Help Center/ ModelArts/ API Reference/ Permissions Policies and Supported Actions/ Lite Server
Updated on 2026-07-24 GMT+08:00
View PDF
Share

Lite Server

Scenario-Level Authorization Examples

  • New IAM console: Provides system-defined identity policies based on IAM 5.0. You can create custom policies on the new IAM console and assign them to the user group you belong to. However, because some modules have not yet fully integrated with IAM 5.0, you still need to create custom policies on the old IAM console. Configure the following IAM 3.0 policies and assign them to the user group that you belong to. For details, see the table below.
    Table 1 Lite Server policies in the new IAM console

    Policy Name

    Description

    Type

    Additional IAM 3.0 Policies Required

    ModelArtsResourceManagementReadOnlyPolicy

    ModelArts Resource Management read-only policy.

    System-defined

    		 
    {
    "Version": "1.1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "aom:uniagentAgent:list",
                "CSBS Administrator"
            ]
        }
    ]
}

    ModelArtsResourceManagementAllPolicy

    ModelArts Resource Management all policy.

    System-defined

    		 
    {
    "Version": "1.1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "aom:uniagentAgent:list",
                "CSBS Administrator"
            ]
        }
    ]
}
  • Old IAM console: System-defined identity policies based on IAM 3.0 are not provided. You need to create custom identity policies on the old IAM console for scenario-level authorization. For details, see the table below.
    Table 2 Authorization management policies in the old IAM console

    Scenario

    Example

    Read/Write (IAM 3.0)

    		 
    {
      "Version":"1.1",
      "Statement":[
          {
              "Action":[
				"modelarts:devserver:deleteHyperinstance",
				"modelarts:devserver:deleteJobs",
				"modelarts:devserver:delete",
				"modelarts:devserver:detachVolume",
				"modelarts:devserver:listByUser",
				"modelarts:devserver:list",
				"modelarts:devserver:listHyperinstanceByUser",
				"modelarts:devserver:listHyperinstance",
				"modelarts:devserver:getHyperinstance",
				"modelarts:devserver:getHyperinstanceOperation",
				"modelarts:devserver:queryHyperinstanceTags",
				"modelarts:devserver:listImages",
				"modelarts:devserver:getImage",
				"modelarts:devserver:getTopologies",
				"modelarts:devserver:listJobs",
				"modelarts:devserver:getJob",
				"modelarts:devserver:get",
				"modelarts:devserver:getOperation",
				"modelarts:devserver:listPublicIP",
				"modelarts:devserver:create",
				"modelarts:devserver:changeHyperinstanceOS",
				"modelarts:devserver:scaleUpHyperinstance",
				"modelarts:devserver:createHyperinstanceTags",
				"modelarts:devserver:deleteHyperinstanceTags",
				"modelarts:devserver:createJob",
				"modelarts:devserver:createRoceNetwork",
				"modelarts:devserver:attachVolume",
				"modelarts:devserver:changeOS",
				"modelarts:devserver:bindPublicIP",
				"modelarts:devserver:reinstallOS",
				"modelarts:devserver:startHyperinstance",
				"modelarts:devserver:stopHyperinstance",
				"modelarts:devserver:sync",
				"modelarts:devserver:reboot",
				"modelarts:devserver:start",
				"modelarts:devserver:stop",
				"modelarts:devserver:listHyperinstanceClustersCapacity",
				"modelarts:devserver:createHyperCluster",
				"modelarts:devserver:listHyperCluster",
				"modelarts:devserver:getHyperCluster",
				"modelarts:devserver:deleteHyperCluster",
				"modelarts:devserver:update",
				"modelarts:devserver:getHyperinstanceScaleEvaluations",
				"modelarts:devserver:getJobService",
				"modelarts:devserver:listJobTemplates",
				"modelarts:devserver:getJobTemplate",
				"modelarts:devserver:batchAction",
				"modelarts:devserver:scaleDownHyperinstance",
				"modelarts:devserver:listFlavors",
				"bms:servers:showBaremetalServer",
				"bms:servers:reInstallOS",
				"bms:servers:list",
				"bms:servers:create",
				"bms:serverQuotas:get",
				"bms:servers:updateMetadata",
				"bms:servers:changeOS",
				"bms:servers:reboot",
				"bms:servers:start",
				"bms:servers:stop",
				"ecs:cloudServers:listServersDetails",
				"ecs:cloudServers:get",
				"ecs:cloudServers:delete",
				"ecs:cloudServers:detachVolume",
				"ecs:servers:lock",
				"ecs:servers:unlock",
				"ecs:cloudServers:createServers",
				"ecs:cloudServerQuotas:get",
				"ecs:cloudServers:list",
				"ecs:cloudServers:showServer",
				"ecs:flavors:get",
				"ecs:cloudServerFlavors:get",
				"ecs:cloudServers:create",
				"ecs:cloudServers:attach",
				"ecs:servers:get",
				"ecs:cloudServers:stop",
				"ecs:cloudServers:updateServer",
				"ecs:servers:list",
				"ecs:cloudServers:changeOS",
				"ecs:cloudServers:rebuild",
				"ecs:cloudServers:reboot",
				"ecs:cloudServers:start",
				"vpc:networks:list",
				"vpc:networks:get",
				"vpc:securityGroups:get",
				"vpc:securityGroups:list",
				"vpc:subnets:get",
				"vpc:subnets:list",
				"vpc:vpcs:get",
				"vpc:vpcs:list",
				"vpc:networks:create",
				"evs:volumes:list",
				"evs:volumes:get",
				"evs:types:get",
				"evs:quotas:get",
				"evs:volumes:use",
				"ims:images:get",
				"eip:publicIps:get"
              ],
              "Effect":"Allow"
          }

