Help Center/ ModelArts/ API Reference/ Permissions Policies and Supported Actions/ Real-Time Inference Service (New Version)
Updated on 2026-07-24 GMT+08:00
View PDF
Share

Real-Time Inference Service (New Version)

Scenario-Level Authorization Examples

New IAM console: Provides system-defined identity policies based on IAM 5.0. You can create custom policies on the new IAM console and assign them to the user group you belong to. However, because some modules have not yet fully integrated with IAM 5.0, you still need to create custom policies on the old IAM console. Configure the following IAM 3.0 policies and assign them to the user group that you belong to. For details, see the table below.
Table 1 Real-time inference service policies

Policy Name

Description

Type

Additional IAM 3.0 Policies Required

ModelArtsXInferReadOnlyPolicy

ModelArts Inference read-only policies.

System-defined

-

ModelArtsXInferAllPolicy

ModelArts Inference all policies.

System-defined

-

API-Level Authorization Description

Table 2 Fine-grained real-time service permissions

Permission

API

Action (V3)

Action (V5)

Dependency

IAM Project

Enterprise Project

Obtaining resource tags

GET /v2/{project_id}/modelarts-service-v2/{resource_id}/tags

modelarts:tag:listTags

modelarts::listTagsForResource

-

√

√

Adding tags

POST /v2/{project_id}/modelarts-service-v2/{resource_id}/tags/create

modelarts:tag:create

modelarts::tagResource

-

√

√

Deleting resource tags

DELETE /v2/{project_id}/modelarts-service-v2/{resource_id}/tags/delete

modelarts:tag:delete

modelarts::unTagResource

-

√

√

Obtaining resource quantity by tag

POST /v2/{project_id}/modelarts-service-v2/resource-instances/count

modelarts:tag:listTags

modelarts::listResourcesByTag

-

√

√

Obtaining resources by tag

POST /v2/{project_id}/modelarts-service-v2/resource-instances/filter

modelarts:tag:listTags

modelarts::listResourcesByTag

-

√

√

Obtaining tags of a type of resources

GET /v2/{project_id}/modelarts-service-v2/tags

modelarts:tag:listTags

modelarts::listTags

-

√

√

Obtaining the service instance group list

GET /v2/{project_id}/services/{id}/service-instance-groups

modelarts:service:get

modelarts:service:get

-

√

√

Deleting pods

DELETE /v2/{project_id}/services/{id}/service-instance-groups/{group_name}/service-instances/{instance_name}/pods/{name}

modelarts:service:update

modelarts:service:update

-

√

√

Obtaining pod events

GET /v2/{project_id}/services/{id}/service-instance-groups/{group_name}/service-instances/{instance_name}/pods/{name}/events

modelarts:service:get

modelarts:service:get

-

√

√

Deleting service instances

DELETE /v2/{project_id}/services/{id}/service-instance-groups/{group_name}/service-instances/{name}

modelarts:service:update

modelarts:service:update

-

√

√

Obtaining the pod list of a service

GET /v2/{project_id}/services/{id}/service-instance-groups/{group_name}/service-instances/{name}/pods

modelarts:service:get

modelarts:service:get

-

√

√

Obtaining the service instance list

GET /v2/{project_id}/services/{id}/service-instance-groups/{name}/service-instances

