On this page

Show all

Help Center/ Cloud Container Engine_Autopilot/ FAQs/ Permissions/ Can I Configure Only Namespace Permissions Without Cluster Management Permissions?

Can I Configure Only Namespace Permissions Without Cluster Management Permissions?

Updated on 2025-01-22 GMT+08:00

View PDF

Namespace permissions and cluster management permissions are independent and complementary to each other.

Namespace permissions: apply to clusters and are used to manage operations on cluster resources (such as creating workloads).
Cluster management (IAM) permissions: apply to cloud services and used to manage CCE Autopilot clusters and peripheral resources (such as VPC, ELB, and ECS).

Administrators of the IAM Admin user group can grant cluster management permissions (such as CCE Administrator and CCE FullAccess) to IAM sub-users or grant namespace permissions for a cluster on the CCE console. However, the permissions you have on the CCE console are determined by the IAM system policy. If the cluster management permissions are not configured, you do not have the permissions to access the CCE console.

If you only run kubectl commands to operate cluster resources, you only need to obtain the kubeconfig file with the namespace permission. For details, see Can I Use APIs If the Cluster Management Permissions Are Not Configured?. Note that information leakage may occur when you use the kubeconfig file.

Parent Topic: Permissions

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

Which of the following issues have you encountered?

Content is inconsistent with the product UI

Unclear descriptions

Lack of examples or code

Incorrect steps

Can't find what I need

Lack of best practices

Feedback (optional)

0/500

Select at least one type of issue, and enter your comments or suggestions.

Enter a maximum of 500 characters.

Submit Cancel

For any further questions, feel free to contact us through the chatbot.

Chatbot