    Read-only (IAM 3.0)

    		 
    {
      "Version":"1.1",
      "Statement":[
          {
              "Action":[
				"modelarts:devserver:list",
				"modelarts:devserver:getOperation",
				"modelarts:devserver:getHyperinstanceOperation",
				"modelarts:devserver:listHyperinstance",
				"modelarts:devserver:listFlavors",
				"modelarts:devserver:getImage",
				"modelarts:devserver:getHyperCluster",
				"modelarts:devserver:listJobs",
				"modelarts:devserver:queryHyperinstanceTags",
				"modelarts:devserver:get",
				"modelarts:devserver:getJob",
				"modelarts:devserver:listByUser",
				"modelarts:devserver:listJobTemplates",
				"modelarts:devserver:listHyperCluster",
				"modelarts:devserver:getHyperinstance",
				"modelarts:devserver:listImages",
				"modelarts:devserver:getJobService",
				"modelarts:devserver:listHyperinstanceClustersCapacity",
				"modelarts:devserver:getTopologies",
				"modelarts:devserver:getJobTemplate",
				"modelarts:devserver:listPublicIP",
				"modelarts:devserver:listHyperinstanceByUser",
				"modelarts:devserver:getHyperinstanceScaleEvaluations"
              ],
              "Effect":"Allow"
          }

API-Level Authorization Description

Table 3 Fine-grained Lite Server permissions

Permission

API

Action

Dependency

IAM Project

Enterprise Project

Obtaining all Lite Server instances of a user

GET /v1/{project_id}/dev-servers

modelarts:devserver:listByUser

-

√

×

Creating Lite Servers

POST /v1/{project_id}/dev-servers

modelarts:devserver:create

vpc:networks:list

vpc:networks:get

vpc:securityGroups:get

vpc:securityGroups:list

vpc:subnets:get

vpc:subnets:list

vpc:vpcs:get

vpc:vpcs:list

evs:volumes:list

evs:volumes:get

evs:types:get

evs:quotas:get

bms:servers:create

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:list

bms:serverQuotas:get

bms:servers:updateMetadata

ecs:servers:lock

ecs:servers:unlock

ecs:cloudServers:createServers

ecs:cloudServerQuotas:get

ecs:cloudServers:listServersDetails(ecs:cloudServers:list)

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:flavors:get

ecs:cloudServerFlavors:get

ecs:cloudServers:deleteServers(ecs:cloudServers:delete)

IMS

ecs:servers:list

ecs:servers:get

ims:images:get

kps:SSHKeyPair:get

√

×

Obtaining Lite Server instance details

GET /v1/{project_id}/dev-servers/{id}

modelarts:devserver:get

-

√

×

Deleting Lite Server instances

DELETE /v1/{project_id}/dev-servers/{id}

modelarts:devserver:delete

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:reInstallOS

bms:servers:list

ecs:cloudServers:listServersDetails(ecs:cloudServers:list)