modelarts:service:get

modelarts:service:get

-

√

√

Creating auto scaling policies

POST /v2/{project_id}/services/{service_id}/{group_id}/hpa

modelarts:service:createHpa

modelarts:service:createHpa

-

√

√

Viewing auto scaling policies

GET /v2/{project_id}/services/{service_id}/{group_id}/hpa

modelarts:service:getHpa

modelarts:service:getHpa

-

√

√

Deleting auto scaling policies

DELETE /v2/{project_id}/services/{service_id}/{group_id}/hpa

modelarts:service:deleteHpa

modelarts:service:deleteHpa

-

√

√

Modifying auto scaling policies

PUT /v2/{project_id}/services/{service_id}/{group_id}/hpa

modelarts:service:updateHpa

modelarts:service:updateHpa

-

√

√

Viewing auto scaling policy events

GET /v2/{project_id}/services/{service_id}/{group_id}/hpa/events

modelarts:service:listHpaEvents

modelarts:service:listHpaEvents

-

√

√

Creating private network connections

POST /v2/{project_id}/intranet-connection

modelarts:intranetConnection:create

modelarts::createIntranetConnection

vpc:vpcs:list

vpc:subnets:list

vpcep:endpointServices:delete

vpcep:endpointServices:get

vpcep:endpointServices:updateConnections

vpcep:endpointServices:updatePermissions

vpcep:endpoints:create

vpcep:endpoints:delete

vpcep:endpoints:get

vpcep:endpoints:list

t

√

√

Changing private network requests

PUT /v2/{project_id}/intranet-connection/{id}

modelarts:intranetConnection:update

modelarts::updateIntranetConnection

vpc:vpcs:list

vpc:subnets:list

vpcep:endpointServices:delete

vpcep:endpointServices:get

vpcep:endpointServices:updateConnections

vpcep:endpointServices:updatePermissions

vpcep:endpoints:create

vpcep:endpoints:delete

vpcep:endpoints:get

vpcep:endpoints:list

√

√

Modifying private network connections

POST /v2/{project_id}/intranet-connection/{id}/modify

modelarts:intranetConnection:update

modelarts::updateIntranetConnection

vpc:vpcs:list

vpc:subnets:list

vpcep:endpointServices:delete

vpcep:endpointServices:get

vpcep:endpointServices:updateConnections

vpcep:endpointServices:updatePermissions

vpcep:endpoints:create

vpcep:endpoints:delete

vpcep:endpoints:get

vpcep:endpoints:list

√

√

Batch deleting private network connections

POST /v2/{project_id}/intranet-connection/delete

modelarts:intranetConnection:delete

modelarts::deleteIntranetConnection

vpc:vpcs:list

vpc:subnets:list

vpcep:endpointServices:delete

vpcep:endpointServices:get

vpcep:endpointServices:updateConnections

vpcep:endpointServices:updatePermissions

vpcep:endpoints:create

vpcep:endpoints:delete

vpcep:endpoints:get

vpcep:endpoints:list

√

√

Obtaining private network connection requests

GET /v2/{project_id}/intranet-connection/requests

modelarts:intranetConnection:list

modelarts::listIntranetConnection

vpc:vpcs:list

vpc:subnets:list

vpcep:endpointServices:delete

vpcep:endpointServices:get

vpcep:endpointServices:updateConnections

vpcep:endpointServices:updatePermissions

vpcep:endpoints:create

vpcep:endpoints:delete

vpcep:endpoints:get

vpcep:endpoints:list

√

√

Obtaining the private network connection approval list of the current tenant

GET /v2/{project_id}/intranet-connection/reviews

modelarts:intranetConnection:list

modelarts::listIntranetConnection

vpc:vpcs:list

vpc:subnets:list

vpcep:endpointServices:delete

vpcep:endpointServices:get

vpcep:endpointServices:updateConnections

vpcep:endpointServices:updatePermissions

vpcep:endpoints:create

vpcep:endpoints:delete

vpcep:endpoints:get

vpcep:endpoints:list

√

√

Binding application keys

POST /v2/{project_id}/services/{service_id}/api-keys/{key_id}/bind

modelarts:apikey:bind

modelarts:apikey:bind

-

√

√

Unbinding application keys

POST /v2/{project_id}/services/{service_id}/api-keys/{key_id}/unbind

modelarts:apikey:unbind

modelarts:apikey:unbind

-

√

√

Batch binding application keys

POST /v2/{project_id}/services/{service_id}/api-keys/batch-bind

modelarts:apikey:bind

modelarts:apikey:bind

-

√

√

Batch unbinding application keys

POST /v2/{project_id}/services/{service_id}/api-keys/batch-unbind

modelarts:apikey:unbind

modelarts:apikey:unbind

-

√

√

Obtaining application keys

GET /v2/{project_id}/services/api-keys

modelarts:apikey:list

modelarts::listApikeys

-

√

√

Creating application keys

POST /v2/{project_id}/services/api-keys

modelarts:apikey:create

modelarts::createApikey

-

√

√

Deleting application keys

DELETE /v2/{project_id}/services/api-keys/{key_id}

modelarts:apikey:delete

modelarts:apikey:delete

-

√

√

Obtaining services

GET /v2/{project_id}/services

modelarts:service:list

modelarts:service:list

-

√

√

Viewing service overview

GET /v2/{project_id}/services/overview

modelarts:service:getOverview

modelarts:service:getOverview

-

      

