Help Center> Migration Center> User Guide> Permissions Management> MgC Custom Policies
Updated on 2023-10-08 GMT+08:00
View PDF

MgC Custom Policies

Custom policies can be created to supplement the system-defined policies of MgC.

You can create custom policies in either of the following ways:

  • Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of policy syntax.
  • JSON: Create a JSON policy from scratch or based on an existing policy.

For details, see Creating a Custom Policy. The following section contains examples of common MgC custom policies.

Example MgC Custom Policies

  • Allowing users to perform platform collection and resource management
    {
       "Version": "1.1",
       "Statement": [
              {
                     "Effect": "Allow",
                     "Action": [
                            "mgc:*:query*",
                            "mgc:*:discovery"
                     ]
              }
       ]
}
  • Allowing users to perform TCO analysis and server assessment
    {
    "Version": "1.1",
    "Statement": [
        {
            "Action": [
                "mgc:*:query*",
                "mgc:*:discovery",
                "mgc:*:assess",
                "iam:agencies:listAgencies",
                "iam:agencies:createAgency",
                "iam:permissions:grantRoleToAgency"
            ],
            "Effect": "Allow"
        }
    ]
}

  • Allowing users to perform application dependency mapping
    {
       "Version": "1.1",
       "Statement": [
              {
                     "Effect": "Allow",
                     "Action": [
                            "mgc:*:query*",
                            "mgc:*:discovery",
                            "mgc:*:appdiscovery"
                     ]
              }
       ]
}
  • Allowing users to use migration workflows
    {
    "Version": "1.1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "mgc:*:query*",
                "mgc:*:discovery",
                "mgc:*:assess",
                "mgc:*:migrate",
                "iam:agencies:listAgencies",
                "iam:agencies:createAgency",
                "iam:permissions:grantRoleToAgency"
            ]
        }
    ]
}
Parent topic: Permissions Management