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:cloudServers:deleteServers(ecs:cloudServers:delete)

vpc:ports:list

√

×

Synchronizing the status of all Lite Server instances of a user in real time

PUT /v1/{project_id}/dev-servers/sync

modelarts:devserver:sync

ecs:servers:lock

ecs:servers:get

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

√

×

Starting Lite Server instances

PUT /v1/{project_id}/dev-servers/{id}/start

modelarts:devserver:start

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:start

ecs:servers:lock

ecs:servers:unlock

ecs:servers:get

ecs:cloudServers:start

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

vpc:ports:list

√

×

Stopping Lite Server instances

PUT /v1/{project_id}/dev-servers/{id}/stop

modelarts:devserver:stop

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:stop

ecs:servers:lock

ecs:servers:unlock

ecs:servers:list

ecs:servers:get

ecs:cloudServers:stop

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

vpc:ports:list

√

×

Creating Lite Server supernode tags

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/tags/create

modelarts:devserver:createHyperinstanceTags

-

√

×

Deleting Lite Server supernode tags

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/tags/delete

modelarts:devserver:deleteHyperinstanceTags

-

√

×

Obtaining Lite Server supernode tags

GET /v1/{project_id}/dev-servers/hyperinstance/{id}/tags

modelarts:devserver:queryHyperinstanceTags

-

√

×

Reinstalling the OS image of a Lite Server

POST /v1/{project_id}/dev-servers/{id}/reinstallos

modelarts:devserver:reinstallOS

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:reInstallOS

ecs:servers:lock

ecs:servers:get

ecs:cloudServers:rebuild

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

kps:SSHKeyPair:get

√

×

Changing the OS image of a Lite Server

POST /v1/{project_id}/dev-servers/{id}/changeos

modelarts:devserver:changeOS

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:changeOS

ecs:servers:lock

ecs:servers:get

ecs:cloudServers:changeOS

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

kps:SSHKeyPair:get

√

×

Changing the OS image of a Lite Server supernode

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/changeos

modelarts:devserver:changeHyperinstanceOS

kps:SSHKeyPair:get

√

×

Obtaining details about all supernode instances of a user

GET /v1/{project_id}/dev-servers/hyperinstance

modelarts:devserver:listHyperinstanceByUser

-

√

×

Deleting Lite Server supernode instances

DELETE /v1/{project_id}/dev-servers/hyperinstance/{id}

modelarts:devserver:deleteHyperinstance

-

√

×

Restarting Lite Server instances

PUT /v1/{project_id}/dev-servers/{id}/reboot

modelarts:devserver:reboot

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:reboot

ecs:servers:get

ecs:cloudServers:reboot

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

√

×

Starting Lite Server supernode instances

PUT /v1/{project_id}/dev-servers/hyperinstance/{id}/start

modelarts:devserver:startHyperinstance

-

√

×

Stopping Lite Server supernode instances

PUT /v1/{project_id}/dev-servers/hyperinstance/{id}/stop

modelarts:devserver:stopHyperinstance

-

√

×

Obtaining the Lite Server list of a tenant

GET /v1/{project_id}/dev-servers/all

modelarts:devserver:list

-

√

×

Obtaining Lite Server image details

GET /v1/{project_id}/dev-servers/images/{id}

modelarts:devserver:getImage

-

√

×

Obtaining the Lite Server image list

GET /v1/{project_id}/dev-servers/images

modelarts:devserver:listImages

-

√

×

Batch deleting Lite Server jobs

DELETE /v1/{project_id}/dev-servers/jobs

modelarts:devserver:deleteJobs

-

√

×

Detaching data disks

DELETE /v1/{project_id}/dev-servers/{id}/detachvolume/{volume_id}

modelarts:devserver:detachVolume

ecs:cloudServers:detachVolume

√

×

Obtaining the Lite Server flavor list

GET /v1/{project_id}/dev-servers/flavors

modelarts:devserver:listFlavors

-

√

×

Obtaining details about all Lite Server supernode instances of a tenant

GET /v1/{project_id}/dev-servers/hyperinstance/all

modelarts:devserver:listHyperinstance

-

√

×

Obtaining details about a supernode instance

GET /v1/{project_id}/dev-servers/hyperinstance/{id}

modelarts:devserver:getHyperinstance

-

√

×

Obtaining operation details about a Lite Server supernode

GET /v1/{project_id}/dev-servers/hyperinstance/{id}/operation/{operation_id}

modelarts:devserver:getHyperinstanceOperation

-

√

×

Obtaining the IP address of the TOR switch corresponding to a Lite Server instance

