文档首页/ 魔坊（ModelArts）模型训推平台/ API参考/ 权限策略和授权项/ 轻量算力节点权限
更新时间：2026-07-01 GMT+08:00
查看PDF
分享

轻量算力节点权限

场景级授权示例

  • IAM新版控制台：提供基于IAM5.0版本的系统身份策略。用户可以在IAM服务新版控制台创建新的自定义策略，将创建的自定义策略授权给用户所在的用户组。由于部分模块未完全对接IAM5.0，目前还需在IAM服务旧版控制台创建新的自定义策略，配置以下IAM3.0的策略，将创建的自定义策略授权给用户所在的用户组。详情可参照下表配置。
    表1 IAM新版控制台轻量算力节点操作场景的授权

    策略名称

    描述

    类型

    还需配置的IAM3.0的策略

    ModelArtsResourceManagementReadOnlyPolicy

    ModelArts服务"资源管理"的只读策略

    系统身份策略

    		 
    {
    "Version": "1.1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "aom:uniagentAgent:list",
                "CSBS Administrator"
            ]
        }
    ]
}

    ModelArtsResourceManagementAllPolicy

    ModelArts服务"资源管理"的所有策略(读写)

    系统身份策略

    		 
    {
    "Version": "1.1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "aom:uniagentAgent:list",
                "CSBS Administrator"
            ]
        }
    ]
}
  • IAM旧版控制台，不提供基于IAM3.0版本的系统身份策略，用户需要在IAM服务旧版控制台自定义身份策略来进行场景级授权配置。详情参考下表进行配置。
    表2 IAM旧版控制台授权管理操作场景的授权

    操作场景

    示例

    读写（IAM3.0）

    		 
    {
      "Version":"1.1",
      "Statement":[
          {
              "Action":[
				"modelarts:devserver:deleteHyperinstance",
				"modelarts:devserver:deleteJobs",
				"modelarts:devserver:delete",
				"modelarts:devserver:detachVolume",
				"modelarts:devserver:listByUser",
				"modelarts:devserver:list",
				"modelarts:devserver:listHyperinstanceByUser",
				"modelarts:devserver:listHyperinstance",
				"modelarts:devserver:getHyperinstance",
				"modelarts:devserver:getHyperinstanceOperation",
				"modelarts:devserver:queryHyperinstanceTags",
				"modelarts:devserver:listImages",
				"modelarts:devserver:getImage",
				"modelarts:devserver:getTopologies",
				"modelarts:devserver:listJobs",
				"modelarts:devserver:getJob",
				"modelarts:devserver:get",
				"modelarts:devserver:getOperation",
				"modelarts:devserver:listPublicIP",
				"modelarts:devserver:create",
				"modelarts:devserver:changeHyperinstanceOS",
				"modelarts:devserver:scaleUpHyperinstance",
				"modelarts:devserver:createHyperinstanceTags",
				"modelarts:devserver:deleteHyperinstanceTags",
				"modelarts:devserver:createJob",
				"modelarts:devserver:createRoceNetwork",
				"modelarts:devserver:attachVolume",
				"modelarts:devserver:changeOS",
				"modelarts:devserver:bindPublicIP",
				"modelarts:devserver:reinstallOS",
				"modelarts:devserver:startHyperinstance",
				"modelarts:devserver:stopHyperinstance",
				"modelarts:devserver:sync",
				"modelarts:devserver:reboot",
				"modelarts:devserver:start",
				"modelarts:devserver:stop",
				"modelarts:devserver:listHyperinstanceClustersCapacity",
				"modelarts:devserver:createHyperCluster",
				"modelarts:devserver:listHyperCluster",
				"modelarts:devserver:getHyperCluster",
				"modelarts:devserver:deleteHyperCluster",
				"modelarts:devserver:update",
				"modelarts:devserver:getHyperinstanceScaleEvaluations",
				"modelarts:devserver:getJobService",
				"modelarts:devserver:listJobTemplates",
				"modelarts:devserver:getJobTemplate",
				"modelarts:devserver:batchAction",
				"modelarts:devserver:scaleDownHyperinstance",
				"modelarts:devserver:listFlavors",
				"bms:servers:showBaremetalServer",
				"bms:servers:reInstallOS",
				"bms:servers:list",
				"bms:servers:create",
				"bms:serverQuotas:get",
				"bms:servers:updateMetadata",
				"bms:servers:changeOS",
				"bms:servers:reboot",
				"bms:servers:start",
				"bms:servers:stop",
				"ecs:cloudServers:listServersDetails",
				"ecs:cloudServers:get",
				"ecs:cloudServers:delete",
				"ecs:cloudServers:detachVolume",
				"ecs:servers:lock",
				"ecs:servers:unlock",
				"ecs:cloudServers:createServers",
				"ecs:cloudServerQuotas:get",
				"ecs:cloudServers:list",
				"ecs:cloudServers:showServer",
				"ecs:flavors:get",
				"ecs:cloudServerFlavors:get",
				"ecs:cloudServers:create",
				"ecs:cloudServers:attach",
				"ecs:servers:get",
				"ecs:cloudServers:stop",
				"ecs:cloudServers:updateServer",
				"ecs:servers:list",
				"ecs:cloudServers:changeOS",
				"ecs:cloudServers:rebuild",
				"ecs:cloudServers:reboot",
				"ecs:cloudServers:start",
				"vpc:networks:list",
				"vpc:networks:get",
				"vpc:securityGroups:get",
				"vpc:securityGroups:list",
				"vpc:subnets:get",
				"vpc:subnets:list",
				"vpc:vpcs:get",
				"vpc:vpcs:list",
				"vpc:networks:create",
				"evs:volumes:list",
				"evs:volumes:get",
				"evs:types:get",
				"evs:quotas:get",
				"evs:volumes:use",
				"ims:images:get",
				"eip:publicIps:get"
              ],
              "Effect":"Allow"
          }