Creating services

POST /v2/{project_id}/services

modelarts:service:create

modelarts:service:create

lts:groups:create

lts:groups:get

lts:groups:list

lts:topics:create

lts:topics:delete

lts:topics:get

lts:topics:list

sfsturbo:shares:getShare

sfsturbo:shares:showFsDir

swr:repo:listRepoTags

swr:repository:getTag

obs:object:DeleteObject

obs:object:GetObject

obs:bucket:CreateBucket

obs:bucket:ListBucket

obs:object:PutObject

obs:bucket:GetBucketAcl

obs:bucket:PutBucketAcl

obs:bucket:PutBucketCORS

csms:secretVersion:get

modelarts:image:get

modelarts:pool:get

modelarts:workspace:get

√

√

Updating service configurations

PUT /v2/{project_id}/services/{service_id}

modelarts:service:update

modelarts:service:update

lts:groups:create

lts:groups:get

lts:groups:list

lts:topics:create

lts:topics:delete

lts:topics:get

lts:topics:list

sfsturbo:shares:getShare

sfsturbo:shares:showFsDir

swr:repo:listRepoTags

swr:repository:getTag

obs:object:DeleteObject

obs:object:GetObject

obs:bucket:CreateBucket

obs:bucket:ListBucket

obs:object:PutObject

obs:bucket:GetBucketAcl

obs:bucket:PutBucketAcl

obs:bucket:PutBucketCORS

csms:secretVersion:get

modelarts:image:get

modelarts:pool:get

modelarts:workspace:get

√

√

Switching services to a specified version

POST /v2/{project_id}/services/{service_id}/versions/switch

modelarts:service:switchVersion

modelarts:service:switchVersion

lts:groups:create

lts:groups:get

lts:groups:list

lts:topics:create

lts:topics:delete

lts:topics:get

lts:topics:list

sfsturbo:shares:getShare

sfsturbo:shares:showFsDir

swr:repo:listRepoTags

swr:repository:getTag

obs:object:DeleteObject

obs:object:GetObject

obs:bucket:CreateBucket

obs:bucket:ListBucket

obs:object:PutObject

obs:bucket:GetBucketAcl

obs:bucket:PutBucketAcl

obs:bucket:PutBucketCORS

csms:secretVersion:get

modelarts:image:get

modelarts:pool:get

modelarts:workspace:get

√

√

Deleting specified services

POST /v2/{project_id}/services/delete

modelarts:service:delete

modelarts:service:delete

lts:groups:create

lts:groups:get

lts:groups:list

lts:topics:create

lts:topics:delete

lts:topics:get

lts:topics:list

sfsturbo:shares:getShare

sfsturbo:shares:showFsDir

swr:repo:listRepoTags

swr:repository:getTag

obs:object:DeleteObject

obs:object:GetObject

obs:bucket:CreateBucket

obs:bucket:ListBucket

obs:object:PutObject

obs:bucket:GetBucketAcl

obs:bucket:PutBucketAcl

obs:bucket:PutBucketCORS

csms:secretVersion:get

modelarts:image:get

modelarts:pool:get

modelarts:workspace:get

√

√

Querying service configurations

GET /v2/{project_id}/services/config

modelarts:config:get

modelarts::getConfig

-

√

√

Obtaining service details

GET /v2/{project_id}/services/{service_id}

modelarts:service:get

modelarts:service:get

-

√

√

Obtaining the real-time service event list

GET /v2/{project_id}/services/{service_id}/events

modelarts:service:listEvents

modelarts:service:listEvents

-

√

√

Querying service exec login information

GET /v2/{project_id}/services/{service_id}/exec

modelarts:service:getExecInfo

modelarts:service:getExecInfo

-

√

√

