Actions Supported by Policy-based Authorization

This section describes the actions supported by Live.

Supported Actions

Live provides system-defined policies that can be directly used in IAM. You can also create custom policies to supplement system-defined policies for more refined access control. Operations supported by policies are specific to APIs. The following are common concepts related to policies:

Permissions: statements that allow or deny certain operations
APIs: REST APIs that can be called by a user who has been granted specific permissions.
Actions: specific operations that are allowed or denied in a custom policy.
Dependencies: actions which a specific action depends on. When allowing an action for a user, you also need to allow any existing action dependencies for that user.
IAM projects/Enterprise projects: the authorization scope of a custom policy. A custom policy can be applied to IAM projects or enterprise projects or both. Policies that contain actions for both IAM and enterprise projects can be used and applied for both IAM and Enterprise Management. Policies that contain actions only for IAM projects can be used and applied to IAM only. Administrators can check whether an action supports IAM projects or enterprise projects in the action list. For details about the differences between IAM and enterprise management, see Differences Between IAM and Enterprise Management.

When assigning permissions to a user group in IAM, you cannot select Enterprise projects when setting Specify the authorization scope on the Select Scope page.

Live supports the following actions that can be defined in custom policies.

**Table 1** Live actions that can be defined in custom policies
Permission	API	Action	IAM Project	Enterprise Project
Creating a domain name	POST /v1/{project_id}/domain	live:domain:createDomain	√	×
Deleting a domain name	DELETE /v1/{project_id}/domain	live:domain:deleteDomain	√	×
Modifying a domain name	PUT /v1/{project_id}/domain	live:domain:updateDomain	√	×
Querying domain names	GET /v1/{project_id}/domain	live:domain:getDomains	√	×
Mapping domain names	PUT /v1/{project_id}/domains_mapping	live:domain:createDomainsMapping	√	×
Deleting a domain name mapping	DELETE /v1/{project_id}/domains_mapping	live:domain:deleteDomainsMapping	√	×
Adding or overwriting stream notification configurations	PUT /v1/{project_id}/notifications/publish	live:domain:updateStreamNotification	√	×
Querying stream notification configurations	GET /v1/{project_id}/notifications/publish	live:domain:getStreamNotifications	√	×
Deleting stream notification configurations	DELETE /v1/{project_id}/notifications/publish	live:domain:deleteStreamNotification	√	×
Creating a domain name configuration item	-	live:domain:createCDNConfig	√	×
Modifying a domain name configuration item	-	live:domain:updateCDNConfig	√	×
Querying domain name configuration items	-	live:domain:getCDNConfig	√	×
Deleting a domain name configuration item	-	live:domain:deleteCDNConfig	√	×
Querying IP ACLs	GET /v1/{project_id}/guard/ip	live:domain:getIPAuthList	√	×
Modifying an IP ACL	PUT /v1/{project_id}/guard/ip	live:domain:updateIPAuthList	√	×
Obtaining the region restriction of a streaming domain name	-	live:domain:getGeoBlockingList	√	×
Modifying the region restriction of a streaming domain name	-	live:domain:updateGeoBlocking	√	×
Configuring a referer validation ACL	PUT /v1/{project_id}/guard/referer-chain	live:domain:updateRefererChain	√	×
Deleting a referer validation ACL	DELETE /v1/{project_id}/guard/referer-chain	live:domain:deleteRefererChain	√	×
Querying referer validation ACLs	GET /v1/{project_id}/guard/referer-chain	live:domain:getRefererChain	√	×
Obtaining the link for downloading playback logs	GET /v1/{project_id}/logs	live:logs:listLog	√	×