    只读（IAM3.0）

    		 
    {
      "Version":"1.1",
      "Statement":[
          {
              "Action":[
				"modelarts:devserver:list",
				"modelarts:devserver:getOperation",
				"modelarts:devserver:getHyperinstanceOperation",
				"modelarts:devserver:listHyperinstance",
				"modelarts:devserver:listFlavors",
				"modelarts:devserver:getImage",
				"modelarts:devserver:getHyperCluster",
				"modelarts:devserver:listJobs",
				"modelarts:devserver:queryHyperinstanceTags",
				"modelarts:devserver:get",
				"modelarts:devserver:getJob",
				"modelarts:devserver:listByUser",
				"modelarts:devserver:listJobTemplates",
				"modelarts:devserver:listHyperCluster",
				"modelarts:devserver:getHyperinstance",
				"modelarts:devserver:listImages",
				"modelarts:devserver:getJobService",
				"modelarts:devserver:listHyperinstanceClustersCapacity",
				"modelarts:devserver:getTopologies",
				"modelarts:devserver:getJobTemplate",
				"modelarts:devserver:listPublicIP",
				"modelarts:devserver:listHyperinstanceByUser",
				"modelarts:devserver:getHyperinstanceScaleEvaluations"
              ],
              "Effect":"Allow"
          }

接口级授权说明

表3 Lite Server细化权限说明

权限

对应API接口

授权项

依赖的授权项

IAM项目

企业项目

查询用户所有Lite Server实例列表

GET /v1/{project_id}/dev-servers

modelarts:devserver:listByUser

-

√

×

创建Lite Server

POST /v1/{project_id}/dev-servers

modelarts:devserver:create

vpc:networks:list

vpc:networks:get

vpc:securityGroups:get

vpc:securityGroups:list

vpc:subnets:get

vpc:subnets:list

vpc:vpcs:get

vpc:vpcs:list

evs:volumes:list

evs:volumes:get

evs:types:get

evs:quotas:get

bms:servers:create

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:list

bms:serverQuotas:get

bms:servers:updateMetadata

ecs:servers:lock

ecs:servers:unlock

ecs:cloudServers:createServers

ecs:cloudServerQuotas:get

ecs:cloudServers:listServersDetails(ecs:cloudServers:list)

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:flavors:get

ecs:cloudServerFlavors:get

ecs:cloudServers:deleteServers(ecs:cloudServers:delete)

IMS

ecs:servers:list

ecs:servers:get

ims:images:get

kps:SSHKeyPair:get

√

×

查询Lite Server实例详情

GET /v1/{project_id}/dev-servers/{id}

modelarts:devserver:get

-

√

×

删除Lite Server实例

DELETE /v1/{project_id}/dev-servers/{id}

modelarts:devserver:delete

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:reInstallOS

bms:servers:list

ecs:cloudServers:listServersDetails(ecs:cloudServers:list)

