Help Center/ Identity and Access Management/ API Reference/ API/ Agency Management/ Granting Permissions to an Agency for a Global Service Project
Updated on 2023-09-14 GMT+08:00

Granting Permissions to an Agency for a Global Service Project

Function

This API is provided for the administrator to grant permissions to an agency for a global service project.

The API can be called using both the global endpoint and region-specific endpoints.

Restrictions

The permission with the role_id specified in the URL will be controlled through the blacklist. The role_id cannot be set to te_agency.

URI

PUT /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}

Table 1 URI parameters

Parameter

Mandatory

Type

Description

agency_id

Yes

String

Agency ID. For details about how to obtain the agency ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.

domain_id

Yes

String

Account ID of the delegating party. For details about how to obtain the account ID, see Obtaining Account, IAM User, Group, Project, Region, and Agency Information.

role_id

Yes

String

Global service permission ID. For details about how to obtain a permission ID, see Listing Permissions.

Request Parameters

Table 2 Parameters in the request header

Parameter

Mandatory

Type

Description

Content-Type

Yes

String

Fill application/json;charset=utf8 in this field.

X-Auth-Token

Yes

String

Access token issued to a user to bear its identity and permissions.

For details about the permissions required by the token, see Actions.

Response Parameters

None

Example Request

Request for granting permissions to an agency for a global service project

PUT https://iam.myhuaweicloud.eu/v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}

Example Response

None

Status Codes

Status Code

Description

204

The authorization is successful.

401

Authentication failed.

403

Access denied.

404

The requested resource cannot be found.

500

Internal server error.

Error Codes

None