Actions Supported by Policy-based Authorization

This section describes the actions supported by OA in policy-based authorization.

Supported Actions

OA provides system-defined policies that can be directly used in IAM. You can also create custom policies to supplement system-defined policies for more refined access control.

OA supports the following actions in custom policies.

**Table 1** Actions supported by OA
Action	Description
oa:authorizations:list	Obtain the user authorization list.
oa:authorizations:update	Modify user authorizations.
oa:authorizations:delete	Delete user authorizations.
oa:monthReports:list	Obtain the monthly report list.
oa:monthReports:get	Obtain details about a monthly report.
oa:monthReports:download	Download a monthly report.
oa:checkItemRules:update	Modify check item rules.
oa:checkItemRules:list	Obtain check item rules.
oa:autoCheckRule:update	Modify auto check rules.
oa:autoCheckRule:get	Obtain auto check rules.
oa:riskItemsCheck:createTask	Create a risk check task.
oa:riskItemsCheck:getTaskProgress	Obtain the progress of a risk check task.
oa:riskItemsCheck:getTaskResult	Obtain the risk check results.
oa:riskItemsCheck:getTaskResultDimension	Obtain the dimensions of risk check results.
oa:riskItemsCheck:listReportSubscriptions	Obtain subscriptions to risk check reports.
oa:riskItemsCheck:getRiskItemNum	Obtain the number of risky items.
oa:riskItemsCheck:exportCheckItemResult	Export a risk check report.
oa:riskItemsCheck:getExportProgress	Obtain the progress of exporting a risk check report.
oa:riskItemsCheck:downloadCheckItemResult	Download a risk check report.
oa:riskItemCheck:createTask	Create a single-item risk check task.
oa:riskItemCheck:getTaskProgress	Obtain the progress of a single-item risk check task.
oa:riskItemCheck:getTaskResult	Obtain the check results of a single risky item.
oa:riskItemCheck:listTaskResultRegions	Obtain the list of sites for a single-item risk check report.
oa:wellArchitected:saveRecord	Save the well-architected questionnaire.
oa:wellArchitected:deleteRecord	Delete the well-architected questionnaire.
oa:wellArchitected:listRecord	View the well-architected questionnaire list.
oa:wellArchitected:getRecordDetail	Obtain well-architected questionnaire details.
oa:wellArchitected:generateReport	Generate a well-architected report.
oa:wellArchitected:getReportDetail	View well-architected report details.
oa:capacityAnalysis:getConfig	Obtain capacity optimization analysis settings.
oa:capacityAnalysis:updateConfig	Modify capacity optimization analysis settings.
oa:capacityAnalysis:listResourceTypes	Obtain the resource types for applying the capacity optimization analysis settings.
oa:capacityAnalysis:listResources	Obtain the resources for applying the capacity optimization analysis settings.
oa:capacityAnalysis:listResourceGroups	Obtain the resource groups for applying the capacity optimization analysis settings.
oa:capacityAnalysis:createJob	Create a capacity optimization analysis task.
oa:capacityAnalysis:getJobProgress	Obtain the progress of a capacity optimization analysis task.
oa:capacityAnalysis:stopJob	Stop a capacity optimization analysis task.
oa:capacityAnalysis:getResultSummary	Obtain the summary of capacity optimization analysis results.
oa:capacityAnalysis:listResultDetails	Obtain the details of capacity optimization analysis results.
oa:capacityAnalysis:deleteResultDetails	Delete the details of capacity optimization analysis results.
oa:capacityAnalysis:listReports	Obtain the list of capacity optimization analysis reports.
oa:capacityAnalysis:deleteReport	Delete a capacity optimization analysis report.
oa:capacityAnalysis:getReportExportProgress	Obtain the progress for exporting a capacity optimization analysis report.
oa:capacityAnalysis:downloadReport	Download a capacity optimization analysis report.
oa:capacityAnalysis:exportReport	Export a capacity optimization analysis report.
oa:capacityAnalysis:exportExpertReport	Export an expert analysis report on capacity optimization.
oa:applications:list	Obtain the list of architecture diagrams.
oa:applications:get	Obtain architecture diagram details.
oa:applications:update	Modify basic information about an architecture diagram.
oa:applications:delete	Delete an architecture diagram.
oa:applications:updateView	Modify the settings of architecture diagram elements.
oa:applications:listServiceConfigs	Obtain the service configuration list of an architecture diagram.
oa:applications:getResourceConfig	Obtain resource parsing settings of an architecture diagram.
oa:applications:updateRiskSwitchStatus	Enable or disable risk statistics of an architecture diagram.
