Actions Supported by Role/Policy-based Authorization

New IAM users do not have any permissions assigned by default. You need to first add them to one or more groups and attach policies or roles to these groups. The users then inherit permissions from the groups and can perform specified operations on cloud services based on the permissions they have been assigned.

You can grant users permissions using roles and policies. Roles are provided by IAM to define service-based permissions that match users' job responsibilities. Policies define API-based permissions for operations on specific resources under certain conditions, allowing for more fine-grained, secure access control of cloud resources.

CodeArts PerfTest supports system role-based authorization but does not support system policy-based authorization. To call APIs, you must be assigned the appropriate system roles. Table 1 lists all the system-defined permissions for CodeArts PerfTest. Select the permissions that best fit your service requirements.

**Table 1** System-defined roles for CodeArts PerfTest
Role Name	Description	Dependencies
CodeArts PerfTest Administrator	Administrator permissions for CodeArts PerfTest. Users with these permissions can perform all operations on CodeArts PerfTest and test resources of the current tenant and all IAM users, such as adding, deleting, modifying, and querying resources.	This role depends on the Server Administrator, Tenant Guest, CCE Administrator, and VPCEndpoint Administrator roles.
CodeArts PerfTest Developer	Developer permissions for CodeArts PerfTest. Users with these permissions can perform all operations, such as adding, deleting, modifying, and querying resources, only on a user's own CodeArts PerfTest and test resources.	This role depends on the Tenant Guest role.
CodeArts PerfTest Operator	Operator permissions for CodeArts PerfTest. Users with these permissions can only read their own CodeArts PerfTest and test resources.	This role depends on the Tenant Guest role.
CodeArts PerfTest Resource Administrator	Resource administrator permissions for CodeArts PerfTest. Users with these permissions have all permissions related to test resources in CodeArts PerfTest.	This role depends on the Tenant Guest, CCE Administrator, and VPCEndpoint Administrator roles.
CodeArts PerfTest Resource Developer	Resource developer permissions for CodeArts PerfTest. Users with these permissions can only view and use CodeArts PerfTest resources, but cannot create, update, or delete infrastructure resources.	This role depends on the Tenant Guest role.