Querying HTTPS certificate information	GET /v2/{project_id}/certificates	live:domain:getCertificates	√	×
Creating a recording template	POST /v1/{project_id}/record/rules	live:record:createRule	√	×
Querying recording templates	GET /v1/{project_id}/record/rules	live:record:listRules	√	×
Modifying a recording template	PUT /v1/{project_id}/record/rules/{id}	live:record:updateRule	√	×
Deleting a recording template	DELETE /v1/{project_id}/record/rules/{id}	live:record:deleteRule	√	×
Querying recording template configurations	GET /v1/{project_id}/record/rules/{id}	live:record:getRule	√	×
Querying recorded contents	-	live:record:listContents	√	×
Submitting a recording command	POST /v1/{project_id}/record/control	live:record:createCommand	√	×
Creating a recording callback	POST /v1/{project_id}/record/callbacks	live:record:createCallback	√	×
Querying recording callbacks	GET /v1/{project_id}/record/callbacks	live:record:listCallbacks	√	×
Modifying a recording callback	PUT /v1/{project_id}/record/callbacks/{id}	live:record:updateCallback	√	×
Querying a recording callback	GET /v1/{project_id}/record/callbacks/{id}	live:record:getCallback	√	×
Deleting a recording callback	DELETE /v1/{project_id}/record/callbacks/{id}	live:record:deleteCallback	√	×
Configuring a snapshot capturing template	POST /v1/{project_id}/stream/snapshot	live:snapshot:createRule	√	×
Modifying a snapshot capturing template	PUT /v1/{project_id}/stream/snapshot	live:snapshot:updateRule	√	×
Querying snapshot capturing templates	GET /v1/{project_id}/stream/snapshot	live:snapshot:listRules	√	×
Deleting a snapshot capturing template	DELETE /v1/{project_id}/stream/snapshot	live:snapshot:deleteRule	√	×
Disabling stream push	POST /v1/{project_id}/stream/blocks	live:stream:createStreamForbidden	√	×
Querying disabled streams	GET /v1/{project_id}/stream/blocks	live:stream:listStreamForbidden	√	×
Resuming stream push	DELETE /v1/{project_id}/stream/blocks	live:stream:deleteStreamForbidden	√	×
Modifying the attribute of a disabled stream	PUT /v1/{project_id}/stream/blocks	live:stream:updateStreamForbidden	√	×
Pausing a stream	POST /v1/{project_id}/stream/block-once	live:stream:createStreamForbiddenOnce	√	×
Querying ongoing streams	GET /v1/{project_id}/realtime/streams	live:stream:listLiveStreamsOnline	√	×
Creating a task for ingesting streams from external networks	-	live:stream:createPullTask	√	×
Deleting a task for ingesting streams from external networks	-	live:stream:deletePullTask	√	×
Querying tasks for ingesting streams from external networks	-	live:stream:listPullTask	√	×
Configuring the billing mode	-	live:tenant:updateChargingMode	√	×
Query tenant information	-	live:tenant:getTenantInformation	√	×
Creating a transcoding template	POST /v1/{project_id}/template/transcodings	live:transcode:createTranscodingsTemplate	√	×
Deleting a transcoding template	DELETE /v1/{project_id}/template/transcodings	live:transcode:deleteTranscodingsTemplate	√	×
Modifying a transcoding template	PUT /v1/{project_id}/template/transcodings	live:transcode:updateTranscodingsTemplate	√	×
Querying transcoding templates	GET /v1/{project_id}/template/transcodings	live:transcode:listTranscodingsTemplate	√	×
Adding transcoding SEI	-	live:transcode:createSEI	√	×
Querying URL validation settings	GET /v1/{project_id}/guard/key-chain	live:domain:getCDNConfig	√	×
Modifying URL validation settings	PUT /v1/{project_id}/guard/key-chain	live:domain:updateCDNConfig	√	×
Deleting URL validation settings	DELETE /v1/{project_id}/guard/key-chain	live:domain:deleteCDNConfig	√	×
Modifying HTTPS certificate settings	PUT /v1/{project_id}/guard/https-cert	live:domain:updateCDNConfig	√	×
Querying HTTPS certificate settings	GET /v1/{project_id}/guard/https-cert	live:domain:getCDNConfig	√	×
Deleting HTTPS certificate settings	DELETE /v1/{project_id}/guard/https-cert	live:domain:deleteCDNConfig	√	×
