Help Center/ Elastic Load Balance/ FAQs/ ELB Functionality/ What Types of APIs Does ELB Provide? What Are Permissions of ELB?
Updated on 2024-09-24 GMT+08:00

What Types of APIs Does ELB Provide? What Are Permissions of ELB?

ELB supports the following policies:

Table 1 ELB policies

Policy Type

Policy Name

Description

RBAC policy

ELB Administrator

Has all permissions on ELB

Before assigning the RBAC policy to a user group, check whether the user group has a dependent policy. If yes, set the dependent permission to make the RBAC policy take effect.

Fine-grained policy

ELB FullAccess

Has all permissions on ELB.

If this function is not enabled, you cannot assign a fine-grained policy to a user group.

ELB ReadOnlyAccess

Has the read-only permission on ELB.

Table 2 Common operations supported by system-defined policies

Operation

ELB FullAccess

ELB ReadOnlyAccess

ELB Administrator

Creating a load balancer

×

Querying a load balancer

Querying a load balancer and associated resources

Querying load balancers

Modifying a load balancer

×

Deleting a load balancer

×

Adding a listener

×

Querying a listener

Modifying a listener

×

Deleting a listener

×

Creating a backend server group

×

Querying a backend server group

Modifying a backend server group

×

Deleting a backend server group

×

Adding a backend server

×

Querying a backend server

Modifying a backend server

×

Removing a backend server

×

Configuring a health check

×

Querying a health check

Modifying a health check

×

Disabling a health check

×

Assigning an EIP

×

×

Binding an EIP to a load balancer

×

×

Querying an EIP

Unbinding an EIP from a load balancer

×

×

Viewing metrics

×

×

Viewing access logs

×

×

  • To unbind an EIP, you also need to configure the vpc:bandwidths:update and vpc:publicIps:update permissions for the VPC service. For details, see the Virtual Private Cloud API Reference.
  • To view metrics, obtain the CES ReadOnlyAccess permissions. For details, see the Cloud Eye API Reference.
  • To view access logs, you also need to configure the LTS ReadOnlyAccess permission. For details, see the Log Tank Service API Reference.

For details about fine-grained permissions, see the Elastic Load Balance API Reference.