Workspace

The Organizations service provides Service Control Policies (SCPs) for access control.

SCPs do not actually grant any permissions to a principal. They only set the permissions boundary for the principal. When SCPs are attached to a member account or an organizational unit (OU), they do not directly grant permissions to that member account or OU. Instead, the SCPs just determine what permissions are available for that member account or the member accounts under that OU.

This section describes the elements used by Organizations SCPs. The elements include actions, resources, and conditions.

For details about how to use these elements to edit a custom SCP policy, see Creating an SCP.

Actions

Actions are specific operations that are allowed or denied in an identity policy SCP.

The Access Level column describes how the action is classified (List, Read, or Write). This classification helps you understand the level of access that an action grants when you use it in an SCP.
The Resource Type column indicates whether the action supports resource-level permissions.
- You can use a wildcard (*) to indicate all resource types. If this column is empty (-), the action does not support resource-level permissions and you must specify all resources ("*") in your SCP statements.
- If this column includes a resource type, you must specify the URN in the Resource element of your statements.
- Required resources are marked with asterisks (*) in the table. If you specify a resource in a statement using this action, then it must be of this type.
For details about the resource types defined by Workspace, see Resources.
The Condition Key column includes keys that you can specify in the Condition element of an SCP statement.
- If the Resource Type column has values for an action, the condition key takes effect only for the listed resource types.
- If the Resource Type column is empty (-) for an action, the condition key takes effect for all resources that action supports.
- If the Condition Key column is empty (-) for an action, the action does not support any condition keys.
For details about condition keys defined by Workspace, see Conditions.

The following table lists the actions that you can define in SCP statements for Workspace.

