Help Center/ ModelArts/ API Reference/ Permissions Policies and Supported Actions/ Dedicated Resource Pool and Lite Cluster
Updated on 2026-09-01 GMT+08:00
View PDF
Share

Dedicated Resource Pool and Lite Cluster

Scenario-Level Authorization Examples

New IAM console: Provides system-defined identity policies based on IAM version 5.0. You can create new custom policies on the new IAM console and assign them to the user group you belong to. However, because some modules have not yet fully integrated with IAM 5.0, you still need to create new custom policies on the old IAM console. Configure the following IAM 3.0 policies and assign them to the user groups that you belong to. For details, see the table below.
Table 1 Dedicated resource pool and Lite Cluster policies in the new IAM console

Policy Name

Description

Type

Additional IAM 3.0 Policies Required

ModelArtsResourceManagementReadOnlyPolicy

ModelArts Resource Management read-only policy.

System-defined

-

ModelArtsResourceManagementAllPolicy

ModelArts Resource Management all policy.

System-defined

-

API-Level Authorization Description

Table 2 Fine-grained permissions for resource pool management

Permission

API

Action (IAM 3.0)

Action (IAM 5.0)

Dependency

IAM Project

Enterprise Project

Obtaining resource pools

GET /v2/{project_id}/pools

modelarts:pool:list

modelarts:pool:list

--

√

√

Obtaining details about a resource pool

GET /v2/{project_id}/pools/{pool_name}

modelarts:pool:get

modelarts:pool:get

--

√

√

Modifying resource pools

PATCH /v2/{project_id}/pools/{pool_name}

modelarts:pool:update

modelarts:pool:updatePool

--

√

√

Creating resource pools

POST /v2/{project_id}/pools

modelarts:pool:create

modelarts:pool:create

--

√

√

Deleting resource pools

DELETE /v2/{project_id}/pools/{pool_name}

modelarts:pool:delete

modelarts:pool:delete

--

√

√
Table 3 Fine-grained permissions for network management

Permission

API

Action

Dependency

IAM Project

Enterprise Project

Obtaining networks

GET /v1/{project_id}/networks

modelarts:network:list

--

√

√

Obtaining network details

GET /v1/{project_id}/networks/{network_name}

modelarts:network:get

--

√

√

Modifying networks

PATCH /v1/{project_id}/networks/{network_name}

modelarts:network:update

vpc.*.get

vpc.*.list

√

√

Creating networks

POST /v1/{project_id}/networks

modelarts:network:create

vpc.*.get

vpc.*.list

√

√

Deleting networks

DELETE /v1/{project_id}/networks/{network_name}

modelarts:network:delete

--

√

√
Table 4 Fine-grained permissions for edge resource pool management

Permission

API

Action

Dependency

IAM Project

Enterprise Project

Obtaining edge resource pools

GET /v1/{project_id}/edge-pools

modelarts:edgePool:list

ief.*.get

ief.*.list

√

√

Obtaining edge resource pool details

GET /v1/{project_id}/edge-pools/{edge_pool_id}

modelarts:edgePool:get

ief.*.get

ief.*.list

√

√

Modifying edge resource pools

PUT /v1/{project_id}/edge-pools/{edge_pool_id}

modelarts:edgePool:update

ief.*.get

ief.*.list

√

√

Creating edge resource pools

POST /v1/{project_id}/edge-pools

modelarts:edgePool:create

ief.*.get

ief.*.list

√

√

Deleting edge resource pools

DELETE /v1/{project_id}/edge-pools/{edge_pool_id}

modelarts:edgePool:delete

--

√

√
Table 5 Model warmup task permissions

Permission

API

Action

Dependency

IAM Project

Enterprise Project

Obtaining resource pool model warmup tasks

GET /v2/{project_id}/pools/{pool_name}/ckpt-warm-up-task

modelarts:warmupTask:list

--

√

√

Obtaining model warmup details

GET /v2/{project_id}/pools/{pool_name}/ckpt-warm-up-task/{ckpt_warm_up_task_name}

modelarts:warmupTask:get

--

√

√

Modifying model warmup tasks

PATCH /v2/{project_id}/pools/{pool_name}/ckpt-warm-up-task/{ckpt_warm_up_task_name}

modelarts:warmupTask:update

--

√

√

Creating model warmup tasks

POST /v2/{project_id}/pools/{pool_name}/ckpt-warm-up-task

modelarts:warmupTask:create

--

√

√

Deleting model warmup tasks

DELETE /v2/{project_id}/pools/{pool_name}/ckpt-warm-up-task/{ckpt_warm_up_task_name}

modelarts:warmupTask:delete

--

√

√