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:cloudServers:deleteServers(ecs:cloudServers:delete)

vpc:ports:list

√

×

实时同步用户所有Lite Server实例状态

PUT /v1/{project_id}/dev-servers/sync

modelarts:devserver:sync

ecs:servers:lock

ecs:servers:get

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

√

×

启动Lite Server实例

PUT /v1/{project_id}/dev-servers/{id}/start

modelarts:devserver:start

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:start

ecs:servers:lock

ecs:servers:unlock

ecs:servers:get

ecs:cloudServers:start

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

vpc:ports:list

√

×

停止Lite Server实例

PUT /v1/{project_id}/dev-servers/{id}/stop

modelarts:devserver:stop

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:stop

ecs:servers:lock

ecs:servers:unlock

ecs:servers:list

ecs:servers:get

ecs:cloudServers:stop

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

vpc:ports:list

√

×

创建Lite Server超节点标签

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/tags/create

modelarts:devserver:createHyperinstanceTags

-

√

×

删除Lite Server超节点标签。

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/tags/delete

modelarts:devserver:deleteHyperinstanceTags

-

√

×

查询Lite Server超节点标签。

GET /v1/{project_id}/dev-servers/hyperinstance/{id}/tags

modelarts:devserver:queryHyperinstanceTags

-

√

×

重装Lite Server服务器操作系统镜像。

POST /v1/{project_id}/dev-servers/{id}/reinstallos

modelarts:devserver:reinstallOS

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:reInstallOS

ecs:servers:lock

ecs:servers:get

ecs:cloudServers:rebuild

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

kps:SSHKeyPair:get

√

×

切换Lite Server服务器操作系统镜像。

POST /v1/{project_id}/dev-servers/{id}/changeos

modelarts:devserver:changeOS

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:changeOS

ecs:servers:lock

ecs:servers:get

ecs:cloudServers:changeOS

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

kps:SSHKeyPair:get

√

×

切换Lite Server超节点服务器操作系统镜像。

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/changeos

modelarts:devserver:changeHyperinstanceOS

kps:SSHKeyPair:get

√

×

查询用户所有超节点实例详情

GET /v1/{project_id}/dev-servers/hyperinstance

modelarts:devserver:listHyperinstanceByUser

-

√

×

删除Lite Server超节点实例

DELETE /v1/{project_id}/dev-servers/hyperinstance/{id}

modelarts:devserver:deleteHyperinstance

-

√

×

重启Lite Server实例

PUT /v1/{project_id}/dev-servers/{id}/reboot

modelarts:devserver:reboot

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:reboot

ecs:servers:get

ecs:cloudServers:reboot

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

√

×

启动Lite Server超节点实例

PUT /v1/{project_id}/dev-servers/hyperinstance/{id}/start

modelarts:devserver:startHyperinstance

-

√

×

停止Lite Server超节点实例

PUT /v1/{project_id}/dev-servers/hyperinstance/{id}/stop

modelarts:devserver:stopHyperinstance

-

√

×

查询租户Lite Server列表

GET /v1/{project_id}/dev-servers/all

modelarts:devserver:list

-

√

×

查询Lite Server镜像详情

GET /v1/{project_id}/dev-servers/images/{id}

modelarts:devserver:getImage

-

√

×

获取Lite Server镜像列表

GET /v1/{project_id}/dev-servers/images

modelarts:devserver:listImages

-

√

×

批量删除Lite Server Job

DELETE /v1/{project_id}/dev-servers/jobs

modelarts:devserver:deleteJobs

-

√

×

卸载数据盘

DELETE /v1/{project_id}/dev-servers/{id}/detachvolume/{volume_id}

modelarts:devserver:detachVolume

ecs:cloudServers:detachVolume

√

×

获取Lite Server规格列表

GET /v1/{project_id}/dev-servers/flavors

modelarts:devserver:listFlavors

-

√

×

查询租户所有Lite Server超节点实例详情

GET /v1/{project_id}/dev-servers/hyperinstance/all

modelarts:devserver:listHyperinstance

-

√

×

查询指定超节点实例详情

