文档首页/ 魔坊（ModelArts）模型训推平台/ API参考/ 权限策略和授权项/ 专属资源池/轻量算力集群权限
更新时间：2026-10-12 GMT+08:00
查看PDF
分享

专属资源池/轻量算力集群权限

场景级授权示例

IAM新版控制台：提供基于IAM5.0版本的系统身份策略。用户可以在IAM服务新版控制台创建新的自定义策略，将创建的自定义策略授权给用户所在的用户组。由于部分模块未完全对接IAM5.0，目前还需在IAM服务旧版控制台创建新的自定义策略，配置以下IAM3.0的策略，将创建的自定义策略授权给用户所在的用户组。详情可参照下表配置。
表1 IAM新版控制台专属资源池/轻量算力集群操作场景的授权

策略名称

描述

类型

还需配置的IAM3.0的策略

ModelArtsResourceManagementReadOnlyPolicy

ModelArts服务"资源管理"的只读策略

系统身份策略

-

ModelArtsResourceManagementAllPolicy

ModelArts服务"资源管理"的所有策略(读写)

系统身份策略

-

接口级授权说明

表2

权限

对应API接口

授权项（IAM5.0）

依赖的授权项

IAM项目

企业项目

删除网络资源

DELETE /v1/{project_id}/networks/{network_name}

modelarts:network:delete

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

批量删除资源池标签

DELETE /v1/{project_id}/pools/{pool_name}/tags/delete

modelarts::unTagResource

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

删除资源池

DELETE /v2/{project_id}/pools/{pool_name}

modelarts:pool:delete

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

删除节点池

DELETE /v2/{project_id}/pools/{pool_name}/nodepools/{nodepool_name}

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询网络资源列表

GET /v1/{project_id}/networks

modelarts:network:list

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询网络资源

GET /v1/{project_id}/networks/{network_name}

modelarts:network:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

vpc:subnets:list

√

√

查询网络可用的IP

GET /v1/{project_id}/networks/{network_name}/network-ip-availabilities

modelarts:network:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询订单详情

GET /v1/{project_id}/orders/{order_name}

modelarts:pool:list

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询插件模板

GET /v1/{project_id}/plugintemplates/{plugintemplate_name}

   

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源池的所有标签

GET /v1/{project_id}/pools/tags

modelarts:tag:list

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源池上的标签

GET /v1/{project_id}/pools/{pool_name}/tags

modelarts:tag:list

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询权限信息

GET /v1/{project_id}/privileges/{name}

   

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询计划事件列表

GET /v1/{project_id}/scheduled-events

modelarts:pool:list

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源实时利用率

GET /v2/{project_id}/metrics/runtime/pools

modelarts:pool:list

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源池列表

GET /v2/{project_id}/pools

modelarts:pool:list

modelarts:workspace:list

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源池

GET /v2/{project_id}/pools/{pool_name}

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

kps:domainKeypairs:get

vpc:subnets:get

√

√

资源池监控

GET /v2/{project_id}/pools/{pool_name}/monitor

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

aom:metric:list

modelarts:authorization:list

√

√

查询资源池节点自定义配置

GET /v2/{project_id}/pools/{pool_name}/node-config

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源池节点自定义配置模板

GET /v2/{project_id}/pools/{pool_name}/node-config-template

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询节点池列表

GET /v2/{project_id}/pools/{pool_name}/nodepools

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询指定节点池详情

GET /v2/{project_id}/pools/{pool_name}/nodepools/{nodepool_name}

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询节点池的节点列表

GET /v2/{project_id}/pools/{pool_name}/nodepools/{nodepool_name}/nodes

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源池节点列表

GET /v2/{project_id}/pools/{pool_name}/nodes

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源池单个节点详情

GET /v2/{project_id}/pools/{pool_name}/nodes/{node_name}

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询插件列表

GET /v2/{project_id}/pools/{pool_name}/plugins

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询资源池作业列表

GET /v2/{project_id}/pools/{pool_name}/workloads

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

资源池统计

GET /v2/{project_id}/statistics/pools

modelarts:pool:list

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

查询专属资源池作业统计信息

GET /v2/{project_id}/statistics/pools/{pool_name}/workloads

modelarts:pool:get

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

更新网络资源

PATCH /v1/{project_id}/networks/{network_name}

modelarts:network:update

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

更新资源池

PATCH /v2/{project_id}/pools/{pool_name}

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

更新节点池

PATCH /v2/{project_id}/pools/{pool_name}/nodepools/{nodepool_name}

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

创建网络资源

POST /v1/{project_id}/networks

modelarts:network:create

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

swr:instance:get(企业版)

swr:instance:update(企业版)

√

√

批量创建资源池标签

POST /v1/{project_id}/pools/{pool_name}/tags/create

modelarts::tagResource

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

计划事件授权

POST /v1/{project_id}/scheduled-events/{event_id}/accept

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

ecs:instanceScheduledEvents:accept

√

√

创建资源池

POST /v2/{project_id}/pools

modelarts:pool:create

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

创建节点池

POST /v2/{project_id}/pools/{pool_name}/nodepools

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

批量为节点绑定逻辑子池

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-bind

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

批量删除节点

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-delete

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

批量对节点功能上锁

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-lock

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

批量迁移节点

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-migrate

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

批量重启节点

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-reboot

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

重置节点

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-reset

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

节点规格变更

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-resize

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

批量对节点功能解锁

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-unlock

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

批量更新节点

POST /v2/{project_id}/pools/{pool_name}/nodes/batch-update

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

创建插件 - CreatePoolPlugin

POST /v2/{project_id}/pools/{pool_name}/plugins

modelarts:pool:updatePool

modelarts:workspace:get

modelarts:workspace:getAuthMode

modelarts:authorization:list

√

√

相关文档