- What's New
- Service Overview
- Service Brochure
- Getting Started
-
User Guide
- Prerequisites
- Permissions Management
- Image Modeling
- Voice Modeling
- Video Production
- Livestreaming
- Asset Management
- Appendix
-
API Reference
- Before You Start
- API Overview
- Calling APIs
- Asset Management
- Virtual Avatar Video Production
-
Virtual Avatar Livestreaming
-
Intelligent Livestreaming Room Management
- Creating an Intelligent Livestreaming Room
- Querying Intelligent Livestreaming Rooms
- Querying Intelligent Livestreaming Script Details
- Updating Intelligent Livestreaming Room Information
- Deleting an Intelligent Livestreaming Room
- Creating an Interaction Rule Library for Live Rooms
- Querying Interaction Rule Libraries for Live Rooms
- Updating an Interaction Rule Library for Live Rooms
- Deleting an Interaction Rule Library for Live Rooms
-
Livestreaming Task Management
- Starting a Virtual Human Intelligent Livestreaming Task
- Querying Livestreaming Tasks of a Live Room
- Querying Virtual Human Intelligent Livestreaming Task Details
- Ending a Virtual Human Intelligent Livestreaming Task
- Controlling Virtual Human Intelligent Livestreaming
- Querying All Virtual Human Livestreaming Tasks of a Tenant
- Reporting Livestreaming Events
- Live Product Management
-
Intelligent Livestreaming Room Management
-
Image Modeling Management
- Creating a Virtual Avatar Model Training Task
- Querying Virtual Avatar Model Training Tasks
- Querying Details About a Virtual Avatar Model Training Task
- Deleting a Virtual Avatar Model Training Task
- Updating a Virtual Avatar Model Training Task
- Executing a Virtual Avatar Model Training Task as a Tenant
-
Voice Modeling Task Management
- Creating a Voice Training Task (Basic Edition)
- Creating a Voice Training Task (Advanced Edition)
- Creating a Voice Training Task (Premium Edition)
- Querying Voice Training Tasks
- Submitting a Voice Training Task
- Querying Voice Training Task Details
- Deleting a Voice Training Task
- Querying Task Operation Logs
- Obtaining the URL for Uploading a Voice File
- Obtaining the Review Result of a Voice Training Task
- Confirming the Online Recording Result
- Obtaining the Confirmed Online Recording Result
- TTS Management
- Appendix
- Change History
- ssdk
- FAQs
- Videos
- General Reference
Copied.
Permissions Management
If you need to grant different permissions to employees in your enterprise to access your purchased MetaStudio resources, Identity and Access Management (IAM) is a good choice for fine-grained permissions management. IAM provides identity authentication, permissions management, and access control, helping you secure access to your resources.
With IAM, you can create IAM users and grant them permissions to access only specific resources. For example, if you want some software developers in your enterprise to be able to use MetaStudio resources but do not want them to be able to delete MetaStudio resources or perform any other high-risk operations, you can create IAM users and grant permission to use MetaStudio resources but not permission to delete them.
If your account does not need individual IAM users for permissions management, skip this section.
IAM is a free service. You pay only for the resources in your account. For more information about IAM, see IAM Service Overview.
MetaStudio does not support enterprise projects.
MetaStudio Permissions
By default, new IAM users do not have permissions assigned. You need to add a user to one or more groups, and attach permissions policies or roles to these groups. Users inherit permissions from the groups to which they are added and can perform specified operations on cloud services based on the permissions.
MetaStudio is a project-level service deployed and accessed in specific physical regions. To assign MetaStudio permissions to a user group, specify the scope as region-specific projects and select projects (such as ap-southeast-2) for the permissions to take effect. If you select All projects, the permissions will take effect for user groups in all region-specific projects. When accessing MetaStudio, the users need to switch to a region where they have been granted permissions to use this service.
- Roles: A type of coarse-grained authorization mechanism that defines permissions related to user responsibilities. This mechanism provides only a limited number of service-level roles for authorization. When using roles to grant permissions, you need to also assign other roles on which the permissions depend to take effect. However, roles are not an ideal choice for fine-grained authorization and secure access control.
- Policies: A fine-grained authorization strategy that defines permissions required to perform operations on specific cloud resources under certain conditions. This mechanism allows for more flexible policy-based authorization, meeting requirements for secure access control.
Policy Name |
Description |
Type |
Policy Content |
---|---|---|---|
MetaStudio FullAccess |
Administrator permissions for MetaStudio. This policy contains all permissions of MetaStudio. |
System-defined policy |
|
MetaStudio ReadOnlyAccess |
Read-only permissions for MetaStudio. Users granted these permissions can only view MetaStudio data. |
System-defined policy |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.
For any further questions, feel free to contact us through the chatbot.
Chatbot