
# 授权管理权限
#### 接口级授权
表1服务管理细化权限说明 
| 权限                                                                 | 对应API接口                                                                                                        | 授权项                            | 依赖的授权项                                                                                                                                                                                                                                                                                                              | IAM项目 | 企业项目 |
|:---|:---|:---|:---|:---|:---|
| 新增授权                                                               | POST /v1/{project_id}/atelier/authorizations                                                                   | modelarts:authorization:create | iam:agencies:listAgencies iam:groups:list iam:users:list iam:agencies:getAgency                                                                                         | √     | √    |
| 删除授权                                                               | DELETE /v1/{project_id}/atelier/authorizations                                                                 | modelarts:authorization:delete | 无                                                                                                                                                                                                                                                                                                                   | √     | √    |
| 查询授权                                                               | GET /v1/{project_id}/atelier/authorizations                                                                    | modelarts:authorization:list   | 无                                                                                                                                                                                                                                                                                                                   | √     | √    |
| 创建委托                                                               | POST /v1/{project_id}/atelier/agency                                                                           | 无                              | iam:quotas:list iam:agencies:createAgency iam:roles:listRoles iam:permissions:grantRoleToAgency iam:roles:createRole | √     | √    |
| 查询委托                                                               | GET /v1/{project_id}/atelier/agency                                                                            | 无                              | iam:agencies:listAgencies                                                                                                                                                                                                                                                                                           | √     | √    |
| 查询委托对应的权限列表  | GET /v1/{project_id}/atelier/agency/{agency_name}/grants  | 无                              | iam:agencies:listAgencies                                                                                                                                                                                                                                                                                           | √     | √    |
| 查询委托对应的权限列表  | GET /v1/{project_id}/atelier/agency/{agency_name}/grants  | 无                              | iam:permissions:listRolesForAgencyOnDomain iam:permissions:listRolesForAgencyOnProject iam:permissions:listRolesForAgency                                                                                               | √     | √    |
| 查询委托对应的权限列表                                                        | GET /v2/{project_id}/atelier/agency/{agency_id}/grants                                                         | 无                              | iam:permissions:listRolesForAgencyOnDomain iam:permissions:listRolesForAgencyOnProject iam:permissions:listRolesForAgency                                                                                              | √     | √    |
| 更新委托对应的权限列表                                                        | POST /v1/{project_id}/atelier/agency/{agency_name}/grants                                                      | 无                              | iam:quotas:list iam:roles:listRoles iam:roles:createRole iam:permissions:grantRoleToAgency                                                                                   | √     | √    |
| 查询服务配置的默认委托权限列表                                                    | GET /v1/{project_id}/atelier/agency/default-grants                                                             | 无                              | iam:permissions:grantRoleToAgency                                                                                                                                                                                                                                                                                   | √     | √    |
| 查询委托配额                                                             | GET /v1/{project_id}/atelier/agency/quotas                                                                     | 无                              | iam:quotas:list                                                                                                                                                                                                                                                                                                     | √     | √    |
| 删除委托                                                               | DELETE /v1/{project_id}/atelier/agency/{agency_id}                                                             | 无                              | iam:agencies:deleteAgency                                                                                                                                                                                                                                                                                           | √     | √    |
| 根据委托名称查询委托id                                                       | GET /v1/{project_id}/atelier/agency/info                                                                       | 无                              | iam:agencies:listAgencies                                                                                                                                                                                                                                                                                           | √     | √    |
| 查询users                                                            | GET /v1/{project_id}/atelier/users                                                                             | 无                              | iam:users:list                                                                                                                                                                                                                                                                                                      | √     | √    |
   