**Table 1** Actions supported by Workspace
Action	Description	Access Level	Resource Type (*: Required)	Condition Key
workspace:authConfigs:get	Grants permission to query the configuration of the authentication login mode.	read	-	-
workspace:authConfigs:update	Grants permission to update authentication policy configurations.	write	-	-
workspace:assistAuthConfigs:get	Grants permission to query auxiliary authentication configurations.	read	-	-
workspace:assistAuthConfigs:update	Grants permission to update auxiliary authentication configurations.	write	-	-
workspace:jobs:retry	Grants permission to retry a task.	write	-	-
workspace:quotas:get	Grants permission to query tenant quotas.	read	-	-
workspace:tenants:getRoles	Grants permission to query tenant roles.	read	-	-
workspace:tenants:ListConfig	Grants permission to query customized tenant configurations.	list	-	-
workspace:tenants:updateConfig	Grants permission to modify customized tenant configurations.	write	-	-
workspace:natMappings:getConfig	Grants permission to query NAT mapping configuration items of a tenant.	read	-	-
workspace:natMappings:updateConfig	Grants permission to modify NAT mapping configuration items of a tenant.	write	-	-
workspace:tenants:get	Grants permission to query Huawei Cloud Workspace details.	read	-	-
workspace:tenants:open	Grants permission to subscribe to Huawei Cloud Workspace.	write	-	workspace:AccessMode
workspace:tenants:delete	Grants permission to unsubscribe from Huawei Cloud Workspace.	write	-	-
workspace:tenants:update	Grants permission to modify attributes of Huawei Cloud Workspace.	write	-	workspace:AccessMode
workspace:tenants:getLockStatus	Grants permission to query whether Huawei Cloud Workspace is locked.	read	-	-
workspace:tenants:unlock	Grants permission to unlock Huawei Cloud Workspace.	write	-	-
workspace:agencies:create	Grants permission to create an agency.	write	-	-
workspace:agencies:get	Grants permission to query agencies.	read	-	-
workspace:desktops:createAiAccelerateJob	Grants permission to create a rendering acceleration task.	write	-	-
workspace:desktops:getAiAccelerateJob	Grants permission to query rendering acceleration tasks.	read	-	-
workspace:desktops:getSysPrepInfo	Grants permission to query Sysprep details.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:checkBatchChangeImage	Grants permission to verify batch image switchover.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:tenants:listDesktopNamePolicies	Grants permission to query desktop naming policies.	list	-	-
workspace:tenants:createDesktopNamePolicy	Grants permission to create a desktop naming policy.	write	-	-
workspace:tenants:updateDesktopNamePolicy	Grants permission to update a desktop naming policy.	write	-	-
workspace:tenants:batchDeleteDesktopNamePolicies	Grants permission to delete desktop naming policies in batches.	write	-	-
workspace:desktopPools:create	Grants permission to create a desktop pool.	write	desktopPool *	-
			user	-
			userGroup	-
			-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktopPools:list	Grants permission to query desktop pools.	list	desktopPool *	-
workspace:desktopPools:update	Grants permission to modify desktop pool attributes.	write	desktopPool *	-
workspace:desktopPools:delete	Grants permission to delete a desktop pool.	write	desktopPool *	-
workspace:desktopPools:get	Grants permission to query desktop pool details.	read	desktopPool *	-
workspace:desktopPools:expand	Grants permission to expand the desktop pool capacity.	write	desktopPool *	-
workspace:desktopPools:resize	Grants permission to change desktop pool specifications.	write	desktopPool *	-
workspace:desktopPools:rebuild	Grants permission to recompose the system disk of a desktop pool.	write	desktopPool *	-
workspace:desktopPools:batchAddVolumes	Grants permission to add disks to desktop pools in batches.	write	desktopPool *	-
workspace:desktopPools:batchDeleteVolumes	Grants permission to delete disks from desktop pools in batches.	write	desktopPool *	-
workspace:desktopPools:batchExpandVolumes	Grants permission to expand the capacity of disks in batches in a desktop pool.	write	desktopPool *	-
workspace:desktopPools:operate	Grants permission to perform operations on a desktop pool.	write	desktopPool *	-
workspace:desktopPools:listUsers	Grants permission to query users and user groups authorized by the desktop pool.	list	desktopPool *	-
workspace:desktopPools:authorizeUsers	Grants permission to authorize users and user groups to access a desktop pool.	write	desktopPool *	-
			user	-
			userGroup	-
workspace:desktopPools:listDesktops	Grants permission to query desktop information in desktop pools.	list	desktopPool *	-
workspace:desktopPools:listScriptTasks	Grants permission to query the script execution task list of a desktop pool.	list	desktopPool *	-
workspace:desktopPools:executeScripts	Grants permission to execute desktop pool scripts in batches.	write	desktopPool *	-
workspace:desktopPools:executeScripts		write	script	-
workspace:desktopPools:sendNotifications	Grants permission to send notifications.	write	desktopPool *	-
workspace:desktops:export	Grants permission to export a desktop list.	list	desktop *	-
workspace:desktops:export	Grants permission to export a desktop list.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktops:create	Grants permission to create a desktop.	write	desktop *	-
workspace:desktops:create	Grants permission to create a desktop.	write	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId workspace:AssociatePublicIp workspace:AccessMode
workspace:desktops:list	Grants permission to query desktops.	list	desktop *	-
workspace:desktops:list	Grants permission to query desktops.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktops:update	Grants permission to update desktop information.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:delete	Grants permission to delete a desktop.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:get	Grants permission to query desktop details.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchDelete	Grants permission to delete desktops in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:logoff	Grants permission to log out of desktops in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listDetail	Grants permission to query desktop details.	list	desktop *	-
workspace:desktops:listDetail	Grants permission to query desktop details.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktops:operate	Grants permission to perform operations on a desktop.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:resize	Grants permission to change specifications.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:getConnectStatus	Grants permission to query desktop login status statistics.	read	-	-
workspace:desktops:ListStatus	Grants permission to query desktop login statuses.	list	-	-
workspace:desktops:rebuild	Grants permission to recompose desktops.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:getActions	Grants permission to query desktop power-on/off information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:createConsole	Grants permission to obtain the URL for remote login to the console.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:updateSids	Grants permission to update a desktop SID.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:rejoinDomain	Grants permission to rejoin the AD domain.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:createImage	Grants permission to convert a desktop to an image.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchDetach	Grants permission to unbind users in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:detach	Grants permission to unbind a user.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:attach	Grants permission to assign a desktop to a user.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:getNetwork	Grants permission to query desktop network information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:changeNetwork	Grants permission to switch the desktop network.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:exclusiveHosts:listDesktops	Grants permission to query exclusive desktop details.	list	exclusiveHost *	-
workspace:exclusiveHosts:listDesktops	Grants permission to query exclusive desktop details.	list	-	g:EnterpriseProjectId
workspace:desktops:listAll	Grants permission to query general-purpose desktops and rendering desktops.	list	desktop *	-
workspace:desktopAssociate:listDiscoverVmInfo	Grants permission to query the list of VMs that can be managed.	list	-	-
workspace:desktopAssociate:startTask	Grants permission to start a VM management task.	write	-	-
workspace:desktopAssociate:switchScanTask	Grants permission to enable a management scanning task.	write	-	-
workspace:desktopAssociate:getScanTaskSwitch	Grants permission to query management scanning tasks.	read	-	-
workspace:desktops:setMaintenanceMode	Grants permission to set the desktop administrator maintenance mode in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:prepAttachUsers	Grants permission to pre-assign desktops to users in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchAttachUsers	Grants permission to assign desktops to users in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:changeUsername	Grants permission to change usernames associated with desktops in Windows AD.	write	-	-
workspace:desktops:sendNotifications	Grants permission to send notifications.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:migrate	Grants permission to migrate desktops.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listAgents	Grants permission to query the list of desktops with installed agents.	list	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchInstallAgents	Grants permission to install agents for desktops in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listTags	Grants permission to query desktop tags.	list	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:tag	Grants permission to create a desktop tag.	tagging	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:tag	Grants permission to create a desktop tag.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:desktops:untag	Grants permission to delete a desktop tag.	tagging	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:untag	Grants permission to delete a desktop tag.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:desktops:listProjectTags	Grants permission to query project tags.	list	-	-
workspace:desktops:operateTags	Grants permission to add or delete tags in batches.	tagging	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:operateTags	Grants permission to add or delete tags in batches.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:desktops:listByTags	Grants permission to filter desktops by tag.	list	-	-
workspace:exclusiveHosts:create	Grants permission to create an exclusive host.	write	exclusiveHost *	-
workspace:exclusiveHosts:create	Grants permission to create an exclusive host.	write	-	g:EnterpriseProjectId
workspace:exclusiveHosts:list	Grants permission to query exclusive hosts.	list	exclusiveHost *	-
workspace:exclusiveHosts:list	Grants permission to query exclusive hosts.	list	-	g:EnterpriseProjectId
workspace:exclusiveHosts:check	Grants permission to check whether exclusive hosts can be created.	write	-	-
workspace:exclusiveHosts:get	Grants permission to query exclusive host details.	read	exclusiveHost *	g:EnterpriseProjectId
workspace:exclusiveHosts:update	Grants permission to update exclusive host information.	write	exclusiveHost *	g:EnterpriseProjectId
workspace:exclusiveHosts:delete	Grants permission to delete an exclusive host.	write	exclusiveHost *	g:EnterpriseProjectId
workspace:mkp:listImages	Grants permission to query images in KooGallery.	list	-	-
workspace:mkp:listCommodityInfos	Grants permission to query product information in KooGallery.	list	-	-
workspace:mkp:createOrder	Grants permission to create a product order in KooGallery.	write	-	-
workspace:mkp:listListProductReserve	Grants permission to query the KooGallery inventory.	list	-	-
workspace:mkp:listCommodityDetails	Grants permission to query product details in KooGallery.	list	-	-
workspace:mkp:listRelationCommodityDetails	Grants permission to query associated products.	list	-	-
workspace:mkp:listCommodityAgreements	Grants permission to query product agreements in KooGallery.	list	-	-
workspace:networks:listEips	Grants permission to query EIPs.	list	-	-
workspace:networks:createEips	Grants permission to create an EIP.	write	-	-
workspace:networks:bindEips	Grants permission to bind an EIP.	write	-	-
workspace:networks:unbindEips	Grants permission to unbind an EIP.	write	-	-
workspace:networks:getEipQuota	Grants permission to query EIP quotas.	read	-	-
workspace:networks:ListNatGateways	Grants permission to query NAT gateways.	list	-	-
workspace:orders:create	Grants permission to place a yearly/monthly order.	write	-	workspace:CreateOrderType workspace:AssociatePublicIp workspace:AccessMode
workspace:orders:change	Grants permission to create a change order.	write	-	workspace:ChangeOrderType
workspace:orders:batchInquiry	Grants permission to inquire prices in batches.	write	-	-
workspace:quotas:check	Grants permission to verify quotas.	write	-	-
workspace:renderDesktops:create	Grants permission to create a rendering desktop.	write	-	-
workspace:renderDesktops:delete	Grants permission to delete a rendering desktop.	write	-	-
workspace:renderDesktops:list	Grants permission to query rendering desktops.	list	-	-
workspace:renderDesktops:action	Grants permission to perform operations on a rendering desktop.	write	-	-
workspace:scheduledTasks:list	Grants permission to query scheduled tasks.	list	scheduledTask *	-
workspace:scheduledTasks:create	Grants permission to create a scheduled task.	write	scheduledTask *	-
			desktop	-
			desktopPool	-
			server	-
			serverGroup	-
workspace:scheduledTasks:get	Grants permission to query scheduled task details.	read	scheduledTask *	-
workspace:scheduledTasks:update	Grants permission to update a scheduled task.	write	scheduledTask *	-
			desktop	-
			desktopPool	-
			server	-
			serverGroup	-
workspace:scheduledTasks:delete	Grants permission to delete a scheduled task.	write	scheduledTask *	-
workspace:scheduledTasks:getFuture	Grants permission to query the future execution time of a scheduled task.	read	-	-
workspace:scheduledTasks:batchDelete	Grants permission to delete scheduled tasks in batches.	write	scheduledTask *	-
workspace:scheduledTasks:listRecords	Grants permission to query the execution records of a scheduled task.	list	scheduledTask *	-
workspace:scheduledTasks:getRecord	Grants permission to query details about scheduled task execution records.	read	scheduledTask *	-
workspace:scheduledTasks:exportRecords	Grants permission to export details about scheduled task execution records.	list	scheduledTask *	-
workspace:users:subscribeSharer	Grants permission to subscribe to collaborative resources.	write	user *	-
workspace:desktops:addSubResources	Grants permission to purchase depended desktop resources.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:deleteSubResources	Grants permission to delete depended desktop resources.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:createSnapshots	Grants permission to create a desktop snapshot.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:getSnapshots	Grants permission to query desktop snapshots.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:deleteSnapshots	Grants permission to delete a desktop snapshot.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:restoreBySnapshot	Grants permission to restore desktops using desktop snapshots.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:statistics:listDesktopStatus	Grants permission to collect statistics on desktop statuses.	list	-	-
workspace:statistics:getUnused	Grants permission to query desktops that are not in use in a specified period.	read	-	-
workspace:statistics:getUsed	Grants permission to query the desktop usage duration.	read	-	-
workspace:bindingPolicies:export	Grants permission to export information about terminal-desktop binding to an Excel file.	list	-	-
workspace:bindingPolicies:getConfig	Grants permission to query a terminal-desktop binding configuration.	read	-	-
workspace:bindingPolicies:createConfig	Grants permission to configure terminal-desktop binding.	write	-	-
workspace:bindingPolicies:get	Grants permission to query terminal-desktop binding configurations.	read	-	-
workspace:bindingPolicies:add	Grants permission to add a terminal-desktop binding configuration.	write	-	-
workspace:bindingPolicies:update	Grants permission to modify a terminal-desktop binding configuration.	write	-	-
workspace:bindingPolicies:delete	Grants permission to delete a terminal-desktop binding configuration.	write	-	-
workspace:volumes:delete	Grants permission to delete a desktop data disk.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:batchAdd	Grants permission to add a desktop disk.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:batchExpand	Grants permission to expand a desktop disk.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:wdh:getType	Grants permission to query Workspace host types.	read	wdh *	g:EnterpriseProjectId
workspace:wdh:get	Grants permission to query Workspace hosts.	read	wdh *	g:EnterpriseProjectId
workspace:desktops:getRemoteAssistance	Grants permission to query remote assistance information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:createRemoteAssistance	Grants permission to create remote assistance.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:cancelRemoteAssistance	Grants permission to cancel remote assistance.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:add	Grants permission to add disks to a single desktop.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:expand	Grants permission to expand disk capacity.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:listDssPoolsDetail	Grants permission to obtain the dedicated distributed storage pool list.	list	-	-
workspace:common:listTimezones	Grants permission to query the time zone configuration.	list	-	-
workspace:connections:securityExport	Grants permission to export connection records.	list	-	-
workspace:images:list	Grants permission to query supported images.	list	-	-
workspace:policyGroups:import	Grants permission to import a policy group.	write	-	-
workspace:accessPolicies:create	Grants permission to create an access policy.	write	-	-
workspace:accessPolicies:get	Grants permission to query access policies.	read	-	-
workspace:accessPolicies:delete	Grants permission to delete a specified access policy.	write	-	-
workspace:accessPolicies:getTarget	Grants permission to query objects to which a specified access policy is applied.	read	-	-
workspace:accessPolicies:updateTarget	Grants permission to update objects to which a specified access policy is applied.	write	-	-
workspace:products:listDesktopProducts	Grants permission to query the list of available product packages.	list	-	-
workspace:products:listSharerProducts	Grants permission to query the list of collaboration packages.	list	-	-
workspace:products:listInternetProducts	Grants permission to query the list of Internet access packages.	list	-	-
workspace:availabilityZones:list	Grants permission to query AZs where Workspace is available.	list	-	-
workspace:userGroups:export	Grants permission to export a user group.	list	userGroup *	-
workspace:users:export	Grants permission to export a user.	list	user *	-
workspace:users:import	Grants permission to import a user.	write	user *	-
workspace:userGroups:exportUsers	Grants permission to export users in a user group.	list	userGroup *	-
workspace:users:operate	Grants permission to operators (locking, unlocking, and resetting passwords).	write	user *	-
workspace:users:randomPassword	Grants permission to reset a random password for a user.	write	user *	-
workspace:users:deleteOtps	Grants permission to unbind an OTP device.	write	user *	-
workspace:users:resendEmail	Grants permission to resend an email.	write	user *	-
workspace:connections:securityList	Grants permission to query connection information.	list	-	-
workspace:connections:listOnlineUsers	Grants permission to query the number of login users.	list	-	-
workspace:userGroups:list	Grants permission to query user groups.	list	userGroup *	-
workspace:userGroups:create	Grants permission to create a user group.	write	userGroup *	-
workspace:userGroups:batchDelete	Grants permission to delete user groups in batches.	write	userGroup *	-
workspace:userGroups:delete	Grants permission to delete a desktop user group.	write	userGroup *	-
workspace:userGroups:update	Grants permission to modify user group information.	write	userGroup *	-
workspace:userGroups:operate	Grants permission to perform operations on a user group.	write	userGroup *	-
workspace:userGroups:operate	Grants permission to perform operations on a user group.	write	user *	-
workspace:userGroups:getUsers	Grants permission to query users in a user group.	list	userGroup *	-
workspace:jobs:listSubJobs	Grants permission to query subtasks.	list	-	-
workspace:jobs:deleteSubJobRecords	Grants permission to delete a subtask record.	write	-	-
workspace:ou:get	Grants permission to query OU information.	list	-	-
workspace:ou:create	Grants permission to add OU information.	write	-	-
workspace:ou:delete	Grants permission to delete OU information.	write	-	-
workspace:ou:update	Grants permission to update OU information.	write	-	-
workspace:policyGroups:list	Grants permission to query policy groups.	list	policyGroup *	-
workspace:policyGroups:create	Grants permission to add a policy group.	write	policyGroup *	-
			desktop	-
			desktopPool	-
			user	-
			userGroup	-
			appGroup	-
workspace:policyGroups:delete	Grants permission to delete a policy group.	write	policyGroup *	-
workspace:policyGroups:get	Grants permission to query policy groups.	read	policyGroup *	-
workspace:policyGroups:update	Grants permission to modify a policy group.	write	policyGroup *	-
			user	-
			userGroup	-
			appGroup	-
workspace:policyGroups:export	Grants permission to export a policy group.	list	policyGroup *	-
workspace:policyGroups:listPolicies	Grants permission to query policy items of a policy group.	list	policyGroup *	-
workspace:policyGroups:updatePolicies	Grants permission to modify policy items of a policy group.	write	policyGroup *	-
workspace:policyGroups:listTargets	Grants permission to query objects to which the policy group is applied.	list	policyGroup *	-
workspace:policyGroups:updateTargets	Grants permission to modify objects to which the policy group is applied.	write	policyGroup *	-
			desktop	-
			desktopPool	-
			user	-
			userGroup	-
			appGroup	-
workspace:policyGroups:listDetail	Grants permission to query details about policy groups.	list	policyGroup *	-
workspace:policyGroups:getOriginalPolicies	Grants permission to query initial policy items.	read	policyGroup *	-
workspace:users:list	Grants permission to query users.	list	user *	-
workspace:users:create	Grants permission to create a user.	write	user *	-
workspace:users:delete	Grants permission to delete a specified user.	write	user *	-
workspace:users:get	Grants permission to query user details.	read	user *	-
workspace:users:update	Grants permission to modify user information.	write	user *	-
workspace:users:batchDelete	Grants permission to delete users in batches.	write	user *	-
workspace:users:resetPassword	Grants permission to reset a user password.	write	user *	-
workspace:users:checkResetPasswordToken	Grants permission to verify tokens for resetting passwords of domain users.	write	user *	-
workspace:users:getTemplate	Grants permission to download a user template.	read	-	-
workspace:users:checkExist	Grants permission to check whether the user exists.	write	user *	-
workspace:users:listOtps	Grants permission to query OTP devices.	list	user *	-
workspace:users:getImportTemplate	Grants permission to download a created user template.	read	-	-
workspace:users:batchCreate	Grants permission to create users in batches.	write	user *	-
workspace:products:listVolumeProducts	Grants permission to query disk products.	list	-	-
workspace:tenants:listExportTasks	Grants permission to query export tasks.	list	-	-
workspace:tenants:deleteExportTasks	Grants permission to delete export task records in batches.	write	-	-
workspace:tenants:exportData	Grants permission to download an exported file.	read	-	-
workspace:statistics:listAlarm	Grants permission to query alarms.	list	-	-
workspace:statistics:getAlarm	Grants permission to query the number of alarms.	read	-	-
workspace:statistics:getGrowthRate	Grants permission to query the chain value of a metric.	read	-	-
workspace:statistics:getMetric	Grants permission to query metrics.	read	-	-
workspace:statistics:getMetricTrend	Grants permission to query the metric trend.	read	-	-
workspace:statistics:updateNotificationRules	Grants permission to update a metric notification rule.	write	-	-
workspace:statistics:deleteNotificationRules	Grants permission to delete a metric notification rule.	write	-	-
workspace:statistics:createNotifyRules	Grants permission to add a metric notification rule.	write	-	-
workspace:statistics:listNotificationRules	Grants permission to query metric notification rules.	list	-	-
workspace:statistics:listNotificationRecords	Grants permission to query metric notification records.	list	-	-
workspace:statistics:listDesktopMetrics	Grants permission to query desktop usage statistics.	list	-	-
workspace:statistics:exportDesktopMetrics	Grants permission to export desktop usage statistics.	list	-	-
workspace:statistics:listUserMetrics	Grants permission to query user usage statistics.	list	-	-
workspace:statistics:exportUserMetrics	Grants permission to export user usage statistics.	list	-	-
workspace:appcenter:createBucketCredential	Grants permission to generate OBS bucket credential information.	write	-	-
workspace:appcenter:createAndAuthorizeBucket	Grants permission to add a default OBS bucket and access the bucket.	write	-	-
workspace:appcenter:listApps	Grants permission to query applications by name.	list	-	-
workspace:appcenter:createApp	Grants permission to upload an application.	write	-	-
workspace:appcenter:updateApp	Grants permission to modify an application.	write	-	-
workspace:appcenter:deleteApp	Grants permission to delete an application.	write	-	-
workspace:appcenter:installApp	Grants permission to automatically install an application.	write	-	-
workspace:appcenter:listAppAuthorizations	Grants permission to query application authorization information.	list	-	-
workspace:appcenter:batchUpdateAppAuthorizations	Grants permission to set application authorization.	write	-	-
workspace:appcenter:batchDeleteApps	Grants permission to delete applications in batches.	write	-	-
workspace:appcenter:batchDisableApps	Grants permission to set applications to be invisible in batches.	write	-	-
workspace:appcenter:batchEnableApps	Grants permission to set applications to be visible in batches.	write	-	-
workspace:appcenter:batchInstallApps	Grants permission to automatically install applications in batches.	write	-	-
workspace:appcenter:listAppCatalogs	Grants permission to query application categories.	list	-	-
workspace:appcenter:listJobs	Grants permission to query application installation job information.	list	-	-
workspace:appcenter:batchDeleteJobs	Grants permission to delete jobs in batches.	write	-	-
workspace:appcenter:retryJobs	Grants permission to retry a failed job.	write	-	-
workspace:appcenter:createAppRule	Grants permission to create an application rule.	write	-	-
workspace:appcenter:listAppRule	Grants permission to query application rules.	list	-	-
workspace:appcenter:updateAppRule	Grants permission to modify an application rule.	write	-	-
workspace:appcenter:deleteAppRule	Grants permission to delete an application rule.	write	-	-
workspace:appcenter:batchDeleteAppRules	Grants permission to delete application rules in batches.	write	-	-
workspace:appcenter:enableRuleRestriction	Grants permission to enable rule control.	write	-	-
workspace:appcenter:disableRuleRestriction	Grants permission to disable rule control.	write	-	-
workspace:appcenter:addRestrictedRule	Grants permission to add a control rule.	write	-	-
workspace:appcenter:listRestrictedRule	Grants permission to query control rules.	list	-	-
workspace:appcenter:deleteRestrictedRule	Grants permission to delete control rules in batches.	write	-	-
workspace:appcenter:updateTenantProfile	Grants permission to enable or disable the tenant function.	write	-	-
workspace:appcenter:listTenantProfiles	Grants permission to query the tenant function status.	list	-	-
workspace:scripts:create	Grants permission to create a script.	write	script *	-
workspace:scripts:list	Grants permission to query the script list.	list	script *	-
workspace:scripts:get	Grants permission to query script details.	read	script *	-
workspace:scripts:put	Grants permission to update a script.	write	script *	-
workspace:scripts:delete	Grants permission to delete a script.	write	script *	-
workspace:scripts:execute	Grants permission to run scripts or commands in batches.	write	script *	-
workspace:scripts:execute	Grants permission to run scripts or commands in batches.	write	desktop *	-
workspace:scripts:getRecordDetail	Grants permission to query script or command execution record details.	read	script *	-
workspace:scripts:listRecords	Grants permission to query script execution records.	list	script *	-
workspace:scripts:listTasks	Grants permission to query script tasks.	list	script *	-
workspace:scripts:retry	Grants permission to retry a script.	write	script *	-
workspace:scripts:stop	Grants permission to stop a script or command execution task.	write	script *	-
workspace:scripts:download	Grants permission to download a script output record.	write	script *	-
workspace:tenants:getShareSpaceConfig	Grants permission to query collaboration configurations.	read	-	-
workspace:tenants:updateShareSpaceConfig	Grants permission to modify collaboration configurations.	write	-	-
workspace:authConfigs:getStatus	Grants permission to query the authentication status.	read	-	-
workspace:privacystatements:sign	Grants permission to sign the privacy statement.	write	-	-
workspace:sites:get	Grants permission to query site information.	read	-	-
workspace:sites:add	Grants permission to add a site.	write	-	workspace:AccessMode
workspace:sites:delete	Grants permission to delete a site.	write	-	-
workspace:sites:updateAccessMode	Grants permission to change the site access mode.	write	-	workspace:AccessMode
workspace:sites:updateSubnets	Grants permission to change the site service subnet.	write	-	-
workspace:tenants:checkEnterpriseIds	Grants permission to check whether the enterprise ID has been used.	write	-	-
workspace:tenants:updateEnterpriseId	Grants permission to change the enterprise ID.	write	-	-
workspace:bandwidth:create	Grants permission to enable the Workspace bandwidth.	write	-	-
workspace:bandwidth:list	Grants permission to query the Workspace bandwidth list.	list	-	-
workspace:bandwidth:update	Grants permission to modify the Workspace bandwidth.	write	-	-
workspace:bandwidth:delete	Grants permission to cancel the Workspace bandwidth.	write	-	-
workspace:bandwidth:getControlConfig	Grants permission to query the control configuration of the Workspace bandwidth.	read	-	-
workspace:bandwidth:updateControlConfig	Grants permission to modify the control configuration of the Workspace bandwidth.	write	-	-
workspace:bandwidth:createChangeOrder	Grants permission to create a Workspace bandwidth change order.	write	-	-
workspace:desktops:batchCreateSnapshots	Grants permission to create desktop snapshots in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchDeleteSnapshots	Grants permission to delete desktop snapshots in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchRestoreSnapshots	Grants permission to restore desktop snapshots in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listSnapshots	Grants permission to query desktop snapshots.	list	-	-
workspace:desktops:verifyDesktopName	Grants permission to verify the desktop name.	write	-	-
workspace:networks:getAvailableIp	Grants permission to query available IP addresses of a subnet by subnet ID.	read	-	-
workspace:desktops:getAdStatus	Grants permission to query the AD network status.	read	-	-
workspace:networks:checkIpIfExist	Grants permission to check whether the IP address exists.	write	-	-
workspace:images:checkIfExist	Grants permission to check whether the image exists.	write	-	-
workspace:wdh:listDesktops	Grants permission to query desktops of a Workspace host.	list	wdh *	-
workspace:wdh:listDesktops	Grants permission to query desktops of a Workspace host.	list	-	g:EnterpriseProjectId
workspace:wdh:update	Grants permission to update Workspace host information.	write	wdh *	g:EnterpriseProjectId
workspace:bindingPolicies:getTemplate	Grants permission to download the template for terminal-desktop binding.	read	-	-
workspace:bindingPolicies:import	Grants permission to import terminal-desktop binding in batches.	write	-	-
workspace:statistics:getRunState	Grants permission to collect statistics on running statuses.	read	-	-
workspace:statistics:getLoginState	Grants permission to collect statistics on login statuses.	read	-	-
workspace:networks:getUsingSubnets	Grants permission to query subnets being used.	read	-	-
workspace:networks:listPorts	Grants permission to query ports.	list	-	-
workspace:renderDesktops:createConsole	Grants permission to obtain the URL for remote login to the console.	write	-	-
workspace:renderDesktops:resize	Grants permission to change rendering desktop specifications.	write	-	-
workspace:exclusiveHosts:resizeLites	Grants permission to modify exclusive host specifications.	write	exclusiveHost *	g:EnterpriseProjectId
workspace:desktops:getMonitor	Grants permission to query desktop monitoring information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listDetachInfo	Grants permission to query users unbound from the desktop.	list	desktop *	-
workspace:desktops:listDetachInfo	Grants permission to query users unbound from the desktop.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktops:getSysprepVersion	Grants permission to query Sysprep version information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:networks:createNat	Grants permission to enable the Internet access function of the NAT Gateway.	write	-	-
workspace:networks:listNats	Grants permission to query the Internet access function of the NAT Gateway.	list	-	-
workspace:networks:listSubnets	Grants permission to query subnets.	list	-	-
workspace:networks:listVpcs	Grants permission to query VPCs.	list	-	-
workspace:policyGroups:createTemplate	Grants permission to create a policy template.	write	-	-
workspace:policyGroups:listTemplate	Grants permission to query policy templates.	list	-	-
workspace:policyGroups:updateTemplate	Grants permission to update a policy template.	write	-	-
workspace:networks:listSecurityGroups	Grants permission to query security groups.	list	-	-
workspace:availabilityZones:getSummary	Grants permission to query AZ summary.	read	-	-
workspace:availabilityZones:get	Grants permission to query AZ details.	read	-	-
workspace:users:importUser	Grants permission to import a user list.	write	user *	-
workspace:users:uploadTemplate	Grants permission to import a desktop user list.	write	user *	-
workspace:accessPolicies:update	Grants permission to update a specified access policy.	write	-	-
workspace:desktops:verifySource	Grants permission to verify desktop sources.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listDesktopNetworks	Grants permission to query desktop network information in batches.	list	desktop *	-
workspace:desktops:batchChangeNetwork	Grants permission to switch desktop networks in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:jobs:get	Grants permission to query task details.	read	-	-
workspace:accessPolicies:importIp	Grants permission to import the IP address list.	write	-	-
workspace:accessPolicies:getIpImportTemplate	Grants permission to download the template for importing IP addresses.	read	-	-
workspace:sites:listEdgeSites	Grants permission to query edge sites.	list	-	-
workspace:sites:checkEdgeSiteResources	Grants permission to verify edge site resources.	write	-	-
workspace:ou:listAdOus	Grants permission to query OU information in the AD domain.	list	-	-
workspace:ou:listOuUsers	Grants permission to query user information in the OU.	list	-	-
workspace:ou:importUsersByOU	Grants permission to import OU users.	write	-	-
workspace:appGroup:list	Grants permission to query application groups.	list	appGroup *	-
workspace:appGroup:create	Grants permission to create an application group.	write	appGroup *	-
workspace:appGroup:create	Grants permission to create an application group.	write	serverGroup	-
workspace:appGroup:delete	Grants permission to delete an application group.	write	appGroup *	-
workspace:appGroup:get	Grants permission to query application group details.	read	appGroup *	-
workspace:appGroup:update	Grants permission to modify an application group.	write	appGroup *	-
workspace:appGroup:update	Grants permission to modify an application group.	write	serverGroup	-
workspace:app:listPublishedApp	Grants permission to query published applications.	list	app *	-
workspace:app:listPublishedApp	Grants permission to query published applications.	list	appGroup *	-
workspace:app:publish	Grants permission to publish an application.	write	app *	-
workspace:app:publish	Grants permission to publish an application.	write	appGroup *	-
workspace:app:get	Grants permission to query application details.	read	app *	-
workspace:app:get	Grants permission to query application details.	read	appGroup *	-
workspace:app:update	Grants permission to modify application information.	write	app *	-
workspace:app:update	Grants permission to modify application information.	write	appGroup *	-
workspace:app:deleteIcon	Grants permission to delete a custom application icon.	write	app *	-
workspace:app:deleteIcon	Grants permission to delete a custom application icon.	write	appGroup *	-
workspace:app:uploadIcon	Grants permission to modify a custom application icon.	write	app *	-
workspace:app:uploadIcon	Grants permission to modify a custom application icon.	write	appGroup *	-
workspace:app:check	Grants permission to verify applications.	write	app *	-
workspace:app:check	Grants permission to verify applications.	write	appGroup *	-
workspace:app:batchDisable	Grants permission to disable applications in batches.	write	app *	-
workspace:app:batchDisable	Grants permission to disable applications in batches.	write	appGroup *	-
workspace:app:batchEnable	Grants permission to enable applications in batches.	write	app *	-
workspace:app:batchEnable	Grants permission to enable applications in batches.	write	appGroup *	-
workspace:app:unpublish	Grants permission to unpublish applications in batches.	write	app *	-
workspace:app:unpublish	Grants permission to unpublish applications in batches.	write	appGroup *	-
workspace:appGroup:listPublishableApp	Grants permission to query applications that can be published.	list	appGroup *	-
workspace:appGroup:batchDeleteAuthorization	Grants permission to remove application group authorization.	write	appGroup *	-
			user	-
			userGroup	-
workspace:appGroup:disassociate	Grants permission to disassociate a service group from all application groups.	write	-	-
workspace:appGroup:listAuthorization	Grants permission to query application group authorization records.	list	appGroup *	-
workspace:appGroup:addAuthorization	Grants permission to add application group authorization.	write	appGroup *	-
			user	-
			userGroup	-
workspace:appGroup:batchDelete	Grants permission to delete application groups in batches.	write	appGroup *	-
workspace:appGroup:check	Grants permission to verify an application group.	write	-	-
workspace:serverGroup:list	Grants permission to query server groups.	list	serverGroup *	-
workspace:serverGroup:list	Grants permission to query server groups.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:serverGroup:create	Grants permission to create a server group.	write	serverGroup *	-
workspace:serverGroup:create	Grants permission to create a server group.	write	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:serverGroup:delete	Grants permission to delete a server group.	write	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:get	Grants permission to query a specified server group.	read	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:update	Grants permission to modify a server group.	write	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:getServerState	Grants permission to query server statuses in a specified server group.	read	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:listDetail	Grants permission to query basic information about a tenant server group.	list	serverGroup *	-
workspace:serverGroup:getRestrict	Grants permission to query specified tenant server groups.	read	serverGroup *	-
workspace:serverGroup:validate	Grants permission to verify a server group.	write	serverGroup *	-
workspace:serverGroup:tagResource	Grants permission to add a tag to a server group.	tagging	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:tagResource	Grants permission to add a tag to a server group.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:serverGroup:unTagResource	Grants permission to delete a tag from a server group.	tagging	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:unTagResource	Grants permission to delete a tag from a server group.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:serverGroup:listTagsForResource	Grants permission to query server group tags.	list	serverGroup *	-
workspace:serverGroup:listTagsForResource	Grants permission to query server group tags.	list	-	g:EnterpriseProjectId
workspace:serverGroup:listTags	Grants permission to query tags on all servers of a tenant.	list	serverGroup *	-
workspace:serverGroup:batchCreateTags	Grants permission to add server group tags in batches.	tagging	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:batchCreateTags	Grants permission to add server group tags in batches.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:serverGroup:batchDeleteTags	Grants permission to delete server group tags in batches.	tagging	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:batchDeleteTags	Grants permission to delete server group tags in batches.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:server:list	Grants permission to query servers.	list	server *	-
workspace:server:delete	Grants permission to delete a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:get	Grants permission to query a specified server.	read	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:update	Grants permission to modify a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:changeImage	Grants permission to modify a server image.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:reinstall	Grants permission to reinstall a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:getVncUrl	Grants permission to obtain a VNC login address.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:accessAgent:list	Grants permission to query the latest versions of all HDAs of a tenant.	list	-	-
workspace:accessAgent:batchUpgrade	Grants permission to upgrade the HDA version of servers in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:accessAgent:listLatestVersion	Grants permission to query the latest HDA version of a tenant.	list	-	-
workspace:server:listAccessAgentDetails	Grants permission to query HDA information of a server.	list	server *	-
workspace:accessAgent:getUpgradeFlag	Grants permission to query HDA upgrade notification flags.	read	-	-
workspace:accessAgent:updateUpgradeFlag	Grants permission to update an HDA upgrade notification flag.	write	-	-
workspace:accessAgent:listUpgradeRecords	Grants permission to query HDA upgrade tracing records of a server.	list	-	-
workspace:server:batchDelete	Grants permission to delete servers in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchChangeMaintainMode	Grants permission to mark the server maintenance status.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchReboot	Grants permission to restart a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchRejoinDomain	Grants permission to add servers to a domain again in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchStart	Grants permission to start a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchStop	Grants permission to stop a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchUpdateTsvi	Grants permission to update virtual session IP configurations of servers in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:create	Grants permission to create an APS.	write	server *	-
			serverGroup *	-
			-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:server:batchMigrateHosts	Grants permission to migrate servers at the source Workspace host to the destination one.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchMigrateHosts		write	wdh *	-
workspace:server:getMetricData	Grants permission to query monitoring information of an APS.	read	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:jobs:batchDeleteSubJobs	Grants permission to delete subtasks in batches.	write	-	-
workspace:jobs:countSubJobs	Grants permission to query the number of subtasks.	list	-	-
workspace:appWarehouse:authorizeObs	Grants permission to obtain the AK/SK uploaded to an OBS bucket.	write	-	-
workspace:appWarehouse:batchDeleteApp	Grants permission to delete specified applications from the application repository in batches.	write	-	-
workspace:appWarehouse:ListWarehouseApps	Grants permission to query applications in a tenant application repository.	list	-	-
workspace:appWarehouse:createApp	Grants permission to add an application to the application repository.	write	-	-
workspace:appWarehouse:deleteApp	Grants permission to delete a specified application from the application repository.	write	-	-
workspace:appWarehouse:uploadAppIcon	Grants permission to upload an icon file to the application repository.	write	-	-
workspace:appWarehouse:createBucketOrAcl	Grants permission to add a bucket or authorize access to a bucket.	write	-	-
workspace:images:listImageJobs	Grants permission to query tasks of a tenant.	list	-	-
workspace:images:getImageJob	Grants permission to query task details.	read	-	-
workspace:imageServer:list	Grants permission to query image instances.	list	imageServer *	-
workspace:imageServer:list	Grants permission to query image instances.	list	-	g:EnterpriseProjectId
workspace:imageServer:create	Grants permission to create an image instance.	write	imageServer *	-
workspace:imageServer:create	Grants permission to create an image instance.	write	-	g:EnterpriseProjectId
workspace:imageServer:get	Grants permission to query a specified image instance.	read	imageServer *	g:EnterpriseProjectId
workspace:imageServer:update	Grants permission to modify an image instance.	write	imageServer *	g:EnterpriseProjectId
workspace:imageServer:attachApp	Grants permission to distribute software information to image instances.	write	imageServer *	g:EnterpriseProjectId
workspace:imageServer:listLatestAttachedApp	Grants permission to query information about the latest distributed software.	list	imageServer *	-
workspace:imageServer:recreate	Grants permission to build an Application Streaming image.	write	imageServer *	g:EnterpriseProjectId
workspace:imageServer:batchDelete	Grants permission to delete image instances in batches.	write	imageServer *	g:EnterpriseProjectId
workspace:imageServer:listImageSubJobs	Grants permission to query subtasks.	list	-	-
workspace:imageServer:batchDeleteImageSubJobs	Grants permission to delete subtasks in batches.	write	-	-
workspace:imageServer:countImageSubJobs	Grants permission to query the number of subtasks.	read	-	-
workspace:appGroup:listMailRecord	Grants permission to query records of sending emails on application group authorization.	list	-	-
workspace:appGroup:resendMail	Grants permission to resend an email on application group authorization (based on authorization email records).	write	-	-
workspace:storage:listPersistentStorage	Grants permission to query Workspace storage space.	list	storage *	-
workspace:storage:createPersistentStorage	Grants permission to create Workspace storage space.	write	storage *	-
workspace:storage:deletePersistentStorage	Grants permission to delete Workspace storage space.	write	storage *	-
workspace:storage:updateUserFolderAssignment	Grants permission to create a personal storage directory.	write	storage *	-
workspace:storage:updateShareFolderAssignment	Grants permission to change members of a shared directory.	write	storage *	-
workspace:storage:createShareFolder	Grants permission to create a shared storage directory.	write	storage *	-
workspace:storage:deleteStorageClaim	Grants permission to delete a shared directory.	write	storage *	-
workspace:storage:deleteUserStorageAttachment	Grants permission to delete a personal storage directory.	write	storage *	-
workspace:storage:batchDeletePersistentStorage	Grants permission to delete Workspace storage space in batches.	write	storage *	-
workspace:storage:listStorageAssignment	Grants permission to query personal storage directories.	list	storage *	-
workspace:storage:listShareFolder	Grants permission to query shared storage directories.	list	storage *	-
workspace:policyGroups:deleteTemplate	Grants permission to delete a policy template.	write	-	-
workspace:privacystatements:get	Grants permission to query the latest privacy statement.	read	-	-
workspace:scalingPolicy:delete	Grants permission to delete an auto scaling policy.	write	-	-
workspace:scalingPolicy:list	Grants permission to query auto scaling policies of a server group.	read	-	-
workspace:scalingPolicy:create	Grants permission to add or modify an auto scaling policy.	write	-	-
workspace:session:listAppConnection	Grants permission to query application usage records.	write	-	-
workspace:session:logoffUserSession	Grants permission to log out of a session.	write	-	-
workspace:session:listUserConnection	Grants permission to query user login records.	write	-	-
workspace:session:listSessionByUserName	Grants permission to query current sessions by username.	list	-	-
workspace:storagePolicy:create	Grants permission to add or update a custom policy for storage directory access.	write	storage *	-
workspace:storagePolicy:list	Grants permission to query policies for storage directory access.	list	storage *	-
workspace:storage:listSfs3Storage	Grants permission to query SFS 3.0.	list	storage *	-
workspace:baseResource:list	Grants permission to query AZs.	list	-	-
workspace:tenants:listConfigInfo	Grants permission to query enterprise system configurations.	list	-	-
workspace:tenants:active	Grants permission to activate and initialize a tenant service.	write	-	-
workspace:tenants:listTenantProfile	Grants permission to query tenant information.	list	-	-
workspace:server:listServerMetricData	Grants permission to query server monitoring data.	list	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:session:listSessions	Grants permission to query enterprise sessions.	list	-	-
workspace:appWarehouse:updateApp	Grants permission to update an application in the application repository.	write	-	-
workspace:server:batchChangeImage	Grants permission to switch server images in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchReinstall	Grants permission to reinstall servers in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:authConfigs:get	Grants permission to query the configuration of the authentication login mode.	read	-	-
