最新版本的隐私声明的权限。

read

-

-

workspace:scalingpolicy:delete

授予删除弹性伸缩策略的权限。

write

-

-

workspace:scalingpolicy:list

授予查询服务器组弹性伸缩策略的权限。

read

-

-

workspace:scalingpolicy:create

授予新增/修改弹性伸缩策略的权限。

write

-

-

workspace:session:listappconnection

授予查询应用使用记录的权限。

write

-

-

workspace:session:logoffusersession

授予用户会话注销的权限。

write

-

-

workspace:session:listuserconnection

授予查询用户登录记录的权限。

write

-

-

workspace:session:listsessionbyusername

授予根据用户名查询当前会话的权限。

list

-

-

workspace:storagepolicy:create

授予新增或更新存储目录访问权限自定义策略的权限。

write

storage *

-

workspace:storagepolicy:list

授予查询存储目录访问权限策略的权限。

list

storage *

-

workspace:storage:listsfs3storage

授予查询sfs3.0存储的权限。

list

storage *

-

workspace:baseresource:list

授予查询可用分区列表的权限。

list

-

-

workspace:tenants:listconfiginfo

授予查询企业系统配置的权限。

list

-

-

workspace:tenants:active

授予租户服务激活、初始化的权限。

write

-

-

workspace:tenants:listtenantprofile

授予查询租户信息的权限。

list

-

-

workspace:server:listservermetricdata

授予查询服务器的监控数据的权限。

list

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:session:listsessions

授予查询企业会话列表的权限。

list

-

-

workspace:appwarehouse:updateapp

授予更新应用仓库中的应用的权限。

write

-

-

workspace:server:batchchangeimage

授予批量切换服务器镜像的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchreinstall

授予批量重装服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:authconfigs:get

授予查询认证登录方式配置信息的权限。

read

-

-

workspace:authconfigs:update

授予更新认证策略配置信息的权限。

write

-

-

workspace:assistauthconfigs:get

授予查询辅助认证的配置信息的权限。

read

-

-

workspace:assistauthconfigs:update

授予更新辅助认证配置的权限。

write

-

-

workspace:jobs:retry

授予重试任务的权限。

write

-

-

workspace:quotas:get

授予查询租户配额的权限。

read

-

-

workspace:tenants:getroles

授予查询租户角色的权限。

read

-

-

workspace:tenants:listconfig

授予查询租户个性配置列表的权限。

list

-

-

workspace:tenants:updateconfig

授予修改租户个性配置的权限。

write

-

-

workspace:natmappings:getconfig

授予查询租户的nat映射配置项的权限。

read

-

-

workspace:natmappings:updateconfig

授予修改租户的nat映射配置项的权限。

write

-

-

workspace:tenants:get

授予查询云办公服务详情的权限。

read

-

-

workspace:tenants:open

授予开通云办公服务的权限。

write

-

workspace:accessmode

workspace:tenants:delete

授予注销云办公服务的权限。

write

-

-

workspace:tenants:update

授予修改云办公服务属性的权限。

write

-

workspace:accessmode

workspace:tenants:getlockstatus

授予查询云办公服务是否被锁定的权限。

read

-

-

workspace:tenants:unlock

授予解除云办公服务锁定状态的权限。

write

-

-

workspace:agencies:create

授予创建委托的权限。

write

-

-

workspace:agencies:get

授予查询委托的权限。

read

-

-

workspace:desktops:commitaiacceleratejob

授予创建渲染加速任务的权限。

write

-

-

workspace:desktops:getaiacceleratejob

授予查询渲染加速任务的权限。

read

-

-

workspace:desktops:getsysprepinfo

授予查询sysprep详情的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:checkbatchchangeimage

授予校验批量切换镜像的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:tenants:listdesktopnamepolicies

授予查询桌面名称策略列表的权限。

list

-

-

workspace:tenants:createdesktopnamepolicy

授予创建桌面名称策略的权限。

write

-

-

workspace:tenants:updatedesktopnamepolicy

授予更新桌面名称策略的权限。

write

-

-

workspace:tenants:batchdeletedesktopnamepolicies

授予批量删除桌面名称策略的权限。

write

-

-

workspace:desktoppools:create

授予创建桌面池的权限。

write

desktoppool *

-

user

-

usergroup

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktoppools:list

授予查询桌面池列表的权限。

list

desktoppool *

-

workspace:desktoppools:update

授予修改桌面池属性的权限。

write

desktoppool *

-

workspace:desktoppools:delete

授予删除桌面池的权限。

write

desktoppool *

-

workspace:desktoppools:get

授予查询桌面池详情的权限。

read

desktoppool *

-

workspace:desktoppools:expand

授予扩容桌面池的权限。

write

desktoppool *

-

workspace:desktoppools:resize

授予桌面池变更规格的权限。

write

desktoppool *

-

workspace:desktoppools:rebuild

授予桌面池重建系统盘的权限。

write

desktoppool *

-

workspace:desktoppools:batchaddvolumes

授予桌面池批量添加磁盘的权限。

write

desktoppool *

-

workspace:desktoppools:batchdeletevolumes

授予桌面池批量删除磁盘的权限。

write

desktoppool *

-

workspace:desktoppools:batchexpandvolumes

授予桌面池批量扩容磁盘的权限。

write

desktoppool *

-

workspace:desktoppools:operate

授予操作桌面池的权限。

write

desktoppool *

-

workspace:desktoppools:listusers

授予查询桌面池授权的用户、用户组的权限。

list

desktoppool *

-

workspace:desktoppools:authorizeusers

授予桌面池授权用户、用户组的权限。

write

desktoppool *

-

user

-

usergroup

-

workspace:desktoppools:listdesktops

授予查询桌面池桌面信息的权限。

list

desktoppool *

-

workspace:desktoppools:listscripttasks

授予查询桌面池的脚本执行任务列表的权限。

list

desktoppool *

-

workspace:desktoppools:executescripts

授予桌面池批量执行脚本的权限。

write

desktoppool *

-

script

-

workspace:desktoppools:sendnotifications

授予发送消息通知的权限。

write

desktoppool *

-

workspace:desktops:export

授予导出桌面列表的权限。

list

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktops:create

授予创建桌面的权限。

write

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid
  • workspace:associatepublicip
  • workspace:accessmode

workspace:desktops:list

授予查询桌面列表的权限。

list

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktops:update

授予更新桌面信息的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:delete

授予删除桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:get

授予查询桌面详情的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchdelete

授予批量删除桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:logoff

授予批量注销桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listdetail

授予查询桌面详情列表的权限。

list

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktops:operate

授予操作桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:resize

授予变更规格的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:getconnectstatus

授予查询桌面登录状态统计数据的权限。

read

-

-

workspace:desktops:liststatus

授予查询桌面登录状态的权限。

list

-

-

workspace:desktops:rebuild

授予重建桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:getactions

授予查询桌面开关机信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:createconsole

授予获取远程登录控制台地址的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:updatesids

授予更新桌面sid的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:rejoindomain

授予重新加入ad域的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:createimage

授予桌面转镜像的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchdetach

授予批量解绑用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:detach

授予解绑用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:attach

授予分配用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:getnetwork

授予查询桌面网络信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:changenetwork

授予切换桌面网络的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:exclusivehosts:listdesktops

授予查询专享桌面详情列表的权限。

list

exclusivehost *

-

-

g:enterpriseprojectid

workspace:desktops:listall

授予查询普通桌面和渲染桌面列表的权限。

list

desktop *

-

workspace:desktopassociate:listdiscovervminfo

授予查询可纳管的虚拟机列表的权限。

list

-

-

workspace:desktopassociate:starttask

授予启动纳管虚拟机任务的权限。

write

-

-

workspace:desktopassociate:switchscantask

授予开启纳管扫描任务的权限。

write

-

-

workspace:desktopassociate:getscantaskswitch

授予查询纳管扫描任务开关的权限。

read

-

-

workspace:desktops:setmaintenancemode

授予批量设置桌面管理员维护模式的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:prepattachusers

授予预批量分配用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchattachusers

授予批量分配用户的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:changeusername

授予在windows ad场景下,修改与桌面关联的用户名的权限。

write

-

-

workspace:desktops:sendnotifications

授予发送消息通知的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:migrate

授予迁移桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listagents

授予查询桌面安装agent列表的权限。

list

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchinstallagents

授予批量为桌面安装agent的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listtags

授予查询桌面标签的权限。

list

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:tag

授予创建桌面标签的权限。

tagging

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:desktops:untag

授予删除桌面标签的权限。

tagging

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:desktops:listprojecttags

授予查询项目标签的权限。

list

-

-

workspace:desktops:operatetags

授予批量添加删除标签的权限。

tagging

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:desktops:listbytags

授予使用标签过滤桌面的权限。

list

-

-

workspace:exclusivehosts:create

授予创建专享主机的权限。

write

exclusivehost *

-

-

g:enterpriseprojectid

workspace:exclusivehosts:list

授予查询专享主机列表的权限。

list

exclusivehost *

-

-

g:enterpriseprojectid

workspace:exclusivehosts:check

授予校验是否能创建专享主机的权限。

write

-

-

workspace:exclusivehosts:get

授予查询专享主机详情的权限。

read

exclusivehost *

g:enterpriseprojectid

workspace:exclusivehosts:update

授予更新专享主机信息的权限。

write

exclusivehost *

g:enterpriseprojectid

workspace:exclusivehosts:delete

授予删除专享主机的权限。

write

exclusivehost *

g:enterpriseprojectid

workspace:mkp:listimages

授予查询云市场镜像列表的权限。

list

-

-

workspace:mkp:listcommodityinfos

授予查询云市场商品信息的权限。

list

-

-

workspace:mkp:createorder

授予创建云市场产品订单的权限。

write

-

-

workspace:mkp:listlistproductreserve

授予查询云市场库存信息的权限。

list

-

-

workspace:mkp:listcommoditydetails

授予查询云市场商品详情的权限。

list

-

-

workspace:mkp:listrelationcommoditydetails

授予查询商品的关联商品的权限。

list

-

-

workspace:mkp:listcommodityagreements

授予查询云市场商品协议的权限。

list

-

-

workspace:networks:listeips

授予查询eip列表的权限。

list

-

-

workspace:networks:createeips

授予创建eip的权限。

write

-

-

workspace:networks:bindeips

授予绑定eip的权限。

write

-

-

workspace:networks:unbindeips

授予解绑eip的权限。

write

-

-

workspace:networks:geteipquota

授予查询eip配额的权限。

read

-

-

workspace:networks:listnatgateways

授予查询nat网关列表的权限。

list

-

-

workspace:orders:create

授予包周期下单的权限。

write

-

  • workspace:createordertype
  • workspace:associatepublicip
  • workspace:accessmode

workspace:orders:change

授予创建变更订单的权限。

write

-

workspace:changeordertype

workspace:orders:batchinquiry

授予批量询价的权限。

write

-

-

workspace:quotas:check

授予校验配额的权限。

write

-

-

workspace:renderdesktops:create

授予创建渲染桌面的权限。

write

-

-

workspace:renderdesktops:delete

授予删除渲染桌面的权限。

write

-

-

workspace:renderdesktops:list

授予查询渲染桌面列表的权限。

list

-

-

workspace:renderdesktops:action

授予操作渲染桌面的权限。

write

-

-

workspace:scheduledtasks:list

授予查询定时任务列表的权限。

list

scheduledtask *

-

workspace:scheduledtasks:create

授予创建定时任务的权限。

write

scheduledtask *

-

desktop

-

desktoppool

-

server

-

servergroup

-

workspace:scheduledtasks:get

授予查询定时任务详情的权限。

read

scheduledtask *

-

workspace:scheduledtasks:update

授予更新定时任务的权限。

write

scheduledtask *

-

desktop

-

desktoppool

-

server

-

servergroup

-

workspace:scheduledtasks:delete

授予删除定时任务的权限。

write

scheduledtask *

-

workspace:scheduledtasks:getfuture

授予查询定时任务未来执行时间的权限。

read

-

-

workspace:scheduledtasks:batchdelete

授予批量删除定时任务的权限。

write

scheduledtask *

-

workspace:scheduledtasks:listrecords

授予查询定时任务执行记录的权限。

list

scheduledtask *

-

workspace:scheduledtasks:getrecord

授予查询定时任务执行记录详情的权限。

read

scheduledtask *

-

workspace:scheduledtasks:exportrecords

授予导出定时任务记录及执行详情的权限。

list

scheduledtask *

-

workspace:users:subscribesharer

授予订阅协同资源的权限。

write

user *

-

workspace:desktops:addsubresources

授予购买桌面附属资源的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:deletesubresources

授予删除桌面附属资源的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:createsnapshots

授予创建桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:getsnapshots

授予查询桌面快照的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:deletesnapshots

授予删除桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:restorebysnapshot

授予使用桌面快照恢复桌面的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:statistics:listdesktopstatus

授予统计桌面状态的权限。

list

-

-

workspace:statistics:getunused

授予查询在指定时间段未使用的桌面的权限。

read

-

-

workspace:statistics:getused

授予查询使用桌面的时长的权限。

read

-

-

workspace:bindingpolicies:export

授予导出终端与桌面绑定配置excel的权限。

list

-

-

workspace:bindingpolicies:getconfig

授予查询终端与桌面绑定的开关配置信息的权限。

read

-

-

workspace:bindingpolicies:createconfig

授予设置终端与桌面绑定的开关配置的权限。

write

-

-

workspace:bindingpolicies:get

授予查询终端与桌面绑定配置列表的权限。

read

-

-

workspace:bindingpolicies:add

授予增加终端与桌面绑定配置的权限。

write

-

-

workspace:bindingpolicies:update

授予修改终端与桌面绑定配置的权限。

write

-

-

workspace:bindingpolicies:delete

授予删除终端与桌面绑定配置的权限。

write

-

-

workspace:volumes:delete

授予删除桌面数据盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:batchadd

授予增加桌面磁盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:batchexpand

授予扩容桌面磁盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:wdh:gettype

授予查询云办公主机类型的权限。

read

wdh *

g:enterpriseprojectid

workspace:wdh:get

授予查询云办公主机列表的权限。

read

wdh *

g:enterpriseprojectid

workspace:desktops:getremoteassistance

授予查询远程协助信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:createremoteassistance

授予创建远程协助的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:cancelremoteassistance