oa:applications:listRisks	Obtain the number of risks in an architecture diagram.
oa:applications:listHistorys	Obtain the list of historical records of an architecture diagram.
oa:applications:getHistory	Obtain the details of historical records of an architecture diagram.
oa:applications:restoreHistory	Restore a historical architecture diagram.
oa:applications:deleteHistory	Delete the historical records of an architecture diagram.
oa:applications:listRecycleApplications	List architecture diagrams in the recycle bin.
oa:system:listCesMetrics	Obtain Cloud Eye metrics.
oa:system:listCesMetricData	Obtain Cloud Eye metric details.
oa:system:getConfigItem	Obtain configuration items in the configuration center.
oa:capacityAnalysis:listHistoryReports	Obtain the list of historical capacity optimization analysis records.
oa:capacityAnalysis:listMetrics	Obtain metrics of risky resources for capacity optimization.
oa:capacityAnalysis:listMonitor	Obtain the monitoring data of risky resources for capacity optimization.
oa:system:getAutoloadData	Obtain the auto-loaded data.
oa:capacityAnalysis:listResultMonitorData	Obtain the monitoring data from KEA risk analysis results.
oa:applications:getSummary	Obtain the architecture diagram summary.
oa:applications:startAutomaticDrawAnalysis	Create an automatic drawing analysis task.
oa:applications:getAutomaticDrawAnalysisProgress	Obtain the progress of an automatic drawing analysis task.
oa:applications:getAutomaticDrawAnalysisResult	Obtain the result of an automatic drawing analysis task.
oa:applications:getVpcFlowLogsDockingStatus	Obtain the interconnection status of VPC flow logs.
oa:resourceGroups:list	Obtain the resource group list.
oa:resourceGroups:get	Obtain resource group details.
oa:resourceGroups:update	Modify a resource group.
oa:resourceGroups:delete	Delete a resource group.
oa:resourceGroups:listRegions	List the regions that the resource groups belong to.
oa:resourceGroups:listResources	List the resources in a resource group.
oa:resourceGroups:listEnterpriseProjectResources	List the resources of an enterprise project.
oa:system:listServiceMetrics	List metrics of a cloud service.
oa:system:listAlarmMetrics	List alarm metrics.
oa:applications:listServiceResources	List cloud service resources of an architecture design.
oa:applications:saveResourceGroup	Save resource groups of an architecture design.
oa:system:listResourceTypes	List resource types.
oa:resourceGroups:listAll	List all resource groups.
oa:applications:downloadResourceTemplate	Download the resource import template for an architecture design.
oa:applications:importResources	Import resources for an architecture design.
oa:applications:getResourcesImportResult	Obtain the resource import results of an architecture design.
oa:applications:saveResourceGroupsBatch	Save resource groups in an architecture design in batches.
oa:applications:getBatchSaveResourceGroupsResult	Obtain the results for batch saving resource groups in an architecture design.
oa:resourceGroups:downloadResourceTemplate	Download resource import template for a resource group.
oa:resourceGroups:importResources	Import resources to a resource group.
oa:resourceGroups:getResourcesImportResult	Obtain the resource import results of a resource group.
oa:applications:startServiceRecommendAnalysis	Start service recommendation analysis.
oa:applications:getServiceRecommendAnalysisResult	Obtain the service recommendation analysis results.
oa:applications:listAttachedResources	List resources associated with an architecture diagram.
oa:applications:listNodeAttachedResources	List resources corresponding to a diagram element.
oa:riskItemsCheck:listReportsV4	Obtain risk check reports.
oa:riskItemsCheck:listReports	Obtain risk check reports.
oa:riskItemsCheck:getReportSubscriptionRule	Obtain the subscription rules for risk check reports.
oa:applications:deleteAll	Delete all architecture diagrams.
oa:riskItemsCheck:updateReportSubscriptionRule	Modify the subscription rules for risk check reports.
oa:riskItemsCheck:listMeters	Obtain availability check CDRs.
oa:applications:saveResourceChanges	Save changes to architecture diagram resources.
oa:capacityAnalysis:deleteAll	Delete all capacity optimization analysis reports.
oa:resourceGroups:deleteAll	Delete all resource groups.
oa:applications:listResources	List cloud service resources of an architecture diagram.
oa:system:listMetrics	List metrics.
oa:riskItemsCheck:listCheckItems	List check items.
oa:riskItemsCheck:listOrgAccounts	List organization member accounts.
oa:system:listMetricData	List metric data.
oa:applications:listApplicationNames	Query architecture diagram names.