workspace:authConfigs:update	Grants permission to update authentication policy configurations.	write	-	-
workspace:assistAuthConfigs:get	Grants permission to query auxiliary authentication configurations.	read	-	-
workspace:assistAuthConfigs:update	Grants permission to update auxiliary authentication configurations.	write	-	-
workspace:jobs:retry	Grants permission to retry a task.	write	-	-
workspace:quotas:get	Grants permission to query tenant quotas.	read	-	-
workspace:tenants:getRoles	Grants permission to query tenant roles.	read	-	-
workspace:tenants:ListConfig	Grants permission to query customized tenant configurations.	list	-	-
workspace:tenants:updateConfig	Grants permission to modify customized tenant configurations.	write	-	-
workspace:natMappings:getConfig	Grants permission to query NAT mapping configuration items of a tenant.	read	-	-
workspace:natMappings:updateConfig	Grants permission to modify NAT mapping configuration items of a tenant.	write	-	-
workspace:tenants:get	Grants permission to query Huawei Cloud Workspace details.	read	-	-
workspace:tenants:open	Grants permission to subscribe to Huawei Cloud Workspace.	write	-	workspace:AccessMode
workspace:tenants:delete	Grants permission to unsubscribe from Huawei Cloud Workspace.	write	-	-
workspace:tenants:update	Grants permission to modify attributes of Huawei Cloud Workspace.	write	-	workspace:AccessMode
workspace:tenants:getLockStatus	Grants permission to query whether Huawei Cloud Workspace is locked.	read	-	-
workspace:tenants:unlock	Grants permission to unlock Huawei Cloud Workspace.	write	-	-
workspace:agencies:create	Grants permission to create an agency.	write	-	-
workspace:agencies:get	Grants permission to query agencies.	read	-	-
workspace:desktops:commitAiAccelerateJob	Grants permission to create a rendering acceleration task.	write	-	-
workspace:desktops:getAiAccelerateJob	Grants permission to query rendering acceleration tasks.	read	-	-
workspace:desktops:getSysPrepInfo	Grants permission to query Sysprep details.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:checkBatchChangeImage	Grants permission to verify batch image switchover.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:tenants:listDesktopNamePolicies	Grants permission to query desktop naming policies.	list	-	-
workspace:tenants:createDesktopNamePolicy	Grants permission to create a desktop naming policy.	write	-	-
workspace:tenants:updateDesktopNamePolicy	Grants permission to update a desktop naming policy.	write	-	-
workspace:tenants:batchDeleteDesktopNamePolicies	Grants permission to delete desktop naming policies in batches.	write	-	-
workspace:desktopPools:create	Grants permission to create a desktop pool.	write	desktopPool *	-
			user	-
			userGroup	-
			-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktopPools:list	Grants permission to query desktop pools.	list	desktopPool *	-
workspace:desktopPools:update	Grants permission to modify desktop pool attributes.	write	desktopPool *	-
workspace:desktopPools:delete	Grants permission to delete a desktop pool.	write	desktopPool *	-
workspace:desktopPools:get	Grants permission to query desktop pool details.	read	desktopPool *	-
workspace:desktopPools:expand	Grants permission to expand the desktop pool capacity.	write	desktopPool *	-
workspace:desktopPools:resize	Grants permission to change desktop pool specifications.	write	desktopPool *	-
workspace:desktopPools:rebuild	Grants permission to recompose the system disk of a desktop pool.	write	desktopPool *	-
workspace:desktopPools:batchAddVolumes	Grants permission to add disks to desktop pools in batches.	write	desktopPool *	-
workspace:desktopPools:batchDeleteVolumes	Grants permission to delete disks from desktop pools in batches.	write	desktopPool *	-
workspace:desktopPools:batchExpandVolumes	Grants permission to expand the capacity of disks in batches in a desktop pool.	write	desktopPool *	-
workspace:desktopPools:operate	Grants permission to perform operations on a desktop pool.	write	desktopPool *	-
workspace:desktopPools:listUsers	Grants permission to query users and user groups authorized by the desktop pool.	list	desktopPool *	-
workspace:desktopPools:authorizeUsers	Grants permission to authorize users and user groups to access a desktop pool.	write	desktopPool *	-
			user	-
			userGroup	-
workspace:desktopPools:listDesktops	Grants permission to query desktop information in desktop pools.	list	desktopPool *	-
workspace:desktopPools:listScriptTasks	Grants permission to query the script execution task list of a desktop pool.	list	desktopPool *	-
workspace:desktopPools:executeScripts	Grants permission to execute desktop pool scripts in batches.	write	desktopPool *	-
workspace:desktopPools:executeScripts		write	script	-
workspace:desktopPools:sendNotifications	Grants permission to send notifications.	write	desktopPool *	-
workspace:desktops:export	Grants permission to export a desktop list.	list	desktop *	-
workspace:desktops:export	Grants permission to export a desktop list.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktops:create	Grants permission to create a desktop.	write	desktop *	-
workspace:desktops:create	Grants permission to create a desktop.	write	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId workspace:AssociatePublicIp workspace:AccessMode
workspace:desktops:list	Grants permission to query desktops.	list	desktop *	-
workspace:desktops:list	Grants permission to query desktops.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktops:update	Grants permission to update desktop information.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:delete	Grants permission to delete a desktop.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:get	Grants permission to query desktop details.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchDelete	Grants permission to delete desktops in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:logoff	Grants permission to log out of desktops in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listDetail	Grants permission to query desktop details.	list	desktop *	-
workspace:desktops:listDetail	Grants permission to query desktop details.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktops:operate	Grants permission to perform operations on a desktop.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:resize	Grants permission to change specifications.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:getConnectStatus	Grants permission to query desktop login status statistics.	read	-	-
workspace:desktops:ListStatus	Grants permission to query desktop login statuses.	list	-	-
workspace:desktops:rebuild	Grants permission to recompose desktops.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:getActions	Grants permission to query desktop power-on/off information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:createConsole	Grants permission to obtain the URL for remote login to the console.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:updateSids	Grants permission to update a desktop SID.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:rejoinDomain	Grants permission to rejoin the AD domain.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:createImage	Grants permission to convert a desktop to an image.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchDetach	Grants permission to unbind users in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:detach	Grants permission to unbind a user.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:attach	Grants permission to assign a desktop to a user.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:getNetwork	Grants permission to query desktop network information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:changeNetwork	Grants permission to switch the desktop network.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:exclusiveHosts:listDesktops	Grants permission to query exclusive desktop details.	list	exclusiveHost *	-
workspace:exclusiveHosts:listDesktops	Grants permission to query exclusive desktop details.	list	-	g:EnterpriseProjectId
workspace:desktops:listAll	Grants permission to query general-purpose desktops and rendering desktops.	list	desktop *	-
workspace:desktopAssociate:listDiscoverVmInfo	Grants permission to query the list of VMs that can be managed.	list	-	-
workspace:desktopAssociate:startTask	Grants permission to start a VM management task.	write	-	-
workspace:desktopAssociate:switchScanTask	Grants permission to enable a management scanning task.	write	-	-
workspace:desktopAssociate:getScanTaskSwitch	Grants permission to query management scanning tasks.	read	-	-
workspace:desktops:setMaintenanceMode	Grants permission to set the desktop administrator maintenance mode in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:prepAttachUsers	Grants permission to pre-assign desktops to users in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchAttachUsers	Grants permission to assign desktops to users in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:changeUsername	Grants permission to change usernames associated with desktops in Windows AD.	write	-	-
workspace:desktops:sendNotifications	Grants permission to send notifications.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:migrate	Grants permission to migrate desktops.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listAgents	Grants permission to query the list of desktops with installed agents.	list	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchInstallAgents	Grants permission to install agents for desktops in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listTags	Grants permission to query desktop tags.	list	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:tag	Grants permission to create a desktop tag.	tagging	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:tag	Grants permission to create a desktop tag.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:desktops:untag	Grants permission to delete a desktop tag.	tagging	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:untag	Grants permission to delete a desktop tag.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:desktops:listProjectTags	Grants permission to query project tags.	list	-	-
workspace:desktops:operateTags	Grants permission to add or delete tags in batches.	tagging	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:operateTags	Grants permission to add or delete tags in batches.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:desktops:listByTags	Grants permission to filter desktops by tag.	list	-	-
workspace:exclusiveHosts:create	Grants permission to create an exclusive host.	write	exclusiveHost *	-
workspace:exclusiveHosts:create	Grants permission to create an exclusive host.	write	-	g:EnterpriseProjectId
workspace:exclusiveHosts:list	Grants permission to query exclusive hosts.	list	exclusiveHost *	-
workspace:exclusiveHosts:list	Grants permission to query exclusive hosts.	list	-	g:EnterpriseProjectId
workspace:exclusiveHosts:check	Grants permission to check whether exclusive hosts can be created.	write	-	-
workspace:exclusiveHosts:get	Grants permission to query exclusive host details.	read	exclusiveHost *	g:EnterpriseProjectId
workspace:exclusiveHosts:update	Grants permission to update exclusive host information.	write	exclusiveHost *	g:EnterpriseProjectId
workspace:exclusiveHosts:delete	Grants permission to delete an exclusive host.	write	exclusiveHost *	g:EnterpriseProjectId
workspace:mkp:listImages	Grants permission to query images in KooGallery.	list	-	-
workspace:mkp:listCommodityInfos	Grants permission to query product information in KooGallery.	list	-	-
workspace:mkp:createOrder	Grants permission to create a product order in KooGallery.	write	-	-
workspace:mkp:listListProductReserve	Grants permission to query the KooGallery inventory.	list	-	-
workspace:mkp:listCommodityDetails	Grants permission to query product details in KooGallery.	list	-	-
workspace:mkp:listRelationCommodityDetails	Grants permission to query associated products.	list	-	-
workspace:mkp:listCommodityAgreements	Grants permission to query product agreements in KooGallery.	list	-	-
workspace:networks:listEips	Grants permission to query EIPs.	list	-	-
workspace:networks:createEips	Grants permission to create an EIP.	write	-	-
workspace:networks:bindEips	Grants permission to bind an EIP.	write	-	-
workspace:networks:unbindEips	Grants permission to unbind an EIP.	write	-	-
workspace:networks:getEipQuota	Grants permission to query EIP quotas.	read	-	-
workspace:networks:ListNatGateways	Grants permission to query NAT gateways.	list	-	-
workspace:orders:create	Grants permission to place a yearly/monthly order.	write	-	workspace:CreateOrderType workspace:AssociatePublicIp workspace:AccessMode
workspace:orders:change	Grants permission to create a change order.	write	-	workspace:ChangeOrderType
workspace:orders:batchInquiry	Grants permission to inquire prices in batches.	write	-	-
workspace:quotas:check	Grants permission to verify quotas.	write	-	-
workspace:renderDesktops:create	Grants permission to create a rendering desktop.	write	-	-
workspace:renderDesktops:delete	Grants permission to delete a rendering desktop.	write	-	-
workspace:renderDesktops:list	Grants permission to query rendering desktops.	list	-	-
workspace:renderDesktops:action	Grants permission to perform operations on a rendering desktop.	write	-	-
workspace:scheduledTasks:list	Grants permission to query scheduled tasks.	list	scheduledTask *	-
workspace:scheduledTasks:create	Grants permission to create a scheduled task.	write	scheduledTask *	-
			desktop	-
			desktopPool	-
			server	-
			serverGroup	-
workspace:scheduledTasks:get	Grants permission to query scheduled task details.	read	scheduledTask *	-
workspace:scheduledTasks:update	Grants permission to update a scheduled task.	write	scheduledTask *	-
			desktop	-
			desktopPool	-
			server	-
			serverGroup	-
workspace:scheduledTasks:delete	Grants permission to delete a scheduled task.	write	scheduledTask *	-
workspace:scheduledTasks:getFuture	Grants permission to query the future execution time of a scheduled task.	read	-	-
workspace:scheduledTasks:batchDelete	Grants permission to delete scheduled tasks in batches.	write	scheduledTask *	-
workspace:scheduledTasks:listRecords	Grants permission to query the execution records of a scheduled task.	list	scheduledTask *	-
workspace:scheduledTasks:getRecord	Grants permission to query details about scheduled task execution records.	read	scheduledTask *	-
workspace:scheduledTasks:exportRecords	Grants permission to export details about scheduled task execution records.	list	scheduledTask *	-
workspace:users:subscribeSharer	Grants permission to subscribe to collaborative resources.	write	user *	-
workspace:desktops:addSubResources	Grants permission to purchase depended desktop resources.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:deleteSubResources	Grants permission to delete depended desktop resources.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:createSnapshots	Grants permission to create a desktop snapshot.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:getSnapshots	Grants permission to query desktop snapshots.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:deleteSnapshots	Grants permission to delete a desktop snapshot.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:restoreBySnapshot	Grants permission to restore desktops using desktop snapshots.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:statistics:listDesktopStatus	Grants permission to collect statistics on desktop statuses.	list	-	-
workspace:statistics:getUnused	Grants permission to query desktops that are not in use in a specified period.	read	-	-
workspace:statistics:getUsed	Grants permission to query the desktop usage duration.	read	-	-
workspace:bindingPolicies:export	Grants permission to export information about terminal-desktop binding to an Excel file.	list	-	-
workspace:bindingPolicies:getConfig	Grants permission to query a terminal-desktop binding configuration.	read	-	-
workspace:bindingPolicies:createConfig	Grants permission to configure terminal-desktop binding.	write	-	-
workspace:bindingPolicies:get	Grants permission to query terminal-desktop binding configurations.	read	-	-
workspace:bindingPolicies:add	Grants permission to add a terminal-desktop binding configuration.	write	-	-
workspace:bindingPolicies:update	Grants permission to modify a terminal-desktop binding configuration.	write	-	-
workspace:bindingPolicies:delete	Grants permission to delete a terminal-desktop binding configuration.	write	-	-
workspace:volumes:delete	Grants permission to delete a desktop data disk.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:batchAdd	Grants permission to add a desktop disk.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:batchExpand	Grants permission to expand a desktop disk.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:wdh:getType	Grants permission to query Workspace host types.	read	wdh *	g:EnterpriseProjectId
workspace:wdh:get	Grants permission to query Workspace hosts.	read	wdh *	g:EnterpriseProjectId
workspace:desktops:getRemoteAssistance	Grants permission to query remote assistance information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:createRemoteAssistance	Grants permission to create remote assistance.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:cancelRemoteAssistance	Grants permission to cancel remote assistance.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:add	Grants permission to add disks to a single desktop.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:expand	Grants permission to expand disk capacity.	write	desktop	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:volumes:listDssPoolsDetail	Grants permission to obtain the dedicated distributed storage pool list.	list	-	-
workspace:common:listTimezones	Grants permission to query the time zone configuration.	list	-	-
workspace:connections:securityExport	Grants permission to export connection records.	list	-	-
workspace:images:list	Grants permission to query supported images.	list	-	-
workspace:policyGroups:import	Grants permission to import a policy group.	write	-	-
workspace:accessPolicies:create	Grants permission to create an access policy.	write	-	-
workspace:accessPolicies:get	Grants permission to query access policies.	read	-	-
workspace:accessPolicies:delete	Grants permission to delete a specified access policy.	write	-	-
workspace:accessPolicies:getTarget	Grants permission to query objects to which a specified access policy is applied.	read	-	-
workspace:accessPolicies:updateTarget	Grants permission to update objects to which a specified access policy is applied.	write	-	-
workspace:products:listDesktopProducts	Grants permission to query the list of available product packages.	list	-	-
workspace:products:listSharerProducts	Grants permission to query the list of collaboration packages.	list	-	-
workspace:products:listInternetProducts	Grants permission to query the list of Internet access packages.	list	-	-
workspace:availabilityZones:list	Grants permission to query AZs where Workspace is available.	list	-	-
workspace:userGroups:export	Grants permission to export a user group.	list	userGroup *	-
workspace:users:export	Grants permission to export a user.	list	user *	-
workspace:users:import	Grants permission to import a user.	write	user *	-
workspace:userGroups:exportUsers	Grants permission to export users in a user group.	list	userGroup *	-
workspace:users:operate	Grants permission to operators (locking, unlocking, and resetting passwords).	write	user *	-
workspace:users:randomPassword	Grants permission to reset a random password for a user.	write	user *	-
workspace:users:deleteOtps	Grants permission to unbind an OTP device.	write	user *	-
workspace:users:resendEmail	Grants permission to resend an email.	write	user *	-
workspace:connections:securityList	Grants permission to query connection information.	list	-	-
workspace:connections:listOnlineUsers	Grants permission to query the number of login users.	list	-	-
workspace:userGroups:list	Grants permission to query user groups.	list	userGroup *	-
workspace:userGroups:create	Grants permission to create a user group.	write	userGroup *	-
workspace:userGroups:batchDelete	Grants permission to delete user groups in batches.	write	userGroup *	-
workspace:userGroups:delete	Grants permission to delete a desktop user group.	write	userGroup *	-
workspace:userGroups:update	Grants permission to modify user group information.	write	userGroup *	-
workspace:userGroups:operate	Grants permission to perform operations on a user group.	write	userGroup *	-
workspace:userGroups:operate	Grants permission to perform operations on a user group.	write	user *	-
workspace:userGroups:getUsers	Grants permission to query users in a user group.	list	userGroup *	-
workspace:jobs:listSubJobs	Grants permission to query subtasks.	list	-	-
workspace:jobs:deleteSubJobRecords	Grants permission to delete a subtask record.	write	-	-
workspace:ou:get	Grants permission to query OU information.	list	-	-
workspace:ou:create	Grants permission to add OU information.	write	-	-
workspace:ou:delete	Grants permission to delete OU information.	write	-	-
workspace:ou:update	Grants permission to update OU information.	write	-	-
workspace:policyGroups:list	Grants permission to query policy groups.	list	policyGroup *	-
workspace:policyGroups:create	Grants permission to add a policy group.	write	policyGroup *	-
			desktop	-
			desktopPool	-
			user	-
			userGroup	-
			appGroup	-
workspace:policyGroups:delete	Grants permission to delete a policy group.	write	policyGroup *	-
workspace:policyGroups:get	Grants permission to query policy groups.	read	policyGroup *	-
workspace:policyGroups:update	Grants permission to modify a policy group.	write	policyGroup *	-
			user	-
			userGroup	-
			appGroup	-
workspace:policyGroups:export	Grants permission to export a policy group.	list	policyGroup *	-
workspace:policyGroups:listPolicies	Grants permission to query policy items of a policy group.	list	policyGroup *	-
workspace:policyGroups:updatePolicies	Grants permission to modify policy items of a policy group.	write	policyGroup *	-
workspace:policyGroups:listTargets	Grants permission to query objects to which the policy group is applied.	list	policyGroup *	-
workspace:policyGroups:updateTargets	Grants permission to modify objects to which the policy group is applied.	write	policyGroup *	-
			desktop	-
			desktopPool	-
			user	-
			userGroup	-
			appGroup	-
workspace:policyGroups:listDetail	Grants permission to query details about policy groups.	list	policyGroup *	-
workspace:policyGroups:getOriginalPolicies	Grants permission to query initial policy items.	read	policyGroup *	-
workspace:users:list	Grants permission to query users.	list	user *	-
workspace:users:create	Grants permission to create a user.	write	user *	-
workspace:users:delete	Grants permission to delete a specified user.	write	user *	-
workspace:users:get	Grants permission to query user details.	read	user *	-
workspace:users:update	Grants permission to modify user information.	write	user *	-
workspace:users:batchDelete	Grants permission to delete users in batches.	write	user *	-
workspace:users:resetPassword	Grants permission to reset a user password.	write	user *	-
workspace:users:checkResetPasswordToken	Grants permission to verify tokens for resetting passwords of domain users.	write	user *	-
workspace:users:getTemplate	Grants permission to download a user template.	read	-	-
workspace:users:checkExist	Grants permission to check whether the user exists.	write	user *	-
workspace:users:listOtps	Grants permission to query OTP devices.	list	user *	-
workspace:users:getImportTemplate	Grants permission to download a created user template.	read	-	-
workspace:users:batchCreate	Grants permission to create users in batches.	write	user *	-
workspace:products:listVolumeProducts	Grants permission to query disk products.	list	-	-
workspace:tenants:listExportTasks	Grants permission to query export tasks.	list	-	-
workspace:tenants:deleteExportTasks	Grants permission to delete export task records in batches.	write	-	-
workspace:tenants:exportData	Grants permission to download an exported file.	read	-	-
workspace:statistics:listAlarm	Grants permission to query alarms.	list	-	-
workspace:statistics:getAlarm	Grants permission to query the number of alarms.	read	-	-
workspace:statistics:getGrowthRate	Grants permission to query the chain value of a metric.	read	-	-
workspace:statistics:getMetric	Grants permission to query metrics.	read	-	-
workspace:statistics:getMetricTrend	Grants permission to query the metric trend.	read	-	-
workspace:statistics:updateNotificationRules	Grants permission to update a metric notification rule.	write	-	-
workspace:statistics:deleteNotificationRules	Grants permission to delete a metric notification rule.	write	-	-
workspace:statistics:createNotifyRules	Grants permission to add a metric notification rule.	write	-	-
workspace:statistics:listNotificationRules	Grants permission to query metric notification rules.	list	-	-
workspace:statistics:listNotificationRecords	Grants permission to query metric notification records.	list	-	-
workspace:statistics:listDesktopMetrics	Grants permission to query desktop usage statistics.	list	-	-
workspace:statistics:exportDesktopMetrics	Grants permission to export desktop usage statistics.	list	-	-
workspace:statistics:listUserMetrics	Grants permission to query user usage statistics.	list	-	-
workspace:statistics:exportUserMetrics	Grants permission to export user usage statistics.	list	-	-
workspace:appcenter:createBucketCredential	Grants permission to generate OBS bucket credential information.	write	-	-
workspace:appcenter:createAndAuthorizeBucket	Grants permission to add a default OBS bucket and access the bucket.	write	-	-
workspace:appcenter:listApps	Grants permission to query applications by name.	list	-	-
workspace:appcenter:createApp	Grants permission to upload an application.	write	-	-
workspace:appcenter:updateApp	Grants permission to modify an application.	write	-	-
workspace:appcenter:deleteApp	Grants permission to delete an application.	write	-	-
workspace:appcenter:installApp	Grants permission to automatically install an application.	write	-	-
workspace:appcenter:listAppAuthorizations	Grants permission to query application authorization information.	list	-	-
workspace:appcenter:batchUpdateAppAuthorizations	Grants permission to set application authorization.	write	-	-
workspace:appcenter:batchDeleteApps	Grants permission to delete applications in batches.	write	-	-
workspace:appcenter:batchDisableApps	Grants permission to set applications to be invisible in batches.	write	-	-
workspace:appcenter:batchEnableApps	Grants permission to set applications to be visible in batches.	write	-	-
workspace:appcenter:batchInstallApps	Grants permission to automatically install applications in batches.	write	-	-
workspace:appcenter:listAppCatalogs	Grants permission to query application categories.	list	-	-
workspace:appcenter:listJobs	Grants permission to query application installation job information.	list	-	-
workspace:appcenter:batchDeleteJobs	Grants permission to delete jobs in batches.	write	-	-
workspace:appcenter:retryJobs	Grants permission to retry a failed job.	write	-	-
workspace:appcenter:createAppRule	Grants permission to create an application rule.	write	-	-
workspace:appcenter:listAppRule	Grants permission to query application rules.	list	-	-
workspace:appcenter:updateAppRule	Grants permission to modify an application rule.	write	-	-
workspace:appcenter:deleteAppRule	Grants permission to delete an application rule.	write	-	-
workspace:appcenter:batchDeleteAppRules	Grants permission to delete application rules in batches.	write	-	-
workspace:appcenter:enableRuleRestriction	Grants permission to enable rule control.	write	-	-
workspace:appcenter:disableRuleRestriction	Grants permission to disable rule control.	write	-	-
workspace:appcenter:addRestrictedRule	Grants permission to add a control rule.	write	-	-
workspace:appcenter:listRestrictedRule	Grants permission to query control rules.	list	-	-
workspace:appcenter:deleteRestrictedRule	Grants permission to delete control rules in batches.	write	-	-
workspace:appcenter:updateTenantProfile	Grants permission to enable or disable the tenant function.	write	-	-
workspace:appcenter:listTenantProfiles	Grants permission to query the tenant function status.	list	-	-
workspace:scripts:create	Grants permission to create a script.	write	script *	-
workspace:scripts:list	Grants permission to query the script list.	list	script *	-
workspace:scripts:get	Grants permission to query script details.	read	script *	-
workspace:scripts:put	Grants permission to update a script.	write	script *	-
workspace:scripts:delete	Grants permission to delete a script.	write	script *	-
workspace:scripts:execute	Grants permission to run scripts or commands in batches.	write	script *	-
workspace:scripts:execute	Grants permission to run scripts or commands in batches.	write	desktop *	-
workspace:scripts:getRecordDetail	Grants permission to query script or command execution record details.	read	script *	-
workspace:scripts:listRecords	Grants permission to query script execution records.	list	script *	-
workspace:scripts:listTasks	Grants permission to query script tasks.	list	script *	-
workspace:scripts:retry	Grants permission to retry a script.	write	script *	-
workspace:scripts:stop	Grants permission to stop a script or command execution task.	write	script *	-
workspace:scripts:download	Grants permission to download a script output record.	write	script *	-
workspace:tenants:getShareSpaceConfig	Grants permission to query collaboration configurations.	read	-	-
workspace:tenants:updateShareSpaceConfig	Grants permission to modify collaboration configurations.	write	-	-
workspace:authConfigs:getStatus	Grants permission to query the authentication status.	read	-	-
workspace:privacystatements:sign	Grants permission to sign the privacy statement.	write	-	-
workspace:sites:get	Grants permission to query site information.	read	-	-
workspace:sites:add	Grants permission to add a site.	write	-	workspace:AccessMode
workspace:sites:delete	Grants permission to delete a site.	write	-	-
workspace:sites:updateAccessMode	Grants permission to change the site access mode.	write	-	workspace:AccessMode
workspace:sites:updateSubnets	Grants permission to change the site service subnet.	write	-	-
workspace:tenants:checkEnterpriseIds	Grants permission to check whether the enterprise ID has been used.	write	-	-
workspace:tenants:updateEnterpriseId	Grants permission to change the enterprise ID.	write	-	-
workspace:bandwidth:create	Grants permission to enable the Workspace bandwidth.	write	-	-
workspace:bandwidth:list	Grants permission to query the Workspace bandwidth list.	list	-	-
workspace:bandwidth:update	Grants permission to modify the Workspace bandwidth.	write	-	-
workspace:bandwidth:delete	Grants permission to cancel the Workspace bandwidth.	write	-	-
workspace:bandwidth:getControlConfig	Grants permission to query the control configuration of the Workspace bandwidth.	read	-	-
workspace:bandwidth:updateControlConfig	Grants permission to modify the control configuration of the Workspace bandwidth.	write	-	-
workspace:bandwidth:createChangeOrder	Grants permission to create a Workspace bandwidth change order.	write	-	-
workspace:desktops:batchCreateSnapshots	Grants permission to create desktop snapshots in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchDeleteSnapshots	Grants permission to delete desktop snapshots in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:batchRestoreSnapshots	Grants permission to restore desktop snapshots in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listSnapshots	Grants permission to query desktop snapshots.	list	-	-
workspace:desktops:verifyDesktopName	Grants permission to verify the desktop name.	write	-	-
workspace:networks:getAvailableIp	Grants permission to query available IP addresses of a subnet by subnet ID.	read	-	-
workspace:desktops:getAdStatus	Grants permission to query the AD network status.	read	-	-
workspace:networks:checkIpIfExist	Grants permission to check whether the IP address exists.	write	-	-
workspace:images:checkIfExist	Grants permission to check whether the image exists.	write	-	-
workspace:wdh:listDesktops	Grants permission to query desktops of a Workspace host.	list	wdh *	-
workspace:wdh:listDesktops	Grants permission to query desktops of a Workspace host.	list	-	g:EnterpriseProjectId
workspace:wdh:update	Grants permission to update Workspace host information.	write	wdh *	g:EnterpriseProjectId
workspace:bindingPolicies:getTemplate	Grants permission to download the template for terminal-desktop binding.	read	-	-
workspace:bindingPolicies:import	Grants permission to import terminal-desktop binding in batches.	write	-	-
workspace:statistics:getRunState	Grants permission to collect statistics on running statuses.	read	-	-
workspace:statistics:getLoginState	Grants permission to collect statistics on login statuses.	read	-	-
workspace:networks:getUsingSubnets	Grants permission to query subnets being used.	read	-	-
workspace:networks:listPorts	Grants permission to query ports.	list	-	-
workspace:renderDesktops:createConsole	Grants permission to obtain the URL for remote login to the console.	write	-	-
workspace:renderDesktops:resize	Grants permission to change rendering desktop specifications.	write	-	-
workspace:exclusiveHosts:resizeLites	Grants permission to modify exclusive host specifications.	write	exclusiveHost *	g:EnterpriseProjectId
workspace:desktops:getMonitor	Grants permission to query desktop monitoring information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listDetachInfo	Grants permission to query users unbound from the desktop.	list	desktop *	-
workspace:desktops:listDetachInfo	Grants permission to query users unbound from the desktop.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:desktops:getSysprepVersion	Grants permission to query Sysprep version information.	read	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:networks:createNat	Grants permission to enable the Internet access function of the NAT Gateway.	write	-	-
workspace:networks:listNats	Grants permission to query the Internet access function of the NAT Gateway.	list	-	-
workspace:networks:listSubnets	Grants permission to query subnets.	list	-	-
workspace:networks:listVpcs	Grants permission to query VPCs.	list	-	-
workspace:policyGroups:createTemplate	Grants permission to create a policy template.	write	-	-
workspace:policyGroups:listTemplate	Grants permission to query policy templates.	list	-	-
workspace:policyGroups:updateTemplate	Grants permission to update a policy template.	write	-	-
workspace:networks:listSecurityGroups	Grants permission to query security groups.	list	-	-
workspace:availabilityZones:getSummary	Grants permission to query AZ summary.	read	-	-
workspace:availabilityZones:get	Grants permission to query AZ details.	read	-	-
workspace:users:importUser	Grants permission to import a user list.	write	user *	-
workspace:users:uploadTemplate	Grants permission to import a desktop user list.	write	user *	-
workspace:accessPolicies:update	Grants permission to update a specified access policy.	write	-	-
workspace:desktops:verifySource	Grants permission to verify desktop sources.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:desktops:listDesktopNetworks	Grants permission to query desktop network information in batches.	list	desktop *	-
workspace:desktops:batchChangeNetwork	Grants permission to switch desktop networks in batches.	write	desktop *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:jobs:get	Grants permission to query task details.	read	-	-
workspace:accessPolicies:importIp	Grants permission to import the IP address list.	write	-	-
workspace:accessPolicies:getIpImportTemplate	Grants permission to download the template for importing IP addresses.	read	-	-
workspace:sites:listEdgeSites	Grants permission to query edge sites.	list	-	-
workspace:sites:checkEdgeSiteResources	Grants permission to verify edge site resources.	write	-	-
workspace:ou:listAdOus	Grants permission to query OU information in the AD domain.	list	-	-
workspace:ou:listOuUsers	Grants permission to query user information in the OU.	list	-	-
workspace:ou:importUsersByOU	Grants permission to import OU users.	write	-	-
workspace:appGroup:list	Grants permission to query application groups.	list	appGroup *	-
workspace:appGroup:create	Grants permission to create an application group.	write	appGroup *	-
workspace:appGroup:create	Grants permission to create an application group.	write	serverGroup	-
workspace:appGroup:delete	Grants permission to delete an application group.	write	appGroup *	-
workspace:appGroup:get	Grants permission to query application group details.	read	appGroup *	-
workspace:appGroup:update	Grants permission to modify an application group.	write	appGroup *	-
workspace:appGroup:update	Grants permission to modify an application group.	write	serverGroup	-
workspace:app:listPublishedApp	Grants permission to query published applications.	list	app *	-
workspace:app:listPublishedApp	Grants permission to query published applications.	list	appGroup *	-
workspace:app:publish	Grants permission to publish an application.	write	app *	-
workspace:app:publish	Grants permission to publish an application.	write	appGroup *	-
workspace:app:get	Grants permission to query application details.	read	app *	-
workspace:app:get	Grants permission to query application details.	read	appGroup *	-
workspace:app:update	Grants permission to modify application information.	write	app *	-
workspace:app:update	Grants permission to modify application information.	write	appGroup *	-
workspace:app:deleteIcon	Grants permission to delete a custom application icon.	write	app *	-
workspace:app:deleteIcon	Grants permission to delete a custom application icon.	write	appGroup *	-
workspace:app:uploadIcon	Grants permission to modify a custom application icon.	write	app *	-
workspace:app:uploadIcon	Grants permission to modify a custom application icon.	write	appGroup *	-
workspace:app:check	Grants permission to verify applications.	write	app *	-
workspace:app:check	Grants permission to verify applications.	write	appGroup *	-
workspace:app:batchDisable	Grants permission to disable applications in batches.	write	app *	-
workspace:app:batchDisable	Grants permission to disable applications in batches.	write	appGroup *	-
workspace:app:batchEnable	Grants permission to enable applications in batches.	write	app *	-
workspace:app:batchEnable	Grants permission to enable applications in batches.	write	appGroup *	-
workspace:app:unpublish	Grants permission to unpublish applications in batches.	write	app *	-
workspace:app:unpublish	Grants permission to unpublish applications in batches.	write	appGroup *	-
workspace:appGroup:listPublishableApp	Grants permission to query applications that can be published.	list	appGroup *	-
workspace:appGroup:batchDeleteAuthorization	Grants permission to remove application group authorization.	write	appGroup *	-
			user	-
			userGroup	-
workspace:appGroup:disassociate	Grants permission to disassociate a service group from all application groups.	write	-	-
workspace:appGroup:listAuthorization	Grants permission to query application group authorization records.	list	appGroup *	-
workspace:appGroup:addAuthorization	Grants permission to add application group authorization.	write	appGroup *	-
			user	-
			userGroup	-
workspace:appGroup:batchDelete	Grants permission to delete application groups in batches.	write	appGroup *	-
workspace:appGroup:check	Grants permission to verify an application group.	write	-	-
workspace:serverGroup:list	Grants permission to query server groups.	list	serverGroup *	-
workspace:serverGroup:list	Grants permission to query server groups.	list	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:serverGroup:create	Grants permission to create a server group.	write	serverGroup *	-
workspace:serverGroup:create	Grants permission to create a server group.	write	-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:serverGroup:delete	Grants permission to delete a server group.	write	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:get	Grants permission to query a specified server group.	read	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:update	Grants permission to modify a server group.	write	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:getServerState	Grants permission to query server statuses in a specified server group.	read	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:listDetail	Grants permission to query basic information about a tenant server group.	list	serverGroup *	-
workspace:serverGroup:getRestrict	Grants permission to query specified tenant server groups.	read	serverGroup *	-
workspace:serverGroup:validate	Grants permission to verify a server group.	write	serverGroup *	-
workspace:serverGroup:tagResource	Grants permission to add a tag to a server group.	tagging	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:tagResource	Grants permission to add a tag to a server group.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:serverGroup:unTagResource	Grants permission to delete a tag from a server group.	tagging	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:unTagResource	Grants permission to delete a tag from a server group.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:serverGroup:listTagsForResource	Grants permission to query server group tags.	list	serverGroup *	-
workspace:serverGroup:listTagsForResource	Grants permission to query server group tags.	list	-	g:EnterpriseProjectId
workspace:serverGroup:listTags	Grants permission to query tags on all servers of a tenant.	list	serverGroup *	-
workspace:serverGroup:batchCreateTags	Grants permission to add server group tags in batches.	tagging	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:batchCreateTags	Grants permission to add server group tags in batches.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:serverGroup:batchDeleteTags	Grants permission to delete server group tags in batches.	tagging	serverGroup *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:serverGroup:batchDeleteTags	Grants permission to delete server group tags in batches.	tagging	-	g:RequestTag/<tag-key> g:TagKeys
workspace:server:list	Grants permission to query servers.	list	server *	-
workspace:server:delete	Grants permission to delete a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:get	Grants permission to query a specified server.	read	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:update	Grants permission to modify a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:changeImage	Grants permission to modify a server image.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:reinstall	Grants permission to reinstall a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:getVncUrl	Grants permission to obtain a VNC login address.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:accessAgent:list	Grants permission to query the latest versions of all HDAs of a tenant.	list	-	-
workspace:accessAgent:batchUpgrade	Grants permission to upgrade the HDA version of servers in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:accessAgent:listLatestVersion	Grants permission to query the latest HDA version of a tenant.	list	-	-
workspace:server:listAccessAgentDetails	Grants permission to query HDA information of a server.	list	server *	-
workspace:accessAgent:getUpgradeFlag	Grants permission to query HDA upgrade notification flags.	read	-	-
workspace:accessAgent:updateUpgradeFlag	Grants permission to update an HDA upgrade notification flag.	write	-	-
workspace:accessAgent:listUpgradeRecords	Grants permission to query HDA upgrade tracing records of a server.	list	-	-
workspace:server:batchDelete	Grants permission to delete servers in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchChangeMaintainMode	Grants permission to mark the server maintenance status.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchReboot	Grants permission to restart a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchRejoinDomain	Grants permission to add servers to a domain again in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchStart	Grants permission to start a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchStop	Grants permission to stop a server.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchUpdateTsvi	Grants permission to update virtual session IP configurations of servers in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:create	Grants permission to create an APS.	write	server *	-
			serverGroup *	-
			-	g:RequestTag/<tag-key> g:TagKeys g:EnterpriseProjectId
workspace:server:batchMigrateHosts	Grants permission to migrate servers at the source Workspace host to the destination one.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchMigrateHosts		write	wdh *	-
workspace:server:getMetricData	Grants permission to query monitoring information of an APS.	read	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:jobs:batchDeleteSubJobs	Grants permission to delete subtasks in batches.	write	-	-
workspace:jobs:countSubJobs	Grants permission to query the number of subtasks.	list	-	-
workspace:appWarehouse:authorizeObs	Grants permission to obtain the AK/SK uploaded to an OBS bucket.	write	-	-
workspace:appWarehouse:batchDeleteApp	Grants permission to delete specified applications from the application repository in batches.	write	-	-
workspace:appWarehouse:ListWarehouseApps	Grants permission to query applications in a tenant application repository.	list	-	-
workspace:appWarehouse:createApp	Grants permission to add an application to the application repository.	write	-	-
workspace:appWarehouse:deleteApp	Grants permission to delete a specified application from the application repository.	write	-	-
workspace:appWarehouse:uploadAppIcon	Grants permission to upload an icon file to the application repository.	write	-	-
workspace:appWarehouse:createBucketOrAcl	Grants permission to add a bucket or authorize access to a bucket.	write	-	-
workspace:images:listImageJobs	Grants permission to query tasks of a tenant.	list	-	-
workspace:images:getImageJob	Grants permission to query task details.	read	-	-
workspace:imageServer:list	Grants permission to query image instances.	list	imageServer *	-
workspace:imageServer:list	Grants permission to query image instances.	list	-	g:EnterpriseProjectId
workspace:imageServer:create	Grants permission to create an image instance.	write	imageServer *	-
workspace:imageServer:create	Grants permission to create an image instance.	write	-	g:EnterpriseProjectId
workspace:imageServer:get	Grants permission to query a specified image instance.	read	imageServer *	g:EnterpriseProjectId
workspace:imageServer:update	Grants permission to modify an image instance.	write	imageServer *	g:EnterpriseProjectId
workspace:imageServer:attachApp	Grants permission to distribute software information to image instances.	write	imageServer *	g:EnterpriseProjectId
workspace:imageServer:listLatestAttachedApp	Grants permission to query information about the latest distributed software.	list	imageServer *	-
workspace:imageServer:recreate	Grants permission to build an Application Streaming image.	write	imageServer *	g:EnterpriseProjectId
workspace:imageServer:batchDelete	Grants permission to delete image instances in batches.	write	imageServer *	g:EnterpriseProjectId
workspace:imageServer:listImageSubJobs	Grants permission to query subtasks.	list	-	-
workspace:imageServer:batchDeleteImageSubJobs	Grants permission to delete subtasks in batches.	write	-	-
workspace:imageServer:countImageSubJobs	Grants permission to query the number of subtasks.	read	-	-
workspace:appGroup:listMailRecord	Grants permission to query records of sending emails on application group authorization.	list	-	-
workspace:appGroup:resendMail	Grants permission to resend an email on application group authorization (based on authorization email records).	write	-	-
workspace:storage:listPersistentStorage	Grants permission to query Workspace storage space.	list	storage *	-
workspace:storage:createPersistentStorage	Grants permission to create Workspace storage space.	write	storage *	-
workspace:storage:deletePersistentStorage	Grants permission to delete Workspace storage space.	write	storage *	-
workspace:storage:updateUserFolderAssignment	Grants permission to create a personal storage directory.	write	storage *	-
workspace:storage:updateShareFolderAssignment	Grants permission to change members of a shared directory.	write	storage *	-
workspace:storage:createShareFolder	Grants permission to create a shared storage directory.	write	storage *	-
workspace:storage:deleteStorageClaim	Grants permission to delete a shared directory.	write	storage *	-
workspace:storage:deleteUserStorageAttachment	Grants permission to delete a personal storage directory.	write	storage *	-
workspace:storage:batchDeletePersistentStorage	Grants permission to delete Workspace storage space in batches.	write	storage *	-
workspace:storage:listStorageAssignment	Grants permission to query personal storage directories.	list	storage *	-
workspace:storage:listShareFolder	Grants permission to query shared storage directories.	list	storage *	-
workspace:policyGroups:deleteTemplate	Grants permission to delete a policy template.	write	-	-
workspace:privacystatements:get	Grants permission to query the latest privacy statement.	read	-	-
workspace:scalingPolicy:delete	Grants permission to delete an auto scaling policy.	write	-	-
workspace:scalingPolicy:list	Grants permission to query auto scaling policies of a server group.	read	-	-
workspace:scalingPolicy:create	Grants permission to add or modify an auto scaling policy.	write	-	-
workspace:session:listAppConnection	Grants permission to query application usage records.	write	-	-
workspace:session:logoffUserSession	Grants permission to log out of a session.	write	-	-
workspace:session:listUserConnection	Grants permission to query user login records.	write	-	-
workspace:session:listSessionByUserName	Grants permission to query current sessions by username.	list	-	-
workspace:storagePolicy:create	Grants permission to add or update a custom policy for storage directory access.	write	storage *	-
workspace:storagePolicy:list	Grants permission to query policies for storage directory access.	list	storage *	-
workspace:storage:listSfs3Storage	Grants permission to query SFS 3.0.	list	storage *	-
workspace:baseResource:list	Grants permission to query AZs.	list	-	-
workspace:tenants:listConfigInfo	Grants permission to query enterprise system configurations.	list	-	-
workspace:tenants:active	Grants permission to activate and initialize a tenant service.	write	-	-
workspace:tenants:listTenantProfile	Grants permission to query tenant information.	list	-	-
workspace:server:listServerMetricData	Grants permission to query server monitoring data.	list	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:session:listSessions	Grants permission to query enterprise sessions.	list	-	-
workspace:appWarehouse:updateApp	Grants permission to update an application in the application repository.	write	-	-
workspace:server:batchChangeImage	Grants permission to switch server images in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId
workspace:server:batchReinstall	Grants permission to reinstall servers in batches.	write	server *	g:ResourceTag/<tag-key> g:EnterpriseProjectId