Interrupting services

POST /v2/{project_id}/services/{service_id}/interrupt

modelarts:service:interrupt

modelarts:service:interrupt

-

√

√

Starting real-time services

POST /v2/{project_id}/services/{service_id}/start

modelarts:service:start

modelarts:service:start

-

√

√

Stopping real-time services

POST /v2/{project_id}/services/{service_id}/stop

modelarts:service:stop

modelarts:service:stop

-

√

√

Obtaining the real-time service version list

GET /v2/{project_id}/services/{service_id}/versions

modelarts:service:listVersions

modelarts:service:listVersions

-

√

√

Obtaining details about real-time service versions

GET /v2/{project_id}/services/{service_id}/versions/{version_id}

modelarts:service:getVersion

modelarts:service:getVersion

-

√

√

Deleting real-time service versions

DELETE /v2/{project_id}/services/{service_id}/versions/{version_id}

modelarts:service:deleteVersion

modelarts:service:deleteVersion

-

√

√

Querying details about a managed cluster

GET /v2/{project_id}/services/clusters/{id}

modelarts:pool:get

modelarts:pool:get

-

√

√

Obtaining flavors available for a notebook instance

GET /v2/{project_id}/services/flavors

modelarts:clusterFlavor:list

modelarts::listClusterFlavors

-

√

√

Deleting pods

DELETE /v2/{project_id}/services/{id}/deployments/{deployment_name}/instances/{instance_name}/pods/{name}

modelarts:service:deleteDeploymentPod

modelarts:service:deleteDeploymentPod

-

√

√

Obtaining pod events

GET /v2/{project_id}/services/{id}/deployments/{deployment_name}/instances/{instance_name}/pods/{name}/events

modelarts:service:listDeploymentPodEvents

modelarts:service:listDeploymentPodEvents

-

√

√

Deleting service instances

DELETE /v2/{project_id}/services/{id}/deployments/{deployment_name}/instances/{name}

modelarts:service:deleteDeploymentInstance

modelarts:service:deleteDeploymentInstance

-

√

√

Obtaining the pod list of a service deployment

GET /v2/{project_id}/services/{id}/deployments/{deployment_name}/instances/{name}/pods

modelarts:service:listDeploymentPods

modelarts:service:listDeploymentPods

-

√

√

Obtaining the service deployment instance list

GET /v2/{project_id}/services/{id}/deployments/{name}/instances

modelarts:service:listDeploymentInstances

modelarts:service:listDeploymentInstances

-

√

√

Obtaining the real-time service deployment version list

GET /v2/{project_id}/services/{service_id}/deployment/versions

modelarts:service:listDeploymentVersions

modelarts:service:listDeploymentVersions

-

√

√

Deleting a real-time service deployment version

DELETE /v2/{project_id}/services/{service_id}/deployment/{deployment_id}/versions/{version}

modelarts:service:deleteDeploymentVersion

modelarts:service:deleteDeploymentVersion

-

√

√

Obtaining details about real-time service versions

GET /v2/{project_id}/services/{service_id}/deployment/{deployment_id}/versions/{version}

modelarts:service:getDeploymentVersion

modelarts:service:getDeploymentVersion

-

√

√

Switching deployments to a specified version

POST /v2/{project_id}/services/{service_id}/deployment/{deployment_id}/versions/{version}/switch