授予取消远程协助的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:add

授予单个桌面增加磁盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:expand

授予扩容磁盘的权限。

write

desktop

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:volumes:listdsspoolsdetail

授予获取专属分布式存储池详情列表的权限。

list

-

-

workspace:common:listtimezones

授予查询时区配置的权限。

list

-

-

workspace:connections:securityexport

授予导出连接记录的权限。

list

-

-

workspace:images:list

授予查询支持的镜像列表的权限。

list

-

-

workspace:policygroups:import

授予导入策略组的权限。

write

-

-

workspace:accesspolicies:create

授予创建接入策略的权限。

write

-

-

workspace:accesspolicies:get

授予查询接入策略的权限。

read

-

-

workspace:accesspolicies:delete

授予删除指定接入策略的权限。

write

-

-

workspace:accesspolicies:gettarget

授予查询指定接入策略的应用对象的权限。

read

-

-

workspace:accesspolicies:updatetarget

授予更新指定接入策略的应用对象的权限。

write

-

-

workspace:products:listdesktopproducts

授予查询支持的产品套餐列表的权限。

list

-

-

workspace:products:listsharerproducts

授予查询协同套餐列表的权限。

list

-

-

workspace:products:listinternetproducts

授予查询上网套餐列表的权限。

list

-

-

workspace:availabilityzones:list

授予查询支持的可用分区列表的权限。

list

-

-

workspace:usergroups:export

授予导出用户组的权限。

list

usergroup *

-

workspace:users:export

授予导出用户的权限。

list

user *

-

workspace:users:import

授予导入用户的权限。

write

user *

-

workspace:usergroups:exportusers

授予导出用户组用户的权限。

list

usergroup *

-

workspace:users:operate

授予操作用户(锁定、解锁和重置密码)的权限。

write

user *

-

workspace:users:randompassword

授予给用户重置随机密码的权限。

write

user *

-

workspace:users:deleteotps

授予解绑otp设备的权限。

write

user *

-

workspace:users:resendemail

授予重新发送邮件的权限。

write

user *

-

workspace:connections:securitylist

授予查询连接信息的权限。

list

-

-

workspace:connections:listonlineusers

授予查询登录人数的权限。

list

-

-

workspace:usergroups:list

授予查询用户组列表的权限。

list

usergroup *

-

workspace:usergroups:create

授予创建用户组的权限。

write

usergroup *

-

workspace:usergroups:batchdelete

授予批量删除用户组的权限。

write

usergroup *

-

workspace:usergroups:delete

授予删除桌面用户组的权限。

write

usergroup *

-

workspace:usergroups:update

授予修改用户组信息的权限。

write

usergroup *

-

workspace:usergroups:operate

授予操作用户组的权限。

write

usergroup *

-

user *

-

workspace:usergroups:getusers

授予查询用户组中的用户的权限。

list

usergroup *

-

workspace:jobs:listsubjobs

授予查询子任务列表的权限。

list

-

-

workspace:jobs:deletesubjobrecords

授予删除子任务记录的权限。

write

-

-

workspace:ou:get

授予查询ou信息的权限。

list

-

-

workspace:ou:create

授予新增ou信息的权限。

write

-

-

workspace:ou:delete

授予删除ou信息的权限。

write

-

-

workspace:ou:update

授予更新ou信息的权限。

write

-

-

workspace:policygroups:list

授予查询策略组列表的权限。

list

policygroup *

-

workspace:policygroups:create

授予新增策略组的权限。

write

policygroup *

-

desktop

-

desktoppool

-

user

-

usergroup

-

appgroup

-

workspace:policygroups:delete

授予删除策略组的权限。

write

policygroup *

-

workspace:policygroups:get

授予查询策略组的权限。

read

policygroup *

-

workspace:policygroups:update

授予修改策略组的权限。

write

policygroup *

-

user

-

usergroup

-

appgroup

-

workspace:policygroups:export

授予导出策略组的权限。

list

policygroup *

-

workspace:policygroups:listpolicies

授予查询策略组中的策略项的权限。

list

policygroup *

-

workspace:policygroups:updatepolicies

授予修改策略组中的策略项的权限。

write

policygroup *

-

workspace:policygroups:listtargets

授予查询策略组应用对象的权限。

list

policygroup *

-

workspace:policygroups:updatetargets

授予修改策略组应用对象的权限。

write

policygroup *

-

desktop

-

desktoppool

-

user

-

usergroup

-

appgroup

-

workspace:policygroups:listdetail

授予查询策略组详情列表的权限。

list

policygroup *

-

workspace:policygroups:getoriginalpolicies

授予查询初始策略项的权限。

read

policygroup *

-

workspace:users:list

授予查询用户列表的权限。

list

user *

-

workspace:users:create

授予创建用户的权限。

write

user *

-

workspace:users:delete

授予删除指定用户的权限。

write

user *

-

workspace:users:get

授予查询用户详情信息的权限。

read

user *

-

workspace:users:update

授予修改用户信息的权限。

write

user *

-

workspace:users:batchdelete

授予批量删除用户的权限。

write

user *

-

workspace:users:resetpassword

授予重置用户密码的权限。

write

user *

-

workspace:users:checkresetpasswordtoken

授予校验重置域用户密码token的权限。

write

user *

-

workspace:users:gettemplate

授予用户模板下载的权限。

read

-

-

workspace:users:checkexist

授予校验用户是否存在的权限。

write

user *

-

workspace:users:listotps

授予查询otp设备的权限。

list

user *

-

workspace:users:getimporttemplate

授予创建用户模板下载的权限。

read

-

-

workspace:users:batchcreate

授予批量创建用户的权限。

write

user *

-

workspace:products:listvolumeproducts

授予查询磁盘产品列表的权限。

list

-

-

workspace:tenants:listexporttasks

授予查询导出任务列表的权限。

list

-

-

workspace:tenants:deleteexporttasks

授予批量删除导出任务记录的权限。

write

-

-

workspace:tenants:exportdata

授予下载导出的文件的权限。

read

-

-

workspace:statistics:listalarm

授予查询告警列表的权限。

list

-

-

workspace:statistics:getalarm

授予查询告警数的权限。

read

-

-

workspace:statistics:getgrowthrate

授予查询指标环比值的权限。

read

-

-

workspace:statistics:getmetric

授予查询指标的权限。

read

-

-

workspace:statistics:getmetrictrend

授予查询指标趋势的权限。

read

-

-

workspace:statistics:updatenotificationrules

授予更新指标的通知规则的权限。

write

-

-

workspace:statistics:deletenotificationrules

授予删除指标的通知规则的权限。

write

-

-

workspace:statistics:createnotifyrules

授予新增指标的通知规则的权限。

write

-

-

workspace:statistics:listnotificationrules

授予查询指标的通知规则的权限。

list

-

-

workspace:statistics:listnotificationrecords

授予查询指标通知记录的权限。

list

-

-

workspace:statistics:listdesktopmetrics

授予查询桌面使用统计信息的权限。

list

-

-

workspace:statistics:exportdesktopmetrics

授予导出桌面使用统计信息的权限。

list

-

-

workspace:statistics:listusermetrics

授予查询用户使用统计信息的权限。

list

-

-

workspace:statistics:exportusermetrics

授予导出用户使用统计信息;的权限。

list

-

-

workspace:appcenter:createbucketcredential

授予生成obs桶凭证信息信息的权限。

write

-

-

workspace:appcenter:createandauthorizebucket

授予添加并授权默认obs桶的权限。

write

-

-

workspace:appcenter:listapps

授予按照名称分页查询应用的权限。

list

-

-

workspace:appcenter:createapp

授予上传应用的权限。

write

-

-

workspace:appcenter:updateapp

授予修改应用的权限。

write

-

-

workspace:appcenter:deleteapp

授予删除应用的权限。

write

-

-

workspace:appcenter:installapp

授予自动安装应用的权限。

write

-

-

workspace:appcenter:listappauthorizations

授予查询应用授权信息的权限。

list

-

-

workspace:appcenter:batchupdateappauthorizations

授予设置应用授权的权限。

write

-

-

workspace:appcenter:batchdeleteapps

授予批量删除应用的权限。

write

-

-

workspace:appcenter:batchdisableapps

授予批量设置应用不可见的权限。

write

-

-

workspace:appcenter:batchenableapps

授予批量设置应用可见的权限。

write

-

-

workspace:appcenter:batchinstallapps

授予批量自动安装安装应用的权限。

write

-

-

workspace:appcenter:listappcatalogs

授予查询应用分类信息的权限。

list

-

-

workspace:appcenter:listjobs

授予查询应用安装job信息的权限。

list

-

-

workspace:appcenter:batchdeletejobs

授予批量删除job的权限。

write

-

-

workspace:appcenter:retryjobs

授予重试失败job的权限。

write

-

-

workspace:appcenter:createapprule

授予创建应用规则的权限。

write

-

-

workspace:appcenter:listapprule

授予查询应用规则的权限。

list

-

-

workspace:appcenter:updateapprule

授予修改应用规则的权限。

write

-

-

workspace:appcenter:deleteapprule

授予删除应用规则的权限。

write

-

-

workspace:appcenter:batchdeleteapprules

授予批量删除应用规则的权限。

write

-

-

workspace:appcenter:enablerulerestriction

授予启用规则管控的权限。

write

-

-

workspace:appcenter:disablerulerestriction

授予禁用规则管控的权限。

write

-

-

workspace:appcenter:addrestrictedrule

授予增加管控规则的权限。

write

-

-

workspace:appcenter:listrestrictedrule

授予查询管控规则列表的权限。

list

-

-

workspace:appcenter:deleterestrictedrule

授予批量删除管控规则列表的权限。

write

-

-

workspace:appcenter:updatetenantprofile

授予启禁用租户功能的权限。

write

-

-

workspace:appcenter:listtenantprofiles

授予查询租户功能状态的权限。

list

-

-

workspace:scripts:create

授予创建脚本的权限。

write

script *

-

workspace:scripts:list

授予查询脚本列表的权限。

list

script *

-

workspace:scripts:get

授予查询脚本详情的权限。

read

script *

-

workspace:scripts:put

授予更新脚本的权限。

write

script *

-

workspace:scripts:delete

授予删除脚本的权限。

write

script *

-

workspace:scripts:execute

授予批量执行脚本或命令的权限。

write

script *

-

desktop *

-

workspace:scripts:getrecorddetail

授予查询脚本或命令执行记录详情的权限。

read

script *

-

workspace:scripts:listrecords

授予查询脚本执行记录列表的权限。

list

script *

-

workspace:scripts:listtasks

授予查询脚本任务列表的权限。

list

script *

-

workspace:scripts:retry

授予重试脚本的权限。

write

script *

-

workspace:scripts:stop

授予停止脚本或命令执行任务的权限。

write

script *

-

workspace:scripts:download

授予下载脚本输出记录的权限。

write

script *

-

workspace:tenants:getsharespaceconfig

授予查询协同配置的权限。

read

-

-

workspace:tenants:updatesharespaceconfig

授予修改协同配置的权限。

write

-

-

workspace:authconfigs:getstatus

授予查询认证状态的权限。

read

-

-

workspace:privacystatements:sign

授予签署隐私声明的权限。

write

-

-

workspace:sites:get

授予查询站点信息的权限。

read

-

-

workspace:sites:add

授予新增站点的权限。

write

-

workspace:accessmode

workspace:sites:delete

授予删除站点的权限。

write

-

-

workspace:sites:updateaccessmode

授予修改站点接入方式的权限。

write

-

workspace:accessmode

workspace:sites:updatesubnets

授予修改站点业务子网的权限。

write

-

-

workspace:tenants:checkenterpriseids

授予检查企业id是否已被使用的权限。

write

-

-

workspace:tenants:updateenterpriseid

授予修改企业id的权限。

write

-

-

workspace:bandwidth:create

授予开通云办公带宽的权限。

write

-

-

workspace:bandwidth:list

授予查询云办公带宽列表的权限。

list

-

-

workspace:bandwidth:update

授予修改云办公带宽的权限。

write

-

-

workspace:bandwidth:delete

授予取消云办公带宽的权限。

write

-

-

workspace:bandwidth:getcontrolconfig

授予查询云办公带宽的控制配置的权限。

read

-

-

workspace:bandwidth:updatecontrolconfig

授予修改云办公带宽的控制配置的权限。

write

-

-

workspace:bandwidth:createchangeorder

授予创建云办公带宽变更订单的权限。

write

-

-

workspace:desktops:batchcreatesnapshots

授予批量创建桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchdeletesnapshots

授予批量删除桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:batchrestoresnapshots

授予批量恢复桌面快照的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listsnapshots

授予查询桌面快照列表的权限。

list

-

-

workspace:desktops:verifydesktopname

授予校验桌面名称的权限。

write

-

-

workspace:networks:getavailableip

授予根据子网id查询该子网下可用的ip的权限。

read

-

-

workspace:desktops:getadstatus

授予查询ad网络状态的权限。

read

-

-

workspace:networks:checkipifexist

授予检查ip是否存在的权限。

write

-

-

workspace:images:checkifexist

授予检查镜像是否存在的权限。

write

-

-

workspace:wdh:listdesktops

授予查询云办公主机包含桌面信息的权限。

list

wdh *

-

-

g:enterpriseprojectid

workspace:wdh:update

授予更新云办公主机信息的权限。

write

wdh *

g:enterpriseprojectid

workspace:bindingpolicies:gettemplate

授予下载终端与桌面绑定模板的权限。

read

-

-

workspace:bindingpolicies:import

授予批量导入终端与桌面绑定的权限。

write

-

-

workspace:statistics:getrunstate

授予运行状态统计的权限。

read

-

-

workspace:statistics:getloginstate

授予登录状态统计的权限。

read

-

-

workspace:networks:getusingsubnets

授予查询正在被使用的子网列表的权限。

read

-

-

workspace:networks:listports

授予查询端口列表的权限。

list

-

-

workspace:renderdesktops:createconsole

授予获取远程登录控制台地址的权限。

write

-

-

workspace:renderdesktops:resize

授予变更渲染桌面规格的权限。

write

-

-

workspace:exclusivehosts:resizelites

授予变更专享主机规格的权限。

write

exclusivehost *

g:enterpriseprojectid

workspace:desktops:getmonitor

授予查询桌面监控信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listdetachinfo

授予查询桌面历史解绑用户信息的权限。

list

desktop *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:desktops:getsysprepversion

授予查询sysprep版本信息的权限。

read

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:networks:createnat

授予开通nat网关上网功能的权限。

write

-

-

workspace:networks:listnats

授予查询nat网关上网功能的权限。

list

-

-

workspace:networks:listsubnets

授予查询子网列表的权限。

list

-

-

workspace:networks:listvpcs

授予查询查询vpc的权限。

list

-

-

workspace:policygroups:createtemplate

授予创建策略模板的权限。

write

-

-

workspace:policygroups:listtemplate

授予查询策略模板列表的权限。

list

-

-

workspace:policygroups:updatetemplate

授予更新策略模板的权限。

write

-

-

workspace:networks:listsecuritygroups

授予查询安全组列表的权限。

list

-

-

workspace:availabilityzones:getsummary

授予查询可用分区列表概要的权限。

read

-

-

workspace:availabilityzones:get

授予查询可用分区详情的权限。

read

-

-

workspace:users:importuser

授予导入用户列表的权限。

write

user *

-

workspace:users:uploadtemplate

授予导入桌面用户列表的权限。

write

user *

-

workspace:accesspolicies:update

授予更新指定接入策略的权限。

write

-

-

workspace:desktops:verifysource

授予校验桌面来源的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:desktops:listdesktopnetworks

授予批量查询桌面网络信息的权限。

list

desktop *

-

workspace:desktops:batchchangenetwork

授予批量切换桌面网络的权限。

write

desktop *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:jobs:get

授予查询任务详情的权限。

read

-

-

workspace:accesspolicies:importip

授予导入ip列表的权限。

write

-

-

workspace:accesspolicies:getipimporttemplate

授予下载ip导入模板的权限。

read

-

-

workspace:sites:listedgesites

授予查询边缘站点的权限。

list

-

-

workspace:sites:checkedgesiteresources

授予校验边缘站点资源的权限。

write

-

-

workspace:ou:listadous

授予查询ad域下ou信息的权限。

list

-

-

workspace:ou:listouusers

授予查询ou下用户信息的权限。

list

-

-

workspace:ou:importusersbyou

授予导入ou用户的权限。

write

-

-

workspace:appgroup:list

授予查询应用组的权限。

list

appgroup *

-

workspace:appgroup:create

授予创建应用组的权限。

write

appgroup *

-

servergroup

-

workspace:appgroup:delete

授予应用组删除的权限。

write

appgroup *

-

workspace:appgroup:get

授予查询应用组详情的权限。

read

appgroup *

-

workspace:appgroup:update

授予修改应用组的权限。

write

appgroup *

-

servergroup

-

workspace:app:listpublishedapp

授予查询已发布应用的权限。

list

app *

-

appgroup *

-

workspace:app:publish

授予发布应用的权限。

write

app *

-

appgroup *

-

workspace:app:get

授予查询应用详细信息的权限。

read

app *

-

appgroup *

-

workspace:app:update

授予修改应用信息的权限。

write

app *

-

appgroup *

-

workspace:app:deleteicon

授予删除自定义应用图标的权限。

write

app *

-

appgroup *

-

workspace:app:uploadicon

授予修改自定义应用图标的权限。

write

app *

-

appgroup *

-

workspace:app:check

授予校验应用的权限。

write

app *

-

appgroup *

-

workspace:app:batchdisable

授予批量禁用应用的权限。

write

app *

-

appgroup *

-

workspace:app:batchenable

授予批量启用应用的权限。

write

app *

-

appgroup *

-

workspace:app:unpublish

授予批量取消应用发布的权限。

write

app *

-

appgroup *

-

workspace:appgroup:listpublishableapp

授予可发布应用列表的权限。

list

appgroup *

-

workspace:appgroup:batchdeleteauthorization

授予移除应用组授权的权限。

write

appgroup *

-

user

-

usergroup

-

workspace:appgroup:disassociate

授予解除服务组关联的所有应用组的权限。

write

-

-

workspace:appgroup:listauthorization

授予查询应用组授权记录的权限。

list

appgroup *

-

workspace:appgroup:addauthorization

授予增加应用组授权的权限。

write

appgroup *

-

user

-

usergroup

-

workspace:appgroup:batchdelete

授予批量删除应用组的权限。

write

appgroup *

-

workspace:appgroup:check

授予校验应用组的权限。

write

-

-

workspace:servergroup:list

授予查询服务器组列表的权限。

list

servergroup *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:servergroup:create

授予创建服务器组的权限。

write

servergroup *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:servergroup:delete

授予删除服务器组的权限。

write

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:servergroup:get

授予查询指定服务器组的权限。

read

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:servergroup:update

授予修改服务器组的权限。

write

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:servergroup:getserverstate

授予查询指定服务器组内服务器状态的权限。

read

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:servergroup:listdetail

授予查询租户服务器组基础信息列表的权限。

list

servergroup *

-

workspace:servergroup:getrestrict

授予指定租户服务器组限制查询的权限。

read

servergroup *

-

workspace:servergroup:validate

授予校验服务器组的权限。

write

servergroup *

-

workspace:servergroup:tagresource

授予服务器组添加标签的权限。

tagging

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:servergroup:untagresource

授予服务器组删除标签的权限。

tagging

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:servergroup:listtagsforresource

授予查询服务器组标签的权限。

list

servergroup *

-

-

g:enterpriseprojectid

workspace:servergroup:listtags

授予查询租户所有服务器上标签的权限。

list

servergroup *

-

workspace:servergroup:batchcreatetags

授予批量添加服务器组标签的权限。

tagging

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:servergroup:batchdeletetags

授予批量删除服务器组标签的权限。

tagging

servergroup *

  • g:resourcetag/
  • g:enterpriseprojectid

-

  • g:requesttag/
  • g:tagkeys

workspace:server:list

授予查询服务器列表的权限。

list

server *

-

workspace:server:delete

授予删除服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:get

授予查询指定服务器的权限。

read

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:update

授予修改服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:changeimage

授予修改服务器的镜像的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:reinstall

授予重装服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:getvncurl

授予获取vnc远程登录地址的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:accessagent:list

授予查询租户的所有hda最新版本的权限。

list

-

-

workspace:accessagent:batchupgrade

授予批量升级服务器hda版本的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:accessagent:listlatestversion

授予查询租户的hda最新版本的权限。

list

-

-

workspace:server:listaccessagentdetails

授予查询服务器的hda相关信息的权限。

list

server *

-

workspace:accessagent:getupgradeflag

授予查询hda升级提醒标识的权限。

read

-

-

workspace:accessagent:updateupgradeflag

授予更新hda升级通知标识的权限。

write

-

-

workspace:accessagent:listupgraderecords

授予查询服务器的hda升级跟踪记录的权限。

list

-

-

workspace:server:batchdelete

授予批量删除服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchchangemaintainmode

授予标记服务器维护状态的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchreboot

授予重启服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchrejoindomain

授予批量服务器重新加域的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchstart

授予启动服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchstop

授予关闭服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchupdatetsvi

授予批量更新服务器虚拟会话ip配置的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:create

授予创建应用服务器的权限。

write

server *

-

servergroup *

-

-

  • g:requesttag/
  • g:tagkeys
  • g:enterpriseprojectid

workspace:server:batchmigratehosts

授予迁移云办公主机下面的服务器到目标云办公主机的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

wdh *

-

workspace:server:getmetricdata

授予查询云应用服务器监控信息的权限。

read

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:jobs:batchdeletesubjobs

授予批量删除子任务的权限。

write

-

-

workspace:jobs:countsubjobs

授予子任务数量查询的权限。

list

-

-

workspace:appwarehouse:authorizeobs

授予获取上传至obs桶的ak/sk的权限。

write

-

-

workspace:appwarehouse:batchdeleteapp

授予批量删除应用仓库中的指定应用的权限。

write

-

-

workspace:appwarehouse:listwarehouseapps

授予查询租户应用仓库中的应用列表的权限。

list

-

-

workspace:appwarehouse:createapp

授予在应用仓库中新增应用的权限。

write

-

-

workspace:appwarehouse:deleteapp

授予删除应用仓库中的指定应用的权限。

write

-

-

workspace:appwarehouse:uploadappicon

授予在应用仓库中上传图标文件的权限。

write

-

-

workspace:appwarehouse:createbucketoracl

授予添加桶或者桶授权的权限。

write

-

-

workspace:images:listimagejobs

授予查询租户的任务列表的权限。

list

-

-

workspace:images:getimagejob

授予查询任务详情的权限。

read

-

-

workspace:imageserver:list

授予查询镜像实例列表的权限。

list

imageserver *

-

-

g:enterpriseprojectid

workspace:imageserver:create

授予创建镜像实例的权限。

write

imageserver *

-

-

g:enterpriseprojectid

workspace:imageserver:get

授予查询指定镜像实例的权限。

read

imageserver *

g:enterpriseprojectid

workspace:imageserver:update

授予修改镜像实例的权限。

write

imageserver *

g:enterpriseprojectid

workspace:imageserver:attachapp

授予分发软件信息至镜像实例的权限。

write

imageserver *

g:enterpriseprojectid

workspace:imageserver:listlatestattachedapp

授予查询最近一次分发软件信息列表的权限。

list

imageserver *

-

workspace:imageserver:recreate

授予构建云应用镜像的权限。

write

imageserver *

g:enterpriseprojectid

workspace:imageserver:batchdelete

授予批量删除镜像实例的权限。

write

imageserver *

g:enterpriseprojectid

workspace:imageserver:listimagesubjobs

授予子任务查询的权限。

list

-

-

workspace:imageserver:batchdeleteimagesubjobs

授予批量删除子任务的权限。

write

-

-

workspace:imageserver:countimagesubjobs

授予子任务数量查询的权限。

read

-

-

workspace:appgroup:listmailrecord

授予查询应用组授权邮件发送记录的权限。

list

-

-

workspace:appgroup:resendmail

授予重发应用组授权邮件(根据授权邮件记录)的权限。

write

-

-

workspace:storage:listpersistentstorage

授予查询wks存储的权限。

list

storage *

-

workspace:storage:createpersistentstorage

授予创建wks存储的权限。

write

storage *

-

workspace:storage:deletepersistentstorage

授予删除wks存储的权限。

write

storage *

-

workspace:storage:updateuserfolderassignment

授予创建个人存储目录的权限。

write

storage *

-

workspace:storage:updatesharefolderassignment

授予修改共享目录成员的权限。

write

storage *

-

workspace:storage:createsharefolder

授予创建共享存储目录的权限。

write

storage *

-

workspace:storage:deletestorageclaim

授予删除共享目录的权限。

write

storage *

-

workspace:storage:deleteuserstorageattachment

授予删除个人存储目录的权限。

write

storage *

-

workspace:storage:batchdeletepersistentstorage

授予批量删除wks存储的权限。

write

storage *

-

workspace:storage:liststorageassignment

授予查询个人存储目录的权限。

list

storage *

-

workspace:storage:listsharefolder

授予查询共享存储目录的权限。

list

storage *

-

workspace:policygroups:deletetemplate

授予删除策略模板的权限。

write

-

-

workspace:privacystatements:get

授予查询最新版本的隐私声明的权限。

read

-

-

workspace:scalingpolicy:delete

授予删除弹性伸缩策略的权限。

write

-

-

workspace:scalingpolicy:list

授予查询服务器组弹性伸缩策略的权限。

read

-

-

workspace:scalingpolicy:create

授予新增/修改弹性伸缩策略的权限。

write

-

-

workspace:session:listappconnection

授予查询应用使用记录的权限。

write

-

-

workspace:session:logoffusersession

授予用户会话注销的权限。

write

-

-

workspace:session:listuserconnection

授予查询用户登录记录的权限。

write

-

-

workspace:session:listsessionbyusername

授予根据用户名查询当前会话的权限。

list

-

-

workspace:storagepolicy:create

授予新增或更新存储目录访问权限自定义策略的权限。

write

storage *

-

workspace:storagepolicy:list

授予查询存储目录访问权限策略的权限。

list

storage *

-

workspace:storage:listsfs3storage

授予查询sfs3.0存储的权限。

list

storage *

-

workspace:baseresource:list

授予查询可用分区列表的权限。

list

-

-

workspace:tenants:listconfiginfo

授予查询企业系统配置的权限。

list

-

-

workspace:tenants:active

授予租户服务激活、初始化的权限。

write

-

-

workspace:tenants:listtenantprofile

授予查询租户信息的权限。

list

-

-

workspace:server:listservermetricdata

授予查询服务器的监控数据的权限。

list

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:session:listsessions

授予查询企业会话列表的权限。

list

-

-

workspace:appwarehouse:updateapp

授予更新应用仓库中的应用的权限。

write

-

-

workspace:server:batchchangeimage

授予批量切换服务器镜像的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:server:batchreinstall