Each API of Workspace supports one or more actions. Table 2 lists the supported actions and dependencies.

**Table 2** Actions and dependencies supported by Workspace APIs
API	Action	Dependency
GET /v2/{project_id}/auth-config/method-config	workspace:authConfigs:get	-
PUT /v2/{project_id}/auth-config/method-config	workspace:authConfigs:update	-
GET /v2/{project_id}/assist-auth-config/method-config	workspace:assistAuthConfigs:get	-
PUT /v2/{project_id}/assist-auth-config/method-config	workspace:assistAuthConfigs:update	-
POST /v2/{project_id}/workspace-jobs/{job_id}/actions	workspace:jobs:retry	-
GET /v2/{project_id}/quotas	workspace:quotas:get	-
GET /v2/{project_id}/tenants/roles	workspace:tenants:getRoles	-
GET /v2/{project_id}/tenant-configs	workspace:tenants:ListConfig	-
PUT /v2/{project_id}/tenant-configs	workspace:tenants:updateConfig	-
GET /v2/{project_id}/nat-mapping-configs	workspace:natMappings:getConfig	-
PUT /v2/{project_id}/nat-mapping-configs	workspace:natMappings:updateConfig	-
GET /v2/{project_id}/workspaces	workspace:tenants:get	vpc:vpcs:get vpc:subnets:get vpc:securityGroups:get
POST /v2/{project_id}/workspaces	workspace:tenants:open	eip:bandwidths:create eip:publicIps:create elb:healthmonitors:create elb:healthmonitors:show elb:listeners:create elb:listeners:update elb:listeners:show elb:listeners:list elb:loadbalancers:create elb:loadbalancers:update elb:loadbalancers:show elb:members:create elb:members:list elb:members:update elb:pools:create elb:pools:update elb:pools:show vpc:ports:create vpc:ports:delete vpc:securityGroupRules:create vpc:securityGroupRules:delete vpc:securityGroupRules:get vpc:securityGroups:create vpc:subnets:get vpc:subnets:update vpc:vpcs:get vpcep:endpoints:create vpcep:endpoints:get
DELETE /v2/{project_id}/workspaces	workspace:tenants:delete	elb:healthmonitors:delete elb:healthmonitors:show elb:listeners:delete elb:listeners:show elb:loadbalancers:delete elb:loadbalancers:show elb:members:delete elb:members:list elb:pools:delete elb:pools:show vpc:ports:delete vpc:securityGroups:delete vpcep:endpoints:delete vpcep:endpoints:get eip:publicIps:disassociateInstance eip:bandwidths:delete eip:publicIps:delete
PUT /v2/{project_id}/workspaces	workspace:tenants:update	eip:bandwidths:create eip:bandwidths:delete eip:publicIps:create eip:publicIps:delete eip:publicIps:disassociateInstance elb:healthmonitors:create elb:healthmonitors:delete elb:healthmonitors:show elb:listeners:create elb:listeners:delete elb:listeners:update elb:listeners:show elb:loadbalancers:create elb:loadbalancers:delete elb:loadbalancers:update elb:loadbalancers:show elb:members:create elb:members:delete elb:members:list elb:members:update elb:pools:create elb:pools:delete elb:pools:update elb:pools:show vpc:subnets:get vpc:subnets:update vpc:vpcs:get vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get
GET /v2/{project_id}/workspaces/lock-status	workspace:tenants:getLockStatus	-
PUT /v2/{project_id}/workspaces/lock-status	workspace:tenants:unlock	-
POST /v2/{project_id}/agencies	workspace:agencies:create	iam:agencies:listV5 iam:agencies:getV5 iam:agencies:createServiceLinkedAgencyV5 iam:roles:getRole iam:roles:listRoles iam:agencies:getAgency iam:agencies:listAgencies iam:agencies:createAgency iam:permissions:listRolesForAgencyOnProject iam:permissions:grantRoleToAgencyOnProject
GET /v2/{project_id}/agencies	workspace:agencies:get	iam:agencies:listV5 iam:agencies:getV5 iam:agencies:getAgency iam:agencies:listAgencies iam:permissions:listRolesForAgencyOnProject
POST /v3/{project_id}/desktops/{desktop_id}/ai-accelerate-job	workspace:desktops:commitAiAccelerateJob	-
POST /v2/{project_id}/desktops/{desktop_id}/ai-accelerate-job	workspace:desktops:createAiAccelerateJob	-
GET /v2/{project_id}/ai-accelerate-job/{job_id}	workspace:desktops:getAiAccelerateJob	-
POST /v2/{project_id}/sysprep	workspace:desktops:getSysPrepInfo	-
POST /v2/{project_id}/verification/batch-change-image	workspace:desktops:checkBatchChangeImage	ims:images:list
GET /v2/{project_id}/desktop-name-policies	workspace:tenants:listDesktopNamePolicies	-
POST /v2/{project_id}/desktop-name-policies	workspace:tenants:createDesktopNamePolicy	-
PUT /v2/{project_id}/desktop-name-policies/{policy_id}	workspace:tenants:updateDesktopNamePolicy	-
POST /v2/{project_id}/desktop-name-policies/batch-delete	workspace:tenants:batchDeleteDesktopNamePolicies	-
POST /v2/{project_id}/desktop-pools	workspace:desktopPools:create	ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update vpc:securityGroups:get vpc:subnets:get vpc:vpcs:get dss:pools:list
GET /v2/{project_id}/desktop-pools	workspace:desktopPools:list	ims:images:list
PUT /v2/{project_id}/desktop-pools/{pool_id}	workspace:desktopPools:update	-
DELETE /v2/{project_id}/desktop-pools/{pool_id}	workspace:desktopPools:delete	-
GET /v2/{project_id}/desktop-pools/{pool_id}	workspace:desktopPools:get	ims:images:list
POST /v2/{project_id}/desktop-pools/{pool_id}/expand	workspace:desktopPools:expand	ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update vpc:securityGroups:get vpc:subnets:get vpc:vpcs:get dss:pools:list
POST /v2/{project_id}/desktop-pools/{pool_id}/resize	workspace:desktopPools:resize	vpc:subnets:get ims:images:list
POST /v2/{project_id}/desktop-pools/{pool_id}/rebuild	workspace:desktopPools:rebuild	vpc:ports:get ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-add	workspace:desktopPools:batchAddVolumes	-
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-delete	workspace:desktopPools:batchDeleteVolumes	-
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-expand	workspace:desktopPools:batchExpandVolumes	-
POST /v2/{project_id}/desktop-pools/{pool_id}/action	workspace:desktopPools:operate	-
GET /v2/{project_id}/desktop-pools/{pool_id}/users	workspace:desktopPools:listUsers	-
POST /v2/{project_id}/desktop-pools/{pool_id}/users	workspace:desktopPools:authorizeUsers	ims:images:list
GET /v2/{project_id}/desktop-pools/{pool_id}/desktops	workspace:desktopPools:listDesktops	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
GET /v2/{project_id}/desktop-pools/script-execution-tasks/detail	workspace:desktopPools:listScriptTasks	-
POST /v2/{project_id}/desktop-pools/{pool_id}/script-executions	workspace:desktopPools:executeScripts	-
POST /v2/{project_id}/desktop-pools/{pool_id}/notifications	workspace:desktopPools:sendNotifications	-
GET /v3/{project_id}/desktops/export	workspace:desktops:export	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
POST /v2/{project_id}/desktops	workspace:desktops:create	ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update eip:publicIps:get eip:publicIps:list eip:publicIps:create eip:publicIps:associateInstance eip:publicIps:delete eip:publicIps:createTags vpc:quotas:list vpc:securityGroups:get vpc:subnets:get vpc:vpcs:get dss:pools:list
GET /v2/{project_id}/desktops	workspace:desktops:list	-
PUT /v2/{project_id}/desktops/{desktop_id}	workspace:desktops:update	-
DELETE /v2/{project_id}/desktops/{desktop_id}	workspace:desktops:delete	vpc:ports:get vpc:ports:delete
GET /v2/{project_id}/desktops/{desktop_id}	workspace:desktops:get	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
POST /v2/{project_id}/desktops/batch-delete	workspace:desktops:batchDelete	vpc:ports:get vpc:ports:delete
POST /v2/{project_id}/desktops/logoff	workspace:desktops:logoff	-
GET /v2/{project_id}/desktops/detail	workspace:desktops:listDetail	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
POST /v2/{project_id}/desktops/action	workspace:desktops:operate	-
POST /v2/{project_id}/desktops/resize	workspace:desktops:resize	vpc:subnets:get ims:images:list
GET /v2/{project_id}/connections/status	workspace:desktops:getConnectStatus	-
GET /v2/{project_id}/desktops/status	workspace:desktops:ListStatus	-
POST /v2/{project_id}/desktops/rebuild	workspace:desktops:rebuild	vpc:ports:get ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember
GET /v2/{project_id}/desktops/{desktop_id}/actions	workspace:desktops:getActions	-
GET /v2/{project_id}/desktops/{desktop_id}/remote-consoles	workspace:desktops:createConsole	-
PUT /v2/{project_id}/desktops/sids	workspace:desktops:updateSids	-
POST /v2/{project_id}/desktops/{desktop_id}/rejoin-domain	workspace:desktops:rejoinDomain	-
POST /v2/{project_id}/desktops/desktop-to-image	workspace:desktops:createImage	ims:quotas:get ims:images:get ims:images:list ims:images:setTags ims:images:setOrDeleteTags ims:images:updateMemberStatus ims:images:copyInRegion ims:serverImages:create
POST /v2/{project_id}/desktops/batch-detach	workspace:desktops:batchDetach	vpc:ports:get
POST /v2/{project_id}/desktops/detach	workspace:desktops:detach	vpc:ports:get
POST /v2/{project_id}/desktops/attach	workspace:desktops:attach	vpc:ports:get ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember
GET /v2/{project_id}/desktops/{desktop_id}/networks	workspace:desktops:getNetwork	vpc:vpcs:get vpc:networks:get vpc:subnets:get vpc:ports:get vpc:securityGroups:get eip:publicIps:list
PUT /v2/{project_id}/desktops/{desktop_id}/networks	workspace:desktops:changeNetwork	vpc:vpcs:get vpc:subnets:get vpc:networks:get vpc:ports:get vpc:ports:create vpc:ports:update vpc:ports:delete vpc:securityGroups:get eip:publicIps:list eip:publicIps:associateInstance eip:publicIps:disassociateInstance
GET /v2/{project_id}/exclusive-hosts/{host_id}/desktops	workspace:exclusiveHosts:listDesktops	-
GET /v2/{project_id}/all-desktops	workspace:desktops:listAll	-
GET /v2/{project_id}/desktop-associate/discover-vm/infos	workspace:desktopAssociate:listDiscoverVmInfo	-
POST /v2/{project_id}/desktop-associate/tasks	workspace:desktopAssociate:startTask	-
POST /v2/{project_id}/desktop-associate/discover-vm/switch	workspace:desktopAssociate:switchScanTask	-
GET /v2/{project_id}/desktop-associate/discover-vm/switch	workspace:desktopAssociate:getScanTaskSwitch	-
PUT /v2/{project_id}/desktops/maintenance-mode	workspace:desktops:setMaintenanceMode	-
POST /v2/{project_id}/desktops/pre-batch-attach	workspace:desktops:prepAttachUsers	-
POST /v2/{project_id}/desktops/batch-attach	workspace:desktops:batchAttachUsers	vpc:ports:get ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember
PUT /v2/{project_id}/desktops/change-username	workspace:desktops:changeUsername	-
POST /v2/{project_id}/desktops/notifications	workspace:desktops:sendNotifications	-
POST /v2/{project_id}/desktops/{desktop_id}/migrate	workspace:desktops:migrate	vpc:networks:get vpc:subnets:get vpc:ports:create vpc:ports:delete vpc:ports:update vpc:ports:get
GET /v2/{project_id}/desktops/agents	workspace:desktops:listAgents	-
POST /v2/{project_id}/desktops/agents	workspace:desktops:batchInstallAgents	-
GET /v2/{project_id}/desktops/{desktop_id}/tags	workspace:desktops:listTags	-
POST /v2/{project_id}/desktops/{desktop_id}/tags	workspace:desktops:tag	-
DELETE /v2/{project_id}/desktops/{desktop_id}/tags/{key}	workspace:desktops:untag	-
GET /v2/{project_id}/desktops/tags	workspace:desktops:listProjectTags	-
POST /v2/{project_id}/desktops/{desktop_id}/tags/action	workspace:desktops:operateTags	-
POST /v2/{project_id}/desktops/resource_instances/action	workspace:desktops:listByTags	-
POST /v2/{project_id}/desktops/batch-tags	workspace:desktops:tag	-
DELETE /v2/{project_id}/desktops/batch-tags	workspace:desktops:untag	-
POST /v2/{project_id}/exclusive-hosts	workspace:exclusiveHosts:create	vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update vpc:subnets:get vpc:vpcs:get
GET /v2/{project_id}/exclusive-hosts	workspace:exclusiveHosts:list	-
POST /v2/{project_id}/exclusive-hosts/check-limits	workspace:exclusiveHosts:check	-
GET /v2/{project_id}/exclusive-hosts/{host_id}	workspace:exclusiveHosts:get	nat:snatRules:list eip:publicIps:list
PUT /v2/{project_id}/exclusive-hosts/{host_id}	workspace:exclusiveHosts:update	-
DELETE /v2/{project_id}/exclusive-hosts/{host_id}	workspace:exclusiveHosts:delete	-
GET /v2/{project_id}/market-images	workspace:mkp:listImages	ims:images:list
GET /v2/{project_id}/mkp/commodities/commodity-ids	workspace:mkp:listCommodityInfos	-
POST /v2/{project_id}/mkp/order	workspace:mkp:createOrder	-
POST /v2/{project_id}/mkp/product-reserve	workspace:mkp:listListProductReserve	-
GET /v2/{project_id}/mkp/commodities	workspace:mkp:listCommodityDetails	-
GET /v2/{project_id}/mkp/commodities/{commodity_id}/relation-commodities	workspace:mkp:listRelationCommodityDetails	-
GET /v2/{project_id}/mkp/commodities/agreements	workspace:mkp:listCommodityAgreements	-
GET /v2/{project_id}/eips	workspace:networks:listEips	eip:publicIps:list eip:bandwidths:list
POST /v2/{project_id}/eips	workspace:networks:createEips	vpc:quotas:list eip:publicIps:create eip:publicIps:associateInstance
POST /v2/{project_id}/eips/binding	workspace:networks:bindEips	eip:publicIps:associateInstance eip:publicIps:get
POST /v2/{project_id}/eips/unbinding	workspace:networks:unbindEips	eip:publicIps:list eip:publicIps:disassociateInstance
GET /v2/{project_id}/eips/quotas	workspace:networks:getEipQuota	vpc:quotas:list
GET /v2/{project_id}/nat-gateways	workspace:networks:ListNatGateways	vpc:subnets:get vpc:vpcs:get nat:snatRules:list nat:natGateways:list
POST /v2/{project_id}/periodic/subscribe/order	workspace:orders:create	ims:images:list vpc:vpcs:get vpc:networks:get vpc:subnets:get vpc:ports:get bss:order:update
POST /v2/{project_id}/periodic/{desktop_id}/change/order	workspace:orders:change	ims:images:list bss:order:update
POST /v2/{project_id}/periodic/change/batch-order	workspace:orders:change	ims:images:list bss:order:update
POST /v2/{project_id}/periodic/inquiry/change-image	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/desktop-pool/periodic/change/order	workspace:orders:change	ims:images:list bss:order:update
POST /v2/{project_id}/desktop-pool/periodic/inquiry/add-volume	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/desktop-pool/periodic/inquiry/change-image	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/desktop-pool/periodic/inquiry/extend-volume	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/desktop-pool/periodic/inquiry/resize	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/periodic/inquiry/add-resources	workspace:orders:batchInquiry	ims:images:list
GET /v2/{project_id}/checkOrderLimits	workspace:quotas:check	-
POST /v2/{project_id}/render-desktops	workspace:renderDesktops:create	ims:images:list ims:images:share vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update vpc:securityGroups:get vpc:subnets:get vpc:vpcs:get
DELETE /v2/{project_id}/render-desktops	workspace:renderDesktops:delete	vpc:ports:get vpc:ports:delete
GET /v2/{project_id}/render-desktops	workspace:renderDesktops:list	-
POST /v2/{project_id}/render-desktops/action	workspace:renderDesktops:action	-
GET /v2/{project_id}/scheduled-tasks	workspace:scheduledTasks:list	-
POST /v2/{project_id}/scheduled-tasks	workspace:scheduledTasks:create	-
GET /v2/{project_id}/scheduled-tasks/{task_id}	workspace:scheduledTasks:get	-
PUT /v2/{project_id}/scheduled-tasks/{task_id}	workspace:scheduledTasks:update	-
DELETE /v2/{project_id}/scheduled-tasks/{task_id}	workspace:scheduledTasks:delete	-
POST /v2/{project_id}/scheduled-tasks/future-executions	workspace:scheduledTasks:getFuture	-
POST /v2/{project_id}/scheduled-tasks/batch-delete	workspace:scheduledTasks:batchDelete	-
GET /v2/{project_id}/scheduled-tasks/{task_id}/records	workspace:scheduledTasks:listRecords	-
GET /v2/{project_id}/scheduled-tasks/{task_id}/records/{record_id}	workspace:scheduledTasks:getRecord	-
POST /v2/{project_id}/scheduled-tasks/{task_id}/records/export	workspace:scheduledTasks:exportRecords	-
POST /v2/{project_id}/user/share-resources	workspace:users:subscribeSharer	-
POST /v2/{project_id}/desktop/sub-resources	workspace:desktops:addSubResources	-
POST /v2/{project_id}/desktop/delete-sub-resources	workspace:desktops:deleteSubResources	-
POST /v2/{project_id}/desktops/{desktop_id}/snapshots	workspace:desktops:createSnapshots	-
GET /v2/{project_id}/desktops/{desktop_id}/snapshots	workspace:desktops:getSnapshots	-
DELETE /v2/{project_id}/desktops/{desktop_id}/snapshots	workspace:desktops:deleteSnapshots	-
POST /v2/{project_id}/desktops/{desktop_id}/snapshots/restore	workspace:desktops:restoreBySnapshot	-
GET /v2/{project_id}/statistics	workspace:statistics:listDesktopStatus	-
GET /v2/{project_id}/desktops/statistics/unused	workspace:statistics:getUnused	-
POST /v2/{project_id}/desktops/statistics/used	workspace:statistics:getUsed	-
GET /v3/{project_id}/terminals/binding-desktops/template/export	workspace:bindingPolicies:export	-
GET /v2/{project_id}/terminals/binding-desktops/config	workspace:bindingPolicies:getConfig	-
POST /v2/{project_id}/terminals/binding-desktops/config	workspace:bindingPolicies:createConfig	-
GET /v2/{project_id}/terminals/binding-desktops	workspace:bindingPolicies:get	-
POST /v2/{project_id}/terminals/binding-desktops	workspace:bindingPolicies:add	-
PUT /v2/{project_id}/terminals/binding-desktops	workspace:bindingPolicies:update	-
POST /v2/{project_id}/terminals/binding-desktops/batch-delete	workspace:bindingPolicies:delete	-
POST /v2/{project_id}/desktops/{desktop_id}/volumes/batch-delete	workspace:volumes:delete	-
POST /v2/{project_id}/volumes	workspace:volumes:batchAdd	-
POST /v2/{project_id}/volumes/expand	workspace:volumes:batchExpand	-
GET /v2/{project_id}/hosts/types	workspace:wdh:getType	-
GET /v2/{project_id}/hosts	workspace:wdh:get	-
GET /v2/{project_id}/desktops/{desktop_id}/remote-assistance	workspace:desktops:getRemoteAssistance	-
POST /v2/{project_id}/desktops/{desktop_id}/remote-assistance	workspace:desktops:createRemoteAssistance	-
DELETE /v2/{project_id}/desktops/{desktop_id}/remote-assistance	workspace:desktops:cancelRemoteAssistance	-
POST /v2/{project_id}/desktops/{desktop_id}/volumes	workspace:volumes:add	-
POST /v2/{project_id}/desktops/{desktop_id}/volumes/{volume_id}/expand	workspace:volumes:expand	-
GET /v2/{project_id}/dss-pools/detail	workspace:volumes:listDssPoolsDetail	dss:pools:list
GET /v2/{project_id}/common/timezones	workspace:common:listTimezones	-
GET /v3/{project_id}/desktops/connections/export	workspace:connections:securityExport	-
GET /v2/{project_id}/images	workspace:images:list	ims:images:list
POST /v2/{project_id}/policy-groups/import	workspace:policyGroups:import	-
POST /v2/{project_id}/access-policy	workspace:accessPolicies:create	-
GET /v2/{project_id}/access-policy	workspace:accessPolicies:get	-
DELETE /v2/{project_id}/access-policy	workspace:accessPolicies:delete	-
GET /v2/{project_id}/access-policy/{access_policy_id}/objects	workspace:accessPolicies:getTarget	-
PUT /v2/{project_id}/access-policy/{access_policy_id}/objects	workspace:accessPolicies:updateTarget	-
GET /v2/{project_id}/products	workspace:products:listDesktopProducts	ecs:cloudServerFlavors:get
GET /v2/{project_id}/products/sharer	workspace:products:listSharerProducts	-
GET /v2/{project_id}/products/adninternet	workspace:products:listInternetProducts	-
GET /v2/{project_id}/availability-zones	workspace:availabilityZones:list	-
GET /v2/{project_id}/groups/export	workspace:userGroups:export	-
POST /v3/{project_id}/users/export	workspace:users:export	-
POST /v2/{project_id}/users/import	workspace:users:import	-
GET /v3/{project_id}/groups/{group_id}/users/export	workspace:userGroups:exportUsers	-
GET /v2/{project_id}/groups/{group_id}/users/export	workspace:userGroups:exportUsers	-
POST /v2/{project_id}/users/{user_id}/actions	workspace:users:operate	-
GET /v2/{project_id}/users/{user_id}/random-password	workspace:users:randomPassword	-
DELETE /v2/{project_id}/users/{user_id}/otp-devices	workspace:users:deleteOtps	-
POST /v2/{project_id}/users/{user_id}/resend-email	workspace:users:resendEmail	-
GET /v2/{project_id}/connections/desktops	workspace:connections:securityList	-
GET /v2/{project_id}/connections/desktops/export	workspace:connections:securityExport	-
GET /v2/{project_id}/connections/online-users	workspace:connections:listOnlineUsers	-
GET /v2/{project_id}/desktops/connections	workspace:connections:securityList	-
GET /v2/{project_id}/desktops/connections/export	workspace:connections:securityExport	-
GET /v2/{project_id}/desktops/online-users	workspace:connections:listOnlineUsers	-
GET /v2/{project_id}/groups	workspace:userGroups:list	-
POST /v2/{project_id}/groups	workspace:userGroups:create	-
POST /v2/{project_id}/groups/batch-delete	workspace:userGroups:batchDelete	-
DELETE /v2/{project_id}/groups/{group_id}	workspace:userGroups:delete	-
PUT /v2/{project_id}/groups/{group_id}	workspace:userGroups:update	-
POST /v2/{project_id}/groups/{group_id}/actions	workspace:userGroups:operate	-
GET /v2/{project_id}/groups/{group_id}/users	workspace:userGroups:getUsers	-
GET /v2/{project_id}/workspace-sub-jobs	workspace:jobs:listSubJobs	-
POST /v2/{project_id}/workspace-sub-jobs/batch-delete	workspace:jobs:deleteSubJobRecords	-
GET /v2/{project_id}/ous	workspace:ou:get	-
POST /v2/{project_id}/ous	workspace:ou:create	-
DELETE /v2/{project_id}/ous/{ou_id}	workspace:ou:delete	-
PUT /v2/{project_id}/ous/{ou_id}	workspace:ou:update	-
GET /v2/{project_id}/policy-groups	workspace:policyGroups:list	-
POST /v2/{project_id}/policy-groups	workspace:policyGroups:create	-
DELETE /v2/{project_id}/policy-groups/{policy_group_id}	workspace:policyGroups:delete	-
GET /v2/{project_id}/policy-groups/{policy_group_id}	workspace:policyGroups:get	-
PUT /v2/{project_id}/policy-groups/{policy_group_id}	workspace:policyGroups:update	-
POST /v2/{project_id}/policy-groups/export	workspace:policyGroups:export	-
GET /v2/{project_id}/policy-groups/{policy_group_id}/policies	workspace:policyGroups:listPolicies	-
PUT /v2/{project_id}/policy-groups/{policy_group_id}/policies	workspace:policyGroups:updatePolicies	-
GET /v2/{project_id}/policy-groups/{policy_group_id}/targets	workspace:policyGroups:listTargets	-
PUT /v2/{project_id}/policy-groups/{policy_group_id}/targets	workspace:policyGroups:updateTargets	-
GET /v2/{project_id}/policy-groups/detail	workspace:policyGroups:listDetail	-
GET /v2/{project_id}/policy-groups/original-policies	workspace:policyGroups:getOriginalPolicies	-
GET /v2/{project_id}/users	workspace:users:list	-
POST /v2/{project_id}/users	workspace:users:create	-
DELETE /v2/{project_id}/users/{user_id}	workspace:users:delete	-
GET /v2/{project_id}/users/{user_id}	workspace:users:get	-
PUT /v2/{project_id}/users/{user_id}	workspace:users:update	-
POST /v2/{project_id}/users/batch-delete	workspace:users:batchDelete	-
POST /v2/{project_id}/users/password	workspace:users:resetPassword	-
POST /v2/{project_id}/users/password-token	workspace:users:checkResetPasswordToken	-
GET /v2/{project_id}/users/desktop-users/template	workspace:users:getTemplate	-
POST /v2/{project_id}/users/exist	workspace:users:checkExist	-
GET /v2/{project_id}/users/{user_id}/otp-devices	workspace:users:listOtps	-
GET /v2/{project_id}/users/template/download	workspace:users:getImportTemplate	-
POST /v2/{project_id}/users/export	workspace:users:export	-
POST /v2/{project_id}/users/batch-create	workspace:users:batchCreate	-
GET /v2/{project_id}/volume/products	workspace:products:listVolumeProducts	-
GET /v2/{project_id}/export-tasks	workspace:tenants:listExportTasks	-
POST /v2/{project_id}/export-tasks/batch-delete	workspace:tenants:deleteExportTasks	-
GET /v2/{project_id}/export-tasks/{task_id}/download	workspace:tenants:exportData	-
GET /v2/{project_id}/alarms	workspace:statistics:listAlarm	ces:alarmHistory:list
GET /v2/{project_id}/statistics/alarms	workspace:statistics:getAlarm	ces:alarmHistory:list
GET /v2/{project_id}/statistics/growth-rate	workspace:statistics:getGrowthRate	-
GET /v2/{project_id}/statistics/metrics	workspace:statistics:getMetric	-
GET /v2/{project_id}/statistics/metrics/trend	workspace:statistics:getMetricTrend	-
PUT /v2/{project_id}/statistics/notify-rules/{rule_id}	workspace:statistics:updateNotificationRules	smn:topic:get
DELETE /v2/{project_id}/statistics/notify-rules/{rule_id}	workspace:statistics:deleteNotificationRules	-
POST /v2/{project_id}/statistics/notify-rules	workspace:statistics:createNotifyRules	smn:topic:get
GET /v2/{project_id}/statistics/notify-rules	workspace:statistics:listNotificationRules	-
GET /v2/{project_id}/statistics/notification-records	workspace:statistics:listNotificationRecords	-
GET /v2/{project_id}/statistics/metrics/desktops	workspace:statistics:listDesktopMetrics	-
GET /v2/{project_id}/statistics/metrics/desktops/export	workspace:statistics:exportDesktopMetrics	-
GET /v2/{project_id}/statistics/metrics/users	workspace:statistics:listUserMetrics	-
GET /v2/{project_id}/statistics/metrics/users/export	workspace:statistics:exportUserMetrics	-
GET /v3/{project_id}/statistics/metrics/desktops/export	workspace:statistics:exportDesktopMetrics	-
GET /v3/{project_id}/statistics/metrics/users/export	workspace:statistics:exportUserMetrics	-
POST /v1/{project_id}/app-center/buckets/actions/create-credential	workspace:appcenter:createBucketCredential	obs:bucket:GetBucketAcl obs:object:PutObject obs:object:DeleteObject
POST /v1/{project_id}/app-center/buckets	workspace:appcenter:createAndAuthorizeBucket	obs:bucket:HeadBucket obs:bucket:PutBucketAcl obs:bucket:PutReplicationConfiguration obs:bucket:CreateBucket obs:bucket:PutBucketCORS
GET /v1/{project_id}/app-center/apps	workspace:appcenter:listApps	-
