Help Center/ ModelArts/ API Reference/ Permissions Policies and Supported Actions/ Authorization Management
Updated on 2026-09-01 GMT+08:00
View PDF
Share

Authorization Management

API-Level Authorization

Table 1 Fine-grained permissions for service management

Permission

API

Action

Dependency

IAM Project

Enterprise Project

Adding authorizations

POST /v1/{project_id}/atelier/authorizations

modelarts:authorization:create

iam:agencies:listAgencies

iam:groups:list

iam:users:list

iam:agencies:getAgency

√

√

Deleting authorizations

DELETE /v1/{project_id}/atelier/authorizations

modelarts:authorization:delete

None

√

√

Listing authorizations

GET /v1/{project_id}/atelier/authorizations

modelarts:authorization:list

None

√

√

Creating an agency

POST /v1/{project_id}/atelier/agency

None

iam:quotas:list

iam:agencies:createAgency

iam:roles:listRoles

iam:permissions:grantRoleToAgency

iam:roles:createRole

√

√

Listing agencies

GET /v1/{project_id}/atelier/agency

None

iam:agencies:listAgencies

√

√

Listing permissions of an agency

GET /v1/{project_id}/atelier/agency/{agency_name}/grants

None

iam:agencies:listAgencies

√

√

None

iam:permissions:listRolesForAgencyOnDomain

iam:permissions:listRolesForAgencyOnProject

iam:permissions:listRolesForAgency

√

√

Listing permissions of an agency

GET /v2/{project_id}/atelier/agency/{agency_id}/grants

None

iam:permissions:listRolesForAgencyOnDomain

iam:permissions:listRolesForAgencyOnProject

iam:permissions:listRolesForAgency

√

√

Updating permissions of an agency

POST /v1/{project_id}/atelier/agency/{agency_name}/grants

None

iam:quotas:list

iam:roles:listRoles

iam:roles:createRole

iam:permissions:grantRoleToAgency

√

√

Listing default agency permissions configured for a service

GET /v1/{project_id}/atelier/agency/default-grants

None

iam:permissions:grantRoleToAgency

√

√

Obtaining agency quotas

GET /v1/{project_id}/atelier/agency/quotas

None

iam:quotas:list

√

√

Deleting agencies

DELETE /v1/{project_id}/atelier/agency/{agency_id}

None

iam:agencies:deleteAgency

√

√

Obtaining an agency ID by agency name

GET /v1/{project_id}/atelier/agency/info

None

iam:agencies:listAgencies

√

√

Listing users

GET /v1/{project_id}/atelier/users

None

iam:users:list

√

√