授予批量重装服务器的权限。

write

server *

  • g:resourcetag/
  • g:enterpriseprojectid

workspace:tenants:updateaccessaddressbackupconfig

授予修改云办公服务接入地址备份配置的权限

write

-

-

workspace:tenants:listaccessaddressbackupconfig

授予获取云办公服务接入地址备份配置的权限

list

-

-

workspace:desktops:listwithconnectstatus

授予查询桌面连接状态列表的权限

list

-

-

workspace:orders:createdesktoporder

授予创建桌面订单的权限

write

-

-

workspace:products:listhourpackageproducts

授予查询可订购小时包套餐的权限

list

-

-

workspace的api通常对应着一个或多个授权项。表2展示了api与授权项的关系,以及该api需要依赖的授权项。

表2 api与操作项的关系

api

对应的操作项

依赖的操作项

get /v2/{project_id}/auth-config/method-config

workspace:authconfigs:get

-

put /v2/{project_id}/auth-config/method-config

workspace:authconfigs:update

-

get /v2/{project_id}/assist-auth-config/method-config

workspace:assistauthconfigs:get

-

put /v2/{project_id}/assist-auth-config/method-config

workspace:assistauthconfigs:update

-

post /v2/{project_id}/workspace-jobs/{job_id}/actions

workspace:jobs:retry

-

get /v2/{project_id}/quotas

workspace:quotas:get

-

get /v2/{project_id}/tenants/roles

workspace:tenants:getroles

-

get /v2/{project_id}/tenant-configs

workspace:tenants:listconfig

-

put /v2/{project_id}/tenant-configs

workspace:tenants:updateconfig

-

get /v2/{project_id}/nat-mapping-configs

workspace:natmappings:getconfig

-

put /v2/{project_id}/nat-mapping-configs

workspace:natmappings:updateconfig

-

get /v2/{project_id}/workspaces

workspace:tenants:get

  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:securitygroups:get

post /v2/{project_id}/workspaces

workspace:tenants:open

  • eip:bandwidths:create
  • eip:publicips:create
  • elb:healthmonitors:create
  • elb:healthmonitors:show
  • elb:listeners:create
  • elb:listeners:update
  • elb:listeners:show
  • elb:listeners:list
  • elb:loadbalancers:create
  • elb:loadbalancers:update
  • elb:loadbalancers:show
  • elb:members:create
  • elb:members:list
  • elb:members:update
  • elb:pools:create
  • elb:pools:update
  • elb:pools:show
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:securitygrouprules:create
  • vpc:securitygrouprules:delete
  • vpc:securitygrouprules:get
  • vpc:securitygroups:create
  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get
  • vpcep:endpoints:create
  • vpcep:endpoints:get

delete /v2/{project_id}/workspaces

workspace:tenants:delete

  • elb:healthmonitors:delete
  • elb:healthmonitors:show
  • elb:listeners:delete
  • elb:listeners:show
  • elb:loadbalancers:delete
  • elb:loadbalancers:show
  • elb:members:delete
  • elb:members:list
  • elb:pools:delete
  • elb:pools:show
  • vpc:ports:delete
  • vpc:securitygroups:delete
  • vpcep:endpoints:delete
  • vpcep:endpoints:get
  • eip:publicips:disassociateinstance
  • eip:bandwidths:delete
  • eip:publicips:delete

put /v2/{project_id}/workspaces

workspace:tenants:update

  • eip:bandwidths:create
  • eip:bandwidths:delete
  • eip:publicips:create
  • eip:publicips:delete
  • eip:publicips:disassociateinstance
  • elb:healthmonitors:create
  • elb:healthmonitors:delete
  • elb:healthmonitors:show
  • elb:listeners:create
  • elb:listeners:delete
  • elb:listeners:update
  • elb:listeners:show
  • elb:loadbalancers:create
  • elb:loadbalancers:delete
  • elb:loadbalancers:update
  • elb:loadbalancers:show
  • elb:members:create
  • elb:members:delete
  • elb:members:list
  • elb:members:update
  • elb:pools:create
  • elb:pools:delete
  • elb:pools:update
  • elb:pools:show
  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get
  • vpcep:endpoints:create
  • vpcep:endpoints:delete
  • vpcep:endpoints:get

get /v2/{project_id}/workspaces/lock-status

workspace:tenants:getlockstatus

-

put /v2/{project_id}/workspaces/lock-status

workspace:tenants:unlock

-

post /v2/{project_id}/agencies

workspace:agencies:create

  • iam:agencies:listv5
  • iam:agencies:getv5
  • iam:agencies:createservicelinkedagencyv5
  • iam:roles:getrole
  • iam:roles:listroles
  • iam:agencies:getagency
  • iam:agencies:listagencies
  • iam:agencies:createagency
  • iam:permissions:listrolesforagencyonproject
  • iam:permissions:grantroletoagencyonproject

get /v2/{project_id}/agencies

workspace:agencies:get

  • iam:agencies:listv5
  • iam:agencies:getv5
  • iam:agencies:getagency
  • iam:agencies:listagencies
  • iam:permissions:listrolesforagencyonproject

post /v3/{project_id}/desktops/{desktop_id}/ai-accelerate-job

workspace:desktops:commitaiacceleratejob

-

post /v2/{project_id}/desktops/{desktop_id}/ai-accelerate-job

workspace:desktops:createaiacceleratejob

-

get /v2/{project_id}/ai-accelerate-job/{job_id}

workspace:desktops:getaiacceleratejob

-

post /v2/{project_id}/sysprep

workspace:desktops:getsysprepinfo

-

post /v2/{project_id}/verification/batch-change-image

workspace:desktops:checkbatchchangeimage

ims:images:list

get /v2/{project_id}/desktop-name-policies

workspace:tenants:listdesktopnamepolicies

-

post /v2/{project_id}/desktop-name-policies

workspace:tenants:createdesktopnamepolicy

-

put /v2/{project_id}/desktop-name-policies/{policy_id}

workspace:tenants:updatedesktopnamepolicy

-

post /v2/{project_id}/desktop-name-policies/batch-delete

workspace:tenants:batchdeletedesktopnamepolicies

-

post /v2/{project_id}/desktop-pools

workspace:desktoppools:create

  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember
  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • vpc:securitygroups:get
  • vpc:subnets:get
  • vpc:vpcs:get
  • dss:pools:list

get /v2/{project_id}/desktop-pools

workspace:desktoppools:list

ims:images:list

put /v2/{project_id}/desktop-pools/{pool_id}

workspace:desktoppools:update

-

delete /v2/{project_id}/desktop-pools/{pool_id}

workspace:desktoppools:delete

-

get /v2/{project_id}/desktop-pools/{pool_id}

workspace:desktoppools:get

ims:images:list

post /v2/{project_id}/desktop-pools/{pool_id}/expand

workspace:desktoppools:expand

  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember
  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • vpc:securitygroups:get
  • vpc:subnets:get
  • vpc:vpcs:get
  • dss:pools:list

post /v2/{project_id}/desktop-pools/{pool_id}/resize

workspace:desktoppools:resize

  • vpc:subnets:get
  • ims:images:list

post /v2/{project_id}/desktop-pools/{pool_id}/rebuild

workspace:desktoppools:rebuild

  • vpc:ports:get
  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember

post /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-add

workspace:desktoppools:batchaddvolumes

-

post /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-delete

workspace:desktoppools:batchdeletevolumes

-

post /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-expand

workspace:desktoppools:batchexpandvolumes

-

post /v2/{project_id}/desktop-pools/{pool_id}/action

workspace:desktoppools:operate

-

get /v2/{project_id}/desktop-pools/{pool_id}/users

workspace:desktoppools:listusers

-

post /v2/{project_id}/desktop-pools/{pool_id}/users

workspace:desktoppools:authorizeusers

ims:images:list

get /v2/{project_id}/desktop-pools/{pool_id}/desktops

workspace:desktoppools:listdesktops

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

get /v2/{project_id}/desktop-pools/script-execution-tasks/detail

workspace:desktoppools:listscripttasks

-

post /v2/{project_id}/desktop-pools/{pool_id}/script-executions

workspace:desktoppools:executescripts

-

post /v2/{project_id}/desktop-pools/{pool_id}/notifications

workspace:desktoppools:sendnotifications

-

get /v3/{project_id}/desktops/export

workspace:desktops:export

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

post /v2/{project_id}/desktops

workspace:desktops:create

  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember
  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • eip:publicips:get
  • eip:publicips:list
  • eip:publicips:create
  • eip:publicips:associateinstance
  • eip:publicips:delete
  • eip:publicips:createtags
  • vpc:quotas:list
  • vpc:securitygroups:get
  • vpc:subnets:get
  • vpc:vpcs:get
  • dss:pools:list

get /v2/{project_id}/desktops

workspace:desktops:list

-

put /v2/{project_id}/desktops/{desktop_id}

workspace:desktops:update

-

delete /v2/{project_id}/desktops/{desktop_id}

workspace:desktops:delete

  • vpc:ports:get
  • vpc:ports:delete

get /v2/{project_id}/desktops/{desktop_id}

workspace:desktops:get

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

post /v2/{project_id}/desktops/batch-delete

workspace:desktops:batchdelete

  • vpc:ports:get
  • vpc:ports:delete

post /v2/{project_id}/desktops/logoff

workspace:desktops:logoff

-

get /v2/{project_id}/desktops/detail

workspace:desktops:listdetail

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

post /v2/{project_id}/desktops/action

workspace:desktops:operate

-

post /v2/{project_id}/desktops/resize

workspace:desktops:resize

  • vpc:subnets:get
  • ims:images:list

get /v2/{project_id}/connections/status

workspace:desktops:getconnectstatus

-

get /v2/{project_id}/desktops/status

workspace:desktops:liststatus

-

post /v2/{project_id}/desktops/rebuild

workspace:desktops:rebuild

  • vpc:ports:get
  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember

get /v2/{project_id}/desktops/{desktop_id}/actions

workspace:desktops:getactions

-

get /v2/{project_id}/desktops/{desktop_id}/remote-consoles

workspace:desktops:createconsole

-

put /v2/{project_id}/desktops/sids

workspace:desktops:updatesids

-

post /v2/{project_id}/desktops/{desktop_id}/rejoin-domain

workspace:desktops:rejoindomain

-

post /v2/{project_id}/desktops/desktop-to-image

workspace:desktops:createimage

  • ims:quotas:get
  • ims:images:get
  • ims:images:list
  • ims:images:settags
  • ims:images:setordeletetags
  • ims:images:updatememberstatus
  • ims:images:copyinregion
  • ims:serverimages:create

post /v2/{project_id}/desktops/batch-detach

workspace:desktops:batchdetach

vpc:ports:get

post /v2/{project_id}/desktops/detach

workspace:desktops:detach

vpc:ports:get

post /v2/{project_id}/desktops/attach

workspace:desktops:attach

  • vpc:ports:get
  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember

get /v2/{project_id}/desktops/{desktop_id}/networks

workspace:desktops:getnetwork

  • vpc:vpcs:get
  • vpc:networks:get
  • vpc:subnets:get
  • vpc:ports:get
  • vpc:securitygroups:get
  • eip:publicips:list

put /v2/{project_id}/desktops/{desktop_id}/networks

workspace:desktops:changenetwork

  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:networks:get
  • vpc:ports:get
  • vpc:ports:create
  • vpc:ports:update
  • vpc:ports:delete
  • vpc:securitygroups:get
  • eip:publicips:list
  • eip:publicips:associateinstance
  • eip:publicips:disassociateinstance

get /v2/{project_id}/exclusive-hosts/{host_id}/desktops

workspace:exclusivehosts:listdesktops

-

get /v2/{project_id}/all-desktops

workspace:desktops:listall

-

get /v2/{project_id}/desktop-associate/discover-vm/infos

workspace:desktopassociate:listdiscovervminfo

-

post /v2/{project_id}/desktop-associate/tasks

workspace:desktopassociate:starttask

-

post /v2/{project_id}/desktop-associate/discover-vm/switch

workspace:desktopassociate:switchscantask

-

get /v2/{project_id}/desktop-associate/discover-vm/switch

workspace:desktopassociate:getscantaskswitch

-

put /v2/{project_id}/desktops/maintenance-mode

workspace:desktops:setmaintenancemode

-

post /v2/{project_id}/desktops/pre-batch-attach

workspace:desktops:prepattachusers

-

post /v2/{project_id}/desktops/batch-attach

workspace:desktops:batchattachusers

  • vpc:ports:get
  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember

put /v2/{project_id}/desktops/change-username

workspace:desktops:changeusername

-

post /v2/{project_id}/desktops/notifications

workspace:desktops:sendnotifications

-

post /v2/{project_id}/desktops/{desktop_id}/migrate

workspace:desktops:migrate

  • vpc:networks:get
  • vpc:subnets:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:update
  • vpc:ports:get

get /v2/{project_id}/desktops/agents

workspace:desktops:listagents

-

post /v2/{project_id}/desktops/agents

workspace:desktops:batchinstallagents

-

get /v2/{project_id}/desktops/{desktop_id}/tags

workspace:desktops:listtags

-

post /v2/{project_id}/desktops/{desktop_id}/tags

workspace:desktops:tag

-

delete /v2/{project_id}/desktops/{desktop_id}/tags/{key}

workspace:desktops:untag

-

get /v2/{project_id}/desktops/tags

workspace:desktops:listprojecttags

-

post /v2/{project_id}/desktops/{desktop_id}/tags/action

workspace:desktops:operatetags

-

post /v2/{project_id}/desktops/resource_instances/action

workspace:desktops:listbytags

-

post /v2/{project_id}/desktops/batch-tags

workspace:desktops:tag

-

delete /v2/{project_id}/desktops/batch-tags

workspace:desktops:untag

-

post /v2/{project_id}/exclusive-hosts

workspace:exclusivehosts:create

  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • vpc:subnets:get
  • vpc:vpcs:get

get /v2/{project_id}/exclusive-hosts

workspace:exclusivehosts:list

-

post /v2/{project_id}/exclusive-hosts/check-limits

workspace:exclusivehosts:check

-

get /v2/{project_id}/exclusive-hosts/{host_id}

workspace:exclusivehosts:get

  • nat:snatrules:list
  • eip:publicips:list

put /v2/{project_id}/exclusive-hosts/{host_id}

workspace:exclusivehosts:update

-

delete /v2/{project_id}/exclusive-hosts/{host_id}

workspace:exclusivehosts:delete

-

get /v2/{project_id}/market-images

workspace:mkp:listimages

ims:images:list

get /v2/{project_id}/mkp/commodities/commodity-ids

workspace:mkp:listcommodityinfos

-

post /v2/{project_id}/mkp/order

workspace:mkp:createorder

-

post /v2/{project_id}/mkp/product-reserve

workspace:mkp:listlistproductreserve

-

get /v2/{project_id}/mkp/commodities

workspace:mkp:listcommoditydetails

-

get /v2/{project_id}/mkp/commodities/{commodity_id}/relation-commodities

workspace:mkp:listrelationcommoditydetails

-

get /v2/{project_id}/mkp/commodities/agreements

workspace:mkp:listcommodityagreements

-

get /v2/{project_id}/eips

workspace:networks:listeips

  • eip:publicips:list
  • eip:bandwidths:list

post /v2/{project_id}/eips

workspace:networks:createeips

  • vpc:quotas:list
  • eip:publicips:create
  • eip:publicips:associateinstance

post /v2/{project_id}/eips/binding

workspace:networks:bindeips

  • eip:publicips:associateinstance
  • eip:publicips:get

post /v2/{project_id}/eips/unbinding

workspace:networks:unbindeips

  • eip:publicips:list
  • eip:publicips:disassociateinstance

get /v2/{project_id}/eips/quotas

workspace:networks:geteipquota

vpc:quotas:list

get /v2/{project_id}/nat-gateways

workspace:networks:listnatgateways

  • vpc:subnets:get
  • vpc:vpcs:get
  • nat:snatrules:list
  • nat:natgateways:list

post /v2/{project_id}/periodic/subscribe/order

workspace:orders:create

  • ims:images:list
  • vpc:vpcs:get
  • vpc:networks:get
  • vpc:subnets:get
  • vpc:ports:get
  • bss:order:update

post /v2/{project_id}/periodic/{desktop_id}/change/order

workspace:orders:change

  • ims:images:list
  • bss:order:update

post /v2/{project_id}/periodic/change/batch-order

workspace:orders:change

  • ims:images:list
  • bss:order:update

post /v2/{project_id}/periodic/inquiry/change-image

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/desktop-pool/periodic/change/order

workspace:orders:change

  • ims:images:list
  • bss:order:update

post /v2/{project_id}/desktop-pool/periodic/inquiry/add-volume

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/desktop-pool/periodic/inquiry/change-image

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/desktop-pool/periodic/inquiry/extend-volume

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/desktop-pool/periodic/inquiry/resize