POST /v1/{project_id}/app-center/apps	workspace:appcenter:createApp	-
PATCH /v1/{project_id}/app-center/apps/{app_id}	workspace:appcenter:updateApp	-
DELETE /v1/{project_id}/app-center/apps/{app_id}	workspace:appcenter:deleteApp	-
POST /v1/{project_id}/app-center/apps/{app_id}/actions/auto-install	workspace:appcenter:installApp	-
GET /v1/{project_id}/app-center/apps/{app_id}/authorizations	workspace:appcenter:listAppAuthorizations	-
POST /v1/{project_id}/app-center/apps/{app_id}/actions/assign-authorizations	workspace:appcenter:batchUpdateAppAuthorizations	-
POST /v1/{project_id}/app-center/apps/actions/batch-delete	workspace:appcenter:batchDeleteApps	-
POST /v1/{project_id}/app-center/apps/actions/batch-disable	workspace:appcenter:batchDisableApps	-
POST /v1/{project_id}/app-center/apps/actions/batch-enable	workspace:appcenter:batchEnableApps	-
POST /v1/{project_id}/app-center/apps/actions/batch-assign-authorization	workspace:appcenter:batchUpdateAppAuthorizations	-
POST /v1/{project_id}/app-center/apps/actions/batch-auto-install	workspace:appcenter:batchInstallApps	-
GET /v1/{project_id}/app-center/app-catalogs	workspace:appcenter:listAppCatalogs	-
GET /v1/{project_id}/app-center/jobs	workspace:appcenter:listJobs	-
POST /v1/{project_id}/app-center/jobs/actions/batch-delete	workspace:appcenter:batchDeleteJobs	-
POST /v1/{project_id}/app-center/jobs/actions/retry	workspace:appcenter:retryJobs	-
POST /v1/{project_id}/app-center/app-rules	workspace:appcenter:createAppRule	-
GET /v1/{project_id}/app-center/app-rules	workspace:appcenter:listAppRule	-
PATCH /v1/{project_id}/app-center/app-rules/{rule_id}	workspace:appcenter:updateAppRule	-
DELETE /v1/{project_id}/app-center/app-rules/{rule_id}	workspace:appcenter:deleteAppRule	-
POST /v1/{project_id}/app-center/app-rules/batch-delete	workspace:appcenter:batchDeleteAppRules	-
POST /v1/{project_id}/app-center/app-rules/actions/enable-rule-restriction	workspace:appcenter:enableRuleRestriction	-
POST /v1/{project_id}/app-center/app-rules/actions/disable-rule-restriction	workspace:appcenter:disableRuleRestriction	-
POST /v1/{project_id}/app-center/app-restricted-rules	workspace:appcenter:addRestrictedRule	-
GET /v1/{project_id}/app-center/app-restricted-rules	workspace:appcenter:listRestrictedRule	-
POST /v1/{project_id}/app-center/app-restricted-rules/actions/batch-delete	workspace:appcenter:deleteRestrictedRule	-
PATCH /v1/{project_id}/app-center/profiles	workspace:appcenter:updateTenantProfile	-
GET /v1/{project_id}/app-center/profiles	workspace:appcenter:listTenantProfiles	-
POST /v2/{project_id}/scripts	workspace:scripts:create	-
GET /v2/{project_id}/scripts	workspace:scripts:list	-
GET /v2/{project_id}/scripts/{script_id}	workspace:scripts:get	-
PUT /v2/{project_id}/scripts/{script_id}	workspace:scripts:put	-
DELETE /v2/{project_id}/scripts/{script_id}	workspace:scripts:delete	-
POST /v2/{project_id}/script-executions	workspace:scripts:execute	-
GET /v2/{project_id}/script-execution-records/{record_id}	workspace:scripts:getRecordDetail	-
GET /v2/{project_id}/script-execution-records	workspace:scripts:listRecords	-
GET /v2/{project_id}/script-execution-tasks	workspace:scripts:listTasks	-
POST /v2/{project_id}/script-executions/retry	workspace:scripts:retry	-
POST /v2/{project_id}/script-executions/stop	workspace:scripts:stop	-
POST /v2/{project_id}/script-execution-records/{record_id}/download	workspace:scripts:download	-
GET /v2/{project_id}/share-space/configuration	workspace:tenants:getShareSpaceConfig	-
PUT /v2/{project_id}/share-space/configuration	workspace:tenants:updateShareSpaceConfig	-
GET /v2/{project_id}/auth-config/status	workspace:authConfigs:getStatus	-
POST /v2/{project_id}/privacystatement	workspace:privacystatements:sign	-
GET /v2/{project_id}/quotas/detail	workspace:quotas:get	-
GET /v2/{project_id}/sites	workspace:sites:get	-
POST /v2/{project_id}/sites	workspace:sites:add	eip:bandwidths:create eip:publicIps:create elb:healthmonitors:create elb:healthmonitors:show elb:listeners:create elb:listeners:update elb:listeners:show elb:listeners:list elb:loadbalancers:create elb:loadbalancers:update elb:loadbalancers:show elb:members:create elb:members:list elb:members:update elb:pools:create elb:pools:update elb:pools:show vpc:ports:create vpc:ports:delete vpc:securityGroupRules:create vpc:securityGroupRules:delete vpc:securityGroupRules:get vpc:securityGroups:create vpc:subnets:get vpc:subnets:update vpc:vpcs:get vpcep:endpoints:create vpcep:endpoints:get
DELETE /v2/{project_id}/sites/{site_id}	workspace:sites:delete	elb:healthmonitors:delete elb:healthmonitors:show elb:listeners:delete elb:listeners:show elb:loadbalancers:delete elb:loadbalancers:show elb:members:delete elb:members:list elb:pools:delete elb:pools:show vpc:ports:delete vpc:securityGroups:delete vpcep:endpoints:delete vpcep:endpoints:get eip:publicIps:disassociateInstance eip:bandwidths:delete eip:publicIps:delete
PUT /v2/{project_id}/sites/{site_id}/access-mode	workspace:sites:updateAccessMode	eip:bandwidths:create eip:bandwidths:delete eip:publicIps:create eip:publicIps:delete eip:publicIps:disassociateInstance elb:healthmonitors:create elb:healthmonitors:delete elb:healthmonitors:show elb:listeners:create elb:listeners:delete elb:listeners:update elb:listeners:show elb:loadbalancers:create elb:loadbalancers:delete elb:loadbalancers:update elb:loadbalancers:show elb:members:create elb:members:delete elb:members:list elb:members:update elb:pools:create elb:pools:delete elb:pools:update elb:pools:show vpc:subnets:get vpc:subnets:update vpc:vpcs:get vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get
PUT /v2/{project_id}/sites/{site_id}/subnet-ids	workspace:sites:updateSubnets	vpc:subnets:get vpc:subnets:update vpc:vpcs:get
GET /v2/{project_id}/tenants/lock-status	workspace:tenants:getLockStatus	-
PUT /v2/{project_id}/tenants/lock-status	workspace:tenants:unlock	-
POST /v2/{project_id}/workspaces/enterprise-ids/check	workspace:tenants:checkEnterpriseIds	-
PUT /v2/{project_id}/workspaces/enterprise-id	workspace:tenants:updateEnterpriseId	-
POST /v2/{project_id}/bandwidths	workspace:bandwidth:create	-
GET /v2/{project_id}/bandwidths	workspace:bandwidth:list	-
POST /v2/{project_id}/bandwidths/{bandwidth_id}/update	workspace:bandwidth:update	-
DELETE /v2/{project_id}/bandwidths/{bandwidth_id}	workspace:bandwidth:delete	-
GET /v2/{project_id}/bandwidths/{bandwidth_id}/control-list	workspace:bandwidth:getControlConfig	-
PUT /v2/{project_id}/bandwidths/{bandwidth_id}/control-list	workspace:bandwidth:updateControlConfig	-
POST /v2/{project_id}/bandwidths/{bandwidth_id}/periodic/change/order	workspace:bandwidth:createChangeOrder	-
POST /v2/{project_id}/adns	workspace:bandwidth:create	-
GET /v2/{project_id}/adns	workspace:bandwidth:list	-
POST /v2/{project_id}/desktops-adn/batch-delete	workspace:bandwidth:delete	-
POST /v2/{project_id}/snapshots/batch-create	workspace:desktops:batchCreateSnapshots	-
POST /v2/{project_id}/snapshots/batch-delete	workspace:desktops:batchDeleteSnapshots	-
POST /v2/{project_id}/snapshots/batch-restore	workspace:desktops:batchRestoreSnapshots	-
GET /v2/{project_id}/snapshots	workspace:desktops:listSnapshots	-
POST /v2/{project_id}/verification/desktop-name	workspace:desktops:verifyDesktopName	-
GET /v2/{project_id}/subnets/{subnet_id}/available-ip	workspace:networks:getAvailableIp	-
GET /v2/{project_id}/ad/status	workspace:desktops:getAdStatus	-
GET /v2/{project_id}/ip-exist	workspace:networks:checkIpIfExist	-
POST /v2/{project_id}/desktops/check-images	workspace:images:checkIfExist	ims:images:list
GET /v2/{project_id}/hosts/{host_id}/servers	workspace:wdh:listDesktops	-
PUT /v2/{project_id}/hosts	workspace:wdh:update	-
GET /v2/{project_id}/terminals/binding-desktops/template	workspace:bindingPolicies:getTemplate	-
POST /v2/{project_id}/terminals/binding-desktops/template/import	workspace:bindingPolicies:import	-
GET /v2/{project_id}/terminals/binding-desktops/template/export	workspace:bindingPolicies:export	-
GET /v2/{project_id}/desktops/statistics/run-state	workspace:statistics:getRunState	-
GET /v2/{project_id}/desktops/statistics/login-state	workspace:statistics:getLoginState	-
GET /v2/{project_id}/subnets/using-subnets	workspace:networks:getUsingSubnets	-
GET /v2/{project_id}/ports	workspace:networks:listPorts	-
GET /v2/{project_id}/render-desktops/{desktop_id}/remote-consoles	workspace:renderDesktops:createConsole	-
PUT /v2/{project_id}/render-desktops/resize	workspace:renderDesktops:resize	-
POST /v2/{project_id}/exclusive-hosts/{host_id}/resize-lites	workspace:exclusiveHosts:resizeLites	-
GET /services/v2/{project_id}/desktops/{desktop_id}	workspace:desktops:get	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
GET /v2/{project_id}/desktop-monitor/{desktop_id}	workspace:desktops:getMonitor	ces:metricData:get
GET /v2/{project_id}/desktops/export	workspace:desktops:export	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
GET /v2/{project_id}/desktops/{desktop_id}/detach-info	workspace:desktops:listDetachInfo	-
GET /v2/{project_id}/desktops/{desktop_id}/sysprep	workspace:desktops:getSysprepVersion	-
POST /v2/{project_id}/internet	workspace:networks:createNat	vpc:ports:delete vpc:ports:get vpc:networks:get eip:publicIps:create eip:publicIps:update eip:publicIps:delete nat:snatRules:list nat:snatRules:create nat:natGateways:list nat:natGateways:create
GET /v2/{project_id}/internet	workspace:networks:listNats	vpc:subnets:get vpc:vpcs:get nat:snatRules:list nat:natGateways:list
POST /v2/{project_id}/quotas/check	workspace:quotas:check	-
GET /v2/{project_id}/subnets	workspace:networks:listSubnets	vpc:subnets:list vpc:subnets:get
GET /v2/{project_id}/vpcs	workspace:networks:listVpcs	vpc:vpcs:list
POST /v2/{project_id}/policy-groups/policy-template	workspace:policyGroups:createTemplate	-
GET /v1/{project_id}/policy-templates	workspace:policyGroups:listTemplate	-
PUT /v2/{project_id}/policy-groups/policy-template/{policy_group_id}	workspace:policyGroups:updateTemplate	-
GET /v2/{project_id}/security-groups	workspace:networks:listSecurityGroups	-
GET /v2/{project_id}/availability-zones/summary	workspace:availabilityZones:getSummary	-
GET /v2/{project_id}/availability-zones/detail	workspace:availabilityZones:get	-
POST /v2/{project_id}/users/desktop-users/action/import	workspace:users:importUser	-
POST /v2/{project_id}/users/template-upload	workspace:users:uploadTemplate	-
PUT /v2/{project_id}/access-policy/{access_policy_id}	workspace:accessPolicies:update	-
POST /v2/{project_id}/desktops/{desktop_id}/verify-source	workspace:desktops:verifySource	-
GET /v2/{project_id}/desktops/networks	workspace:desktops:listDesktopNetworks	vpc:vpcs:get vpc:subnets:get vpc:networks:get vpc:ports:get vpc:securityGroups:get eip:publicIps:list
POST /v2/{project_id}/desktops/networks/batch-change	workspace:desktops:batchChangeNetwork	vpc:vpcs:get vpc:subnets:get vpc:networks:get vpc:ports:get vpc:ports:create vpc:ports:update vpc:ports:delete vpc:securityGroups:get eip:publicIps:list eip:publicIps:associateInstance eip:publicIps:disassociateInstance
GET /v2/{project_id}/workspace-jobs/{job_id}	workspace:jobs:get	-
POST /v2/{project_id}/ip/import	workspace:accessPolicies:importIp	-
GET /v2/{project_id}/ip/template/download	workspace:accessPolicies:getIpImportTemplate	-
GET /v2/{project_id}/wks-edge-sites	workspace:sites:listEdgeSites	ies:edgeSite:list ies:edgeSite:getMetricData
POST /v2/{project_id}/check-edge-site-resources	workspace:sites:checkEdgeSiteResources	ies:edgeSite:list ies:edgeSite:getMetricData
GET /v2/{project_id}/ad-ous	workspace:ou:listAdOus	-
GET /v2/{project_id}/ou-users	workspace:ou:listOuUsers	-
POST /v2/{project_id}/ou-users/import	workspace:ou:importUsersByOU	-
GET /v1/{project_id}/app-groups	workspace:appGroup:list	-
POST /v1/{project_id}/app-groups	workspace:appGroup:create	-
DELETE /v1/{project_id}/app-groups/{app_group_id}	workspace:appGroup:delete	-
GET /v1/{project_id}/app-groups/{app_group_id}	workspace:appGroup:get	-
PATCH /v1/{project_id}/app-groups/{app_group_id}	workspace:appGroup:update	-
GET /v1/{project_id}/app-groups/{app_group_id}/apps	workspace:app:listPublishedApp	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps	workspace:app:publish	-
GET /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}	workspace:app:get	-
PATCH /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}	workspace:app:update	-
DELETE /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}/icon	workspace:app:deleteIcon	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}/icon	workspace:app:uploadIcon	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/actions/check	workspace:app:check	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/actions/disable	workspace:app:batchDisable	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/actions/enable	workspace:app:batchEnable	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/batch-unpublish	workspace:app:unpublish	-
GET /v1/{project_id}/app-groups/{app_group_id}/publishable-app	workspace:appGroup:listPublishableApp	-
POST /v1/{project_id}/app-groups/actions/batch-delete-authorization	workspace:appGroup:batchDeleteAuthorization	-
POST /v1/{project_id}/app-groups/actions/disassociate-app-group	workspace:appGroup:disassociate	-
GET /v1/{project_id}/app-groups/actions/list-authorizations	workspace:appGroup:listAuthorization	-
POST /v1/{project_id}/app-groups/authorizations	workspace:appGroup:addAuthorization	-
POST /v1/{project_id}/app-groups/batch-delete	workspace:appGroup:batchDelete	-
POST /v1/{project_id}/app-groups/rules/validate	workspace:appGroup:check	-
GET /v1/{project_id}/app-server-groups	workspace:serverGroup:list	-
POST /v1/{project_id}/app-server-groups	workspace:serverGroup:create	ims:images:list vpc:ports:get vpc:subnets:get
DELETE /v1/{project_id}/app-server-groups/{server_group_id}	workspace:serverGroup:delete	-
GET /v1/{project_id}/app-server-groups/{server_group_id}	workspace:serverGroup:get	-
PATCH /v1/{project_id}/app-server-groups/{server_group_id}	workspace:serverGroup:update	ims:images:list
GET /v1/{project_id}/app-server-groups/{server_group_id}/state	workspace:serverGroup:getServerState	-
GET /v1/{project_id}/app-server-groups/actions/list	workspace:serverGroup:listDetail	-
GET /v1/{project_id}/app-server-groups/resources/restrict	workspace:serverGroup:getRestrict	-
POST /v1/{project_id}/app-server-groups/rules/validate	workspace:serverGroup:validate	-
POST /v1/{project_id}/server-group/{server_group_id}/tags/create	workspace:serverGroup:tagResource	-
DELETE /v1/{project_id}/server-group/{server_group_id}/tags/delete	workspace:serverGroup:unTagResource	-
GET /v1/{project_id}/server-group/{server_group_id}/tags	workspace:serverGroup:listTagsForResource	-
GET /v1/{project_id}/server-group/tags	workspace:serverGroup:listTags	-
POST /v1/{project_id}/server-group/tags/batch-create	workspace:serverGroup:batchCreateTags	-
DELETE /v1/{project_id}/server-group/tags/batch-delete	workspace:serverGroup:batchDeleteTags	-
GET /v1/{project_id}/app-servers	workspace:server:list	-
DELETE /v1/{project_id}/app-servers/{server_id}	workspace:server:delete	iam:roles:listRoles vpc:ports:delete vpc:ports:get
GET /v1/{project_id}/app-servers/{server_id}	workspace:server:get	-
PATCH /v1/{project_id}/app-servers/{server_id}	workspace:server:update	-
POST /v1/{project_id}/app-servers/{server_id}/actions/change-image	workspace:server:changeImage	ims:images:list vpc:ports:get vpc:subnets:get
POST /v1/{project_id}/app-servers/{server_id}/actions/reinstall	workspace:server:reinstall	ims:images:list vpc:ports:get vpc:subnets:get
GET /v1/{project_id}/app-servers/{server_id}/actions/vnc	workspace:server:getVncUrl	-
GET /v1/{project_id}/app-servers/access-agent/latest-version	workspace:accessAgent:list	-
PATCH /v1/{project_id}/app-servers/access-agent/actions/upgrade	workspace:accessAgent:batchUpgrade	-
GET /v1/{project_id}/app-servers/access-agent/latest-version	workspace:accessAgent:listLatestVersion	-
GET /v1/{project_id}/app-servers/access-agent/list	workspace:server:listAccessAgentDetails	-
GET /v1/{project_id}/app-servers/access-agent/upgrade-flag	workspace:accessAgent:getUpgradeFlag	-
PATCH /v1/{project_id}/app-servers/access-agent/upgrade-flag	workspace:accessAgent:updateUpgradeFlag	-
GET /v1/{project_id}/app-servers/access-agent/upgrade-record	workspace:accessAgent:listUpgradeRecords	-
POST /v1/{project_id}/app-servers/actions/batch-delete	workspace:server:batchDelete	iam:roles:listRoles vpc:ports:delete vpc:ports:get
PATCH /v1/{project_id}/app-servers/actions/batch-maint	workspace:server:batchChangeMaintainMode	-
PATCH /v1/{project_id}/app-servers/actions/batch-reboot	workspace:server:batchReboot	-
PATCH /v1/{project_id}/app-servers/actions/batch-rejoin-domain	workspace:server:batchRejoinDomain	-
PATCH /v1/{project_id}/app-servers/actions/batch-start	workspace:server:batchStart	-
PATCH /v1/{project_id}/app-servers/actions/batch-stop	workspace:server:batchStop	-
PATCH /v1/{project_id}/app-servers/actions/batch-update-tsvi	workspace:server:batchUpdateTsvi	vpc:subnets:get vpc:ports:update
POST /v1/{project_id}/app-servers/actions/create	workspace:server:create	ims:images:list ims:images:updateMemberStatus ims:images:share ims:images:get vpc:securityGroups:get vpc:securityGroupRules:get vpc:networks:get vpc:subnets:get vpc:ports:create vpc:ports:get vpc:ports:delete vpc:vpcs:get dss:pools:list
PATCH /v1/{project_id}/app-servers/hosts/batch-migrate	workspace:server:batchMigrateHosts	-
GET /v1/{project_id}/app-servers/metric-data/{server_id}	workspace:server:getMetricData	-
GET /v1/{project_id}/app-server-sub-jobs	workspace:jobs:listSubJobs	-
POST /v1/{project_id}/app-server-sub-jobs/actions/batch-delete	workspace:jobs:batchDeleteSubJobs	-
GET /v1/{project_id}/app-server-sub-jobs/actions/count	workspace:jobs:countSubJobs	-
POST /v1/{project_id}/app-warehouse/action/authorize	workspace:appWarehouse:authorizeObs	obs:bucket:GetBucketAcl obs:object:PutObject obs:object:DeleteObject
POST /v1/{project_id}/app-warehouse/actions/batch-delete	workspace:appWarehouse:batchDeleteApp	obs:bucket:HeadBucket obs:object:DeleteObject
GET /v1/{project_id}/app-warehouse/apps	workspace:appWarehouse:ListWarehouseApps	-
POST /v1/{project_id}/app-warehouse/apps	workspace:appWarehouse:createApp	-
DELETE /v1/{project_id}/app-warehouse/apps/{id}	workspace:appWarehouse:deleteApp	obs:bucket:HeadBucket obs:object:DeleteObject
POST /v1/{project_id}/app-warehouse/apps/icon	workspace:appWarehouse:uploadAppIcon	obs:object:PutObject
POST /v1/{project_id}/app-warehouse/bucket-and-acl/create	workspace:appWarehouse:createBucketOrAcl	obs:bucket:GetBucketAcl obs:bucket:HeadBucket obs:bucket:PutBucketAcl obs:bucket:PutReplicationConfiguration obs:bucket:CreateBucket obs:bucket:PutBucketCORS
GET /v1/{project_id}/check/quota	workspace:quotas:get	-
GET /v1/{project_id}/image-server-jobs	workspace:images:listImageJobs	-
GET /v1/{project_id}/image-server-jobs/{job_id}	workspace:images:getImageJob	-
GET /v1/{project_id}/image-servers	workspace:imageServer:list	-
POST /v1/{project_id}/image-servers	workspace:imageServer:create	ims:images:list vpc:ports:get vpc:subnets:get
GET /v1/{project_id}/image-servers/{server_id}	workspace:imageServer:get	-
PATCH /v1/{project_id}/image-servers/{server_id}	workspace:imageServer:update	-
POST /v1/{project_id}/image-servers/{server_id}/actions/attach-app	workspace:imageServer:attachApp	-
GET /v1/{project_id}/image-servers/{server_id}/actions/latest-attached-app	workspace:imageServer:listLatestAttachedApp	-
POST /v1/{project_id}/image-servers/{server_id}/actions/recreate-image	workspace:imageServer:recreate	vpc:ports:get vpc:subnets:get ims:quotas:get ims:images:get ims:images:list ims:images:setTags ims:images:setOrDeleteTags ims:images:updateMemberStatus ims:images:copyInRegion ims:serverImages:create
PATCH /v1/{project_id}/image-servers/actions/batch-delete	workspace:imageServer:batchDelete	-
GET /v1/{project_id}/image-server-sub-jobs	workspace:imageServer:listImageSubJobs	-
PATCH /v1/{project_id}/image-server-sub-jobs/actions/batch-delete	workspace:imageServer:batchDeleteImageSubJobs	-
GET /v1/{project_id}/image-server-sub-jobs/actions/count	workspace:imageServer:countImageSubJobs	-
GET /v2/{project_id}/job/{job_id}	workspace:jobs:get	-
GET /v1/{project_id}/mails	workspace:appGroup:listMailRecord	-
POST /v1/{project_id}/mails/actions/send	workspace:appGroup:resendMail	-
POST /v1/{project_id}/mails/actions/send-by-authorization	workspace:appGroup:resendMail	-
GET /v1/{project_id}/persistent-storages	workspace:storage:listPersistentStorage	-
POST /v1/{project_id}/persistent-storages	workspace:storage:createPersistentStorage	obs:bucket:HeadBucket obs:bucket:PutBucketPolicy obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS
DELETE /v1/{project_id}/persistent-storages/{storage_id}	workspace:storage:deletePersistentStorage	obs:object:GetObject obs:object:DeleteObject
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/assign-folder	workspace:storage:updateUserFolderAssignment	-
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/assign-share-folder	workspace:storage:updateShareFolderAssignment	-
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/create-share-folder	workspace:storage:createShareFolder	obs:object:GetObject obs:object:PutObject
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/delete-storage-claim	workspace:storage:deleteStorageClaim	obs:object:DeleteObject
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/delete-user-attachment	workspace:storage:deleteUserStorageAttachment	obs:object:DeleteObject
POST /v1/{project_id}/persistent-storages/actions/batch-delete	workspace:storage:batchDeletePersistentStorage	-
GET /v1/{project_id}/persistent-storages/actions/list-attachments	workspace:storage:listStorageAssignment	-
GET /v1/{project_id}/persistent-storages/actions/list-share-folders	workspace:storage:listShareFolder	-
GET /v1/{project_id}/policy-groups/{policy_group_id}	workspace:policyGroups:get	-
GET /v1/{project_id}/policy-groups/{policy_group_id}/policy	workspace:policyGroups:listPolicies	-
GET /v1/{project_id}/policy-groups/{policy_group_id}/target	workspace:policyGroups:listTargets	-
GET /v1/{project_id}/policy-groups/show/detail	workspace:policyGroups:listDetail	-
GET /v1/{project_id}/policy-templates	workspace:policyGroups:listTemplate	-
DELETE /v1/{project_id}/policy-templates/{policy_template_id}	workspace:policyGroups:deleteTemplate	-
PATCH /v1/{project_id}/policy-templates/{policy_template_id}	workspace:policyGroups:updateTemplate	-
GET /v1/{project_id}/privacy-statement	workspace:privacystatements:get	-
DELETE /v1/{project_id}/scaling-policy	workspace:scalingPolicy:delete	-
GET /v1/{project_id}/scaling-policy	workspace:scalingPolicy:list	-
PUT /v1/{project_id}/scaling-policy	workspace:scalingPolicy:create	-
GET /v1/{project_id}/schedule-task/{task_id}/execute-history	workspace:scheduledTasks:list	-
POST /v1/{project_id}/schedule-task	workspace:scheduledTasks:create	-
GET /v1/{project_id}/schedule-task/{execute_history_id}/execute-detail	workspace:scheduledTasks:getRecord	-
DELETE /v1/{project_id}/schedule-task/{task_id}	workspace:scheduledTasks:delete	-
POST /v1/{project_id}/schedule-task/future-executions	workspace:scheduledTasks:get	-
PATCH /v1/{project_id}/schedule-task/{task_id}	workspace:scheduledTasks:update	-
GET /v1/{project_id}/schedule-task/{task_id}/execute-history	workspace:scheduledTasks:listRecords	-
POST /v1/{project_id}/schedule-task/actions/batch-delete	workspace:scheduledTasks:batchDelete	-
POST /v1/{project_id}/session/app-connection	workspace:session:listAppConnection	-
POST /v1/{project_id}/session/logoff	workspace:session:logoffUserSession	-
POST /v1/{project_id}/session/user-connection	workspace:session:listUserConnection	-
GET /v1/{project_id}/session/user-session-info	workspace:session:listSessionByUserName	-
PUT /v1/{project_id}/storages-policy/actions/create-statements	workspace:storagePolicy:create	-
GET /v1/{project_id}/storages-policy/actions/list-statements	workspace:storagePolicy:list	-
GET /v1/{project_id}/users	workspace:users:list	-
GET /v1/persistent-storages/actions/list-sfs-storages	workspace:storage:listSfs3Storage	obs:bucket:ListBucket obs:bucket:GetBucketStorage obs:bucket:ListAllMyBuckets
GET /v1/{project_id}/product	workspace:baseResource:list	ecs:availabilityZones:list
POST /v1/{project_id}/bundles/batch-query-config-info	workspace:tenants:listConfigInfo	-
GET /v1/{project_id}/product	workspace:baseResource:list	-
GET /v1/{project_id}/volume-type	workspace:baseResource:list	-
POST /v1/{project_id}/tenant/action/active	workspace:tenants:active	-
GET /v1/{project_id}/tenant/profile	workspace:tenants:listTenantProfile	-
GET /v1/{project_id}/volume-type	workspace:baseResource:list	-
GET /v1/{project_id}/app-servers/server-metric-data/{server_id}	workspace:server:listServerMetricData	-
GET /v1/{project_id}/session/list-sessions	workspace:session:listSessions	-
PATCH /v1/{project_id}/app-warehouse/apps/{id}	workspace:appWarehouse:updateApp	-
POST /v1/{project_id}/app-servers/actions/batch-change-image	workspace:server:batchChangeImage	ims:images:list vpc:ports:get vpc:subnets:get
POST /v1/{project_id}/app-servers/actions/batch-reinstall	workspace:server:batchReinstall	ims:images:list vpc:ports:get vpc:subnets:get
