训练作业权限
场景级授权示例
IAM新版控制台:提供基于IAM5.0版本的系统身份策略。用户可以在IAM服务新版控制台创建新的自定义策略,将创建的自定义策略授权给用户所在的用户组。由于部分模块未完全对接IAM5.0,目前还需在IAM服务旧版控制台创建新的自定义策略,配置以下IAM3.0的策略,将创建的自定义策略授权给用户所在的用户组。详情可参照下表配置。
| 策略名称 | 描述 | 类型 | 还需配置的IAM3.0的策略 |
|---|---|---|---|
| ModelArtsTrainReadOnlyPolicy | ModelArts服务"模型训练"的只读策略 | 系统身份策略 | - |
| ModelArtsTrainAllPolicy | ModelArts服务"模型训练"的所有策略(读写) | 系统身份策略 | {
"Version":"1.1",
"Statement":[
{
"Action":[
"modelarts:trainJob:create",
"modelarts:trainJob:get",
"modelarts:trainJob:listAll",
],
"Effect":"Allow"
}
]
}' |
接口级授权
如果您需要使用管理控制台模型训练的相关功能并进行权限管理,可参照如下表格进行操作。
| 权限 | 对应API接口 | 授权项 | 依赖的授权项 | IAM项目 | 企业项目 |
|---|---|---|---|---|---|
| 创建训练作业 | POST /v2/{project_id}/training-jobs | modelarts:trainJob:create | swr:repository:listTags swr:repository:getRepository swr:repository:listRepositories swr:system:createLoginSecret swr:instance:createTempCredential smn:topic:publish smn:topic:list obs:object:GetObjectAcl obs:object:PutObjectAcl obs:object:PutObject obs:object:GetObject obs:object:DeleteObject obs:object:ModifyObjectMetaData | √ | √ |
| 更新训练作业 | PUT /v2/{project_id}/training-jobs/{training_job_id} | modelarts:trainJob:update | - | √ | √ |
| 删除训练作业 | DELETE /v2/{project_id}/training-jobs/{training_job_id} | modelarts:trainJob:delete | - | √ | √ |
| 查询训练作业详情 | GET /v2/{project_id}/training-jobs/{training_job_id} | modelarts:trainJob:get | - | √ | √ |
| 查询训练作业列表 | POST /v2/{project_id}/training-job-searches | modelarts:trainJob:list | - | √ | √ |
| 训练作业日志预览 | GET /v2/{project_id}/training-jobs/{training_job_id}/tasks/{task_id}/logs/preview | - | - | √ | √ |
| 训练作业日志下载 | GET /v2/{project_id}/training-jobs/{training_job_id}/tasks/{task_id}/logs/url | modelarts:trainJob:logExport | - | √ | √ |
| 创建算法 | POST /v2/{project_id}/algorithms | modelarts:aiAlgorithm:create | swr:repo:listRepos swr:repo:getRepo swr:repo:listRepoTags swr:repo:getRepoTag obs:bucket:listBucket obs:object:getObject | √ | √ |
| 更新算法 | PUT /v2/{project_id}/algorithms/{algorithm_id} | modelarts:aiAlgorithm:update | - | √ | √ |
| 删除算法 | DELETE /v2/{project_id}/algorithms/{algorithm_id} | modelarts:aiAlgorithm:delete | - | √ | √ |
| 查询算法列表 | GET /v2/{project_id}/algorithms | modelarts:aiAlgorithm:list | - | √ | √ |
| 查询算法详情 | GET /v2/{project_id}/algorithms/{algorithm_id} | modelarts:aiAlgorithm:get | - | √ | √ |
| 删除作业tags | DELETE /v2/{project_id}/modelarts-trainJob/{training_job_id}/tags/delete | modelarts:trainJob:update | - | √ | √ |
| 删除训练实验 | DELETE /v2/{project_id}/training-experiments/{experiment_id} | modelarts:trainJob:delete | - | √ | √ |
| 删除工作流定时调度信息 | DELETE /v2/{project_id}/workflows/{workflow_id}/schedules/{schedule_id} | modelarts:workflow:delete | obs:object:getObject | √ | √ |
| 查询训练后的各项评估结果 | GET /v1/{project_id}/model-evaluation/graph | modelarts:trainJob:get | - | √ | √ |
| 校验算法名称 | GET /v2/{project_id}/algorithm-names | modelarts:aiAlgorithm:create | - | √ | √ |
| 查询项目tags列表 | GET /v2/{project_id}/modelarts-trainJob/tags | modelarts:tag:list | - | √ | √ |
