Help Center/ CodeArts Req/ User Guide/ Permissions Management/ Customizing Policies
Updated on 2023-11-28 GMT+08:00
View PDF

Customizing Policies

CodeArts Req provides permissions enough for the account administrator to manage all CodeArts projects. You can also customize more fine-grained policies for granting permissions.

You can create custom policies in either of the following ways:

  • Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of the policy syntax.
  • JSON: Create a policy in JSON format or edit the JSON strings of an existing policy.

This section provides examples of common CodeArts Req custom policies.

Example Custom Policy

  • Example

    To grant the permissions for querying projects, creators, and members. Select the fine-grained permissions shown in custom IAM policies.

    Figure 1 JSON view

CodeArts Req Fine-grained Operation Permissions

Table 1 lists all fine-grained operation permissions in CodeArts Req.

Table 1 Fine-grained operation permissions in CodeArts Req

Operation

Description

Detail

projectmanConfig:template:update

Set project templates

Grant this permission to modify project templates by choosing Project Templates.

projectmanConfig:template:delete

Delete project templates

Grant this permission to delete project templates by choosing Project Templates.

projectmanConfig:projectCreator:list

View permitted users who can create projects

Grant this permission to view the permitted users by choosing Project Creators.

projectmanConfig:projectCreator:update

Set member account permissions for creating projects

Grant this permission to set member accounts who have the permissions for creating projects by choosing Project Creators.

projectmanConfig:project:list

View projects under a tenant

Grant this permission to view all projects by choosing Projects and Members.

projectmanConfig:member:join

Join a project under a tenant

Grant this permission to join any projects by choosing Projects and Members. By default, a newly added member is assigned the Project Manager role.

projectmanConfig:project:delete

Delete projects

Grant this permission to delete projects by choosing Projects and Members.

projectmanConfig:memberManagement:list

View members of all projects

Grant this permission to view all members by choosing Projects and Members.

projectmanConfig:memberManagement:delete

Delete any project member under a tenant

Grant this permission to remove one or more project members by choosing Projects and Members.

projectmanConfig:systemSettingField:set

Set a new work item creator

Grant this permission to set a user as the work item creator.

projectmanConfig:enterprise:bind

Bind an enterprise project

Grant this permission to bind a CodeArts project to an enterprise project when creating or upgrading enterprise projects.
Parent topic: Permissions Management