GET /v2/{project_id}/auth-config/method-config	workspace:authConfigs:get	-
PUT /v2/{project_id}/auth-config/method-config	workspace:authConfigs:update	-
GET /v2/{project_id}/assist-auth-config/method-config	workspace:assistAuthConfigs:get	-
PUT /v2/{project_id}/assist-auth-config/method-config	workspace:assistAuthConfigs:update	-
POST /v2/{project_id}/workspace-jobs/{job_id}/actions	workspace:jobs:retry	-
GET /v2/{project_id}/quotas	workspace:quotas:get	-
GET /v2/{project_id}/tenants/roles	workspace:tenants:getRoles	-
GET /v2/{project_id}/tenant-configs	workspace:tenants:ListConfig	-
PUT /v2/{project_id}/tenant-configs	workspace:tenants:updateConfig	-
GET /v2/{project_id}/nat-mapping-configs	workspace:natMappings:getConfig	-
PUT /v2/{project_id}/nat-mapping-configs	workspace:natMappings:updateConfig	-
GET /v2/{project_id}/workspaces	workspace:tenants:get	vpc:vpcs:get vpc:subnets:get vpc:securityGroups:get
POST /v2/{project_id}/workspaces	workspace:tenants:open	eip:bandwidths:create eip:publicIps:create elb:healthmonitors:create elb:healthmonitors:show elb:listeners:create elb:listeners:update elb:listeners:show elb:listeners:list elb:loadbalancers:create elb:loadbalancers:update elb:loadbalancers:show elb:members:create elb:members:list elb:members:update elb:pools:create elb:pools:update elb:pools:show vpc:ports:create vpc:ports:delete vpc:securityGroupRules:create vpc:securityGroupRules:delete vpc:securityGroupRules:get vpc:securityGroups:create vpc:subnets:get vpc:subnets:update vpc:vpcs:get vpcep:endpoints:create vpcep:endpoints:get
DELETE /v2/{project_id}/workspaces	workspace:tenants:delete	elb:healthmonitors:delete elb:healthmonitors:show elb:listeners:delete elb:listeners:show elb:loadbalancers:delete elb:loadbalancers:show elb:members:delete elb:members:list elb:pools:delete elb:pools:show vpc:ports:delete vpc:securityGroups:delete vpcep:endpoints:delete vpcep:endpoints:get eip:publicIps:disassociateInstance eip:bandwidths:delete eip:publicIps:delete
PUT /v2/{project_id}/workspaces	workspace:tenants:update	eip:bandwidths:create eip:bandwidths:delete eip:publicIps:create eip:publicIps:delete eip:publicIps:disassociateInstance elb:healthmonitors:create elb:healthmonitors:delete elb:healthmonitors:show elb:listeners:create elb:listeners:delete elb:listeners:update elb:listeners:show elb:loadbalancers:create elb:loadbalancers:delete elb:loadbalancers:update elb:loadbalancers:show elb:members:create elb:members:delete elb:members:list elb:members:update elb:pools:create elb:pools:delete elb:pools:update elb:pools:show vpc:subnets:get vpc:subnets:update vpc:vpcs:get vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get
GET /v2/{project_id}/workspaces/lock-status	workspace:tenants:getLockStatus	-
PUT /v2/{project_id}/workspaces/lock-status	workspace:tenants:unlock	-
POST /v2/{project_id}/agencies	workspace:agencies:create	iam:agencies:listV5 iam:agencies:getV5 iam:agencies:createServiceLinkedAgencyV5 iam:roles:getRole iam:roles:listRoles iam:agencies:getAgency iam:agencies:listAgencies iam:agencies:createAgency iam:permissions:listRolesForAgencyOnProject iam:permissions:grantRoleToAgencyOnProject
GET /v2/{project_id}/agencies	workspace:agencies:get	iam:agencies:listV5 iam:agencies:getV5 iam:agencies:getAgency iam:agencies:listAgencies iam:permissions:listRolesForAgencyOnProject
POST /v3/{project_id}/desktops/{desktop_id}/ai-accelerate-job	workspace:desktops:commitAiAccelerateJob	-
POST /v2/{project_id}/desktops/{desktop_id}/ai-accelerate-job	workspace:desktops:createAiAccelerateJob	-
GET /v2/{project_id}/ai-accelerate-job/{job_id}	workspace:desktops:getAiAccelerateJob	-
POST /v2/{project_id}/sysprep	workspace:desktops:getSysPrepInfo	-
POST /v2/{project_id}/verification/batch-change-image	workspace:desktops:checkBatchChangeImage	ims:images:list
GET /v2/{project_id}/desktop-name-policies	workspace:tenants:listDesktopNamePolicies	-
POST /v2/{project_id}/desktop-name-policies	workspace:tenants:createDesktopNamePolicy	-
PUT /v2/{project_id}/desktop-name-policies/{policy_id}	workspace:tenants:updateDesktopNamePolicy	-
POST /v2/{project_id}/desktop-name-policies/batch-delete	workspace:tenants:batchDeleteDesktopNamePolicies	-
POST /v2/{project_id}/desktop-pools	workspace:desktopPools:create	ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update vpc:securityGroups:get vpc:subnets:get vpc:vpcs:get dss:pools:list
GET /v2/{project_id}/desktop-pools	workspace:desktopPools:list	ims:images:list
PUT /v2/{project_id}/desktop-pools/{pool_id}	workspace:desktopPools:update	-
DELETE /v2/{project_id}/desktop-pools/{pool_id}	workspace:desktopPools:delete	-
GET /v2/{project_id}/desktop-pools/{pool_id}	workspace:desktopPools:get	ims:images:list
POST /v2/{project_id}/desktop-pools/{pool_id}/expand	workspace:desktopPools:expand	ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update vpc:securityGroups:get vpc:subnets:get vpc:vpcs:get dss:pools:list
POST /v2/{project_id}/desktop-pools/{pool_id}/resize	workspace:desktopPools:resize	vpc:subnets:get ims:images:list
POST /v2/{project_id}/desktop-pools/{pool_id}/rebuild	workspace:desktopPools:rebuild	vpc:ports:get ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-add	workspace:desktopPools:batchAddVolumes	-
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-delete	workspace:desktopPools:batchDeleteVolumes	-
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-expand	workspace:desktopPools:batchExpandVolumes	-
POST /v2/{project_id}/desktop-pools/{pool_id}/action	workspace:desktopPools:operate	-
GET /v2/{project_id}/desktop-pools/{pool_id}/users	workspace:desktopPools:listUsers	-
POST /v2/{project_id}/desktop-pools/{pool_id}/users	workspace:desktopPools:authorizeUsers	ims:images:list
GET /v2/{project_id}/desktop-pools/{pool_id}/desktops	workspace:desktopPools:listDesktops	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
GET /v2/{project_id}/desktop-pools/script-execution-tasks/detail	workspace:desktopPools:listScriptTasks	-
POST /v2/{project_id}/desktop-pools/{pool_id}/script-executions	workspace:desktopPools:executeScripts	-
POST /v2/{project_id}/desktop-pools/{pool_id}/notifications	workspace:desktopPools:sendNotifications	-
GET /v3/{project_id}/desktops/export	workspace:desktops:export	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
POST /v2/{project_id}/desktops	workspace:desktops:create	ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update eip:publicIps:get eip:publicIps:list eip:publicIps:create eip:publicIps:associateInstance eip:publicIps:delete eip:publicIps:createTags vpc:quotas:list vpc:securityGroups:get vpc:subnets:get vpc:vpcs:get dss:pools:list
GET /v2/{project_id}/desktops	workspace:desktops:list	-
PUT /v2/{project_id}/desktops/{desktop_id}	workspace:desktops:update	-
DELETE /v2/{project_id}/desktops/{desktop_id}	workspace:desktops:delete	vpc:ports:get vpc:ports:delete
GET /v2/{project_id}/desktops/{desktop_id}	workspace:desktops:get	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
POST /v2/{project_id}/desktops/batch-delete	workspace:desktops:batchDelete	vpc:ports:get vpc:ports:delete
POST /v2/{project_id}/desktops/logoff	workspace:desktops:logoff	-
GET /v2/{project_id}/desktops/detail	workspace:desktops:listDetail	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
POST /v2/{project_id}/desktops/action	workspace:desktops:operate	-
POST /v2/{project_id}/desktops/resize	workspace:desktops:resize	vpc:subnets:get ims:images:list
GET /v2/{project_id}/connections/status	workspace:desktops:getConnectStatus	-
GET /v2/{project_id}/desktops/status	workspace:desktops:ListStatus	-
POST /v2/{project_id}/desktops/rebuild	workspace:desktops:rebuild	vpc:ports:get ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember
GET /v2/{project_id}/desktops/{desktop_id}/actions	workspace:desktops:getActions	-
GET /v2/{project_id}/desktops/{desktop_id}/remote-consoles	workspace:desktops:createConsole	-
PUT /v2/{project_id}/desktops/sids	workspace:desktops:updateSids	-
POST /v2/{project_id}/desktops/{desktop_id}/rejoin-domain	workspace:desktops:rejoinDomain	-
POST /v2/{project_id}/desktops/desktop-to-image	workspace:desktops:createImage	ims:quotas:get ims:images:get ims:images:list ims:images:setTags ims:images:setOrDeleteTags ims:images:updateMemberStatus ims:images:copyInRegion ims:serverImages:create
POST /v2/{project_id}/desktops/batch-detach	workspace:desktops:batchDetach	vpc:ports:get
POST /v2/{project_id}/desktops/detach	workspace:desktops:detach	vpc:ports:get
POST /v2/{project_id}/desktops/attach	workspace:desktops:attach	vpc:ports:get ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember
GET /v2/{project_id}/desktops/{desktop_id}/networks	workspace:desktops:getNetwork	vpc:vpcs:get vpc:networks:get vpc:subnets:get vpc:ports:get vpc:securityGroups:get eip:publicIps:list
PUT /v2/{project_id}/desktops/{desktop_id}/networks	workspace:desktops:changeNetwork	vpc:vpcs:get vpc:subnets:get vpc:networks:get vpc:ports:get vpc:ports:create vpc:ports:update vpc:ports:delete vpc:securityGroups:get eip:publicIps:list eip:publicIps:associateInstance eip:publicIps:disassociateInstance
GET /v2/{project_id}/exclusive-hosts/{host_id}/desktops	workspace:exclusiveHosts:listDesktops	-
GET /v2/{project_id}/all-desktops	workspace:desktops:listAll	-
GET /v2/{project_id}/desktop-associate/discover-vm/infos	workspace:desktopAssociate:listDiscoverVmInfo	-
POST /v2/{project_id}/desktop-associate/tasks	workspace:desktopAssociate:startTask	-
POST /v2/{project_id}/desktop-associate/discover-vm/switch	workspace:desktopAssociate:switchScanTask	-
GET /v2/{project_id}/desktop-associate/discover-vm/switch	workspace:desktopAssociate:getScanTaskSwitch	-
PUT /v2/{project_id}/desktops/maintenance-mode	workspace:desktops:setMaintenanceMode	-
POST /v2/{project_id}/desktops/pre-batch-attach	workspace:desktops:prepAttachUsers	-
POST /v2/{project_id}/desktops/batch-attach	workspace:desktops:batchAttachUsers	vpc:ports:get ims:images:get ims:images:list ims:images:share ims:images:updateMemberStatus ims:images:deleteMember ims:images:addMember
PUT /v2/{project_id}/desktops/change-username	workspace:desktops:changeUsername	-
POST /v2/{project_id}/desktops/notifications	workspace:desktops:sendNotifications	-
POST /v2/{project_id}/desktops/{desktop_id}/migrate	workspace:desktops:migrate	vpc:networks:get vpc:subnets:get vpc:ports:create vpc:ports:delete vpc:ports:update vpc:ports:get
GET /v2/{project_id}/desktops/agents	workspace:desktops:listAgents	-
POST /v2/{project_id}/desktops/agents	workspace:desktops:batchInstallAgents	-
GET /v2/{project_id}/desktops/{desktop_id}/tags	workspace:desktops:listTags	-
POST /v2/{project_id}/desktops/{desktop_id}/tags	workspace:desktops:tag	-
DELETE /v2/{project_id}/desktops/{desktop_id}/tags/{key}	workspace:desktops:untag	-
GET /v2/{project_id}/desktops/tags	workspace:desktops:listProjectTags	-
POST /v2/{project_id}/desktops/{desktop_id}/tags/action	workspace:desktops:operateTags	-
POST /v2/{project_id}/desktops/resource_instances/action	workspace:desktops:listByTags	-
POST /v2/{project_id}/desktops/batch-tags	workspace:desktops:tag	-
DELETE /v2/{project_id}/desktops/batch-tags	workspace:desktops:untag	-
POST /v2/{project_id}/exclusive-hosts	workspace:exclusiveHosts:create	vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update vpc:subnets:get vpc:vpcs:get
GET /v2/{project_id}/exclusive-hosts	workspace:exclusiveHosts:list	-
POST /v2/{project_id}/exclusive-hosts/check-limits	workspace:exclusiveHosts:check	-
GET /v2/{project_id}/exclusive-hosts/{host_id}	workspace:exclusiveHosts:get	nat:snatRules:list eip:publicIps:list
PUT /v2/{project_id}/exclusive-hosts/{host_id}	workspace:exclusiveHosts:update	-
DELETE /v2/{project_id}/exclusive-hosts/{host_id}	workspace:exclusiveHosts:delete	-
GET /v2/{project_id}/market-images	workspace:mkp:listImages	ims:images:list
GET /v2/{project_id}/mkp/commodities/commodity-ids	workspace:mkp:listCommodityInfos	-
POST /v2/{project_id}/mkp/order	workspace:mkp:createOrder	-
POST /v2/{project_id}/mkp/product-reserve	workspace:mkp:listListProductReserve	-
GET /v2/{project_id}/mkp/commodities	workspace:mkp:listCommodityDetails	-
GET /v2/{project_id}/mkp/commodities/{commodity_id}/relation-commodities	workspace:mkp:listRelationCommodityDetails	-
GET /v2/{project_id}/mkp/commodities/agreements	workspace:mkp:listCommodityAgreements	-
GET /v2/{project_id}/eips	workspace:networks:listEips	eip:publicIps:list eip:bandwidths:list
POST /v2/{project_id}/eips	workspace:networks:createEips	vpc:quotas:list eip:publicIps:create eip:publicIps:associateInstance
POST /v2/{project_id}/eips/binding	workspace:networks:bindEips	eip:publicIps:associateInstance eip:publicIps:get
POST /v2/{project_id}/eips/unbinding	workspace:networks:unbindEips	eip:publicIps:list eip:publicIps:disassociateInstance
GET /v2/{project_id}/eips/quotas	workspace:networks:getEipQuota	vpc:quotas:list
GET /v2/{project_id}/nat-gateways	workspace:networks:ListNatGateways	vpc:subnets:get vpc:vpcs:get nat:snatRules:list nat:natGateways:list
POST /v2/{project_id}/periodic/subscribe/order	workspace:orders:create	ims:images:list vpc:vpcs:get vpc:networks:get vpc:subnets:get vpc:ports:get bss:order:update
POST /v2/{project_id}/periodic/{desktop_id}/change/order	workspace:orders:change	ims:images:list bss:order:update
POST /v2/{project_id}/periodic/change/batch-order	workspace:orders:change	ims:images:list bss:order:update
POST /v2/{project_id}/periodic/inquiry/change-image	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/desktop-pool/periodic/change/order	workspace:orders:change	ims:images:list bss:order:update
POST /v2/{project_id}/desktop-pool/periodic/inquiry/add-volume	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/desktop-pool/periodic/inquiry/change-image	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/desktop-pool/periodic/inquiry/extend-volume	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/desktop-pool/periodic/inquiry/resize	workspace:orders:batchInquiry	ims:images:list
POST /v2/{project_id}/periodic/inquiry/add-resources	workspace:orders:batchInquiry	ims:images:list
GET /v2/{project_id}/checkOrderLimits	workspace:quotas:check	-
POST /v2/{project_id}/render-desktops	workspace:renderDesktops:create	ims:images:list ims:images:share vpc:networks:get vpc:ports:create vpc:ports:delete vpc:ports:get vpc:ports:update vpc:securityGroups:get vpc:subnets:get vpc:vpcs:get
DELETE /v2/{project_id}/render-desktops	workspace:renderDesktops:delete	vpc:ports:get vpc:ports:delete
GET /v2/{project_id}/render-desktops	workspace:renderDesktops:list	-
POST /v2/{project_id}/render-desktops/action	workspace:renderDesktops:action	-
GET /v2/{project_id}/scheduled-tasks	workspace:scheduledTasks:list	-
POST /v2/{project_id}/scheduled-tasks	workspace:scheduledTasks:create	-
GET /v2/{project_id}/scheduled-tasks/{task_id}	workspace:scheduledTasks:get	-
PUT /v2/{project_id}/scheduled-tasks/{task_id}	workspace:scheduledTasks:update	-
DELETE /v2/{project_id}/scheduled-tasks/{task_id}	workspace:scheduledTasks:delete	-
POST /v2/{project_id}/scheduled-tasks/future-executions	workspace:scheduledTasks:getFuture	-
POST /v2/{project_id}/scheduled-tasks/batch-delete	workspace:scheduledTasks:batchDelete	-
GET /v2/{project_id}/scheduled-tasks/{task_id}/records	workspace:scheduledTasks:listRecords	-
GET /v2/{project_id}/scheduled-tasks/{task_id}/records/{record_id}	workspace:scheduledTasks:getRecord	-
POST /v2/{project_id}/scheduled-tasks/{task_id}/records/export	workspace:scheduledTasks:exportRecords	-
POST /v2/{project_id}/user/share-resources	workspace:users:subscribeSharer	-
POST /v2/{project_id}/desktop/sub-resources	workspace:desktops:addSubResources	-
POST /v2/{project_id}/desktop/delete-sub-resources	workspace:desktops:deleteSubResources	-
POST /v2/{project_id}/desktops/{desktop_id}/snapshots	workspace:desktops:createSnapshots	-
GET /v2/{project_id}/desktops/{desktop_id}/snapshots	workspace:desktops:getSnapshots	-
DELETE /v2/{project_id}/desktops/{desktop_id}/snapshots	workspace:desktops:deleteSnapshots	-
POST /v2/{project_id}/desktops/{desktop_id}/snapshots/restore	workspace:desktops:restoreBySnapshot	-
GET /v2/{project_id}/statistics	workspace:statistics:listDesktopStatus	-
GET /v2/{project_id}/desktops/statistics/unused	workspace:statistics:getUnused	-
POST /v2/{project_id}/desktops/statistics/used	workspace:statistics:getUsed	-
GET /v3/{project_id}/terminals/binding-desktops/template/export	workspace:bindingPolicies:export	-
GET /v2/{project_id}/terminals/binding-desktops/config	workspace:bindingPolicies:getConfig	-
POST /v2/{project_id}/terminals/binding-desktops/config	workspace:bindingPolicies:createConfig	-
GET /v2/{project_id}/terminals/binding-desktops	workspace:bindingPolicies:get	-
POST /v2/{project_id}/terminals/binding-desktops	workspace:bindingPolicies:add	-
PUT /v2/{project_id}/terminals/binding-desktops	workspace:bindingPolicies:update	-
POST /v2/{project_id}/terminals/binding-desktops/batch-delete	workspace:bindingPolicies:delete	-
POST /v2/{project_id}/desktops/{desktop_id}/volumes/batch-delete	workspace:volumes:delete	-
POST /v2/{project_id}/volumes	workspace:volumes:batchAdd	-
POST /v2/{project_id}/volumes/expand	workspace:volumes:batchExpand	-
GET /v2/{project_id}/hosts/types	workspace:wdh:getType	-
GET /v2/{project_id}/hosts	workspace:wdh:get	-
GET /v2/{project_id}/desktops/{desktop_id}/remote-assistance	workspace:desktops:getRemoteAssistance	-
POST /v2/{project_id}/desktops/{desktop_id}/remote-assistance	workspace:desktops:createRemoteAssistance	-
DELETE /v2/{project_id}/desktops/{desktop_id}/remote-assistance	workspace:desktops:cancelRemoteAssistance	-
POST /v2/{project_id}/desktops/{desktop_id}/volumes	workspace:volumes:add	-
POST /v2/{project_id}/desktops/{desktop_id}/volumes/{volume_id}/expand	workspace:volumes:expand	-
GET /v2/{project_id}/dss-pools/detail	workspace:volumes:listDssPoolsDetail	dss:pools:list
GET /v2/{project_id}/common/timezones	workspace:common:listTimezones	-
GET /v3/{project_id}/desktops/connections/export	workspace:connections:securityExport	-
GET /v2/{project_id}/images	workspace:images:list	ims:images:list
POST /v2/{project_id}/policy-groups/import	workspace:policyGroups:import	-
POST /v2/{project_id}/access-policy	workspace:accessPolicies:create	-
GET /v2/{project_id}/access-policy	workspace:accessPolicies:get	-
DELETE /v2/{project_id}/access-policy	workspace:accessPolicies:delete	-
GET /v2/{project_id}/access-policy/{access_policy_id}/objects	workspace:accessPolicies:getTarget	-
PUT /v2/{project_id}/access-policy/{access_policy_id}/objects	workspace:accessPolicies:updateTarget	-
GET /v2/{project_id}/products	workspace:products:listDesktopProducts	ecs:cloudServerFlavors:get
GET /v2/{project_id}/products/sharer	workspace:products:listSharerProducts	-
GET /v2/{project_id}/products/adninternet	workspace:products:listInternetProducts	-
GET /v2/{project_id}/availability-zones	workspace:availabilityZones:list	-
GET /v2/{project_id}/groups/export	workspace:userGroups:export	-
POST /v3/{project_id}/users/export	workspace:users:export	-
POST /v2/{project_id}/users/import	workspace:users:import	-
GET /v3/{project_id}/groups/{group_id}/users/export	workspace:userGroups:exportUsers	-
GET /v2/{project_id}/groups/{group_id}/users/export	workspace:userGroups:exportUsers	-
POST /v2/{project_id}/users/{user_id}/actions	workspace:users:operate	-
GET /v2/{project_id}/users/{user_id}/random-password	workspace:users:randomPassword	-
DELETE /v2/{project_id}/users/{user_id}/otp-devices	workspace:users:deleteOtps	-
POST /v2/{project_id}/users/{user_id}/resend-email	workspace:users:resendEmail	-
GET /v2/{project_id}/connections/desktops	workspace:connections:securityList	-
GET /v2/{project_id}/connections/desktops/export	workspace:connections:securityExport	-
GET /v2/{project_id}/connections/online-users	workspace:connections:listOnlineUsers	-
GET /v2/{project_id}/desktops/connections	workspace:connections:securityList	-
GET /v2/{project_id}/desktops/connections/export	workspace:connections:securityExport	-
GET /v2/{project_id}/desktops/online-users	workspace:connections:listOnlineUsers	-
GET /v2/{project_id}/groups	workspace:userGroups:list	-
POST /v2/{project_id}/groups	workspace:userGroups:create	-
POST /v2/{project_id}/groups/batch-delete	workspace:userGroups:batchDelete	-
DELETE /v2/{project_id}/groups/{group_id}	workspace:userGroups:delete	-
PUT /v2/{project_id}/groups/{group_id}	workspace:userGroups:update	-
POST /v2/{project_id}/groups/{group_id}/actions	workspace:userGroups:operate	-
GET /v2/{project_id}/groups/{group_id}/users	workspace:userGroups:getUsers	-
GET /v2/{project_id}/workspace-sub-jobs	workspace:jobs:listSubJobs	-
POST /v2/{project_id}/workspace-sub-jobs/batch-delete	workspace:jobs:deleteSubJobRecords	-
GET /v2/{project_id}/ous	workspace:ou:get	-
POST /v2/{project_id}/ous	workspace:ou:create	-
DELETE /v2/{project_id}/ous/{ou_id}	workspace:ou:delete	-
PUT /v2/{project_id}/ous/{ou_id}	workspace:ou:update	-
GET /v2/{project_id}/policy-groups	workspace:policyGroups:list	-
POST /v2/{project_id}/policy-groups	workspace:policyGroups:create	-
DELETE /v2/{project_id}/policy-groups/{policy_group_id}	workspace:policyGroups:delete	-
GET /v2/{project_id}/policy-groups/{policy_group_id}	workspace:policyGroups:get	-
PUT /v2/{project_id}/policy-groups/{policy_group_id}	workspace:policyGroups:update	-
POST /v2/{project_id}/policy-groups/export	workspace:policyGroups:export	-
GET /v2/{project_id}/policy-groups/{policy_group_id}/policies	workspace:policyGroups:listPolicies	-
PUT /v2/{project_id}/policy-groups/{policy_group_id}/policies	workspace:policyGroups:updatePolicies	-
GET /v2/{project_id}/policy-groups/{policy_group_id}/targets	workspace:policyGroups:listTargets	-
PUT /v2/{project_id}/policy-groups/{policy_group_id}/targets	workspace:policyGroups:updateTargets	-
GET /v2/{project_id}/policy-groups/detail	workspace:policyGroups:listDetail	-
GET /v2/{project_id}/policy-groups/original-policies	workspace:policyGroups:getOriginalPolicies	-
GET /v2/{project_id}/users	workspace:users:list	-
POST /v2/{project_id}/users	workspace:users:create	-
DELETE /v2/{project_id}/users/{user_id}	workspace:users:delete	-
GET /v2/{project_id}/users/{user_id}	workspace:users:get	-
PUT /v2/{project_id}/users/{user_id}	workspace:users:update	-
POST /v2/{project_id}/users/batch-delete	workspace:users:batchDelete	-
POST /v2/{project_id}/users/password	workspace:users:resetPassword	-
POST /v2/{project_id}/users/password-token	workspace:users:checkResetPasswordToken	-
GET /v2/{project_id}/users/desktop-users/template	workspace:users:getTemplate	-
POST /v2/{project_id}/users/exist	workspace:users:checkExist	-
GET /v2/{project_id}/users/{user_id}/otp-devices	workspace:users:listOtps	-
GET /v2/{project_id}/users/template/download	workspace:users:getImportTemplate	-
POST /v2/{project_id}/users/export	workspace:users:export	-
POST /v2/{project_id}/users/batch-create	workspace:users:batchCreate	-
GET /v2/{project_id}/volume/products	workspace:products:listVolumeProducts	-
GET /v2/{project_id}/export-tasks	workspace:tenants:listExportTasks	-
POST /v2/{project_id}/export-tasks/batch-delete	workspace:tenants:deleteExportTasks	-
GET /v2/{project_id}/export-tasks/{task_id}/download	workspace:tenants:exportData	-
GET /v2/{project_id}/alarms	workspace:statistics:listAlarm	ces:alarmHistory:list
GET /v2/{project_id}/statistics/alarms	workspace:statistics:getAlarm	ces:alarmHistory:list
GET /v2/{project_id}/statistics/growth-rate	workspace:statistics:getGrowthRate	-
GET /v2/{project_id}/statistics/metrics	workspace:statistics:getMetric	-
GET /v2/{project_id}/statistics/metrics/trend	workspace:statistics:getMetricTrend	-
PUT /v2/{project_id}/statistics/notify-rules/{rule_id}	workspace:statistics:updateNotificationRules	smn:topic:get
DELETE /v2/{project_id}/statistics/notify-rules/{rule_id}	workspace:statistics:deleteNotificationRules	-
POST /v2/{project_id}/statistics/notify-rules	workspace:statistics:createNotifyRules	smn:topic:get
GET /v2/{project_id}/statistics/notify-rules	workspace:statistics:listNotificationRules	-
GET /v2/{project_id}/statistics/notification-records	workspace:statistics:listNotificationRecords	-
GET /v2/{project_id}/statistics/metrics/desktops	workspace:statistics:listDesktopMetrics	-
GET /v2/{project_id}/statistics/metrics/desktops/export	workspace:statistics:exportDesktopMetrics	-
GET /v2/{project_id}/statistics/metrics/users	workspace:statistics:listUserMetrics	-
GET /v2/{project_id}/statistics/metrics/users/export	workspace:statistics:exportUserMetrics	-
GET /v3/{project_id}/statistics/metrics/desktops/export	workspace:statistics:exportDesktopMetrics	-
GET /v3/{project_id}/statistics/metrics/users/export	workspace:statistics:exportUserMetrics	-
POST /v1/{project_id}/app-center/buckets/actions/create-credential	workspace:appcenter:createBucketCredential	obs:bucket:GetBucketAcl obs:object:PutObject obs:object:DeleteObject
POST /v1/{project_id}/app-center/buckets	workspace:appcenter:createAndAuthorizeBucket	obs:bucket:HeadBucket obs:bucket:PutBucketAcl obs:bucket:PutReplicationConfiguration obs:bucket:CreateBucket obs:bucket:PutBucketCORS
GET /v1/{project_id}/app-center/apps	workspace:appcenter:listApps	-
POST /v1/{project_id}/app-center/apps	workspace:appcenter:createApp	-