| 查询训练作业tags列表 | GET /v2/{project_id}/modelarts-trainJob/{training_job_id}/tags | modelarts:tag:list | - | √ | √ |
| 获取支持的超参搜索算法 | GET /v2/{project_id}/search-algorithms | modelarts:aiAlgorithm:list | - | √ | √ |
| 获取事件类型列表 | GET /v2/{project_id}/training-event-categories | modelarts:trainJob:list | - | √ | √ |
| 校验实验名称 | GET /v2/{project_id}/training-experiment-names | modelarts:trainJob:create | - | √ | √ |
| 查询实验列表 | GET /v2/{project_id}/training-experiments | modelarts:trainJob:list | - | √ | √ |
| 查询实验详情 | GET /v2/{project_id}/training-experiments/{experiment_id} | modelarts:trainJob:get | - | √ | √ |
| 获取训练作业支持的AI预置框架 | GET /v2/{project_id}/training-job-engines | modelarts:trainJob:get | - | √ | √ |
| 获取训练作业支持的公共规格 | GET /v2/{project_id}/training-job-flavors | modelarts:trainJob:get | - | √ | √ |
| 免费规格排队情况查询 | GET /v2/{project_id}/training-job-flavors/{flavor_id}/queue | modelarts:trainJob:get | - | √ | √ |
| 校验训练作业名称 | GET /v2/{project_id}/training-job-names | modelarts:trainJob:create | - | √ | √ |
| 查询训练作业总览情况 | GET /v2/{project_id}/training-job-overviews | modelarts:trainJob:list | - | √ | √ |
| 查询训练作业指定任务的日志 | GET /v2/{project_id}/training-jobs/{job_id}/logs/{task_id} | modelarts:trainJob:get | - | √ | √ |
| 查询超参搜索某个trial的结果 | GET /v2/{project_id}/training-jobs/{training_job_id}/autosearch-trials/{trial_id} | modelarts:trainJob:get | obs:bucket:listBucket obs:object:getObject | √ | √ |
| 查询训练作业事件列表 | GET /v2/{project_id}/training-jobs/{training_job_id}/events | modelarts:trainJob:get | - | √ | √ |
| cloudshell可接入状态查询 | GET /v2/{project_id}/training-jobs/{training_job_id}/exec/status | modelarts:trainJob:exec modelarts:trainJob:listAll | - | √ | √ |
| 获取作业失败分析结果 | GET /v2/{project_id}/training-jobs/{training_job_id}/failure-analysis | modelarts:trainJob:get | - | √ | √ |
| 查询训练作业指定任务的运行指标 | GET /v2/{project_id}/training-jobs/{training_job_id}/metrics/{task_id} | modelarts:trainJob:get | - | √ | √ |
| 查询训练作业当前排队位置 | GET /v2/{project_id}/training-jobs/{training_job_id}/rank | modelarts:trainJob:get | - | √ | √ |
| 查询路由规划的rank映射关系 | GET /v2/{project_id}/training-jobs/{training_job_id}/route_plan | modelarts:trainJob:get | - | √ | √ |
| 查看预览日志接口 | GET /v2/{project_id}/training-jobs/{training_job_id}/tasks/{task_id}/logs/preview | modelarts:trainJob:get | obs:bucket:headBucket obs:object:getObject | √ | √ |
| 生成日志文件url | GET /v2/{project_id}/training-jobs/{training_job_id}/tasks/{task_id}/logs/url | modelarts:trainJob:logExport | obs:bucket:headBucket obs:object:modifyObjectMetadata | √ | √ |
| 查询用户训练配额信息 | GET /v2/{project_id}/training-quotas | modelarts:trainJob:get | - | √ | √ |
| 查询大屏活跃作业 | GET /v2/{project_id}/training-summary/active-training-jobs | modelarts:trainJob:list | - | √ | √ |
| 查询大屏规格 | GET /v2/{project_id}/training-summary/flavors | modelarts:trainJob:list | - | √ | √ |
| 查询自动学习模板列表 | GET /v2/{project_id}/workflow-templates | modelarts:workflow:list | - | √ | √ |
| 查询自动学习模板信息 | GET /v2/{project_id}/workflow-templates/{template_id} | modelarts:workflow:list | - | √ | √ |