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/periodic/inquiry/add-resources

workspace:orders:batchinquiry

ims:images:list

get /v2/{project_id}/checkorderlimits

workspace:quotas:check

-

post /v2/{project_id}/render-desktops

workspace:renderdesktops:create

  • ims:images:list
  • ims:images:share
  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • vpc:securitygroups:get
  • vpc:subnets:get
  • vpc:vpcs:get

delete /v2/{project_id}/render-desktops

workspace:renderdesktops:delete

  • vpc:ports:get
  • vpc:ports:delete

get /v2/{project_id}/render-desktops

workspace:renderdesktops:list

-

post /v2/{project_id}/render-desktops/action

workspace:renderdesktops:action

-

get /v2/{project_id}/scheduled-tasks

workspace:scheduledtasks:list

-

post /v2/{project_id}/scheduled-tasks

workspace:scheduledtasks:create

-

get /v2/{project_id}/scheduled-tasks/{task_id}

workspace:scheduledtasks:get

-

put /v2/{project_id}/scheduled-tasks/{task_id}

workspace:scheduledtasks:update

-

delete /v2/{project_id}/scheduled-tasks/{task_id}

workspace:scheduledtasks:delete

-

post /v2/{project_id}/scheduled-tasks/future-executions

workspace:scheduledtasks:getfuture

-

post /v2/{project_id}/scheduled-tasks/batch-delete

workspace:scheduledtasks:batchdelete

-

get /v2/{project_id}/scheduled-tasks/{task_id}/records

workspace:scheduledtasks:listrecords

-

get /v2/{project_id}/scheduled-tasks/{task_id}/records/{record_id}

workspace:scheduledtasks:getrecord

-

post /v2/{project_id}/scheduled-tasks/{task_id}/records/export

workspace:scheduledtasks:exportrecords

-

post /v2/{project_id}/user/share-resources

workspace:users:subscribesharer

-

post /v2/{project_id}/desktop/sub-resources

workspace:desktops:addsubresources

-

post /v2/{project_id}/desktop/delete-sub-resources

workspace:desktops:deletesubresources

-

post /v2/{project_id}/desktops/{desktop_id}/snapshots

workspace:desktops:createsnapshots

-

get /v2/{project_id}/desktops/{desktop_id}/snapshots

workspace:desktops:getsnapshots

-

delete /v2/{project_id}/desktops/{desktop_id}/snapshots

workspace:desktops:deletesnapshots

-

post /v2/{project_id}/desktops/{desktop_id}/snapshots/restore

workspace:desktops:restorebysnapshot

-

get /v2/{project_id}/statistics

workspace:statistics:listdesktopstatus

-

get /v2/{project_id}/desktops/statistics/unused

workspace:statistics:getunused

-

post /v2/{project_id}/desktops/statistics/used

workspace:statistics:getused

-

get /v3/{project_id}/terminals/binding-desktops/template/export

workspace:bindingpolicies:export

-

get /v2/{project_id}/terminals/binding-desktops/config

workspace:bindingpolicies:getconfig

-

post /v2/{project_id}/terminals/binding-desktops/config

workspace:bindingpolicies:createconfig

-

get /v2/{project_id}/terminals/binding-desktops

workspace:bindingpolicies:get

-

post /v2/{project_id}/terminals/binding-desktops

workspace:bindingpolicies:add

-

put /v2/{project_id}/terminals/binding-desktops

workspace:bindingpolicies:update

-

post /v2/{project_id}/terminals/binding-desktops/batch-delete

workspace:bindingpolicies:delete

-

post /v2/{project_id}/desktops/{desktop_id}/volumes/batch-delete

workspace:volumes:delete

-

post /v2/{project_id}/volumes

workspace:volumes:batchadd

-

post /v2/{project_id}/volumes/expand

workspace:volumes:batchexpand

-

get /v2/{project_id}/hosts/types

workspace:wdh:gettype

-

get /v2/{project_id}/hosts

workspace:wdh:get

-

get /v2/{project_id}/desktops/{desktop_id}/remote-assistance

workspace:desktops:getremoteassistance

-

post /v2/{project_id}/desktops/{desktop_id}/remote-assistance

workspace:desktops:createremoteassistance

-

delete /v2/{project_id}/desktops/{desktop_id}/remote-assistance

workspace:desktops:cancelremoteassistance

-

post /v2/{project_id}/desktops/{desktop_id}/volumes

workspace:volumes:add

-

post /v2/{project_id}/desktops/{desktop_id}/volumes/{volume_id}/expand

workspace:volumes:expand

-

get /v2/{project_id}/dss-pools/detail

workspace:volumes:listdsspoolsdetail

dss:pools:list

get /v2/{project_id}/common/timezones

workspace:common:listtimezones

-

get /v3/{project_id}/desktops/connections/export

workspace:connections:securityexport

-

get /v2/{project_id}/images

workspace:images:list

ims:images:list

post /v2/{project_id}/policy-groups/import

workspace:policygroups:import

-

post /v2/{project_id}/access-policy

workspace:accesspolicies:create

-

get /v2/{project_id}/access-policy

workspace:accesspolicies:get

-

delete /v2/{project_id}/access-policy

workspace:accesspolicies:delete

-

get /v2/{project_id}/access-policy/{access_policy_id}/objects

workspace:accesspolicies:gettarget

-

put /v2/{project_id}/access-policy/{access_policy_id}/objects

workspace:accesspolicies:updatetarget

-

get /v2/{project_id}/products

workspace:products:listdesktopproducts

ecs:cloudserverflavors:get

get /v2/{project_id}/products/sharer

workspace:products:listsharerproducts

-

get /v2/{project_id}/products/adninternet

workspace:products:listinternetproducts

-

get /v2/{project_id}/availability-zones

workspace:availabilityzones:list

-

get /v2/{project_id}/groups/export

workspace:usergroups:export

-

post /v3/{project_id}/users/export

workspace:users:export

-

post /v2/{project_id}/users/import

workspace:users:import

-

get /v3/{project_id}/groups/{group_id}/users/export

workspace:usergroups:exportusers

-

get /v2/{project_id}/groups/{group_id}/users/export

workspace:usergroups:exportusers

-

post /v2/{project_id}/users/{user_id}/actions

workspace:users:operate

-

get /v2/{project_id}/users/{user_id}/random-password

workspace:users:randompassword

-

delete /v2/{project_id}/users/{user_id}/otp-devices

workspace:users:deleteotps

-

post /v2/{project_id}/users/{user_id}/resend-email

workspace:users:resendemail

-

get /v2/{project_id}/connections/desktops

workspace:connections:securitylist

-

get /v2/{project_id}/connections/desktops/export

workspace:connections:securityexport

-

get /v2/{project_id}/connections/online-users

workspace:connections:listonlineusers

-

get /v2/{project_id}/desktops/connections

workspace:connections:securitylist

-

get /v2/{project_id}/desktops/connections/export

workspace:connections:securityexport

-

get /v2/{project_id}/desktops/online-users

workspace:connections:listonlineusers

-

get /v2/{project_id}/groups

workspace:usergroups:list

-

post /v2/{project_id}/groups

workspace:usergroups:create

-

post /v2/{project_id}/groups/batch-delete

workspace:usergroups:batchdelete

-

delete /v2/{project_id}/groups/{group_id}

workspace:usergroups:delete

-

put /v2/{project_id}/groups/{group_id}

workspace:usergroups:update

-

post /v2/{project_id}/groups/{group_id}/actions

workspace:usergroups:operate

-

get /v2/{project_id}/groups/{group_id}/users

workspace:usergroups:getusers

-

get /v2/{project_id}/workspace-sub-jobs

workspace:jobs:listsubjobs

-

post /v2/{project_id}/workspace-sub-jobs/batch-delete

workspace:jobs:deletesubjobrecords

-

get /v2/{project_id}/ous

workspace:ou:get

-

post /v2/{project_id}/ous

workspace:ou:create

-

delete /v2/{project_id}/ous/{ou_id}

workspace:ou:delete

-

put /v2/{project_id}/ous/{ou_id}

workspace:ou:update

-

get /v2/{project_id}/policy-groups

workspace:policygroups:list

-

post /v2/{project_id}/policy-groups

workspace:policygroups:create

-

delete /v2/{project_id}/policy-groups/{policy_group_id}

workspace:policygroups:delete

-

get /v2/{project_id}/policy-groups/{policy_group_id}

workspace:policygroups:get

-

put /v2/{project_id}/policy-groups/{policy_group_id}

workspace:policygroups:update

-

post /v2/{project_id}/policy-groups/export

workspace:policygroups:export

-

get /v2/{project_id}/policy-groups/{policy_group_id}/policies

workspace:policygroups:listpolicies

-

put /v2/{project_id}/policy-groups/{policy_group_id}/policies

workspace:policygroups:updatepolicies

-

get /v2/{project_id}/policy-groups/{policy_group_id}/targets

workspace:policygroups:listtargets

-

put /v2/{project_id}/policy-groups/{policy_group_id}/targets

workspace:policygroups:updatetargets

-

get /v2/{project_id}/policy-groups/detail

workspace:policygroups:listdetail

-

get /v2/{project_id}/policy-groups/original-policies

workspace:policygroups:getoriginalpolicies

-

get /v2/{project_id}/users

workspace:users:list

-

post /v2/{project_id}/users

workspace:users:create

-

delete /v2/{project_id}/users/{user_id}

workspace:users:delete

-

get /v2/{project_id}/users/{user_id}

workspace:users:get

-

put /v2/{project_id}/users/{user_id}

workspace:users:update

-

post /v2/{project_id}/users/batch-delete

workspace:users:batchdelete

-

post /v2/{project_id}/users/password

workspace:users:resetpassword

-

post /v2/{project_id}/users/password-token

workspace:users:checkresetpasswordtoken

-

get /v2/{project_id}/users/desktop-users/template

workspace:users:gettemplate

-

post /v2/{project_id}/users/exist

workspace:users:checkexist

-

get /v2/{project_id}/users/{user_id}/otp-devices

workspace:users:listotps

-

get /v2/{project_id}/users/template/download

workspace:users:getimporttemplate

-

post /v2/{project_id}/users/export

workspace:users:export

-

post /v2/{project_id}/users/batch-create

workspace:users:batchcreate

-

get /v2/{project_id}/volume/products

workspace:products:listvolumeproducts

-

get /v2/{project_id}/export-tasks

workspace:tenants:listexporttasks

-

post /v2/{project_id}/export-tasks/batch-delete

workspace:tenants:deleteexporttasks

-

get /v2/{project_id}/export-tasks/{task_id}/download

workspace:tenants:exportdata

-

get /v2/{project_id}/alarms

workspace:statistics:listalarm

ces:alarmhistory:list

get /v2/{project_id}/statistics/alarms

workspace:statistics:getalarm

ces:alarmhistory:list

get /v2/{project_id}/statistics/growth-rate

workspace:statistics:getgrowthrate

-

get /v2/{project_id}/statistics/metrics

workspace:statistics:getmetric

-

get /v2/{project_id}/statistics/metrics/trend

workspace:statistics:getmetrictrend

-

put /v2/{project_id}/statistics/notify-rules/{rule_id}

workspace:statistics:updatenotificationrules

smn:topic:get

delete /v2/{project_id}/statistics/notify-rules/{rule_id}

workspace:statistics:deletenotificationrules

-

post /v2/{project_id}/statistics/notify-rules

workspace:statistics:createnotifyrules

smn:topic:get

get /v2/{project_id}/statistics/notify-rules

workspace:statistics:listnotificationrules

-

get /v2/{project_id}/statistics/notification-records

workspace:statistics:listnotificationrecords

-

get /v2/{project_id}/statistics/metrics/desktops

workspace:statistics:listdesktopmetrics

-

get /v2/{project_id}/statistics/metrics/desktops/export

workspace:statistics:exportdesktopmetrics

-

get /v2/{project_id}/statistics/metrics/users

workspace:statistics:listusermetrics

-

get /v2/{project_id}/statistics/metrics/users/export

workspace:statistics:exportusermetrics

-

get /v3/{project_id}/statistics/metrics/desktops/export

workspace:statistics:exportdesktopmetrics

-

get /v3/{project_id}/statistics/metrics/users/export

workspace:statistics:exportusermetrics

-

post /v1/{project_id}/app-center/buckets/actions/create-credential

workspace:appcenter:createbucketcredential

  • obs:bucket:getbucketacl
  • obs:object:putobject
  • obs:object:deleteobject

post /v1/{project_id}/app-center/buckets

workspace:appcenter:createandauthorizebucket

  • obs:bucket:headbucket
  • obs:bucket:putbucketacl
  • obs:bucket:putreplicationconfiguration
  • obs:bucket:createbucket
  • obs:bucket:putbucketcors

get /v1/{project_id}/app-center/apps

workspace:appcenter:listapps

-

post /v1/{project_id}/app-center/apps

workspace:appcenter:createapp

-

patch /v1/{project_id}/app-center/apps/{app_id}

workspace:appcenter:updateapp

-

delete /v1/{project_id}/app-center/apps/{app_id}

workspace:appcenter:deleteapp

-

post /v1/{project_id}/app-center/apps/{app_id}/actions/auto-install

workspace:appcenter:installapp

-

get /v1/{project_id}/app-center/apps/{app_id}/authorizations

workspace:appcenter:listappauthorizations

-

post /v1/{project_id}/app-center/apps/{app_id}/actions/assign-authorizations

workspace:appcenter:batchupdateappauthorizations

-

post /v1/{project_id}/app-center/apps/actions/batch-delete

workspace:appcenter:batchdeleteapps

-

post /v1/{project_id}/app-center/apps/actions/batch-disable

workspace:appcenter:batchdisableapps

-

post /v1/{project_id}/app-center/apps/actions/batch-enable

workspace:appcenter:batchenableapps

-

post /v1/{project_id}/app-center/apps/actions/batch-assign-authorization

workspace:appcenter:batchupdateappauthorizations

-

post /v1/{project_id}/app-center/apps/actions/batch-auto-install

workspace:appcenter:batchinstallapps

-

get /v1/{project_id}/app-center/app-catalogs

workspace:appcenter:listappcatalogs

-

get /v1/{project_id}/app-center/jobs

workspace:appcenter:listjobs

-

post /v1/{project_id}/app-center/jobs/actions/batch-delete

workspace:appcenter:batchdeletejobs

-

post /v1/{project_id}/app-center/jobs/actions/retry

workspace:appcenter:retryjobs

-

post /v1/{project_id}/app-center/app-rules

workspace:appcenter:createapprule

-

get /v1/{project_id}/app-center/app-rules

workspace:appcenter:listapprule

-

patch /v1/{project_id}/app-center/app-rules/{rule_id}

workspace:appcenter:updateapprule

-

delete /v1/{project_id}/app-center/app-rules/{rule_id}

workspace:appcenter:deleteapprule

-

post /v1/{project_id}/app-center/app-rules/batch-delete

workspace:appcenter:batchdeleteapprules

-

post /v1/{project_id}/app-center/app-rules/actions/enable-rule-restriction

workspace:appcenter:enablerulerestriction

-

post /v1/{project_id}/app-center/app-rules/actions/disable-rule-restriction

workspace:appcenter:disablerulerestriction

-

post /v1/{project_id}/app-center/app-restricted-rules

workspace:appcenter:addrestrictedrule

-

get /v1/{project_id}/app-center/app-restricted-rules

workspace:appcenter:listrestrictedrule

-

post /v1/{project_id}/app-center/app-restricted-rules/actions/batch-delete

workspace:appcenter:deleterestrictedrule

-

patch /v1/{project_id}/app-center/profiles

workspace:appcenter:updatetenantprofile

-

get /v1/{project_id}/app-center/profiles

workspace:appcenter:listtenantprofiles

-

post /v2/{project_id}/scripts

workspace:scripts:create

-

get /v2/{project_id}/scripts

workspace:scripts:list

-

get /v2/{project_id}/scripts/{script_id}

workspace:scripts:get

-

put /v2/{project_id}/scripts/{script_id}

workspace:scripts:put

-

delete /v2/{project_id}/scripts/{script_id}

workspace:scripts:delete

-

post /v2/{project_id}/script-executions

workspace:scripts:execute

-

get /v2/{project_id}/script-execution-records/{record_id}

workspace:scripts:getrecorddetail

-

get /v2/{project_id}/script-execution-records

workspace:scripts:listrecords

-

get /v2/{project_id}/script-execution-tasks

workspace:scripts:listtasks

-

post /v2/{project_id}/script-executions/retry

workspace:scripts:retry

-

post /v2/{project_id}/script-executions/stop

workspace:scripts:stop

-

post /v2/{project_id}/script-execution-records/{record_id}/download

workspace:scripts:download

-

get /v2/{project_id}/share-space/configuration

workspace:tenants:getsharespaceconfig

-

put /v2/{project_id}/share-space/configuration

workspace:tenants:updatesharespaceconfig

-

get /v2/{project_id}/auth-config/status

workspace:authconfigs:getstatus

-

post /v2/{project_id}/privacystatement

workspace:privacystatements:sign

-

get /v2/{project_id}/quotas/detail

workspace:quotas:get

-

get /v2/{project_id}/sites

workspace:sites:get

-

post /v2/{project_id}/sites

workspace:sites:add

  • eip:bandwidths:create
  • eip:publicips:create
  • elb:healthmonitors:create
  • elb:healthmonitors:show
  • elb:listeners:create
  • elb:listeners:update
  • elb:listeners:show
  • elb:listeners:list
  • elb:loadbalancers:create
  • elb:loadbalancers:update
  • elb:loadbalancers:show
  • elb:members:create
  • elb:members:list
  • elb:members:update
  • elb:pools:create
  • elb:pools:update
  • elb:pools:show
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:securitygrouprules:create
  • vpc:securitygrouprules:delete
  • vpc:securitygrouprules:get
  • vpc:securitygroups:create
  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get
  • vpcep:endpoints:create
  • vpcep:endpoints:get

delete /v2/{project_id}/sites/{site_id}

workspace:sites:delete

  • elb:healthmonitors:delete
  • elb:healthmonitors:show
  • elb:listeners:delete
  • elb:listeners:show
  • elb:loadbalancers:delete
  • elb:loadbalancers:show
  • elb:members:delete
  • elb:members:list
  • elb:pools:delete
  • elb:pools:show
  • vpc:ports:delete
  • vpc:securitygroups:delete
  • vpcep:endpoints:delete
  • vpcep:endpoints:get
  • eip:publicips:disassociateinstance
  • eip:bandwidths:delete
  • eip:publicips:delete

put /v2/{project_id}/sites/{site_id}/access-mode

workspace:sites:updateaccessmode

  • eip:bandwidths:create
  • eip:bandwidths:delete
  • eip:publicips:create
  • eip:publicips:delete
  • eip:publicips:disassociateinstance
  • elb:healthmonitors:create
  • elb:healthmonitors:delete
  • elb:healthmonitors:show
  • elb:listeners:create
  • elb:listeners:delete
  • elb:listeners:update
  • elb:listeners:show
  • elb:loadbalancers:create
  • elb:loadbalancers:delete
  • elb:loadbalancers:update
  • elb:loadbalancers:show
  • elb:members:create
  • elb:members:delete
  • elb:members:list
  • elb:members:update
  • elb:pools:create
  • elb:pools:delete
  • elb:pools:update
  • elb:pools:show
  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get
  • vpcep:endpoints:create
  • vpcep:endpoints:delete
  • vpcep:endpoints:get

put /v2/{project_id}/sites/{site_id}/subnet-ids

workspace:sites:updatesubnets

  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get

get /v2/{project_id}/tenants/lock-status

workspace:tenants:getlockstatus

-

put /v2/{project_id}/tenants/lock-status

workspace:tenants:unlock

-

post /v2/{project_id}/workspaces/enterprise-ids/check

workspace:tenants:checkenterpriseids

-

put /v2/{project_id}/workspaces/enterprise-id

workspace:tenants:updateenterpriseid

-

post /v2/{project_id}/bandwidths

workspace:bandwidth:create

-

get /v2/{project_id}/bandwidths

workspace:bandwidth:list

-

post /v2/{project_id}/bandwidths/{bandwidth_id}/update

workspace:bandwidth:update

-

delete /v2/{project_id}/bandwidths/{bandwidth_id}

workspace:bandwidth:delete

-

get /v2/{project_id}/bandwidths/{bandwidth_id}/control-list

workspace:bandwidth:getcontrolconfig

-

put /v2/{project_id}/bandwidths/{bandwidth_id}/control-list

workspace:bandwidth:updatecontrolconfig

-

post /v2/{project_id}/bandwidths/{bandwidth_id}/periodic/change/order

workspace:bandwidth:createchangeorder

-

post /v2/{project_id}/adns

workspace:bandwidth:create

-

get /v2/{project_id}/adns

workspace:bandwidth:list

-

post /v2/{project_id}/desktops-adn/batch-delete

workspace:bandwidth:delete

-

post /v2/{project_id}/snapshots/batch-create

workspace:desktops:batchcreatesnapshots

-

post /v2/{project_id}/snapshots/batch-delete

workspace:desktops:batchdeletesnapshots

-

post /v2/{project_id}/snapshots/batch-restore

workspace:desktops:batchrestoresnapshots

-

get /v2/{project_id}/snapshots

workspace:desktops:listsnapshots

-

post /v2/{project_id}/verification/desktop-name

workspace:desktops:verifydesktopname

-

get /v2/{project_id}/subnets/{subnet_id}/available-ip

workspace:networks:getavailableip

-

get /v2/{project_id}/ad/status

workspace:desktops:getadstatus

-

get /v2/{project_id}/ip-exist

workspace:networks:checkipifexist

-

post /v2/{project_id}/desktops/check-images

workspace:images:checkifexist

ims:images:list

get /v2/{project_id}/hosts/{host_id}/servers

workspace:wdh:listdesktops

-

put /v2/{project_id}/hosts

workspace:wdh:update

-

get /v2/{project_id}/terminals/binding-desktops/template

workspace:bindingpolicies:gettemplate

-

post /v2/{project_id}/terminals/binding-desktops/template/import

workspace:bindingpolicies:import

-

get /v2/{project_id}/terminals/binding-desktops/template/export

workspace:bindingpolicies:export

-

get /v2/{project_id}/desktops/statistics/run-state

workspace:statistics:getrunstate

-

get /v2/{project_id}/desktops/statistics/login-state

workspace:statistics:getloginstate

-

get /v2/{project_id}/subnets/using-subnets

workspace:networks:getusingsubnets

-

get /v2/{project_id}/ports

workspace:networks:listports

-

get /v2/{project_id}/render-desktops/{desktop_id}/remote-consoles

workspace:renderdesktops:createconsole

-

put /v2/{project_id}/render-desktops/resize

workspace:renderdesktops:resize

-

post /v2/{project_id}/exclusive-hosts/{host_id}/resize-lites

workspace:exclusivehosts:resizelites

-

get /services/v2/{project_id}/desktops/{desktop_id}

workspace:desktops:get

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

get /v2/{project_id}/desktop-monitor/{desktop_id}

workspace:desktops:getmonitor

ces:metricdata:get

get /v2/{project_id}/desktops/export

workspace:desktops:export

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

get /v2/{project_id}/desktops/{desktop_id}/detach-info

workspace:desktops:listdetachinfo

-

get /v2/{project_id}/desktops/{desktop_id}/sysprep

workspace:desktops:getsysprepversion

-

post /v2/{project_id}/internet

workspace:networks:createnat

  • vpc:ports:delete
  • vpc:ports:get
  • vpc:networks:get
  • eip:publicips:create
  • eip:publicips:update
  • eip:publicips:delete
  • nat:snatrules:list
  • nat:snatrules:create
  • nat:natgateways:list
  • nat:natgateways:create