PATCH /v1/{project_id}/app-center/apps/{app_id}	workspace:appcenter:updateApp	-
DELETE /v1/{project_id}/app-center/apps/{app_id}	workspace:appcenter:deleteApp	-
POST /v1/{project_id}/app-center/apps/{app_id}/actions/auto-install	workspace:appcenter:installApp	-
GET /v1/{project_id}/app-center/apps/{app_id}/authorizations	workspace:appcenter:listAppAuthorizations	-
POST /v1/{project_id}/app-center/apps/{app_id}/actions/assign-authorizations	workspace:appcenter:batchUpdateAppAuthorizations	-
POST /v1/{project_id}/app-center/apps/actions/batch-delete	workspace:appcenter:batchDeleteApps	-
POST /v1/{project_id}/app-center/apps/actions/batch-disable	workspace:appcenter:batchDisableApps	-
POST /v1/{project_id}/app-center/apps/actions/batch-enable	workspace:appcenter:batchEnableApps	-
POST /v1/{project_id}/app-center/apps/actions/batch-assign-authorization	workspace:appcenter:batchUpdateAppAuthorizations	-
POST /v1/{project_id}/app-center/apps/actions/batch-auto-install	workspace:appcenter:batchInstallApps	-
GET /v1/{project_id}/app-center/app-catalogs	workspace:appcenter:listAppCatalogs	-
GET /v1/{project_id}/app-center/jobs	workspace:appcenter:listJobs	-
POST /v1/{project_id}/app-center/jobs/actions/batch-delete	workspace:appcenter:batchDeleteJobs	-
POST /v1/{project_id}/app-center/jobs/actions/retry	workspace:appcenter:retryJobs	-
POST /v1/{project_id}/app-center/app-rules	workspace:appcenter:createAppRule	-
GET /v1/{project_id}/app-center/app-rules	workspace:appcenter:listAppRule	-
PATCH /v1/{project_id}/app-center/app-rules/{rule_id}	workspace:appcenter:updateAppRule	-
DELETE /v1/{project_id}/app-center/app-rules/{rule_id}	workspace:appcenter:deleteAppRule	-
POST /v1/{project_id}/app-center/app-rules/batch-delete	workspace:appcenter:batchDeleteAppRules	-
POST /v1/{project_id}/app-center/app-rules/actions/enable-rule-restriction	workspace:appcenter:enableRuleRestriction	-
POST /v1/{project_id}/app-center/app-rules/actions/disable-rule-restriction	workspace:appcenter:disableRuleRestriction	-
POST /v1/{project_id}/app-center/app-restricted-rules	workspace:appcenter:addRestrictedRule	-
GET /v1/{project_id}/app-center/app-restricted-rules	workspace:appcenter:listRestrictedRule	-
POST /v1/{project_id}/app-center/app-restricted-rules/actions/batch-delete	workspace:appcenter:deleteRestrictedRule	-
PATCH /v1/{project_id}/app-center/profiles	workspace:appcenter:updateTenantProfile	-
GET /v1/{project_id}/app-center/profiles	workspace:appcenter:listTenantProfiles	-
POST /v2/{project_id}/scripts	workspace:scripts:create	-
GET /v2/{project_id}/scripts	workspace:scripts:list	-
GET /v2/{project_id}/scripts/{script_id}	workspace:scripts:get	-
PUT /v2/{project_id}/scripts/{script_id}	workspace:scripts:put	-
DELETE /v2/{project_id}/scripts/{script_id}	workspace:scripts:delete	-
POST /v2/{project_id}/script-executions	workspace:scripts:execute	-
GET /v2/{project_id}/script-execution-records/{record_id}	workspace:scripts:getRecordDetail	-
GET /v2/{project_id}/script-execution-records	workspace:scripts:listRecords	-
GET /v2/{project_id}/script-execution-tasks	workspace:scripts:listTasks	-
POST /v2/{project_id}/script-executions/retry	workspace:scripts:retry	-
POST /v2/{project_id}/script-executions/stop	workspace:scripts:stop	-
POST /v2/{project_id}/script-execution-records/{record_id}/download	workspace:scripts:download	-
GET /v2/{project_id}/share-space/configuration	workspace:tenants:getShareSpaceConfig	-
PUT /v2/{project_id}/share-space/configuration	workspace:tenants:updateShareSpaceConfig	-
GET /v2/{project_id}/auth-config/status	workspace:authConfigs:getStatus	-
POST /v2/{project_id}/privacystatement	workspace:privacystatements:sign	-
GET /v2/{project_id}/quotas/detail	workspace:quotas:get	-
GET /v2/{project_id}/sites	workspace:sites:get	-
POST /v2/{project_id}/sites	workspace:sites:add	eip:bandwidths:create eip:publicIps:create elb:healthmonitors:create elb:healthmonitors:show elb:listeners:create elb:listeners:update elb:listeners:show elb:listeners:list elb:loadbalancers:create elb:loadbalancers:update elb:loadbalancers:show elb:members:create elb:members:list elb:members:update elb:pools:create elb:pools:update elb:pools:show vpc:ports:create vpc:ports:delete vpc:securityGroupRules:create vpc:securityGroupRules:delete vpc:securityGroupRules:get vpc:securityGroups:create vpc:subnets:get vpc:subnets:update vpc:vpcs:get vpcep:endpoints:create vpcep:endpoints:get
DELETE /v2/{project_id}/sites/{site_id}	workspace:sites:delete	elb:healthmonitors:delete elb:healthmonitors:show elb:listeners:delete elb:listeners:show elb:loadbalancers:delete elb:loadbalancers:show elb:members:delete elb:members:list elb:pools:delete elb:pools:show vpc:ports:delete vpc:securityGroups:delete vpcep:endpoints:delete vpcep:endpoints:get eip:publicIps:disassociateInstance eip:bandwidths:delete eip:publicIps:delete
PUT /v2/{project_id}/sites/{site_id}/access-mode	workspace:sites:updateAccessMode	eip:bandwidths:create eip:bandwidths:delete eip:publicIps:create eip:publicIps:delete eip:publicIps:disassociateInstance elb:healthmonitors:create elb:healthmonitors:delete elb:healthmonitors:show elb:listeners:create elb:listeners:delete elb:listeners:update elb:listeners:show elb:loadbalancers:create elb:loadbalancers:delete elb:loadbalancers:update elb:loadbalancers:show elb:members:create elb:members:delete elb:members:list elb:members:update elb:pools:create elb:pools:delete elb:pools:update elb:pools:show vpc:subnets:get vpc:subnets:update vpc:vpcs:get vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get
PUT /v2/{project_id}/sites/{site_id}/subnet-ids	workspace:sites:updateSubnets	vpc:subnets:get vpc:subnets:update vpc:vpcs:get
GET /v2/{project_id}/tenants/lock-status	workspace:tenants:getLockStatus	-
PUT /v2/{project_id}/tenants/lock-status	workspace:tenants:unlock	-
POST /v2/{project_id}/workspaces/enterprise-ids/check	workspace:tenants:checkEnterpriseIds	-
PUT /v2/{project_id}/workspaces/enterprise-id	workspace:tenants:updateEnterpriseId	-
POST /v2/{project_id}/bandwidths	workspace:bandwidth:create	-
GET /v2/{project_id}/bandwidths	workspace:bandwidth:list	-
POST /v2/{project_id}/bandwidths/{bandwidth_id}/update	workspace:bandwidth:update	-
DELETE /v2/{project_id}/bandwidths/{bandwidth_id}	workspace:bandwidth:delete	-
GET /v2/{project_id}/bandwidths/{bandwidth_id}/control-list	workspace:bandwidth:getControlConfig	-
PUT /v2/{project_id}/bandwidths/{bandwidth_id}/control-list	workspace:bandwidth:updateControlConfig	-
POST /v2/{project_id}/bandwidths/{bandwidth_id}/periodic/change/order	workspace:bandwidth:createChangeOrder	-
POST /v2/{project_id}/adns	workspace:bandwidth:create	-
GET /v2/{project_id}/adns	workspace:bandwidth:list	-
POST /v2/{project_id}/desktops-adn/batch-delete	workspace:bandwidth:delete	-
POST /v2/{project_id}/snapshots/batch-create	workspace:desktops:batchCreateSnapshots	-
POST /v2/{project_id}/snapshots/batch-delete	workspace:desktops:batchDeleteSnapshots	-
POST /v2/{project_id}/snapshots/batch-restore	workspace:desktops:batchRestoreSnapshots	-
GET /v2/{project_id}/snapshots	workspace:desktops:listSnapshots	-
POST /v2/{project_id}/verification/desktop-name	workspace:desktops:verifyDesktopName	-
GET /v2/{project_id}/subnets/{subnet_id}/available-ip	workspace:networks:getAvailableIp	-
GET /v2/{project_id}/ad/status	workspace:desktops:getAdStatus	-
GET /v2/{project_id}/ip-exist	workspace:networks:checkIpIfExist	-
POST /v2/{project_id}/desktops/check-images	workspace:images:checkIfExist	ims:images:list
GET /v2/{project_id}/hosts/{host_id}/servers	workspace:wdh:listDesktops	-
PUT /v2/{project_id}/hosts	workspace:wdh:update	-
GET /v2/{project_id}/terminals/binding-desktops/template	workspace:bindingPolicies:getTemplate	-
POST /v2/{project_id}/terminals/binding-desktops/template/import	workspace:bindingPolicies:import	-
GET /v2/{project_id}/terminals/binding-desktops/template/export	workspace:bindingPolicies:export	-
GET /v2/{project_id}/desktops/statistics/run-state	workspace:statistics:getRunState	-
GET /v2/{project_id}/desktops/statistics/login-state	workspace:statistics:getLoginState	-
GET /v2/{project_id}/subnets/using-subnets	workspace:networks:getUsingSubnets	-
GET /v2/{project_id}/ports	workspace:networks:listPorts	-
GET /v2/{project_id}/render-desktops/{desktop_id}/remote-consoles	workspace:renderDesktops:createConsole	-
PUT /v2/{project_id}/render-desktops/resize	workspace:renderDesktops:resize	-
POST /v2/{project_id}/exclusive-hosts/{host_id}/resize-lites	workspace:exclusiveHosts:resizeLites	-
GET /services/v2/{project_id}/desktops/{desktop_id}	workspace:desktops:get	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
GET /v2/{project_id}/desktop-monitor/{desktop_id}	workspace:desktops:getMonitor	ces:metricData:get
GET /v2/{project_id}/desktops/export	workspace:desktops:export	vpc:ports:get vpc:ports:list vpc:securityGroups:get eip:publicIps:list nat:snatRules:list
GET /v2/{project_id}/desktops/{desktop_id}/detach-info	workspace:desktops:listDetachInfo	-
GET /v2/{project_id}/desktops/{desktop_id}/sysprep	workspace:desktops:getSysprepVersion	-
POST /v2/{project_id}/internet	workspace:networks:createNat	vpc:ports:delete vpc:ports:get vpc:networks:get eip:publicIps:create eip:publicIps:update eip:publicIps:delete nat:snatRules:list nat:snatRules:create nat:natGateways:list nat:natGateways:create
GET /v2/{project_id}/internet	workspace:networks:listNats	vpc:subnets:get vpc:vpcs:get nat:snatRules:list nat:natGateways:list
POST /v2/{project_id}/quotas/check	workspace:quotas:check	-
GET /v2/{project_id}/subnets	workspace:networks:listSubnets	vpc:subnets:list vpc:subnets:get
GET /v2/{project_id}/vpcs	workspace:networks:listVpcs	vpc:vpcs:list
POST /v2/{project_id}/policy-groups/policy-template	workspace:policyGroups:createTemplate	-
GET /v1/{project_id}/policy-templates	workspace:policyGroups:listTemplate	-
PUT /v2/{project_id}/policy-groups/policy-template/{policy_group_id}	workspace:policyGroups:updateTemplate	-
GET /v2/{project_id}/security-groups	workspace:networks:listSecurityGroups	-
GET /v2/{project_id}/availability-zones/summary	workspace:availabilityZones:getSummary	-
GET /v2/{project_id}/availability-zones/detail	workspace:availabilityZones:get	-
POST /v2/{project_id}/users/desktop-users/action/import	workspace:users:importUser	-
POST /v2/{project_id}/users/template-upload	workspace:users:uploadTemplate	-
PUT /v2/{project_id}/access-policy/{access_policy_id}	workspace:accessPolicies:update	-
POST /v2/{project_id}/desktops/{desktop_id}/verify-source	workspace:desktops:verifySource	-
GET /v2/{project_id}/desktops/networks	workspace:desktops:listDesktopNetworks	vpc:vpcs:get vpc:subnets:get vpc:networks:get vpc:ports:get vpc:securityGroups:get eip:publicIps:list
POST /v2/{project_id}/desktops/networks/batch-change	workspace:desktops:batchChangeNetwork	vpc:vpcs:get vpc:subnets:get vpc:networks:get vpc:ports:get vpc:ports:create vpc:ports:update vpc:ports:delete vpc:securityGroups:get eip:publicIps:list eip:publicIps:associateInstance eip:publicIps:disassociateInstance
GET /v2/{project_id}/workspace-jobs/{job_id}	workspace:jobs:get	-
POST /v2/{project_id}/ip/import	workspace:accessPolicies:importIp	-
GET /v2/{project_id}/ip/template/download	workspace:accessPolicies:getIpImportTemplate	-
GET /v2/{project_id}/wks-edge-sites	workspace:sites:listEdgeSites	ies:edgeSite:list ies:edgeSite:getMetricData
POST /v2/{project_id}/check-edge-site-resources	workspace:sites:checkEdgeSiteResources	ies:edgeSite:list ies:edgeSite:getMetricData
GET /v2/{project_id}/ad-ous	workspace:ou:listAdOus	-
GET /v2/{project_id}/ou-users	workspace:ou:listOuUsers	-
POST /v2/{project_id}/ou-users/import	workspace:ou:importUsersByOU	-
GET /v1/{project_id}/app-groups	workspace:appGroup:list	-
POST /v1/{project_id}/app-groups	workspace:appGroup:create	-
DELETE /v1/{project_id}/app-groups/{app_group_id}	workspace:appGroup:delete	-
GET /v1/{project_id}/app-groups/{app_group_id}	workspace:appGroup:get	-
PATCH /v1/{project_id}/app-groups/{app_group_id}	workspace:appGroup:update	-
GET /v1/{project_id}/app-groups/{app_group_id}/apps	workspace:app:listPublishedApp	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps	workspace:app:publish	-
GET /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}	workspace:app:get	-
PATCH /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}	workspace:app:update	-
DELETE /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}/icon	workspace:app:deleteIcon	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/{app_id}/icon	workspace:app:uploadIcon	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/actions/check	workspace:app:check	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/actions/disable	workspace:app:batchDisable	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/actions/enable	workspace:app:batchEnable	-
POST /v1/{project_id}/app-groups/{app_group_id}/apps/batch-unpublish	workspace:app:unpublish	-
GET /v1/{project_id}/app-groups/{app_group_id}/publishable-app	workspace:appGroup:listPublishableApp	-
POST /v1/{project_id}/app-groups/actions/batch-delete-authorization	workspace:appGroup:batchDeleteAuthorization	-
POST /v1/{project_id}/app-groups/actions/disassociate-app-group	workspace:appGroup:disassociate	-
GET /v1/{project_id}/app-groups/actions/list-authorizations	workspace:appGroup:listAuthorization	-
POST /v1/{project_id}/app-groups/authorizations	workspace:appGroup:addAuthorization	-
POST /v1/{project_id}/app-groups/batch-delete	workspace:appGroup:batchDelete	-
POST /v1/{project_id}/app-groups/rules/validate	workspace:appGroup:check	-
GET /v1/{project_id}/app-server-groups	workspace:serverGroup:list	-
POST /v1/{project_id}/app-server-groups	workspace:serverGroup:create	ims:images:list vpc:ports:get vpc:subnets:get
DELETE /v1/{project_id}/app-server-groups/{server_group_id}	workspace:serverGroup:delete	-
GET /v1/{project_id}/app-server-groups/{server_group_id}	workspace:serverGroup:get	-
PATCH /v1/{project_id}/app-server-groups/{server_group_id}	workspace:serverGroup:update	ims:images:list
GET /v1/{project_id}/app-server-groups/{server_group_id}/state	workspace:serverGroup:getServerState	-
GET /v1/{project_id}/app-server-groups/actions/list	workspace:serverGroup:listDetail	-
GET /v1/{project_id}/app-server-groups/resources/restrict	workspace:serverGroup:getRestrict	-
POST /v1/{project_id}/app-server-groups/rules/validate	workspace:serverGroup:validate	-
POST /v1/{project_id}/server-group/{server_group_id}/tags/create	workspace:serverGroup:tagResource	-
DELETE /v1/{project_id}/server-group/{server_group_id}/tags/delete	workspace:serverGroup:unTagResource	-
GET /v1/{project_id}/server-group/{server_group_id}/tags	workspace:serverGroup:listTagsForResource	-
GET /v1/{project_id}/server-group/tags	workspace:serverGroup:listTags	-
POST /v1/{project_id}/server-group/tags/batch-create	workspace:serverGroup:batchCreateTags	-
DELETE /v1/{project_id}/server-group/tags/batch-delete	workspace:serverGroup:batchDeleteTags	-
GET /v1/{project_id}/app-servers	workspace:server:list	-
DELETE /v1/{project_id}/app-servers/{server_id}	workspace:server:delete	iam:roles:listRoles vpc:ports:delete vpc:ports:get
GET /v1/{project_id}/app-servers/{server_id}	workspace:server:get	-
PATCH /v1/{project_id}/app-servers/{server_id}	workspace:server:update	-
POST /v1/{project_id}/app-servers/{server_id}/actions/change-image	workspace:server:changeImage	ims:images:list vpc:ports:get vpc:subnets:get
POST /v1/{project_id}/app-servers/{server_id}/actions/reinstall	workspace:server:reinstall	ims:images:list vpc:ports:get vpc:subnets:get
GET /v1/{project_id}/app-servers/{server_id}/actions/vnc	workspace:server:getVncUrl	-
GET /v1/{project_id}/app-servers/access-agent/upgrade-record	workspace:accessAgent:list	-
PATCH /v1/{project_id}/app-servers/access-agent/actions/upgrade	workspace:accessAgent:batchUpgrade	-
GET /v1/{project_id}/app-servers/access-agent/latest-version	workspace:accessAgent:listLatestVersion	-
GET /v1/{project_id}/app-servers/access-agent/list	workspace:server:listAccessAgentDetails	-
GET /v1/{project_id}/app-servers/access-agent/upgrade-flag	workspace:accessAgent:getUpgradeFlag	-
PATCH /v1/{project_id}/app-servers/access-agent/upgrade-flag	workspace:accessAgent:updateUpgradeFlag	-
GET /v1/{project_id}/app-servers/access-agent/upgrade-record	workspace:accessAgent:listUpgradeRecords	-
POST /v1/{project_id}/app-servers/actions/batch-delete	workspace:server:batchDelete	iam:roles:listRoles vpc:ports:delete vpc:ports:get
PATCH /v1/{project_id}/app-servers/actions/batch-maint	workspace:server:batchChangeMaintainMode	-
PATCH /v1/{project_id}/app-servers/actions/batch-reboot	workspace:server:batchReboot	-
PATCH /v1/{project_id}/app-servers/actions/batch-rejoin-domain	workspace:server:batchRejoinDomain	-
PATCH /v1/{project_id}/app-servers/actions/batch-start	workspace:server:batchStart	-
PATCH /v1/{project_id}/app-servers/actions/batch-stop	workspace:server:batchStop	-
PATCH /v1/{project_id}/app-servers/actions/batch-update-tsvi	workspace:server:batchUpdateTsvi	vpc:subnets:get vpc:ports:update
POST /v1/{project_id}/app-servers/actions/create	workspace:server:create	ims:images:list ims:images:updateMemberStatus ims:images:share ims:images:get vpc:securityGroups:get vpc:securityGroupRules:get vpc:networks:get vpc:subnets:get vpc:ports:create vpc:ports:get vpc:ports:delete vpc:vpcs:get dss:pools:list
PATCH /v1/{project_id}/app-servers/hosts/batch-migrate	workspace:server:batchMigrateHosts	-
GET /v1/{project_id}/app-servers/metric-data/{server_id}	workspace:server:getMetricData	-
GET /v1/{project_id}/app-server-sub-jobs	workspace:jobs:listSubJobs	-
POST /v1/{project_id}/app-server-sub-jobs/actions/batch-delete	workspace:jobs:batchDeleteSubJobs	-
GET /v1/{project_id}/app-server-sub-jobs/actions/count	workspace:jobs:countSubJobs	-
POST /v1/{project_id}/app-warehouse/action/authorize	workspace:appWarehouse:authorizeObs	obs:bucket:GetBucketAcl obs:object:PutObject obs:object:DeleteObject
POST /v1/{project_id}/app-warehouse/actions/batch-delete	workspace:appWarehouse:batchDeleteApp	obs:bucket:HeadBucket obs:object:DeleteObject
GET /v1/{project_id}/app-warehouse/apps	workspace:appWarehouse:ListWarehouseApps	-
POST /v1/{project_id}/app-warehouse/apps	workspace:appWarehouse:createApp	-
DELETE /v1/{project_id}/app-warehouse/apps/{id}	workspace:appWarehouse:deleteApp	obs:bucket:HeadBucket obs:object:DeleteObject
POST /v1/{project_id}/app-warehouse/apps/icon	workspace:appWarehouse:uploadAppIcon	obs:object:PutObject
POST /v1/{project_id}/app-warehouse/bucket-and-acl/create	workspace:appWarehouse:createBucketOrAcl	obs:bucket:GetBucketAcl obs:bucket:HeadBucket obs:bucket:PutBucketAcl obs:bucket:PutReplicationConfiguration obs:bucket:CreateBucket obs:bucket:PutBucketCORS
GET /v1/{project_id}/check/quota	workspace:quotas:get	-
GET /v1/{project_id}/image-server-jobs	workspace:images:listImageJobs	-
GET /v1/{project_id}/image-server-jobs/{job_id}	workspace:images:getImageJob	-
GET /v1/{project_id}/image-servers	workspace:imageServer:list	-
POST /v1/{project_id}/image-servers	workspace:imageServer:create	ims:images:list vpc:ports:get vpc:subnets:get
GET /v1/{project_id}/image-servers/{server_id}	workspace:imageServer:get	-
PATCH /v1/{project_id}/image-servers/{server_id}	workspace:imageServer:update	-
POST /v1/{project_id}/image-servers/{server_id}/actions/attach-app	workspace:imageServer:attachApp	-
GET /v1/{project_id}/image-servers/{server_id}/actions/latest-attached-app	workspace:imageServer:listLatestAttachedApp	-
POST /v1/{project_id}/image-servers/{server_id}/actions/recreate-image	workspace:imageServer:recreate	vpc:ports:get vpc:subnets:get ims:quotas:get ims:images:get ims:images:list ims:images:setTags ims:images:setOrDeleteTags ims:images:updateMemberStatus ims:images:copyInRegion ims:serverImages:create
PATCH /v1/{project_id}/image-servers/actions/batch-delete	workspace:imageServer:batchDelete	-
GET /v1/{project_id}/image-server-sub-jobs	workspace:imageServer:listImageSubJobs	-
PATCH /v1/{project_id}/image-server-sub-jobs/actions/batch-delete	workspace:imageServer:batchDeleteImageSubJobs	-
GET /v1/{project_id}/image-server-sub-jobs/actions/count	workspace:imageServer:countImageSubJobs	-
GET /v2/{project_id}/job/{job_id}	workspace:jobs:get	-
GET /v1/{project_id}/mails	workspace:appGroup:listMailRecord	-
POST /v1/{project_id}/mails/actions/send	workspace:appGroup:resendMail	-
POST /v1/{project_id}/mails/actions/send	workspace:appGroup:resendMail	-
GET /v1/{project_id}/persistent-storages	workspace:storage:listPersistentStorage	-
POST /v1/{project_id}/persistent-storages	workspace:storage:createPersistentStorage	obs:bucket:HeadBucket obs:bucket:PutBucketPolicy obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS
DELETE /v1/{project_id}/persistent-storages/{storage_id}	workspace:storage:deletePersistentStorage	obs:object:GetObject obs:object:DeleteObject
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/assign-folder	workspace:storage:updateUserFolderAssignment	-
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/assign-share-folder	workspace:storage:updateShareFolderAssignment	-
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/create-share-folder	workspace:storage:createShareFolder	obs:object:GetObject obs:object:PutObject
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/delete-storage-claim	workspace:storage:deleteStorageClaim	obs:object:DeleteObject
POST /v1/{project_id}/persistent-storages/{storage_id}/actions/delete-user-attachment	workspace:storage:deleteUserStorageAttachment	obs:object:DeleteObject
POST /v1/{project_id}/persistent-storages/actions/batch-delete	workspace:storage:batchDeletePersistentStorage	-
GET /v1/{project_id}/persistent-storages/actions/list-attachments	workspace:storage:listStorageAssignment	-
GET /v1/{project_id}/persistent-storages/actions/list-share-folders	workspace:storage:listShareFolder	-
GET /v1/{project_id}/policy-groups/{policy_group_id}	workspace:policyGroups:get	-
GET /v2/{project_id}/policy-groups/{policy_group_id}/policies	workspace:policyGroups:listPolicies	-
GET /v1/{project_id}/policy-groups/{policy_group_id}/target	workspace:policyGroups:listTargets	-
GET /v2/{project_id}/policy-groups/detail	workspace:policyGroups:listDetail	-
GET /v1/{project_id}/policy-templates	workspace:policyGroups:listTemplate	-
DELETE /v1/{project_id}/policy-templates/{policy_template_id}	workspace:policyGroups:deleteTemplate	-
PATCH /v1/{project_id}/policy-templates/{policy_template_id}	workspace:policyGroups:updateTemplate	-
GET /v1/{project_id}/privacy-statement	workspace:privacystatements:get	-
DELETE /v1/{project_id}/scaling-policy	workspace:scalingPolicy:delete	-
GET /v1/{project_id}/scaling-policy	workspace:scalingPolicy:list	-
PUT /v1/{project_id}/scaling-policy	workspace:scalingPolicy:create	-
GET /v2/{project_id}/scheduled-tasks/{task_id}/records	workspace:scheduledTasks:list	-
POST /v2/{project_id}/scheduled-tasks	workspace:scheduledTasks:create	-
GET /v2/{project_id}/scheduled-tasks/{task_id}/records/{record_id}	workspace:scheduledTasks:getRecord	-
DELETE /v2/{project_id}/scheduled-tasks/{task_id}	workspace:scheduledTasks:delete	-
POST /v2/{project_id}/scheduled-tasks/future-executions	workspace:scheduledTasks:get	-
PUT /v2/{project_id}/scheduled-tasks/{task_id}	workspace:scheduledTasks:update	-
GET /v2/{project_id}/scheduled-tasks/{task_id}/records	workspace:scheduledTasks:listRecords	-
POST /v2/{project_id}/scheduled-tasks/batch-delete	workspace:scheduledTasks:batchDelete	-
POST /v1/{project_id}/session/app-connection	workspace:session:listAppConnection	-
POST /v1/{project_id}/session/logoff	workspace:session:logoffUserSession	-
POST /v1/{project_id}/session/user-connection	workspace:session:listUserConnection	-
GET /v1/{project_id}/session/user-session-info	workspace:session:listSessionByUserName	-
PUT /v1/{project_id}/storages-policy/actions/create-statements	workspace:storagePolicy:create	-
GET /v1/{project_id}/storages-policy/actions/list-statements	workspace:storagePolicy:list	-
GET /v2/{project_id}/users	workspace:users:list	-
GET /v1/persistent-storages/actions/list-sfs-storages	workspace:storage:listSfs3Storage	obs:bucket:ListBucket obs:bucket:GetBucketStorage obs:bucket:ListAllMyBuckets
GET /v1/{project_id}/availability-zone	workspace:baseResource:list	ecs:availabilityZones:list
POST /v1/{project_id}/bundles/batch-query-config-info	workspace:tenants:listConfigInfo	-
GET /v1/{project_id}/product	workspace:baseResource:list	-
GET /v1/{project_id}/product	workspace:baseResource:list	-
POST /v1/{project_id}/tenant/action/active	workspace:tenants:active	-
GET /v1/{project_id}/tenant/profile	workspace:tenants:listTenantProfile	-
GET /v1/{project_id}/volume-type	workspace:baseResource:list	-
GET /v1/{project_id}/app-servers/server-metric-data/{server_id}	workspace:server:listServerMetricData	-
GET /v1/{project_id}/session/list-sessions	workspace:session:listSessions	-
PATCH /v1/{project_id}/app-warehouse/apps/{id}	workspace:appWarehouse:updateApp	-
POST /v1/{project_id}/app-servers/actions/batch-change-image	workspace:server:batchChangeImage	ims:images:list vpc:ports:get vpc:subnets:get
POST /v1/{project_id}/app-servers/actions/batch-reinstall	workspace:server:batchReinstall	ims:images:list vpc:ports:get vpc:subnets:get