GET /v1/{project_id}/dev-servers/instance-physical-topologies

modelarts:devserver:getTopologies

-

√

×

Obtaining the Lite Server job list

GET /v1/{project_id}/dev-servers/jobs

modelarts:devserver:listJobs

-

√

×

Obtaining Lite Server job details

GET /v1/{project_id}/dev-servers/jobs/{id}

modelarts:devserver:getJob

-

√

×

Obtaining Lite Server operation details

GET /v1/{project_id}/dev-servers/{id}/operation/{operation_id}

modelarts:devserver:getOperation

-

√

×

Obtaining bound EIPs

GET /v1/{project_id}/dev-servers/{id}/publicips

modelarts:devserver:listPublicIP

-

√

×

Scaling out Lite Server supernode instances

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/live-scale-up

modelarts:devserver:scaleUpHyperinstance

-

√

×

Submitting Lite Server jobs

POST /v1/{project_id}/dev-servers/jobs

modelarts:devserver:createJob

-

√

×

Creating RoCE networks

POST /v1/{project_id}/dev-servers/networks

modelarts:devserver:createRoceNetwork

vpc:networks:create

vpc:networks:list

vpc:networks:get

√

×

Attaching data disks

POST /v1/{project_id}/dev-servers/{id}/attachvolume

modelarts:devserver:attachVolume

evs:volumes:get

ecs:cloudServers:attach

evs:volumes:use

√

×

Binding EIPs

POST /v1/{project_id}/dev-servers/{id}/publicips

modelarts:devserver:bindPublicIP

eip:publicIps:get

√

×

Obtaining the logical capacity calculation result of hyper instance clusters

POST /v1/{project_id}/dev-servers/hyperinstance/cluster-capacity-evaluations

modelarts:devserver:listHyperinstanceClustersCapacity

-

√

×

Creating hyper clusters

POST /v1/{project_id}/dev-servers/hyper-clusters

modelarts:devserver:createHyperCluster

-

√

×

Obtaining hyper clusters

GET /v1/{project_id}/dev-servers/hyper-clusters

modelarts:devserver:listHyperCluster

-

√

×

Obtaining hyper cluster details

GET /v1/{project_id}/dev-servers/hyper-clusters/{id}

modelarts:devserver:getHyperCluster

-

√

×

Deleting hyper clusters

DELETE /v1/{project_id}/dev-servers/hyper-clusters/{id}

modelarts:devserver:deleteHyperCluster

-

√

×

Modifying Lite Server instance information

PUT /v1/{project_id}/dev-servers/{id}

modelarts:devserver:update

ecs:servers:lock

ecs:servers:get

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:cloudServers:updateServer

√

×

Obtaining the specifications supported by Lite Server supernode scaling and capacity calculation

GET /v1/{project_id}/dev-servers/hyperinstance/{id}/scale-evaluations

modelarts:devserver:getHyperinstanceScaleEvaluations

-

√

×

Obtaining Lite Server service details

GET /v1/{project_id}/dev-servers/jobs/services/{id}

modelarts:devserver:getJobService

-

√

×

Obtaining the Lite Server job template list

GET /v1/{project_id}/dev-servers/jobs/templates

modelarts:devserver:listJobTemplates

-

√

×

Obtaining Lite Server job template details

GET /v1/{project_id}/dev-servers/jobs/templates/{template_id}

modelarts:devserver:getJobTemplate

-

√

×

Batch operating Lite Servers

POST /v1/{project_id}/dev-servers/action

modelarts:devserver:batchAction

bms:servers:showBaremetalServer(bms:servers:get)

bms:servers:changeOS

bms:servers:reInstallOS

bms:servers:reboot

bms:servers:start

bms:servers:stop

ecs:servers:lock

ecs:servers:unlock

ecs:servers:get

ecs:servers:list

ecs:cloudServers:changeOS

ecs:cloudServers:rebuild

ecs:cloudServers:reboot

ecs:cloudServers:start

ecs:cloudServers:stop

ecs:cloudServers:showServer(ecs:cloudServers:get)

ecs:servers:list

ecs:servers:get

kps:SSHKeyPair:get

√

×

Scaling in Lite Server supernode instances

POST /v1/{project_id}/dev-servers/hyperinstance/{id}/live-scale-down

modelarts:devserver:scaleDownHyperinstance

-

√

×

Obtaining the Lite Server resource flavor list

GET /v1/{project_id}/dev-servers/resource-flavors

modelarts:devserver:listFlavors

-

√

×