DevEnviron Permissions

**Table 1** Fine-grained permissions for DevEnviron
Permission	API	Action	Related Action	IAM Project	Enterprise Project
Creating a notebook instance	POST /v1/{project_id}/notebooks	modelarts:notebook:create	swr:repo:listRepoTags swr:repo:getRepo swr:namespace:getNamespace swr:repo:getRepoDomain swr:repository:getTag swr:instance:get swr:instance:createTempCredential kps:SSHKeyPair:get vpc:vpcs:list vpc:subnets:get vpc:securityGroups:get vpc:quotas:list vpc:subnets:get csms:secret:get csms:secret:getVersion sfsturbo:shares:getShare obs:object:GetObject obs:bucket:HeadBucket obs:bucket:GetBucketPolicy obs:bucket:PutBucketPolicy obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl	√	√
Querying notebook instances	GET /v1/{project_id}/notebooks	modelarts:notebook:list	-	√	√
Querying all notebook instances	GET /v1/{project_id}/notebooks/all	modelarts:notebook:listAllNotebooks	-	√	×
Obtaining details about a notebook instance	GET /v1/{project_id}/notebooks/{id}	modelarts:notebook:get	-	√	√
Updating a notebook instance	PUT /v1/{project_id}/notebooks/{id}	modelarts:notebook:update	csms:secret:get csms:secret:getVersion kps:SSHKeyPair:get	√	√
Deleting a notebook instance	DELETE /v1/{project_id}/notebooks/{id}	modelarts:notebook:delete	-	√	√
Saving a running instance as a container image	POST /v1/{project_id}/notebooks/{id}/create-image	modelarts:image:create	swr:namespace:getNamespace swr:repo:listRepoTags swr:repository:listNamespaces swr:repository:getTag	√	√
Obtaining available flavors supported by a notebook instance	GET /v1/{project_id}/notebooks/flavors	-	-	√	√
Querying the list of available flavors supported by a notebook instance	GET /v1/{project_id}/notebooks/{id}/flavors	-	-	√	√
Obtaining the available duration of a running notebook instance	GET /v1/{project_id}/notebooks/{id}/lease	-	-	√	√
Renewing the duration of a notebook instance	PATCH /v1/{project_id}/notebooks/{id}/lease	modelarts:notebook:updateStopPolicy	-	√	√
Starting a notebook instance	POST /v1/{project_id}/notebooks/{id}/start	modelarts:notebook:start	swr:repo:listRepoTags swr:repo:getRepo swr:namespace:getNamespace swr:repo:getRepoDomain swr:repository:getTag swr:instance:get swr:instance:createTempCredential kps:SSHKeyPair:get csms:secret:get csms:secret:getVersion sfsturbo:shares:getShare obs:object:GetObject obs:bucket:HeadBucket obs:bucket:GetBucketPolicy obs:bucket:PutBucketPolicy obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl	√	√
Stopping a notebook instance	POST /v1/{project_id}/notebooks/{id}/stop	modelarts:notebook:stop	-	√	√
Obtaining the OBS instance information list	GET /v1/{project_id}/notebooks/{id}/storage	modelarts:notebook:listMountedStorages	-	√	√
Mounting OBS dynamically	POST /v1/{project_id}/notebooks/{instance_id}/storage	modelarts:notebook:mountStorage	-	√	√
Obtaining the details of a dynamically mounted OBS instance	GET /v1/{project_id}/notebooks/{instance_id}/storage/{storage_id}	modelarts:notebook:getMountedStorage	-	√	√
Dynamically unmounting OBS	DELETE /v1/{project_id}/notebooks/{instance_id}/storage/{storage_id}	modelarts:notebook:umountStorage	-	√	√
Adding resource tags	POST /v1/{project_id}/notebooks/{resource_id}/tags/create	modelarts:notebook:update	-	√	√
Deleting resource tags	DELETE /v1/{project_id}/notebooks/{resource_id}/tags/delete	modelarts:notebook:update	-	√	√
Obtaining notebook instance tags	GET /v1/{project_id}/notebooks/tags	modelarts:tag:list	-	√	√
Obtaining supported images	GET /v1/{project_id}/images	modelarts:image:list	-	√	√
Registering a custom image	POST /v1/{project_id}/images	modelarts:image:register	swr:repo:listRepoTags swr:repo:getRepo swr:repo:getRepoDomain swr:repo:createRepoDomain swr:repository:getTag	√	√
Obtaining the user image list	GET /v1/{project_id}/images/group	modelarts:image:listGroup	-	√	√
Obtaining details of an image	GET /v1/{project_id}/images/{id}	modelarts:image:get	-	√	√
Deleting a custom image	DELETE /v1/{project_id}/images/{id}	modelarts:image:delete	swr:repo:listRepoTags swr:repo:deleteRepoTag swr:repository:getTag swr:repository:deleteTag	√	√
Synchronizing a custom image	POST /v1/{project_id}/images/{id}/sync	-	swr:repo:listRepoTags swr:repo:getRepo swr:namespace:getNamespace swr:repo:getRepoDomain swr:repository:getTag	√	√
Opening a serverless development environment instance (Codelab)	POST /v1/{project_id}/notebooks/open	modelarts:notebook:open	swr:repo:listRepoTags swr:repo:getRepo swr:namespace:getNamespace swr:repo:getRepoDomain swr:repository:getTag swr:instance:get swr:instance:createTempCredential	√	√