GET /v1/{project_id}/dev-servers/hyperinstance/{id}

modelarts:devserver:getHyperinstance

-

√

×

查询Lite Server超节点Operation详情

GET /v1/{project_id}/dev-servers/hyperinstance/{id}/operation/{operation_id}

modelarts:devserver:getHyperinstanceOperation

-

√

×

查询Lite Server实例对应的TOR交换机IP

GET /v1/{project_id}/dev-servers/instance-physical-topologies

modelarts:devserver:getTopologies

-

√

×

查询Lite Server Job列表

GET /v1/{project_id}/dev-servers/jobs

modelarts:devserver:listJobs

-

√

×

查询Lite Server Job详情

GET /v1/{project_id}/dev-servers/jobs/{id}

modelarts:devserver:getJob

-

√

×

查询Lite Server Operation详情

GET /v1/{project_id}/dev-servers/{id}/operation/{operation_id}

modelarts:devserver:getOperation

-

√

×

查询已绑定的EIP

GET /v1/{project_id}/dev-servers/{id}/publicips

modelarts:devserver:listPublicIP

-

√

×

扩容Lite Server超节点实例

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/live-scale-up

modelarts:devserver:scaleUpHyperinstance

-

√

×

提交Lite Server Job

POST /v1/{project_id}/dev-servers/jobs

modelarts:devserver:createJob

-

√

×

创建RoCE网络

POST /v1/{project_id}/dev-servers/networks

modelarts:devserver:createRoceNetwork

vpc:networks:create

vpc:networks:list

vpc:networks:get

√

×

挂载数据盘

POST /v1/{project_id}/dev-servers/{id}/attachvolume

modelarts:devserver:attachVolume

evs:volumes:get

ecs:cloudServers:attach

evs:volumes:use

√

×

绑定EIP

POST /v1/{project_id}/dev-servers/{id}/publicips

modelarts:devserver:bindPublicIP

eip:publicIps:get

√

×

查询超节点hyperinstance-clusters逻辑容量测算结果

POST /v1/{project_id}/dev-servers/hyperinstance/cluster-capacity-evaluations

modelarts:devserver:listHyperinstanceClustersCapacity

-

√

×

创建hyper-cluster

POST /v1/{project_id}/dev-servers/hyper-clusters

modelarts:devserver:createHyperCluster

-

√

×

查询hyper-cluster列表

GET /v1/{project_id}/dev-servers/hyper-clusters

modelarts:devserver:listHyperCluster

-

√

×

查询hyper-cluster详情

GET /v1/{project_id}/dev-servers/hyper-clusters/{id}

modelarts:devserver:getHyperCluster

-

√

×

刪除hyper-cluster

DELETE /v1/{project_id}/dev-servers/hyper-clusters/{id}

modelarts:devserver:deleteHyperCluster

-

√

×

修改Lite Server实例信息

PUT /v1/{project_id}/dev-servers/{id}

modelarts:devserver:update

ecs:servers:lock

ecs:servers:get

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:cloudServers:updateServer

√

×

查询Lite Server超节点扩缩容支持规格列表及容量测算

GET /v1/{project_id}/dev-servers/hyperinstance/{id}/scale-evaluations

modelarts:devserver:getHyperinstanceScaleEvaluations

-

√

×

获取Lite Server部署服务详情

GET /v1/{project_id}/dev-servers/jobs/services/{id}

modelarts:devserver:getJobService

-

√

×

获取Lite Server Job模板列表

GET /v1/{project_id}/dev-servers/jobs/templates

modelarts:devserver:listJobTemplates

-

√

×

获取Lite Server Job模板详情

GET /v1/{project_id}/dev-servers/jobs/templates/{template_id}

modelarts:devserver:getJobTemplate

-

√

×

Lite Server 批量操作

POST /v1/{project_id}/dev-servers/action

modelarts:devserver:batchAction

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:changeOS

bms:servers:reInstallOS

bms:servers:reboot

bms:servers:start

bms:servers:stop

ecs:servers:lock

ecs:servers:unlock

ecs:servers:get

ecs:servers:list

ecs:cloudServers:changeOS

ecs:cloudServers:rebuild

ecs:cloudServers:reboot

ecs:cloudServers:start

ecs:cloudServers:stop

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

kps:SSHKeyPair:get

√

×

缩容Lite Server超节点实例

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/live-scale-down

modelarts:devserver:scaleDownHyperinstance

-

√

×

获取Lite Server资源规格列表

GET /v1/{project_id}/dev-servers/resource-flavors

modelarts:devserver:listFlavors

-

√

×

相关文档