Help Center/ ModelArts/ API Reference/ Permissions Policies and Supported Actions/ Workflow
Updated on 2026-07-24 GMT+08:00
View PDF
Share

Workflow

Scenario-Level Authorization Examples

  • New IAM console: Provides system-defined identity policies based on IAM 5.0. You can configure scenario-level authorizations directly on the new IAM console.
    Table 1 Workflow policies in the new IAM console

    Policy Name

    Description

    Type

    Additional IAM 3.0 Policies Required

    ModelArtsExemlflowReadOnlyPolicy

    ModelArts Exemlflow read only policy.

    System-defined

    -

    ModelArtsExemlflowAllPolicy

    ModelArts Exemlflow all policy.

    System-defined

    -
  • Old IAM console: System-defined identity policies based on IAM 3.0 are not provided. You need to create custom identity policies on the old IAM console for scenario-level authorization. For details, see the table below.
    Table 2 Workflow policies in the old IAM console

    Scenario

    Example

    Read/Write (IAM 3.0)

    		 
    {
      "Version":"1.1",
      "Statement":[
          {
              "Action":[
          "modelarts:workflow:delete",
          "modelarts:workflow:list",
          "modelarts:workflow:get",
          "modelarts:workflow:create",
          "modelarts:workflow:execute",
          "modelarts:workflow:update"
              ],
              "Effect":"Allow"
          }

    Read-only (IAM 3.0)

    		 
    {
      "Version":"1.1",
      "Statement":[
          {
              "Action":[
          "modelarts:workflow:list",
          "modelarts:workflow:get",
              "Effect":"Allow"
          }

API-Level Authorization

To use workflow functions on the management console and manage permissions, configure permissions based on the table below.

Table 3 Fine-grained workflow permissions

Permission

API

Action

Dependency

IAM Project

Enterprise Project

Creating workflows

POST /v2/{project_id}/workflows

modelarts:workflow:create

None

√

√

Listing workflows

GET /v2/{project_id}/workflows

modelarts:workflow:list

None

√

√

Obtaining workflows

GET /v2/{project_id}/workflows/{workflow_id}

modelarts:workflow:get

None

√

√

Modifying workflows

PUT /v2/{project_id}/workflows/{workflow_id}

modelarts:workflow:update

None

√

√

Deleting workflows

DELETE /v2/{project_id}/workflows/{workflow_id}

modelarts:workflow:delete

None

√

√

Obtaining workflow statistics

GET /v2/{project_id}/workflows/overview

modelarts:workflow:list

None

√

√

Obtaining workflow to-dos

GET /v2/{project_id}/workflows/todolist

modelarts:workflow:list

None

√

√

Obtaining workflow tags

GET /v2/{project_id}/workflows/labels

modelarts:workflow:list

None

√

√

Creating workflow executions

POST /v2/{project_id}/workflows/{workflow_id}/executions

modelarts:workflow:execute

None

√

√

Listing workflow executions

GET /v2/{project_id}/workflows/{workflow_id}/executions

modelarts:workflow:list

None

√

√

Obtaining all tags of a workflow execution list

GET /v2/{project_id}/workflows/{workflow_id}/executions/labels

modelarts:workflow:list

None

√

√

Obtaining workflow executions

GET /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}

modelarts:workflow:get

None

√

√

Updating workflow executions

PUT /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}

modelarts:workflow:update

None

√

√

Deleting workflow executions

DELETE /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}

modelarts:workflow:delete

None

√

√

Executing workflows

POST /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}/actions

modelarts:workflow:execute

None

√

√

Executing workflow steps

POST /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}/step-executions/{step_execution_id}/actions

modelarts:workflow:execute

None

√

√

Creating subscriptions

POST /v2/{project_id}/workflows/{workflow_id}/subscriptions

modelarts:workflow:update

smn:tag:list

smn:topic:get

√

√

Obtaining subscription details

GET /v2/{project_id}/workflows/{workflow_id}/subscriptions/{subscription_id}

modelarts:workflow:get

None

√

√

Updating subscriptions

PUT /v2/{project_id}/workflows/{workflow_id}/subscriptions/{subscription_id}

modelarts:workflow:update

smn:tag:list

smn:topic:get

√

√

Deleting subscriptions

DELETE /v2/{project_id}/workflows/{workflow_id}/subscriptions/{subscription_id}

modelarts:workflow:delete

None

√

√

Obtaining ExeML overview

GET /v2/{project_id}/workflows/exeml-overview

modelarts:workflow:list

None

√

√

Obtaining step executions

GET /v2/{project_id}/workflows/{workflow_id}/step-executions

modelarts:workflow:get

None

√

√