get /v2/{project_id}/internet

workspace:networks:listnats

  • vpc:subnets:get
  • vpc:vpcs:get
  • nat:snatrules:list
  • nat:natgateways:list

post /v2/{project_id}/quotas/check

workspace:quotas:check

-

get /v2/{project_id}/subnets

workspace:networks:listsubnets

  • vpc:subnets:list
  • vpc:subnets:get

get /v2/{project_id}/vpcs

workspace:networks:listvpcs

vpc:vpcs:list

post /v2/{project_id}/policy-groups/policy-template

workspace:policygroups:createtemplate

-

get /v1/{project_id}/policy-templates

workspace:policygroups:listtemplate

-

put /v2/{project_id}/policy-groups/policy-template/{policy_group_id}

workspace:policygroups:updatetemplate

-

get /v2/{project_id}/security-groups

workspace:networks:listsecuritygroups

-

get /v2/{project_id}/availability-zones/summary

workspace:availabilityzones:getsummary

-

get /v2/{project_id}/availability-zones/detail

workspace:availabilityzones:get

-

post /v2/{project_id}/users/desktop-users/action/import

workspace:users:importuser

-

post /v2/{project_id}/users/template-upload

workspace:users:uploadtemplate

-

put /v2/{project_id}/access-policy/{access_policy_id}

workspace:accesspolicies:update

-

post /v2/{project_id}/desktops/{desktop_id}/verify-source

workspace:desktops:verifysource

-

get /v2/{project_id}/desktops/networks

workspace:desktops:listdesktopnetworks

  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:networks:get
  • vpc:ports:get
  • vpc:securitygroups:get
  • eip:publicips:list

post /v2/{project_id}/desktops/networks/batch-change

workspace:desktops:batchchangenetwork

  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:networks:get
  • vpc:ports:get
  • vpc:ports:create
  • vpc:ports:update
  • vpc:ports:delete
  • vpc:securitygroups:get
  • eip:publicips:list
  • eip:publicips:associateinstance
  • eip:publicips:disassociateinstance

get /v2/{project_id}/workspace-jobs/{job_id}

workspace:jobs:get

-

post /v2/{project_id}/ip/import

workspace:accesspolicies:importip

-

get /v2/{project_id}/ip/template/download

workspace:accesspolicies:getipimporttemplate

-

get /v2/{project_id}/wks-edge-sites

workspace:sites:listedgesites

  • ies:edgesite:list
  • ies:edgesite:getmetricdata

post /v2/{project_id}/check-edge-site-resources

workspace:sites:checkedgesiteresources

  • ies:edgesite:list
  • ies:edgesite:getmetricdata

get /v2/{project_id}/ad-ous

workspace:ou:listadous

-

get /v2/{project_id}/ou-users

workspace:ou:listouusers

-

post /v2/{project_id}/ou-users/import

workspace:ou:importusersbyou

-

get /v1/{project_id}/app-groups

workspace:appgroup:list

-

post /v1/{project_id}/app-groups

workspace:appgroup:create

-

delete /v1/{project_id}/app-groups/{app_group_id}

workspace:appgroup:delete

-

get /v1/{project_id}/app-groups/{app_group_id}

workspace:appgroup:get

-

patch /v1/{project_id}/app-groups/{app_group_id}

workspace:appgroup:update

-

get /v1/{project_id}/app-groups/{app_group_id}/apps

workspace:app:listpublishedapp

-

post /v1/{project_id}/app-groups/{app_group_id}/apps

workspace:app:publish

-

get /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}

workspace:app:get

-

patch /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}

workspace:app:update

-

delete /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}/icon

workspace:app:deleteicon

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}/icon

workspace:app:uploadicon

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/actions/check

workspace:app:check

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/actions/disable

workspace:app:batchdisable

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/actions/enable

workspace:app:batchenable

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/batch-unpublish

workspace:app:unpublish

-

get /v1/{project_id}/app-groups/{app_group_id}/publishable-app

workspace:appgroup:listpublishableapp

-

post /v1/{project_id}/app-groups/actions/batch-delete-authorization

workspace:appgroup:batchdeleteauthorization

-

post /v1/{project_id}/app-groups/actions/disassociate-app-group

workspace:appgroup:disassociate

-

get /v1/{project_id}/app-groups/actions/list-authorizations

workspace:appgroup:listauthorization

-

post /v1/{project_id}/app-groups/authorizations

workspace:appgroup:addauthorization

-

post /v1/{project_id}/app-groups/batch-delete

workspace:appgroup:batchdelete

-

post /v1/{project_id}/app-groups/rules/validate

workspace:appgroup:check

-

get /v1/{project_id}/app-server-groups

workspace:servergroup:list

-

post /v1/{project_id}/app-server-groups

workspace:servergroup:create

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

delete /v1/{project_id}/app-server-groups/{server_group_id}

workspace:servergroup:delete

-

get /v1/{project_id}/app-server-groups/{server_group_id}

workspace:servergroup:get

-

patch /v1/{project_id}/app-server-groups/{server_group_id}

workspace:servergroup:update

ims:images:list

get /v1/{project_id}/app-server-groups/{server_group_id}/state

workspace:servergroup:getserverstate

-

get /v1/{project_id}/app-server-groups/actions/list

workspace:servergroup:listdetail

-

get /v1/{project_id}/app-server-groups/resources/restrict

workspace:servergroup:getrestrict

-

post /v1/{project_id}/app-server-groups/rules/validate

workspace:servergroup:validate

-

post /v1/{project_id}/server-group/{server_group_id}/tags/create

workspace:servergroup:tagresource

-

delete /v1/{project_id}/server-group/{server_group_id}/tags/delete

workspace:servergroup:untagresource

-

get /v1/{project_id}/server-group/{server_group_id}/tags

workspace:servergroup:listtagsforresource

-

get /v1/{project_id}/server-group/tags

workspace:servergroup:listtags

-

post /v1/{project_id}/server-group/tags/batch-create

workspace:servergroup:batchcreatetags

-

delete /v1/{project_id}/server-group/tags/batch-delete

workspace:servergroup:batchdeletetags

-

get /v1/{project_id}/app-servers

workspace:server:list

-

delete /v1/{project_id}/app-servers/{server_id}

workspace:server:delete

  • iam:roles:listroles
  • vpc:ports:delete
  • vpc:ports:get

get /v1/{project_id}/app-servers/{server_id}

workspace:server:get

-

patch /v1/{project_id}/app-servers/{server_id}

workspace:server:update

-

post /v1/{project_id}/app-servers/{server_id}/actions/change-image

workspace:server:changeimage

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

post /v1/{project_id}/app-servers/{server_id}/actions/reinstall

workspace:server:reinstall

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

get /v1/{project_id}/app-servers/{server_id}/actions/vnc

workspace:server:getvncurl

-

get /v1/{project_id}/app-servers/access-agent/latest-version

workspace:accessagent:list

-

patch /v1/{project_id}/app-servers/access-agent/actions/upgrade

workspace:accessagent:batchupgrade

-

get /v1/{project_id}/app-servers/access-agent/latest-version

workspace:accessagent:listlatestversion

-

get /v1/{project_id}/app-servers/access-agent/list

workspace:server:listaccessagentdetails

-

get /v1/{project_id}/app-servers/access-agent/upgrade-flag

workspace:accessagent:getupgradeflag

-

patch /v1/{project_id}/app-servers/access-agent/upgrade-flag

workspace:accessagent:updateupgradeflag

-

get /v1/{project_id}/app-servers/access-agent/upgrade-record

workspace:accessagent:listupgraderecords

-

post /v1/{project_id}/app-servers/actions/batch-delete

workspace:server:batchdelete

  • iam:roles:listroles
  • vpc:ports:delete
  • vpc:ports:get

patch /v1/{project_id}/app-servers/actions/batch-maint

workspace:server:batchchangemaintainmode

-

patch /v1/{project_id}/app-servers/actions/batch-reboot

workspace:server:batchreboot

-

patch /v1/{project_id}/app-servers/actions/batch-rejoin-domain

workspace:server:batchrejoindomain

-

patch /v1/{project_id}/app-servers/actions/batch-start

workspace:server:batchstart

-

patch /v1/{project_id}/app-servers/actions/batch-stop

workspace:server:batchstop

-

patch /v1/{project_id}/app-servers/actions/batch-update-tsvi

workspace:server:batchupdatetsvi

  • vpc:subnets:get
  • vpc:ports:update

post /v1/{project_id}/app-servers/actions/create

workspace:server:create

  • ims:images:list
  • ims:images:updatememberstatus
  • ims:images:share
  • ims:images:get
  • vpc:securitygroups:get
  • vpc:securitygrouprules:get
  • vpc:networks:get
  • vpc:subnets:get
  • vpc:ports:create
  • vpc:ports:get
  • vpc:ports:delete
  • vpc:vpcs:get
  • dss:pools:list

patch /v1/{project_id}/app-servers/hosts/batch-migrate

workspace:server:batchmigratehosts

-

get /v1/{project_id}/app-servers/metric-data/{server_id}

workspace:server:getmetricdata

-

get /v1/{project_id}/app-server-sub-jobs

workspace:jobs:listsubjobs

-

post /v1/{project_id}/app-server-sub-jobs/actions/batch-delete

workspace:jobs:batchdeletesubjobs

-

get /v1/{project_id}/app-server-sub-jobs/actions/count

workspace:jobs:countsubjobs

-

post /v1/{project_id}/app-warehouse/action/authorize

workspace:appwarehouse:authorizeobs

  • obs:bucket:getbucketacl
  • obs:object:putobject
  • obs:object:deleteobject

post /v1/{project_id}/app-warehouse/actions/batch-delete

workspace:appwarehouse:batchdeleteapp

  • obs:bucket:headbucket
  • obs:object:deleteobject

get /v1/{project_id}/app-warehouse/apps

workspace:appwarehouse:listwarehouseapps

-

post /v1/{project_id}/app-warehouse/apps

workspace:appwarehouse:createapp

-

delete /v1/{project_id}/app-warehouse/apps/{id}

workspace:appwarehouse:deleteapp

  • obs:bucket:headbucket
  • obs:object:deleteobject

post /v1/{project_id}/app-warehouse/apps/icon

workspace:appwarehouse:uploadappicon

obs:object:putobject

post /v1/{project_id}/app-warehouse/bucket-and-acl/create

workspace:appwarehouse:createbucketoracl

  • obs:bucket:getbucketacl
  • obs:bucket:headbucket
  • obs:bucket:putbucketacl
  • obs:bucket:putreplicationconfiguration
  • obs:bucket:createbucket
  • obs:bucket:putbucketcors

get /v1/{project_id}/check/quota

workspace:quotas:get

-

get /v1/{project_id}/image-server-jobs

workspace:images:listimagejobs

-

get /v1/{project_id}/image-server-jobs/{job_id}

workspace:images:getimagejob

-

get /v1/{project_id}/image-servers

workspace:imageserver:list

-

post /v1/{project_id}/image-servers

workspace:imageserver:create

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

get /v1/{project_id}/image-servers/{server_id}

workspace:imageserver:get

-

patch /v1/{project_id}/image-servers/{server_id}

workspace:imageserver:update

-

post /v1/{project_id}/image-servers/{server_id}/actions/attach-app

workspace:imageserver:attachapp

-

get /v1/{project_id}/image-servers/{server_id}/actions/latest-attached-app

workspace:imageserver:listlatestattachedapp

-

post /v1/{project_id}/image-servers/{server_id}/actions/recreate-image

workspace:imageserver:recreate

  • vpc:ports:get
  • vpc:subnets:get
  • ims:quotas:get
  • ims:images:get
  • ims:images:list
  • ims:images:settags
  • ims:images:setordeletetags
  • ims:images:updatememberstatus
  • ims:images:copyinregion
  • ims:serverimages:create

patch /v1/{project_id}/image-servers/actions/batch-delete

workspace:imageserver:batchdelete

-

get /v1/{project_id}/image-server-sub-jobs

workspace:imageserver:listimagesubjobs

-

patch /v1/{project_id}/image-server-sub-jobs/actions/batch-delete

workspace:imageserver:batchdeleteimagesubjobs

-

get /v1/{project_id}/image-server-sub-jobs/actions/count

workspace:imageserver:countimagesubjobs

-

get /v2/{project_id}/job/{job_id}

workspace:jobs:get

-

get /v1/{project_id}/mails

workspace:appgroup:listmailrecord

-

post /v1/{project_id}/mails/actions/send

workspace:appgroup:resendmail

-

post /v1/{project_id}/mails/actions/send-by-authorization

workspace:appgroup:resendmail

-

get /v1/{project_id}/persistent-storages

workspace:storage:listpersistentstorage

-

post /v1/{project_id}/persistent-storages

workspace:storage:createpersistentstorage

  • obs:bucket:headbucket
  • obs:bucket:putbucketpolicy
  • obs:bucket:putbucketacl
  • obs:bucket:putbucketcors

delete /v1/{project_id}/persistent-storages/{storage_id}

workspace:storage:deletepersistentstorage

  • obs:object:getobject
  • obs:object:deleteobject

post /v1/{project_id}/persistent-storages/{storage_id}/actions/assign-folder

workspace:storage:updateuserfolderassignment

-

post /v1/{project_id}/persistent-storages/{storage_id}/actions/assign-share-folder

workspace:storage:updatesharefolderassignment

-

post /v1/{project_id}/persistent-storages/{storage_id}/actions/create-share-folder

workspace:storage:createsharefolder

  • obs:object:getobject
  • obs:object:putobject

post /v1/{project_id}/persistent-storages/{storage_id}/actions/delete-storage-claim

workspace:storage:deletestorageclaim

obs:object:deleteobject

post /v1/{project_id}/persistent-storages/{storage_id}/actions/delete-user-attachment

workspace:storage:deleteuserstorageattachment

obs:object:deleteobject

post /v1/{project_id}/persistent-storages/actions/batch-delete

workspace:storage:batchdeletepersistentstorage

-

get /v1/{project_id}/persistent-storages/actions/list-attachments

workspace:storage:liststorageassignment

-

get /v1/{project_id}/persistent-storages/actions/list-share-folders

workspace:storage:listsharefolder

-

get /v1/{project_id}/policy-groups/{policy_group_id}

workspace:policygroups:get

-

get /v1/{project_id}/policy-groups/{policy_group_id}/policy

workspace:policygroups:listpolicies

-

get /v1/{project_id}/policy-groups/{policy_group_id}/target

workspace:policygroups:listtargets

-

get /v1/{project_id}/policy-groups/show/detail

workspace:policygroups:listdetail

-

get /v1/{project_id}/policy-templates

workspace:policygroups:listtemplate

-

delete /v1/{project_id}/policy-templates/{policy_template_id}

workspace:policygroups:deletetemplate

-

patch /v1/{project_id}/policy-templates/{policy_template_id}

workspace:policygroups:updatetemplate

-

get /v1/{project_id}/privacy-statement

workspace:privacystatements:get

-

delete /v1/{project_id}/scaling-policy

workspace:scalingpolicy:delete

-

get /v1/{project_id}/scaling-policy

workspace:scalingpolicy:list

-

put /v1/{project_id}/scaling-policy

workspace:scalingpolicy:create

-

get /v1/{project_id}/schedule-task/{task_id}/execute-history

workspace:scheduledtasks:list

-

post /v1/{project_id}/schedule-task

workspace:scheduledtasks:create

-

get /v1/{project_id}/schedule-task/{execute_history_id}/execute-detail

workspace:scheduledtasks:getrecord

-

delete /v1/{project_id}/schedule-task/{task_id}

workspace:scheduledtasks:delete

-

post /v1/{project_id}/schedule-task/future-executions

workspace:scheduledtasks:get

-

patch /v1/{project_id}/schedule-task/{task_id}

workspace:scheduledtasks:update

-

get /v1/{project_id}/schedule-task/{task_id}/execute-history

workspace:scheduledtasks:listrecords

-

post /v1/{project_id}/schedule-task/actions/batch-delete

workspace:scheduledtasks:batchdelete

-

post /v1/{project_id}/session/app-connection

workspace:session:listappconnection

-

post /v1/{project_id}/session/logoff

workspace:session:logoffusersession

-

post /v1/{project_id}/session/user-connection

workspace:session:listuserconnection

-

get /v1/{project_id}/session/user-session-info

workspace:session:listsessionbyusername

-

put /v1/{project_id}/storages-policy/actions/create-statements

workspace:storagepolicy:create

-

get /v1/{project_id}/storages-policy/actions/list-statements

workspace:storagepolicy:list

-

get /v1/{project_id}/users

workspace:users:list

-

get /v1/persistent-storages/actions/list-sfs-storages

workspace:storage:listsfs3storage

  • obs:bucket:listbucket
  • obs:bucket:getbucketstorage
  • obs:bucket:listallmybuckets

get /v1/{project_id}/product

workspace:baseresource:list

ecs:availabilityzones:list

post /v1/{project_id}/bundles/batch-query-config-info

workspace:tenants:listconfiginfo

-

get /v1/{project_id}/product

workspace:baseresource:list

-

get /v1/{project_id}/volume-type

workspace:baseresource:list

-

post /v1/{project_id}/tenant/action/active

workspace:tenants:active

-

get /v1/{project_id}/tenant/profile

workspace:tenants:listtenantprofile

-

get /v1/{project_id}/volume-type

workspace:baseresource:list

-

get /v1/{project_id}/app-servers/server-metric-data/{server_id}

workspace:server:listservermetricdata

-

get /v1/{project_id}/session/list-sessions

workspace:session:listsessions

-

patch /v1/{project_id}/app-warehouse/apps/{id}

workspace:appwarehouse:updateapp

-

post /v1/{project_id}/app-servers/actions/batch-change-image

workspace:server:batchchangeimage

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

post /v1/{project_id}/app-servers/actions/batch-reinstall

workspace:server:batchreinstall

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

get /v2/{project_id}/auth-config/method-config

workspace:authconfigs:get

-

put /v2/{project_id}/auth-config/method-config

workspace:authconfigs:update

-

get /v2/{project_id}/assist-auth-config/method-config

workspace:assistauthconfigs:get

-

put /v2/{project_id}/assist-auth-config/method-config

workspace:assistauthconfigs:update

-

post /v2/{project_id}/workspace-jobs/{job_id}/actions

workspace:jobs:retry

-

get /v2/{project_id}/quotas

workspace:quotas:get

-

get /v2/{project_id}/tenants/roles

workspace:tenants:getroles

-

get /v2/{project_id}/tenant-configs

workspace:tenants:listconfig

-

put /v2/{project_id}/tenant-configs

workspace:tenants:updateconfig

-

get /v2/{project_id}/nat-mapping-configs

workspace:natmappings:getconfig

-

put /v2/{project_id}/nat-mapping-configs

workspace:natmappings:updateconfig

-

get /v2/{project_id}/workspaces

workspace:tenants:get

  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:securitygroups:get

post /v2/{project_id}/workspaces

workspace:tenants:open

  • eip:bandwidths:create
  • eip:publicips:create
  • elb:healthmonitors:create
  • elb:healthmonitors:show
  • elb:listeners:create
  • elb:listeners:update
  • elb:listeners:show
  • elb:listeners:list
  • elb:loadbalancers:create
  • elb:loadbalancers:update
  • elb:loadbalancers:show
  • elb:members:create
  • elb:members:list
  • elb:members:update
  • elb:pools:create
  • elb:pools:update
  • elb:pools:show
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:securitygrouprules:create
  • vpc:securitygrouprules:delete
  • vpc:securitygrouprules:get
  • vpc:securitygroups:create
  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get
  • vpcep:endpoints:create
  • vpcep:endpoints:get