| 获取Workflow工作流节点度量信息 | GET /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}/step-executions/{step_execution_id}/metrics | modelarts:workflow:get | - | √ | √ |
| 查询工作流定时调度列表 | GET /v2/{project_id}/workflows/{workflow_id}/schedules | modelarts:workflow:list | - | √ | √ |
| 查询工作流定时调度详情 | GET /v2/{project_id}/workflows/{workflow_id}/schedules/{schedule_id} | modelarts:workflow:get | - | √ | √ |
| 创建发布算法资产 | POST /v2/{project_id}/gallery-algorithm-publication | modelarts:aiAlgorithm:create | - | √ | √ |
| 查询算法资产 | POST /v2/{project_id}/gallery-algorithm-query | modelarts:aiAlgorithm:create | - | √ | √ |
| 查询作业总数 | POST /v2/{project_id}/modelarts-trainJob/resource-instances/count | modelarts:tag:list | - | √ | √ |
| 查询作业列表 | POST /v2/{project_id}/modelarts-trainJob/resource-instances/filter | modelarts:tag:list | - | √ | √ |
| 创建训练作业标签 | POST /v2/{project_id}/modelarts-trainJob/{training_job_id}/tags/create | modelarts:trainJob:update | - | √ | √ |
| 创建训练实验 | POST /v2/{project_id}/training-experiments | modelarts:trainJob:create | - | √ | √ |
| 查询训练数据集大小 | POST /v2/{project_id}/training-job-inputs/getsize | modelarts:trainJob:get | obs:bucket:listBucket | √ | √ |
| 查询作业位置列表 | POST /v2/{project_id}/training-job-ranks | modelarts:trainJob:list | - | √ | √ |
| 批量删除训练作业 | POST /v2/{project_id}/training-jobs/batch-delete | modelarts:trainJob:delete | - | √ | √ |
| 批量查询训练作业 | POST /v2/{project_id}/training-jobs/batch-query | modelarts:trainJob:list | - | √ | √ |
| 终止训练作业 | POST /v2/{project_id}/training-jobs/{training_job_id}/actions | modelarts:trainJob:create modelarts:trainJob:listAll | smn:topic:publish | √ | √ |
| 提前停止自动搜索试验 | POST /v2/{project_id}/training-jobs/{training_job_id}/autosearch-trial-earlystop/{trial_id} | modelarts:trainJob:get | obs:object:putObject | √ | √ |
| 生成失败分析结果反馈 | POST /v2/{project_id}/training-jobs/{training_job_id}/failure-analysis/feedback | modelarts:trainJob:get | - | √ | √ |
| 创建训练作业镜像保存任务 | POST /v2/{project_id}/training-jobs/{training_job_id}/tasks/{task_id}/save-image-job | modelarts:trainJob:create | smn:topic:publish | √ | √ |
| 查询大屏作业 | POST /v2/{project_id}/training-summary/training-jobs | modelarts:trainJob:list | - | √ | √ |
| 创建工作流定时调度 | POST /v2/{project_id}/workflows/{workflow_id}/schedules | modelarts:workflow:update | - | √ | √ |
| 更新算法的描述 | PUT /v2/{project_id}/algorithms/{algorithm_id}/descriptions | modelarts:aiAlgorithm:update | swr:repo:listRepos swr:repo:getRepo swr:repo:listRepoTags swr:repo:getRepoTag | √ | √ |
| 更新训练实验 | PUT /v2/{project_id}/training-experiments/{experiment_id} | modelarts:trainJob:update | - | √ | √ |
| 更新训练作业描述 | PUT /v2/{project_id}/training-jobs/{training_job_id} | modelarts:trainJob:update modelarts:trainJob:setHighPriority | - | √ | √ |
| 更新训练配额 | PUT /v2/{project_id}/training-quotas | modelarts:trainJob:update | - | √ | √ |
| 更新工作流定时调度信息 | PUT /v2/{project_id}/workflows/{workflow_id}/schedules/{schedule_id} | modelarts:workflow:update | - | √ | √ |
| 业务面上报通知作业事件 | POST /v2/{project_id}/training-jobs/{training_job_id}/tasks/{task_id}/reports/{report_type} | modelarts:trainJob:taskReport | - | √ | √ |