Resources

A resource type indicates the resources that an SCP policy applies to. If you specify a resource type for any action in Table 3, the resource URN must be specified in the SCP statements using that action, and the SCP applies only to resources of this type. If no resource type is specified, the Resource element is marked with an asterisk (*) and the SCP applies to all resources. You can also set condition keys in an SCP to define resource types.

The following table lists the resource types that you can define in SCP statements for Workspace.

**Table 3** Resource types supported by Workspace
Resource Type	Description	URN
desktop	Desktop	workspace:<region>:<account-id>:desktop:<desktop-id>
desktopPool	Desktop pool	workspace:<region>:<account-id>:desktopPool:<pool-id>
wdh	Workspace host	workspace:<region>:<account-id>:wdh:<wdh-id>
exclusiveHost	Exclusive host	workspace:<region>:<account-id>:exclusiveHost:<host-id>
user	User	workspace:<region>:<account-id>:user:<user-id>
userGroup	User group	workspace:<region>:<account-id>:userGroup:<group-id>
policyGroup	Policy group	workspace:<region>:<account-id>:policyGroup:<policy-group-id>
script	Script	workspace:<region>:<account-id>:script:<script-id>
scheduledTask	Scheduled task	workspace:<region>:<account-id>:scheduledTask:<task-id>
server	APS	workspace:<region>:<account-id>:server:<server-id>
serverGroup	APS group	workspace:<region>:<account-id>:serverGroup:<server-group-id>
app	Application	workspace:<region>:<account-id>:app:<app-id>
appGroup	Application group	workspace:<region>:<account-id>:appGroup:<app-group-id>
imageServer	Application image server	workspace:<region>:<account-id>:imageServer:<image-server-id>
storage	Storage	workspace:<region>:<account-id>:storage:<storage-id>

Conditions

A Condition element lets you specify conditions for an SCP to take effect. It contains condition keys and operators.

The condition key that you specify can be a global condition key or a service-specific condition key.
- Global condition keys (with the g: prefix) apply to all actions. Cloud services do not need to provide user identity information. Instead, the system automatically obtains such information and authenticates users. For details, see Global Condition Keys.
- Service-specific condition keys (with the abbreviation of a service name plus a colon as the prefix, for example, workspace:) only apply to operations of Workspace. For details, see Table 4.
- The number of values associated with a condition key in the request context of an API call makes the condition key single-valued or multivalued. Single-valued condition keys have at most one value in the request context of an API call. Multivalued condition keys can have multiple values in the request context of an API call. For example, a request can originate from at most one VPC endpoint, so g:SourceVpce is a single-valued condition key. You can tag resources and include multiple tag key-value pairs in a request, so g:TagKeys is a multivalued condition key.
A condition operator, condition key, and condition value together constitute a complete condition statement. An SCP can be applied only when its request conditions are met. See supported operators.

The following table lists the condition keys that you can define in SCPs for Workspace. You can include these condition keys to specify conditions for an SCP to take effect.

**Table 4** Service-specific condition keys supported by Workspace
Condition Key	Type	Single-valued/Multivalued	Description
workspace:AccessMode	string	Multivalued	Access is filtered based on the access mode specified in the request parameter. The valid condition values are INTERNET, DEDICATED, and BOTH.
workspace:CreateOrderType	string	FALSE	Access is filtered based on the created order types specified in the request parameter. The valid condition values are createDesktops, addVolumes, createDehHosts, rebuildDesktops, createDesktopPool, expandDesktopPool, applyDesktopsInternet, createExclusiveHosts, subscribeUserSharer, and createApps.
workspace:ChangeOrderType	string	FALSE	Access is filtered based on the changed order types specified in the request parameter. The valid condition values are resizeDesktops, expandVolumes, meteredToPeriod, ADD_VOLUME, EXTEND_VOLUME, RESIZE, CHANGE_IMAGE, ADD_SUB_RESOURCES, and DELETE_SUB_RESOURCES.
workspace:AssociatePublicIp	boolean	FALSE	Permissions for binding EIPs to desktops are filtered based on whether the associated EIP is enabled.