delete /v2/{project_id}/workspaces

workspace:tenants:delete

  • elb:healthmonitors:delete
  • elb:healthmonitors:show
  • elb:listeners:delete
  • elb:listeners:show
  • elb:loadbalancers:delete
  • elb:loadbalancers:show
  • elb:members:delete
  • elb:members:list
  • elb:pools:delete
  • elb:pools:show
  • vpc:ports:delete
  • vpc:securitygroups:delete
  • vpcep:endpoints:delete
  • vpcep:endpoints:get
  • eip:publicips:disassociateinstance
  • eip:bandwidths:delete
  • eip:publicips:delete

put /v2/{project_id}/workspaces

workspace:tenants:update

  • eip:bandwidths:create
  • eip:bandwidths:delete
  • eip:publicips:create
  • eip:publicips:delete
  • eip:publicips:disassociateinstance
  • elb:healthmonitors:create
  • elb:healthmonitors:delete
  • elb:healthmonitors:show
  • elb:listeners:create
  • elb:listeners:delete
  • elb:listeners:update
  • elb:listeners:show
  • elb:loadbalancers:create
  • elb:loadbalancers:delete
  • elb:loadbalancers:update
  • elb:loadbalancers:show
  • elb:members:create
  • elb:members:delete
  • elb:members:list
  • elb:members:update
  • elb:pools:create
  • elb:pools:delete
  • elb:pools:update
  • elb:pools:show
  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get
  • vpcep:endpoints:create
  • vpcep:endpoints:delete
  • vpcep:endpoints:get

get /v2/{project_id}/workspaces/lock-status

workspace:tenants:getlockstatus

-

put /v2/{project_id}/workspaces/lock-status

workspace:tenants:unlock

-

post /v2/{project_id}/agencies

workspace:agencies:create

  • iam:agencies:listv5
  • iam:agencies:getv5
  • iam:agencies:createservicelinkedagencyv5
  • iam:roles:getrole
  • iam:roles:listroles
  • iam:agencies:getagency
  • iam:agencies:listagencies
  • iam:agencies:createagency
  • iam:permissions:listrolesforagencyonproject
  • iam:permissions:grantroletoagencyonproject

get /v2/{project_id}/agencies

workspace:agencies:get

  • iam:agencies:listv5
  • iam:agencies:getv5
  • iam:agencies:getagency
  • iam:agencies:listagencies
  • iam:permissions:listrolesforagencyonproject

post /v3/{project_id}/desktops/{desktop_id}/ai-accelerate-job

workspace:desktops:commitaiacceleratejob

-

post /v2/{project_id}/desktops/{desktop_id}/ai-accelerate-job

workspace:desktops:createaiacceleratejob

-

get /v2/{project_id}/ai-accelerate-job/{job_id}

workspace:desktops:getaiacceleratejob

-

post /v2/{project_id}/sysprep

workspace:desktops:getsysprepinfo

-

post /v2/{project_id}/verification/batch-change-image

workspace:desktops:checkbatchchangeimage

ims:images:list

get /v2/{project_id}/desktop-name-policies

workspace:tenants:listdesktopnamepolicies

-

post /v2/{project_id}/desktop-name-policies

workspace:tenants:createdesktopnamepolicy

-

put /v2/{project_id}/desktop-name-policies/{policy_id}

workspace:tenants:updatedesktopnamepolicy

-

post /v2/{project_id}/desktop-name-policies/batch-delete

workspace:tenants:batchdeletedesktopnamepolicies

-

post /v2/{project_id}/desktop-pools

workspace:desktoppools:create

  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember
  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • vpc:securitygroups:get
  • vpc:subnets:get
  • vpc:vpcs:get
  • dss:pools:list

get /v2/{project_id}/desktop-pools

workspace:desktoppools:list

ims:images:list

put /v2/{project_id}/desktop-pools/{pool_id}

workspace:desktoppools:update

-

delete /v2/{project_id}/desktop-pools/{pool_id}

workspace:desktoppools:delete

-

get /v2/{project_id}/desktop-pools/{pool_id}

workspace:desktoppools:get

ims:images:list

post /v2/{project_id}/desktop-pools/{pool_id}/expand

workspace:desktoppools:expand

  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember
  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • vpc:securitygroups:get
  • vpc:subnets:get
  • vpc:vpcs:get
  • dss:pools:list

post /v2/{project_id}/desktop-pools/{pool_id}/resize

workspace:desktoppools:resize

  • vpc:subnets:get
  • ims:images:list

post /v2/{project_id}/desktop-pools/{pool_id}/rebuild

workspace:desktoppools:rebuild

  • vpc:ports:get
  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember

post /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-add

workspace:desktoppools:batchaddvolumes

-

post /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-delete

workspace:desktoppools:batchdeletevolumes

-

post /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-expand

workspace:desktoppools:batchexpandvolumes

-

post /v2/{project_id}/desktop-pools/{pool_id}/action

workspace:desktoppools:operate

-

get /v2/{project_id}/desktop-pools/{pool_id}/users

workspace:desktoppools:listusers

-

post /v2/{project_id}/desktop-pools/{pool_id}/users

workspace:desktoppools:authorizeusers

ims:images:list

get /v2/{project_id}/desktop-pools/{pool_id}/desktops

workspace:desktoppools:listdesktops

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

get /v2/{project_id}/desktop-pools/script-execution-tasks/detail

workspace:desktoppools:listscripttasks

-

post /v2/{project_id}/desktop-pools/{pool_id}/script-executions

workspace:desktoppools:executescripts

-

post /v2/{project_id}/desktop-pools/{pool_id}/notifications

workspace:desktoppools:sendnotifications

-

get /v3/{project_id}/desktops/export

workspace:desktops:export

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

post /v2/{project_id}/desktops

workspace:desktops:create

  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember
  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • eip:publicips:get
  • eip:publicips:list
  • eip:publicips:create
  • eip:publicips:associateinstance
  • eip:publicips:delete
  • eip:publicips:createtags
  • vpc:quotas:list
  • vpc:securitygroups:get
  • vpc:subnets:get
  • vpc:vpcs:get
  • dss:pools:list

get /v2/{project_id}/desktops

workspace:desktops:list

-

put /v2/{project_id}/desktops/{desktop_id}

workspace:desktops:update

-

delete /v2/{project_id}/desktops/{desktop_id}

workspace:desktops:delete

  • vpc:ports:get
  • vpc:ports:delete

get /v2/{project_id}/desktops/{desktop_id}

workspace:desktops:get

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

post /v2/{project_id}/desktops/batch-delete

workspace:desktops:batchdelete

  • vpc:ports:get
  • vpc:ports:delete

post /v2/{project_id}/desktops/logoff

workspace:desktops:logoff

-

get /v2/{project_id}/desktops/detail

workspace:desktops:listdetail

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

post /v2/{project_id}/desktops/action

workspace:desktops:operate

-

post /v2/{project_id}/desktops/resize

workspace:desktops:resize

  • vpc:subnets:get
  • ims:images:list

get /v2/{project_id}/connections/status

workspace:desktops:getconnectstatus

-

get /v2/{project_id}/desktops/status

workspace:desktops:liststatus

-

post /v2/{project_id}/desktops/rebuild

workspace:desktops:rebuild

  • vpc:ports:get
  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember

get /v2/{project_id}/desktops/{desktop_id}/actions

workspace:desktops:getactions

-

get /v2/{project_id}/desktops/{desktop_id}/remote-consoles

workspace:desktops:createconsole

-

put /v2/{project_id}/desktops/sids

workspace:desktops:updatesids

-

post /v2/{project_id}/desktops/{desktop_id}/rejoin-domain

workspace:desktops:rejoindomain

-

post /v2/{project_id}/desktops/desktop-to-image

workspace:desktops:createimage

  • ims:quotas:get
  • ims:images:get
  • ims:images:list
  • ims:images:settags
  • ims:images:setordeletetags
  • ims:images:updatememberstatus
  • ims:images:copyinregion
  • ims:serverimages:create

post /v2/{project_id}/desktops/batch-detach

workspace:desktops:batchdetach

vpc:ports:get

post /v2/{project_id}/desktops/detach

workspace:desktops:detach

vpc:ports:get

post /v2/{project_id}/desktops/attach

workspace:desktops:attach

  • vpc:ports:get
  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember

get /v2/{project_id}/desktops/{desktop_id}/networks

workspace:desktops:getnetwork

  • vpc:vpcs:get
  • vpc:networks:get
  • vpc:subnets:get
  • vpc:ports:get
  • vpc:securitygroups:get
  • eip:publicips:list

put /v2/{project_id}/desktops/{desktop_id}/networks

workspace:desktops:changenetwork

  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:networks:get
  • vpc:ports:get
  • vpc:ports:create
  • vpc:ports:update
  • vpc:ports:delete
  • vpc:securitygroups:get
  • eip:publicips:list
  • eip:publicips:associateinstance
  • eip:publicips:disassociateinstance

get /v2/{project_id}/exclusive-hosts/{host_id}/desktops

workspace:exclusivehosts:listdesktops

-

get /v2/{project_id}/all-desktops

workspace:desktops:listall

-

get /v2/{project_id}/desktop-associate/discover-vm/infos

workspace:desktopassociate:listdiscovervminfo

-

post /v2/{project_id}/desktop-associate/tasks

workspace:desktopassociate:starttask

-

post /v2/{project_id}/desktop-associate/discover-vm/switch

workspace:desktopassociate:switchscantask

-

get /v2/{project_id}/desktop-associate/discover-vm/switch

workspace:desktopassociate:getscantaskswitch

-

put /v2/{project_id}/desktops/maintenance-mode

workspace:desktops:setmaintenancemode

-

post /v2/{project_id}/desktops/pre-batch-attach

workspace:desktops:prepattachusers

-

post /v2/{project_id}/desktops/batch-attach

workspace:desktops:batchattachusers

  • vpc:ports:get
  • ims:images:get
  • ims:images:list
  • ims:images:share
  • ims:images:updatememberstatus
  • ims:images:deletemember
  • ims:images:addmember

put /v2/{project_id}/desktops/change-username

workspace:desktops:changeusername

-

post /v2/{project_id}/desktops/notifications

workspace:desktops:sendnotifications

-

post /v2/{project_id}/desktops/{desktop_id}/migrate

workspace:desktops:migrate

  • vpc:networks:get
  • vpc:subnets:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:update
  • vpc:ports:get

get /v2/{project_id}/desktops/agents

workspace:desktops:listagents

-

post /v2/{project_id}/desktops/agents

workspace:desktops:batchinstallagents

-

get /v2/{project_id}/desktops/{desktop_id}/tags

workspace:desktops:listtags

-

post /v2/{project_id}/desktops/{desktop_id}/tags

workspace:desktops:tag

-

delete /v2/{project_id}/desktops/{desktop_id}/tags/{key}

workspace:desktops:untag

-

get /v2/{project_id}/desktops/tags

workspace:desktops:listprojecttags

-

post /v2/{project_id}/desktops/{desktop_id}/tags/action

workspace:desktops:operatetags

-

post /v2/{project_id}/desktops/resource_instances/action

workspace:desktops:listbytags

-

post /v2/{project_id}/desktops/batch-tags

workspace:desktops:tag

-

delete /v2/{project_id}/desktops/batch-tags

workspace:desktops:untag

-

post /v2/{project_id}/exclusive-hosts

workspace:exclusivehosts:create

  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • vpc:subnets:get
  • vpc:vpcs:get

get /v2/{project_id}/exclusive-hosts

workspace:exclusivehosts:list

-

post /v2/{project_id}/exclusive-hosts/check-limits

workspace:exclusivehosts:check

-

get /v2/{project_id}/exclusive-hosts/{host_id}

workspace:exclusivehosts:get

  • nat:snatrules:list
  • eip:publicips:list

put /v2/{project_id}/exclusive-hosts/{host_id}

workspace:exclusivehosts:update

-

delete /v2/{project_id}/exclusive-hosts/{host_id}

workspace:exclusivehosts:delete

-

get /v2/{project_id}/market-images

workspace:mkp:listimages

ims:images:list

get /v2/{project_id}/mkp/commodities/commodity-ids

workspace:mkp:listcommodityinfos

-

post /v2/{project_id}/mkp/order

workspace:mkp:createorder

-

post /v2/{project_id}/mkp/product-reserve

workspace:mkp:listlistproductreserve

-

get /v2/{project_id}/mkp/commodities

workspace:mkp:listcommoditydetails

-

get /v2/{project_id}/mkp/commodities/{commodity_id}/relation-commodities

workspace:mkp:listrelationcommoditydetails

-

get /v2/{project_id}/mkp/commodities/agreements

workspace:mkp:listcommodityagreements

-

get /v2/{project_id}/eips

workspace:networks:listeips

  • eip:publicips:list
  • eip:bandwidths:list

post /v2/{project_id}/eips

workspace:networks:createeips

  • vpc:quotas:list
  • eip:publicips:create
  • eip:publicips:associateinstance

post /v2/{project_id}/eips/binding

workspace:networks:bindeips

  • eip:publicips:associateinstance
  • eip:publicips:get

post /v2/{project_id}/eips/unbinding

workspace:networks:unbindeips

  • eip:publicips:list
  • eip:publicips:disassociateinstance

get /v2/{project_id}/eips/quotas

workspace:networks:geteipquota

vpc:quotas:list

get /v2/{project_id}/nat-gateways

workspace:networks:listnatgateways

  • vpc:subnets:get
  • vpc:vpcs:get
  • nat:snatrules:list
  • nat:natgateways:list

post /v2/{project_id}/periodic/subscribe/order

workspace:orders:create

  • ims:images:list
  • vpc:vpcs:get
  • vpc:networks:get
  • vpc:subnets:get
  • vpc:ports:get
  • bss:order:update

post /v2/{project_id}/periodic/{desktop_id}/change/order

workspace:orders:change

  • ims:images:list
  • bss:order:update

post /v2/{project_id}/periodic/change/batch-order

workspace:orders:change

  • ims:images:list
  • bss:order:update

post /v2/{project_id}/periodic/inquiry/change-image

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/desktop-pool/periodic/change/order

workspace:orders:change

  • ims:images:list
  • bss:order:update

post /v2/{project_id}/desktop-pool/periodic/inquiry/add-volume

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/desktop-pool/periodic/inquiry/change-image

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/desktop-pool/periodic/inquiry/extend-volume

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/desktop-pool/periodic/inquiry/resize

workspace:orders:batchinquiry

ims:images:list

post /v2/{project_id}/periodic/inquiry/add-resources

workspace:orders:batchinquiry

ims:images:list

get /v2/{project_id}/checkorderlimits

workspace:quotas:check

-

post /v2/{project_id}/render-desktops

workspace:renderdesktops:create

  • ims:images:list
  • ims:images:share
  • vpc:networks:get
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:ports:get
  • vpc:ports:update
  • vpc:securitygroups:get
  • vpc:subnets:get
  • vpc:vpcs:get