modelarts:service:switchDeploymentVersion

modelarts:service:switchDeploymentVersion

-

√

√

Obtaining services

GET /v2/{project_id}/services/{service_id}/deployments

modelarts:service:listDeployments

modelarts:service:listDeployments

-

√

√

Adding deployments

POST /v2/{project_id}/services/{service_id}/deployments

modelarts:service:createDeployment

modelarts:service:createDeployment

lts:groups:create

lts:groups:get

lts:groups:list

lts:topics:create

lts:topics:delete

lts:topics:get

lts:topics:list

sfsturbo:shares:getShare

sfsturbo:shares:showFsDir

swr:repo:listRepoTags

swr:repository:getTag

obs:object:DeleteObject

obs:object:GetObject

obs:bucket:CreateBucket

obs:bucket:ListBucket

obs:object:PutObject

obs:bucket:GetBucketAcl

obs:bucket:PutBucketAcl

obs:bucket:PutBucketCORS

csms:secretVersion:get

modelarts:image:get

modelarts:pool:get

modelarts:workspace:get

√

√

Deleting service deployments

DELETE /v2/{project_id}/services/{service_id}/deployments/{deployment_id}

modelarts:service:deleteDeployment

modelarts:service:deleteDeployment

lts:groups:create

lts:groups:get

lts:groups:list

lts:topics:create

lts:topics:delete

lts:topics:get

lts:topics:list

sfsturbo:shares:getShare

sfsturbo:shares:showFsDir

swr:repo:listRepoTags

swr:repository:getTag

obs:object:DeleteObject

obs:object:GetObject

obs:bucket:CreateBucket

obs:bucket:ListBucket

obs:object:PutObject

obs:bucket:GetBucketAcl

obs:bucket:PutBucketAcl

obs:bucket:PutBucketCORS

csms:secretVersion:get

modelarts:image:get

modelarts:pool:get

modelarts:workspace:get

√

√

Obtaining service deployment details

GET /v2/{project_id}/services/{service_id}/deployments/{deployment_id}

modelarts:service:getDeployment

modelarts:service:getDeployment

-

√

√

Updating service deployment settings

PUT /v2/{project_id}/services/{service_id}/deployments/{deployment_id}

modelarts:service:updateDeployment

modelarts:service:updateDeployment

lts:groups:create

lts:groups:get

lts:groups:list

lts:topics:create

lts:topics:delete

lts:topics:get

lts:topics:list

sfsturbo:shares:getShare

sfsturbo:shares:showFsDir

swr:repo:listRepoTags

swr:repository:getTag

obs:object:DeleteObject

obs:object:GetObject

obs:bucket:CreateBucket

obs:bucket:ListBucket

obs:object:PutObject

obs:bucket:GetBucketAcl

obs:bucket:PutBucketAcl

obs:bucket:PutBucketCORS

csms:secretVersion:get

modelarts:image:get

modelarts:pool:get

modelarts:workspace:get

√

√

Deleting auto scaling policies

DELETE /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa

modelarts:service:deleteHpa

modelarts:service:deleteHpa

-

√

√

Viewing auto scaling policies

GET /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa

modelarts:service:getHpa

modelarts:service:getHpa

-

√

√

Creating auto scaling policies

POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa

modelarts:service:createHpa

modelarts:service:createHpa

-

√

√

Modifying auto scaling policies

PUT /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa

modelarts:service:updateHpa

modelarts:service:updateHpa

-

√

√

Viewing auto scaling policy events

GET /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa/events

modelarts:service:listHpaEvents

modelarts:service:listHpaEvents

-

√

√

Creating graceful degradation policies

POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hra

modelarts:service:createHra

modelarts:service:createHra

-

√

√

Viewing graceful degradation policies

GET /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hra

modelarts:service:getHra

modelarts:service:getHra

-

√

√

Modifying graceful degradation policies

PUT /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hra

modelarts:service:updateHra

modelarts:service:updateHra

-

√

√

Interrupting service deployments

POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/interrupt

modelarts:service:interruptDeployment

modelarts:service:interruptDeployment

-

√

√

Starting service deployments

POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/start

modelarts:service:startDeployment

modelarts:service:startDeployment

-

√

√

Stopping real-time service deployments

POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/stop

modelarts:service:stopDeployment

modelarts:service:stopDeployment

-

√

√

Scaling services

PUT /v2/{project_id}/services/{service_id}/deployments/{deployment_name}/scale

modelarts:service:scaleDeployment

modelarts:service:scaleDeployment

-

√

√

Obtaining the service instance list

GET /v2/{project_id}/services/{service_id}/service-instance-groups/{name}/service-instances

modelarts:service:get

modelarts:service:get

-

√

√

Updating the service instance weights

POST /v2/{project_id}/services/{service_id}/service-instance-groups/{name}/service-instances

modelarts:service:update

modelarts:service:update

-

√

√

Obtaining subnets

GET /v1/{project_id}/subnets

vpc:subnets:get

-

-

√

√

Obtaining VPCs

GET /v3/{project_id}/vpc/vpcs

vpc:vpcs:list

-

-

√

√