Help Center/ Migration Center/ User Guide/ Permissions Management/ MgC Custom Policies
Updated on 2024-07-27 GMT+08:00
View PDF
Share

MgC Custom Policies

Custom policies can be created to supplement the system-defined policies of MgC.

You can create custom policies in either of the following ways:

  • Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of policy syntax.
  • JSON: Create a JSON policy from scratch or based on an existing policy.

For details, see Creating a Custom Policy. The following section contains examples of common MgC custom policies.

Example MgC Custom Policies

  • Allowing users to perform platform collection and resource management 
    {
       "Version": "1.1",
       "Statement": [
              {
                     "Effect": "Allow",
                     "Action": [
                            "mgc:*:query*",
                            "mgc:*:discovery"
                     ]
              }
       ]
}
  • Allowing users to perform TCO analysis and server assessment 
    {
    "Version": "1.1",
    "Statement": [
        {
            "Action": [
                "mgc:*:query*",
                "mgc:*:discovery",
                "mgc:*:assess",
                "iam:agencies:listAgencies",
            ],
            "Effect": "Allow"
        }
    ]
}

  • Allowing users to perform application dependency mapping 
    {
       "Version": "1.1",
       "Statement": [
              {
                     "Effect": "Allow",
                     "Action": [
                            "mgc:*:query*",
                            "mgc:*:discovery",
                            "mgc:*:appdiscovery"
                     ]
              }
       ]
}
  • Allowing users to use migration workflows 
    {
    "Version": "1.1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "mgc:*:query*",
                "mgc:*:discovery",
                "mgc:*:assess",
                "mgc:*:migrate",
                "iam:agencies:listAgencies"
            ]
        }
    ]
}
Parent topic: Permissions Management