delete /v2/{project_id}/render-desktops

workspace:renderdesktops:delete

  • vpc:ports:get
  • vpc:ports:delete

get /v2/{project_id}/render-desktops

workspace:renderdesktops:list

-

post /v2/{project_id}/render-desktops/action

workspace:renderdesktops:action

-

get /v2/{project_id}/scheduled-tasks

workspace:scheduledtasks:list

-

post /v2/{project_id}/scheduled-tasks

workspace:scheduledtasks:create

-

get /v2/{project_id}/scheduled-tasks/{task_id}

workspace:scheduledtasks:get

-

put /v2/{project_id}/scheduled-tasks/{task_id}

workspace:scheduledtasks:update

-

delete /v2/{project_id}/scheduled-tasks/{task_id}

workspace:scheduledtasks:delete

-

post /v2/{project_id}/scheduled-tasks/future-executions

workspace:scheduledtasks:getfuture

-

post /v2/{project_id}/scheduled-tasks/batch-delete

workspace:scheduledtasks:batchdelete

-

get /v2/{project_id}/scheduled-tasks/{task_id}/records

workspace:scheduledtasks:listrecords

-

get /v2/{project_id}/scheduled-tasks/{task_id}/records/{record_id}

workspace:scheduledtasks:getrecord

-

post /v2/{project_id}/scheduled-tasks/{task_id}/records/export

workspace:scheduledtasks:exportrecords

-

post /v2/{project_id}/user/share-resources

workspace:users:subscribesharer

-

post /v2/{project_id}/desktop/sub-resources

workspace:desktops:addsubresources

-

post /v2/{project_id}/desktop/delete-sub-resources

workspace:desktops:deletesubresources

-

post /v2/{project_id}/desktops/{desktop_id}/snapshots

workspace:desktops:createsnapshots

-

get /v2/{project_id}/desktops/{desktop_id}/snapshots

workspace:desktops:getsnapshots

-

delete /v2/{project_id}/desktops/{desktop_id}/snapshots

workspace:desktops:deletesnapshots

-

post /v2/{project_id}/desktops/{desktop_id}/snapshots/restore

workspace:desktops:restorebysnapshot

-

get /v2/{project_id}/statistics

workspace:statistics:listdesktopstatus

-

get /v2/{project_id}/desktops/statistics/unused

workspace:statistics:getunused

-

post /v2/{project_id}/desktops/statistics/used

workspace:statistics:getused

-

get /v3/{project_id}/terminals/binding-desktops/template/export

workspace:bindingpolicies:export

-

get /v2/{project_id}/terminals/binding-desktops/config

workspace:bindingpolicies:getconfig

-

post /v2/{project_id}/terminals/binding-desktops/config

workspace:bindingpolicies:createconfig

-

get /v2/{project_id}/terminals/binding-desktops

workspace:bindingpolicies:get

-

post /v2/{project_id}/terminals/binding-desktops

workspace:bindingpolicies:add

-

put /v2/{project_id}/terminals/binding-desktops

workspace:bindingpolicies:update

-

post /v2/{project_id}/terminals/binding-desktops/batch-delete

workspace:bindingpolicies:delete

-

post /v2/{project_id}/desktops/{desktop_id}/volumes/batch-delete

workspace:volumes:delete

-

post /v2/{project_id}/volumes

workspace:volumes:batchadd

-

post /v2/{project_id}/volumes/expand

workspace:volumes:batchexpand

-

get /v2/{project_id}/hosts/types

workspace:wdh:gettype

-

get /v2/{project_id}/hosts

workspace:wdh:get

-

get /v2/{project_id}/desktops/{desktop_id}/remote-assistance

workspace:desktops:getremoteassistance

-

post /v2/{project_id}/desktops/{desktop_id}/remote-assistance

workspace:desktops:createremoteassistance

-

delete /v2/{project_id}/desktops/{desktop_id}/remote-assistance

workspace:desktops:cancelremoteassistance

-

post /v2/{project_id}/desktops/{desktop_id}/volumes

workspace:volumes:add

-

post /v2/{project_id}/desktops/{desktop_id}/volumes/{volume_id}/expand

workspace:volumes:expand

-

get /v2/{project_id}/dss-pools/detail

workspace:volumes:listdsspoolsdetail

dss:pools:list

get /v2/{project_id}/common/timezones

workspace:common:listtimezones

-

get /v3/{project_id}/desktops/connections/export

workspace:connections:securityexport

-

get /v2/{project_id}/images

workspace:images:list

ims:images:list

post /v2/{project_id}/policy-groups/import

workspace:policygroups:import

-

post /v2/{project_id}/access-policy

workspace:accesspolicies:create

-

get /v2/{project_id}/access-policy

workspace:accesspolicies:get

-

delete /v2/{project_id}/access-policy

workspace:accesspolicies:delete

-

get /v2/{project_id}/access-policy/{access_policy_id}/objects

workspace:accesspolicies:gettarget

-

put /v2/{project_id}/access-policy/{access_policy_id}/objects

workspace:accesspolicies:updatetarget

-

get /v2/{project_id}/products

workspace:products:listdesktopproducts

ecs:cloudserverflavors:get

get /v2/{project_id}/products/sharer

workspace:products:listsharerproducts

-

get /v2/{project_id}/products/adninternet

workspace:products:listinternetproducts

-

get /v2/{project_id}/availability-zones

workspace:availabilityzones:list

-

get /v2/{project_id}/groups/export

workspace:usergroups:export

-

post /v3/{project_id}/users/export

workspace:users:export

-

post /v2/{project_id}/users/import

workspace:users:import

-

get /v3/{project_id}/groups/{group_id}/users/export

workspace:usergroups:exportusers

-

get /v2/{project_id}/groups/{group_id}/users/export

workspace:usergroups:exportusers

-

post /v2/{project_id}/users/{user_id}/actions

workspace:users:operate

-

get /v2/{project_id}/users/{user_id}/random-password

workspace:users:randompassword

-

delete /v2/{project_id}/users/{user_id}/otp-devices

workspace:users:deleteotps

-

post /v2/{project_id}/users/{user_id}/resend-email

workspace:users:resendemail

-

get /v2/{project_id}/connections/desktops

workspace:connections:securitylist

-

get /v2/{project_id}/connections/desktops/export

workspace:connections:securityexport

-

get /v2/{project_id}/connections/online-users

workspace:connections:listonlineusers

-

get /v2/{project_id}/desktops/connections

workspace:connections:securitylist

-

get /v2/{project_id}/desktops/connections/export

workspace:connections:securityexport

-

get /v2/{project_id}/desktops/online-users

workspace:connections:listonlineusers

-

get /v2/{project_id}/groups

workspace:usergroups:list

-

post /v2/{project_id}/groups

workspace:usergroups:create

-

post /v2/{project_id}/groups/batch-delete

workspace:usergroups:batchdelete

-

delete /v2/{project_id}/groups/{group_id}

workspace:usergroups:delete

-

put /v2/{project_id}/groups/{group_id}

workspace:usergroups:update

-

post /v2/{project_id}/groups/{group_id}/actions

workspace:usergroups:operate

-

get /v2/{project_id}/groups/{group_id}/users

workspace:usergroups:getusers

-

get /v2/{project_id}/workspace-sub-jobs

workspace:jobs:listsubjobs

-

post /v2/{project_id}/workspace-sub-jobs/batch-delete

workspace:jobs:deletesubjobrecords

-

get /v2/{project_id}/ous

workspace:ou:get

-

post /v2/{project_id}/ous

workspace:ou:create

-

delete /v2/{project_id}/ous/{ou_id}

workspace:ou:delete

-

put /v2/{project_id}/ous/{ou_id}

workspace:ou:update

-

get /v2/{project_id}/policy-groups

workspace:policygroups:list

-

post /v2/{project_id}/policy-groups

workspace:policygroups:create

-

delete /v2/{project_id}/policy-groups/{policy_group_id}

workspace:policygroups:delete

-

get /v2/{project_id}/policy-groups/{policy_group_id}

workspace:policygroups:get

-

put /v2/{project_id}/policy-groups/{policy_group_id}

workspace:policygroups:update

-

post /v2/{project_id}/policy-groups/export

workspace:policygroups:export

-

get /v2/{project_id}/policy-groups/{policy_group_id}/policies

workspace:policygroups:listpolicies

-

put /v2/{project_id}/policy-groups/{policy_group_id}/policies

workspace:policygroups:updatepolicies

-

get /v2/{project_id}/policy-groups/{policy_group_id}/targets

workspace:policygroups:listtargets

-

put /v2/{project_id}/policy-groups/{policy_group_id}/targets

workspace:policygroups:updatetargets

-

get /v2/{project_id}/policy-groups/detail

workspace:policygroups:listdetail

-

get /v2/{project_id}/policy-groups/original-policies

workspace:policygroups:getoriginalpolicies

-

get /v2/{project_id}/users

workspace:users:list

-

post /v2/{project_id}/users

workspace:users:create

-

delete /v2/{project_id}/users/{user_id}

workspace:users:delete

-

get /v2/{project_id}/users/{user_id}

workspace:users:get

-

put /v2/{project_id}/users/{user_id}

workspace:users:update

-

post /v2/{project_id}/users/batch-delete

workspace:users:batchdelete

-

post /v2/{project_id}/users/password

workspace:users:resetpassword

-

post /v2/{project_id}/users/password-token

workspace:users:checkresetpasswordtoken

-

get /v2/{project_id}/users/desktop-users/template

workspace:users:gettemplate

-

post /v2/{project_id}/users/exist

workspace:users:checkexist

-

get /v2/{project_id}/users/{user_id}/otp-devices

workspace:users:listotps

-

get /v2/{project_id}/users/template/download

workspace:users:getimporttemplate

-

post /v2/{project_id}/users/export

workspace:users:export

-

post /v2/{project_id}/users/batch-create

workspace:users:batchcreate

-

get /v2/{project_id}/volume/products

workspace:products:listvolumeproducts

-

get /v2/{project_id}/export-tasks

workspace:tenants:listexporttasks

-

post /v2/{project_id}/export-tasks/batch-delete

workspace:tenants:deleteexporttasks

-

get /v2/{project_id}/export-tasks/{task_id}/download

workspace:tenants:exportdata

-

get /v2/{project_id}/alarms

workspace:statistics:listalarm

ces:alarmhistory:list

get /v2/{project_id}/statistics/alarms

workspace:statistics:getalarm

ces:alarmhistory:list

get /v2/{project_id}/statistics/growth-rate

workspace:statistics:getgrowthrate

-

get /v2/{project_id}/statistics/metrics

workspace:statistics:getmetric

-

get /v2/{project_id}/statistics/metrics/trend

workspace:statistics:getmetrictrend

-

put /v2/{project_id}/statistics/notify-rules/{rule_id}

workspace:statistics:updatenotificationrules

smn:topic:get

delete /v2/{project_id}/statistics/notify-rules/{rule_id}

workspace:statistics:deletenotificationrules

-

post /v2/{project_id}/statistics/notify-rules

workspace:statistics:createnotifyrules

smn:topic:get

get /v2/{project_id}/statistics/notify-rules

workspace:statistics:listnotificationrules

-

get /v2/{project_id}/statistics/notification-records

workspace:statistics:listnotificationrecords

-

get /v2/{project_id}/statistics/metrics/desktops

workspace:statistics:listdesktopmetrics

-

get /v2/{project_id}/statistics/metrics/desktops/export

workspace:statistics:exportdesktopmetrics

-

get /v2/{project_id}/statistics/metrics/users

workspace:statistics:listusermetrics

-

get /v2/{project_id}/statistics/metrics/users/export

workspace:statistics:exportusermetrics

-

get /v3/{project_id}/statistics/metrics/desktops/export

workspace:statistics:exportdesktopmetrics

-

get /v3/{project_id}/statistics/metrics/users/export

workspace:statistics:exportusermetrics

-

post /v1/{project_id}/app-center/buckets/actions/create-credential

workspace:appcenter:createbucketcredential

  • obs:bucket:getbucketacl
  • obs:object:putobject
  • obs:object:deleteobject

post /v1/{project_id}/app-center/buckets

workspace:appcenter:createandauthorizebucket

  • obs:bucket:headbucket
  • obs:bucket:putbucketacl
  • obs:bucket:putreplicationconfiguration
  • obs:bucket:createbucket
  • obs:bucket:putbucketcors

get /v1/{project_id}/app-center/apps

workspace:appcenter:listapps

-

post /v1/{project_id}/app-center/apps

workspace:appcenter:createapp

-

patch /v1/{project_id}/app-center/apps/{app_id}

workspace:appcenter:updateapp

-

delete /v1/{project_id}/app-center/apps/{app_id}

workspace:appcenter:deleteapp

-

post /v1/{project_id}/app-center/apps/{app_id}/actions/auto-install

workspace:appcenter:installapp

-

get /v1/{project_id}/app-center/apps/{app_id}/authorizations

workspace:appcenter:listappauthorizations

-

post /v1/{project_id}/app-center/apps/{app_id}/actions/assign-authorizations

workspace:appcenter:batchupdateappauthorizations

-

post /v1/{project_id}/app-center/apps/actions/batch-delete

workspace:appcenter:batchdeleteapps

-

post /v1/{project_id}/app-center/apps/actions/batch-disable

workspace:appcenter:batchdisableapps

-

post /v1/{project_id}/app-center/apps/actions/batch-enable

workspace:appcenter:batchenableapps

-

post /v1/{project_id}/app-center/apps/actions/batch-assign-authorization

workspace:appcenter:batchupdateappauthorizations

-

post /v1/{project_id}/app-center/apps/actions/batch-auto-install

workspace:appcenter:batchinstallapps

-

get /v1/{project_id}/app-center/app-catalogs

workspace:appcenter:listappcatalogs

-

get /v1/{project_id}/app-center/jobs

workspace:appcenter:listjobs

-

post /v1/{project_id}/app-center/jobs/actions/batch-delete

workspace:appcenter:batchdeletejobs

-

post /v1/{project_id}/app-center/jobs/actions/retry

workspace:appcenter:retryjobs

-

post /v1/{project_id}/app-center/app-rules

workspace:appcenter:createapprule

-

get /v1/{project_id}/app-center/app-rules

workspace:appcenter:listapprule

-

patch /v1/{project_id}/app-center/app-rules/{rule_id}

workspace:appcenter:updateapprule

-

delete /v1/{project_id}/app-center/app-rules/{rule_id}

workspace:appcenter:deleteapprule

-

post /v1/{project_id}/app-center/app-rules/batch-delete

workspace:appcenter:batchdeleteapprules

-

post /v1/{project_id}/app-center/app-rules/actions/enable-rule-restriction

workspace:appcenter:enablerulerestriction

-

post /v1/{project_id}/app-center/app-rules/actions/disable-rule-restriction

workspace:appcenter:disablerulerestriction

-

post /v1/{project_id}/app-center/app-restricted-rules

workspace:appcenter:addrestrictedrule

-

get /v1/{project_id}/app-center/app-restricted-rules

workspace:appcenter:listrestrictedrule

-

post /v1/{project_id}/app-center/app-restricted-rules/actions/batch-delete

workspace:appcenter:deleterestrictedrule

-

patch /v1/{project_id}/app-center/profiles

workspace:appcenter:updatetenantprofile

-

get /v1/{project_id}/app-center/profiles

workspace:appcenter:listtenantprofiles

-

post /v2/{project_id}/scripts

workspace:scripts:create

-

get /v2/{project_id}/scripts

workspace:scripts:list

-

get /v2/{project_id}/scripts/{script_id}

workspace:scripts:get

-

put /v2/{project_id}/scripts/{script_id}

workspace:scripts:put

-

delete /v2/{project_id}/scripts/{script_id}

workspace:scripts:delete

-

post /v2/{project_id}/script-executions

workspace:scripts:execute

-

get /v2/{project_id}/script-execution-records/{record_id}

workspace:scripts:getrecorddetail

-

get /v2/{project_id}/script-execution-records

workspace:scripts:listrecords

-

get /v2/{project_id}/script-execution-tasks

workspace:scripts:listtasks

-

post /v2/{project_id}/script-executions/retry

workspace:scripts:retry

-

post /v2/{project_id}/script-executions/stop

workspace:scripts:stop

-

post /v2/{project_id}/script-execution-records/{record_id}/download

workspace:scripts:download

-

get /v2/{project_id}/share-space/configuration

workspace:tenants:getsharespaceconfig

-

put /v2/{project_id}/share-space/configuration

workspace:tenants:updatesharespaceconfig

-

get /v2/{project_id}/auth-config/status

workspace:authconfigs:getstatus

-

post /v2/{project_id}/privacystatement

workspace:privacystatements:sign

-

get /v2/{project_id}/quotas/detail

workspace:quotas:get

-

get /v2/{project_id}/sites

workspace:sites:get

-

post /v2/{project_id}/sites

workspace:sites:add

  • eip:bandwidths:create
  • eip:publicips:create
  • elb:healthmonitors:create
  • elb:healthmonitors:show
  • elb:listeners:create
  • elb:listeners:update
  • elb:listeners:show
  • elb:listeners:list
  • elb:loadbalancers:create
  • elb:loadbalancers:update
  • elb:loadbalancers:show
  • elb:members:create
  • elb:members:list
  • elb:members:update
  • elb:pools:create
  • elb:pools:update
  • elb:pools:show
  • vpc:ports:create
  • vpc:ports:delete
  • vpc:securitygrouprules:create
  • vpc:securitygrouprules:delete
  • vpc:securitygrouprules:get
  • vpc:securitygroups:create
  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get
  • vpcep:endpoints:create
  • vpcep:endpoints:get

delete /v2/{project_id}/sites/{site_id}

workspace:sites:delete

  • elb:healthmonitors:delete
  • elb:healthmonitors:show
  • elb:listeners:delete
  • elb:listeners:show
  • elb:loadbalancers:delete
  • elb:loadbalancers:show
  • elb:members:delete
  • elb:members:list
  • elb:pools:delete
  • elb:pools:show
  • vpc:ports:delete
  • vpc:securitygroups:delete
  • vpcep:endpoints:delete
  • vpcep:endpoints:get
  • eip:publicips:disassociateinstance
  • eip:bandwidths:delete
  • eip:publicips:delete

put /v2/{project_id}/sites/{site_id}/access-mode

workspace:sites:updateaccessmode

  • eip:bandwidths:create
  • eip:bandwidths:delete
  • eip:publicips:create
  • eip:publicips:delete
  • eip:publicips:disassociateinstance
  • elb:healthmonitors:create
  • elb:healthmonitors:delete
  • elb:healthmonitors:show
  • elb:listeners:create
  • elb:listeners:delete
  • elb:listeners:update
  • elb:listeners:show
  • elb:loadbalancers:create
  • elb:loadbalancers:delete
  • elb:loadbalancers:update
  • elb:loadbalancers:show
  • elb:members:create
  • elb:members:delete
  • elb:members:list
  • elb:members:update
  • elb:pools:create
  • elb:pools:delete
  • elb:pools:update
  • elb:pools:show
  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get
  • vpcep:endpoints:create
  • vpcep:endpoints:delete
  • vpcep:endpoints:get

put /v2/{project_id}/sites/{site_id}/subnet-ids

workspace:sites:updatesubnets

  • vpc:subnets:get
  • vpc:subnets:update
  • vpc:vpcs:get

get /v2/{project_id}/tenants/lock-status

workspace:tenants:getlockstatus

-

put /v2/{project_id}/tenants/lock-status

workspace:tenants:unlock

-

post /v2/{project_id}/workspaces/enterprise-ids/check

workspace:tenants:checkenterpriseids

-

put /v2/{project_id}/workspaces/enterprise-id

workspace:tenants:updateenterpriseid

-

post /v2/{project_id}/bandwidths

workspace:bandwidth:create

-

get /v2/{project_id}/bandwidths

workspace:bandwidth:list

-

post /v2/{project_id}/bandwidths/{bandwidth_id}/update

workspace:bandwidth:update

-

delete /v2/{project_id}/bandwidths/{bandwidth_id}

workspace:bandwidth:delete

-

get /v2/{project_id}/bandwidths/{bandwidth_id}/control-list

workspace:bandwidth:getcontrolconfig

-

put /v2/{project_id}/bandwidths/{bandwidth_id}/control-list

workspace:bandwidth:updatecontrolconfig

-

post /v2/{project_id}/bandwidths/{bandwidth_id}/periodic/change/order

workspace:bandwidth:createchangeorder

-

post /v2/{project_id}/adns

workspace:bandwidth:create

-

get /v2/{project_id}/adns

workspace:bandwidth:list

-

post /v2/{project_id}/desktops-adn/batch-delete

workspace:bandwidth:delete

-

post /v2/{project_id}/snapshots/batch-create

workspace:desktops:batchcreatesnapshots

-

post /v2/{project_id}/snapshots/batch-delete

workspace:desktops:batchdeletesnapshots

-

post /v2/{project_id}/snapshots/batch-restore

workspace:desktops:batchrestoresnapshots

-

get /v2/{project_id}/snapshots

workspace:desktops:listsnapshots

-

post /v2/{project_id}/verification/desktop-name

workspace:desktops:verifydesktopname

-

get /v2/{project_id}/subnets/{subnet_id}/available-ip

workspace:networks:getavailableip

-

get /v2/{project_id}/ad/status

workspace:desktops:getadstatus

-

get /v2/{project_id}/ip-exist

workspace:networks:checkipifexist

-

post /v2/{project_id}/desktops/check-images

workspace:images:checkifexist

ims:images:list

get /v2/{project_id}/hosts/{host_id}/servers

workspace:wdh:listdesktops

-

put /v2/{project_id}/hosts

workspace:wdh:update

-

get /v2/{project_id}/terminals/binding-desktops/template

workspace:bindingpolicies:gettemplate

-

post /v2/{project_id}/terminals/binding-desktops/template/import

workspace:bindingpolicies:import

-

get /v2/{project_id}/terminals/binding-desktops/template/export

workspace:bindingpolicies:export

-

get /v2/{project_id}/desktops/statistics/run-state

workspace:statistics:getrunstate

-

get /v2/{project_id}/desktops/statistics/login-state

workspace:statistics:getloginstate

-

get /v2/{project_id}/subnets/using-subnets

workspace:networks:getusingsubnets

-

get /v2/{project_id}/ports

workspace:networks:listports

-

get /v2/{project_id}/render-desktops/{desktop_id}/remote-consoles

workspace:renderdesktops:createconsole

-

put /v2/{project_id}/render-desktops/resize

workspace:renderdesktops:resize

-

post /v2/{project_id}/exclusive-hosts/{host_id}/resize-lites

workspace:exclusivehosts:resizelites

-

get /services/v2/{project_id}/desktops/{desktop_id}

workspace:desktops:get

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

get /v2/{project_id}/desktop-monitor/{desktop_id}

workspace:desktops:getmonitor

ces:metricdata:get

get /v2/{project_id}/desktops/export

workspace:desktops:export

  • vpc:ports:get
  • vpc:ports:list
  • vpc:securitygroups:get
  • eip:publicips:list
  • nat:snatrules:list

get /v2/{project_id}/desktops/{desktop_id}/detach-info

workspace:desktops:listdetachinfo

-

get /v2/{project_id}/desktops/{desktop_id}/sysprep

workspace:desktops:getsysprepversion

-

post /v2/{project_id}/internet

workspace:networks:createnat

  • vpc:ports:delete
  • vpc:ports:get
  • vpc:networks:get
  • eip:publicips:create
  • eip:publicips:update
  • eip:publicips:delete
  • nat:snatrules:list
  • nat:snatrules:create
  • nat:natgateways:list
  • nat:natgateways:create

get /v2/{project_id}/internet

workspace:networks:listnats

  • vpc:subnets:get
  • vpc:vpcs:get
  • nat:snatrules:list
  • nat:natgateways:list