Querying the number of snapshots	GET /v2/{project_id}/stats/snapshot	live:statistics:listSnapshotUsage	√	×
Querying ongoing streams	GET /v1/{project_id}/realtime/streams	live:stream:listLiveStreamsOnline	√	×
Querying HTTP status codes for pulling streams	GET /v2/{project_id}/stats/httpcodes	live:statistics:listHttpCodeDimension	√	×
Querying the stream frame rate	GET /v2/{project_id}/stats/stream/framerate	live:statistics:listSingleStreamFramerate	√	×
Querying the stream bitrate	GET /v2/{project_id}/stats/stream/bitrate	live:statistics:listSingleStreamBitrate	√	×
Querying the duration of recordings	GET /v2/{project_id}/stats/record	live:statistics:listRecordUsage	√	×
Querying the number of streams by domain name	GET /v2/{project_id}/stats/stream-count	live:statistics:listStreamCount	√	×
Querying historical streams	GET /v2/{project_id}/stats/history/streams	live:statistics:listHistoryStreams	√	×
Querying playback profiles	GET /v2/{project_id}/stats/stream-portraits	live:statistics:listStreamPortrait	√	×
Querying the playback bandwidth trend	GET /v2/{project_id}/stats/bandwidth/detail	live:statistics:listBandwidthDetail	√	×
Querying the playback traffic trend	GET /v2/{project_id}/stats/traffic/detail	live:statistics:listTrafficDetail	√	×
Querying the peak playback bandwidth	GET /v2/{project_id}/stats/bandwidth/peak	live:statistics:listDomainBandwidthPeak	√	×
Querying the total playback traffic	GET /v2/{project_id}/stats/traffic/summary	live:statistics:listDomainTrafficSummary	√	×
Querying the upstream bandwidth	GET /v2/{project_id}/stats/up-bandwidth/detail	live:statistics:listUpBandwidth	√	×
Querying the distribution of livestreaming metrics by region	GET /v2/{project_id}/stats/area/detail	live:statistics:listAreaDetail	√	×
Querying the duration of transcoded outputs	GET /v2/{project_id}/stats/transcode	live:statistics:listTranscodeUsage	√	×
Querying the viewer trend by stream	GET /v2/{project_id}/stats/user	live:statistics:listUsersOfStream	√	×
Querying the real-time downstream bandwidth	-	live:statistics:listRealTimeBandwidthOfDomain	√	×
Querying the number of online viewers by stream	-	live:statistics:listRealTimeStreamUser	√	×
Querying the number of transcoding tasks	-	live:statistics:listTranscodeTaskCount	√	×
Querying the number of online viewers	-	live:statistics:listRealTimeUsersOfDomain	√	×
Querying the real-time stream bitrate	-	live:statistics:listRealTimeStreamBitrate	√	×
Querying the bandwidth trend by stream	-	live:statistics:listBandwidthOfStream	√	×
Querying the number of online streamers	-	live:statistics:listRealTimeStreamCount	√	×
Querying the number of streams for real-time transcoding	-	live:statistics:listTranscodeConcurrency	√	×
Querying the playback traffic trend	-	live:statistics:listDomainTrafficDetail	√	×
Querying the playback bandwidth trend	-	live:statistics:listDomainBandwidthDetail	√	×
Querying the real-time upstream bandwidth	-	live:statistics:listPushBandwidth	√	×
Querying details about the real-time downstream bandwidth	-	live:statistics:listRealTimeDomainBandwidthDetail	√	×
Querying the real-time stream bandwidth	-	live:statistics:listRealTimeStreamBandwidth	√	×
Querying details about the number of online viewers	-	live:statistics:listRealTimeDomainUserDetail	√	×
Querying the real-time stream frame rate	-	live:statistics:listRealTimeStreamFramerate	√	×

Parent Topic: Permissions and Supported Actions

Previous topic: Introduction

Next topic: Actions Supported by Identity Policy-based Authorization

Feedback

Was this page helpful?

Helpful Not helpful

Provide feedback

Thank you very much for your feedback. We will continue working to improve the documentation.See the reply and handling status in My Cloud VOC.

The system is busy. Please try again later.

For any further questions, feel free to contact us through the chatbot.

Chatbot