Help Center/ Identity and Access Management/ API Reference/ API/ Agency Management/ Granting Specified Permissions to an Agency for All Projects
Updated on 2023-09-14 GMT+08:00

Granting Specified Permissions to an Agency for All Projects

Function

This API is provided for the administrator to grant specified permissions to an agency for all projects.

The API can be called using both the global endpoint and region-specific endpoints.

Restrictions

The permission with the role_id specified in the URL is controlled through the blacklist and cannot be set to te_agency.

URI

PUT /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects

Table 1 URI parameters

Parameter

Mandatory

Type

Description

agency_id

Yes

String

Agency ID. For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.

domain_id

Yes

String

Account ID of the delegating party. For details about how to obtain the account ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.

role_id

Yes

String

Permission ID. For details about how to obtain a permission ID, see Listing Permissions.

Request Parameters

Table 2 Parameters in the request header

Parameter

Mandatory

Type

Description

X-Auth-Token

Yes

String

Access token issued to a user to bear its identity and permissions.

For details about the permissions required by the token, see Actions.

Response Parameters

None

Example Request

Request for granting specified permissions to an agency for all projects

PUT https://iam.myhuaweicloud.eu/v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects

Example Response

None

Status Codes

Status Code

Description

204

The authorization is successful.

401

Authentication failed.

403

Access denied.

404

The requested resource cannot be found.

500

Internal server error.

Error Codes

For details, see Error Codes.