post /v2/{project_id}/quotas/check

workspace:quotas:check

-

get /v2/{project_id}/subnets

workspace:networks:listsubnets

  • vpc:subnets:list
  • vpc:subnets:get

get /v2/{project_id}/vpcs

workspace:networks:listvpcs

vpc:vpcs:list

post /v2/{project_id}/policy-groups/policy-template

workspace:policygroups:createtemplate

-

get /v1/{project_id}/policy-templates

workspace:policygroups:listtemplate

-

put /v2/{project_id}/policy-groups/policy-template/{policy_group_id}

workspace:policygroups:updatetemplate

-

get /v2/{project_id}/security-groups

workspace:networks:listsecuritygroups

-

get /v2/{project_id}/availability-zones/summary

workspace:availabilityzones:getsummary

-

get /v2/{project_id}/availability-zones/detail

workspace:availabilityzones:get

-

post /v2/{project_id}/users/desktop-users/action/import

workspace:users:importuser

-

post /v2/{project_id}/users/template-upload

workspace:users:uploadtemplate

-

put /v2/{project_id}/access-policy/{access_policy_id}

workspace:accesspolicies:update

-

post /v2/{project_id}/desktops/{desktop_id}/verify-source

workspace:desktops:verifysource

-

get /v2/{project_id}/desktops/networks

workspace:desktops:listdesktopnetworks

  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:networks:get
  • vpc:ports:get
  • vpc:securitygroups:get
  • eip:publicips:list

post /v2/{project_id}/desktops/networks/batch-change

workspace:desktops:batchchangenetwork

  • vpc:vpcs:get
  • vpc:subnets:get
  • vpc:networks:get
  • vpc:ports:get
  • vpc:ports:create
  • vpc:ports:update
  • vpc:ports:delete
  • vpc:securitygroups:get
  • eip:publicips:list
  • eip:publicips:associateinstance
  • eip:publicips:disassociateinstance

get /v2/{project_id}/workspace-jobs/{job_id}

workspace:jobs:get

-

post /v2/{project_id}/ip/import

workspace:accesspolicies:importip

-

get /v2/{project_id}/ip/template/download

workspace:accesspolicies:getipimporttemplate

-

get /v2/{project_id}/wks-edge-sites

workspace:sites:listedgesites

  • ies:edgesite:list
  • ies:edgesite:getmetricdata

post /v2/{project_id}/check-edge-site-resources

workspace:sites:checkedgesiteresources

  • ies:edgesite:list
  • ies:edgesite:getmetricdata

get /v2/{project_id}/ad-ous

workspace:ou:listadous

-

get /v2/{project_id}/ou-users

workspace:ou:listouusers

-

post /v2/{project_id}/ou-users/import

workspace:ou:importusersbyou

-

get /v1/{project_id}/app-groups

workspace:appgroup:list

-

post /v1/{project_id}/app-groups

workspace:appgroup:create

-

delete /v1/{project_id}/app-groups/{app_group_id}

workspace:appgroup:delete

-

get /v1/{project_id}/app-groups/{app_group_id}

workspace:appgroup:get

-

patch /v1/{project_id}/app-groups/{app_group_id}

workspace:appgroup:update

-

get /v1/{project_id}/app-groups/{app_group_id}/apps

workspace:app:listpublishedapp

-

post /v1/{project_id}/app-groups/{app_group_id}/apps

workspace:app:publish

-

get /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}

workspace:app:get

-

patch /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}

workspace:app:update

-

delete /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}/icon

workspace:app:deleteicon

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}/icon

workspace:app:uploadicon

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/actions/check

workspace:app:check

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/actions/disable

workspace:app:batchdisable

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/actions/enable

workspace:app:batchenable

-

post /v1/{project_id}/app-groups/{app_group_id}/apps/batch-unpublish

workspace:app:unpublish

-

get /v1/{project_id}/app-groups/{app_group_id}/publishable-app

workspace:appgroup:listpublishableapp

-

post /v1/{project_id}/app-groups/actions/batch-delete-authorization

workspace:appgroup:batchdeleteauthorization

-

post /v1/{project_id}/app-groups/actions/disassociate-app-group

workspace:appgroup:disassociate

-

get /v1/{project_id}/app-groups/actions/list-authorizations

workspace:appgroup:listauthorization

-

post /v1/{project_id}/app-groups/authorizations

workspace:appgroup:addauthorization

-

post /v1/{project_id}/app-groups/batch-delete

workspace:appgroup:batchdelete

-

post /v1/{project_id}/app-groups/rules/validate

workspace:appgroup:check

-

get /v1/{project_id}/app-server-groups

workspace:servergroup:list

-

post /v1/{project_id}/app-server-groups

workspace:servergroup:create

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

delete /v1/{project_id}/app-server-groups/{server_group_id}

workspace:servergroup:delete

-

get /v1/{project_id}/app-server-groups/{server_group_id}

workspace:servergroup:get

-

patch /v1/{project_id}/app-server-groups/{server_group_id}

workspace:servergroup:update

ims:images:list

get /v1/{project_id}/app-server-groups/{server_group_id}/state

workspace:servergroup:getserverstate

-

get /v1/{project_id}/app-server-groups/actions/list

workspace:servergroup:listdetail

-

get /v1/{project_id}/app-server-groups/resources/restrict

workspace:servergroup:getrestrict

-

post /v1/{project_id}/app-server-groups/rules/validate

workspace:servergroup:validate

-

post /v1/{project_id}/server-group/{server_group_id}/tags/create

workspace:servergroup:tagresource

-

delete /v1/{project_id}/server-group/{server_group_id}/tags/delete

workspace:servergroup:untagresource

-

get /v1/{project_id}/server-group/{server_group_id}/tags

workspace:servergroup:listtagsforresource

-

get /v1/{project_id}/server-group/tags

workspace:servergroup:listtags

-

post /v1/{project_id}/server-group/tags/batch-create

workspace:servergroup:batchcreatetags

-

delete /v1/{project_id}/server-group/tags/batch-delete

workspace:servergroup:batchdeletetags

-

get /v1/{project_id}/app-servers

workspace:server:list

-

delete /v1/{project_id}/app-servers/{server_id}

workspace:server:delete

  • iam:roles:listroles
  • vpc:ports:delete
  • vpc:ports:get

get /v1/{project_id}/app-servers/{server_id}

workspace:server:get

-

patch /v1/{project_id}/app-servers/{server_id}

workspace:server:update

-

post /v1/{project_id}/app-servers/{server_id}/actions/change-image

workspace:server:changeimage

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

post /v1/{project_id}/app-servers/{server_id}/actions/reinstall

workspace:server:reinstall

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

get /v1/{project_id}/app-servers/{server_id}/actions/vnc

workspace:server:getvncurl

-

get /v1/{project_id}/app-servers/access-agent/upgrade-record

workspace:accessagent:list

-

patch /v1/{project_id}/app-servers/access-agent/actions/upgrade

workspace:accessagent:batchupgrade

-

get /v1/{project_id}/app-servers/access-agent/latest-version

workspace:accessagent:listlatestversion

-

get /v1/{project_id}/app-servers/access-agent/list

workspace:server:listaccessagentdetails

-

get /v1/{project_id}/app-servers/access-agent/upgrade-flag

workspace:accessagent:getupgradeflag

-

patch /v1/{project_id}/app-servers/access-agent/upgrade-flag

workspace:accessagent:updateupgradeflag

-

get /v1/{project_id}/app-servers/access-agent/upgrade-record

workspace:accessagent:listupgraderecords

-

post /v1/{project_id}/app-servers/actions/batch-delete

workspace:server:batchdelete

  • iam:roles:listroles
  • vpc:ports:delete
  • vpc:ports:get

patch /v1/{project_id}/app-servers/actions/batch-maint

workspace:server:batchchangemaintainmode

-

patch /v1/{project_id}/app-servers/actions/batch-reboot

workspace:server:batchreboot

-

patch /v1/{project_id}/app-servers/actions/batch-rejoin-domain

workspace:server:batchrejoindomain

-

patch /v1/{project_id}/app-servers/actions/batch-start

workspace:server:batchstart

-

patch /v1/{project_id}/app-servers/actions/batch-stop

workspace:server:batchstop

-

patch /v1/{project_id}/app-servers/actions/batch-update-tsvi

workspace:server:batchupdatetsvi

  • vpc:subnets:get
  • vpc:ports:update

post /v1/{project_id}/app-servers/actions/create

workspace:server:create

  • ims:images:list
  • ims:images:updatememberstatus
  • ims:images:share
  • ims:images:get
  • vpc:securitygroups:get
  • vpc:securitygrouprules:get
  • vpc:networks:get
  • vpc:subnets:get
  • vpc:ports:create
  • vpc:ports:get
  • vpc:ports:delete
  • vpc:vpcs:get
  • dss:pools:list

patch /v1/{project_id}/app-servers/hosts/batch-migrate

workspace:server:batchmigratehosts

-

get /v1/{project_id}/app-servers/metric-data/{server_id}

workspace:server:getmetricdata

-

get /v1/{project_id}/app-server-sub-jobs

workspace:jobs:listsubjobs

-

post /v1/{project_id}/app-server-sub-jobs/actions/batch-delete

workspace:jobs:batchdeletesubjobs

-

get /v1/{project_id}/app-server-sub-jobs/actions/count

workspace:jobs:countsubjobs

-

post /v1/{project_id}/app-warehouse/action/authorize

workspace:appwarehouse:authorizeobs

  • obs:bucket:getbucketacl
  • obs:object:putobject
  • obs:object:deleteobject

post /v1/{project_id}/app-warehouse/actions/batch-delete

workspace:appwarehouse:batchdeleteapp

  • obs:bucket:headbucket
  • obs:object:deleteobject

get /v1/{project_id}/app-warehouse/apps

workspace:appwarehouse:listwarehouseapps

-

post /v1/{project_id}/app-warehouse/apps

workspace:appwarehouse:createapp

-

delete /v1/{project_id}/app-warehouse/apps/{id}

workspace:appwarehouse:deleteapp

  • obs:bucket:headbucket
  • obs:object:deleteobject

post /v1/{project_id}/app-warehouse/apps/icon

workspace:appwarehouse:uploadappicon

obs:object:putobject

post /v1/{project_id}/app-warehouse/bucket-and-acl/create

workspace:appwarehouse:createbucketoracl

  • obs:bucket:getbucketacl
  • obs:bucket:headbucket
  • obs:bucket:putbucketacl
  • obs:bucket:putreplicationconfiguration
  • obs:bucket:createbucket
  • obs:bucket:putbucketcors

get /v1/{project_id}/check/quota

workspace:quotas:get

-

get /v1/{project_id}/image-server-jobs

workspace:images:listimagejobs

-

get /v1/{project_id}/image-server-jobs/{job_id}

workspace:images:getimagejob

-

get /v1/{project_id}/image-servers

workspace:imageserver:list

-

post /v1/{project_id}/image-servers

workspace:imageserver:create

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

get /v1/{project_id}/image-servers/{server_id}

workspace:imageserver:get

-

patch /v1/{project_id}/image-servers/{server_id}

workspace:imageserver:update

-

post /v1/{project_id}/image-servers/{server_id}/actions/attach-app

workspace:imageserver:attachapp

-

get /v1/{project_id}/image-servers/{server_id}/actions/latest-attached-app

workspace:imageserver:listlatestattachedapp

-

post /v1/{project_id}/image-servers/{server_id}/actions/recreate-image

workspace:imageserver:recreate

  • vpc:ports:get
  • vpc:subnets:get
  • ims:quotas:get
  • ims:images:get
  • ims:images:list
  • ims:images:settags
  • ims:images:setordeletetags
  • ims:images:updatememberstatus
  • ims:images:copyinregion
  • ims:serverimages:create

patch /v1/{project_id}/image-servers/actions/batch-delete

workspace:imageserver:batchdelete

-

get /v1/{project_id}/image-server-sub-jobs

workspace:imageserver:listimagesubjobs

-

patch /v1/{project_id}/image-server-sub-jobs/actions/batch-delete

workspace:imageserver:batchdeleteimagesubjobs

-

get /v1/{project_id}/image-server-sub-jobs/actions/count

workspace:imageserver:countimagesubjobs

-

get /v2/{project_id}/job/{job_id}

workspace:jobs:get

-

get /v1/{project_id}/mails

workspace:appgroup:listmailrecord

-

post /v1/{project_id}/mails/actions/send

workspace:appgroup:resendmail

-

post /v1/{project_id}/mails/actions/send

workspace:appgroup:resendmail

-

get /v1/{project_id}/persistent-storages

workspace:storage:listpersistentstorage

-

post /v1/{project_id}/persistent-storages

workspace:storage:createpersistentstorage

  • obs:bucket:headbucket
  • obs:bucket:putbucketpolicy
  • obs:bucket:putbucketacl
  • obs:bucket:putbucketcors

delete /v1/{project_id}/persistent-storages/{storage_id}

workspace:storage:deletepersistentstorage

  • obs:object:getobject
  • obs:object:deleteobject

post /v1/{project_id}/persistent-storages/{storage_id}/actions/assign-folder

workspace:storage:updateuserfolderassignment

-

post /v1/{project_id}/persistent-storages/{storage_id}/actions/assign-share-folder

workspace:storage:updatesharefolderassignment

-

post /v1/{project_id}/persistent-storages/{storage_id}/actions/create-share-folder

workspace:storage:createsharefolder

  • obs:object:getobject
  • obs:object:putobject

post /v1/{project_id}/persistent-storages/{storage_id}/actions/delete-storage-claim

workspace:storage:deletestorageclaim

obs:object:deleteobject

post /v1/{project_id}/persistent-storages/{storage_id}/actions/delete-user-attachment

workspace:storage:deleteuserstorageattachment

obs:object:deleteobject

post /v1/{project_id}/persistent-storages/actions/batch-delete

workspace:storage:batchdeletepersistentstorage

-

get /v1/{project_id}/persistent-storages/actions/list-attachments

workspace:storage:liststorageassignment

-

get /v1/{project_id}/persistent-storages/actions/list-share-folders

workspace:storage:listsharefolder

-

get /v1/{project_id}/policy-groups/{policy_group_id}

workspace:policygroups:get

-

get /v2/{project_id}/policy-groups/{policy_group_id}/policies

workspace:policygroups:listpolicies

-

get /v1/{project_id}/policy-groups/{policy_group_id}/target

workspace:policygroups:listtargets

-

get /v2/{project_id}/policy-groups/detail

workspace:policygroups:listdetail

-

get /v1/{project_id}/policy-templates

workspace:policygroups:listtemplate

-

delete /v1/{project_id}/policy-templates/{policy_template_id}

workspace:policygroups:deletetemplate

-

patch /v1/{project_id}/policy-templates/{policy_template_id}

workspace:policygroups:updatetemplate

-

get /v1/{project_id}/privacy-statement

workspace:privacystatements:get

-

delete /v1/{project_id}/scaling-policy

workspace:scalingpolicy:delete

-

get /v1/{project_id}/scaling-policy

workspace:scalingpolicy:list

-

put /v1/{project_id}/scaling-policy

workspace:scalingpolicy:create

-

get /v2/{project_id}/scheduled-tasks/{task_id}/records

workspace:scheduledtasks:list

-

post /v2/{project_id}/scheduled-tasks

workspace:scheduledtasks:create

-

get /v2/{project_id}/scheduled-tasks/{task_id}/records/{record_id}

workspace:scheduledtasks:getrecord

-

delete /v2/{project_id}/scheduled-tasks/{task_id}

workspace:scheduledtasks:delete

-

post /v2/{project_id}/scheduled-tasks/future-executions

workspace:scheduledtasks:get

-

put /v2/{project_id}/scheduled-tasks/{task_id}

workspace:scheduledtasks:update

-

get /v2/{project_id}/scheduled-tasks/{task_id}/records

workspace:scheduledtasks:listrecords

-

post /v2/{project_id}/scheduled-tasks/batch-delete

workspace:scheduledtasks:batchdelete

-

post /v1/{project_id}/session/app-connection

workspace:session:listappconnection

-

post /v1/{project_id}/session/logoff

workspace:session:logoffusersession

-

post /v1/{project_id}/session/user-connection

workspace:session:listuserconnection

-

get /v1/{project_id}/session/user-session-info

workspace:session:listsessionbyusername

-

put /v1/{project_id}/storages-policy/actions/create-statements

workspace:storagepolicy:create

-

get /v1/{project_id}/storages-policy/actions/list-statements

workspace:storagepolicy:list

-

get /v2/{project_id}/users

workspace:users:list

-

get /v1/persistent-storages/actions/list-sfs-storages

workspace:storage:listsfs3storage

  • obs:bucket:listbucket
  • obs:bucket:getbucketstorage
  • obs:bucket:listallmybuckets

get /v1/{project_id}/availability-zone

workspace:baseresource:list

ecs:availabilityzones:list

post /v1/{project_id}/bundles/batch-query-config-info

workspace:tenants:listconfiginfo

-

get /v1/{project_id}/product

workspace:baseresource:list

-

get /v1/{project_id}/product

workspace:baseresource:list

-

post /v1/{project_id}/tenant/action/active

workspace:tenants:active

-

get /v1/{project_id}/tenant/profile

workspace:tenants:listtenantprofile

-

get /v1/{project_id}/volume-type

workspace:baseresource:list

-

get /v1/{project_id}/app-servers/server-metric-data/{server_id}

workspace:server:listservermetricdata

-

get /v1/{project_id}/session/list-sessions

workspace:session:listsessions

-

patch /v1/{project_id}/app-warehouse/apps/{id}

workspace:appwarehouse:updateapp

-

post /v1/{project_id}/app-servers/actions/batch-change-image

workspace:server:batchchangeimage

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

post /v1/{project_id}/app-servers/actions/batch-reinstall

workspace:server:batchreinstall

  • ims:images:list
  • vpc:ports:get
  • vpc:subnets:get

资源类型(resource)

资源类型(resource)表示身份策略所作用的资源。表3中的某些操作指定了可以在该操作指定的资源类型,则必须在具有该操作的身份策略语句中指定该资源的urn,身份策略仅作用于此资源;如未指定,resource默认为“*”,则身份策略将应用到所有资源。您也可以在身份策略中设置条件,从而指定资源类型。

云桌面定义了以下可以在身份策略的resource元素中使用的资源类型。

表3 云桌面支持的资源类型

资源类型

描述

urn

desktop

桌面

workspace:::desktop:

desktoppool

桌面池

workspace:::desktoppool:

wdh

云办公主机

workspace:::wdh:

exclusivehost

专享主机

workspace:::exclusivehost:

user

用户

workspace:::user:

usergroup

用户组

workspace:::usergroup:

policygroup

策略组

workspace:::policygroup:

script

脚本

workspace:::script:

scheduledtask

定时任务

workspace:::scheduledtask:

server

应用服务器

workspace:::server:

servergroup

应用服务器组

workspace:::servergroup:

app

应用

workspace:::app:

appgroup

应用组

workspace:::appgroup:

imageserver

应用镜像服务器

workspace:::imageserver:

storage

存储

workspace:::storage:

条件(condition)

条件键(condition)是身份策略生效的特定条件,包括条件键运算符

  • 条件键表示身份策略语句的condition元素中的键值。根据适用范围,分为全局级条件键和服务级条件键。
    • 全局级条件键(前缀为g:)适用于所有操作,在鉴权过程中,云服务不需要提供用户身份信息,系统将自动获取并鉴权。详情请参见:全局条件键
    • 服务级条件键(前缀通常为服务缩写,如workspace:)仅适用于对应服务的操作,详情请参见表4
    • 单值/多值表示api调用时请求中与条件关联的值数。单值条件键在api调用时的请求中最多包含一个值,多值条件键在api调用时请求可以包含多个值。例如:g:sourcevpce是单值条件键,表示仅允许通过某个vpc终端节点发起请求访问某资源,一个请求最多包含一个vpc终端节点id值。g:tagkeys是多值条件键,表示请求中携带的所有标签的key组成的列表,当用户在调用api请求时传入标签可以传入多个值。
  • 运算符与条件键、条件值一起构成完整的条件判断语句,当请求信息满足该条件时,身份策略才能生效。支持的运算符请参见:运算符

workspace定义了以下可以在身份策略的condition元素中使用的条件键,您可以使用这些条件键进一步细化策略语句应用的条件。

表4 云桌面支持的服务级条件键

服务级条件键

类型

单值/多值

说明

workspace:accessmode

string

多值

根据请求参数中指定的接入方式过滤访问,有效的条件值应为internet、dedicated、both。

相关文档

网站地图