授权管理权限
接口级授权
| 权限 | 对应API接口 | 授权项 | 依赖的授权项 | IAM项目 | 企业项目 |
|---|---|---|---|---|---|
| 新增授权 | POST /v1/{project_id}/atelier/authorizations | modelarts:authorization:create | iam:agencies:listAgencies iam:groups:list iam:users:list iam:agencies:getAgency | √ | √ |
| 删除授权 | DELETE /v1/{project_id}/atelier/authorizations | modelarts:authorization:delete | 无 | √ | √ |
| 查询授权 | GET /v1/{project_id}/atelier/authorizations | modelarts:authorization:list | 无 | √ | √ |
| 创建委托 | POST /v1/{project_id}/atelier/agency | 无 | iam:quotas:list iam:agencies:createAgency iam:roles:listRoles iam:permissions:grantRoleToAgency iam:roles:createRole | √ | √ |
| 查询委托 | GET /v1/{project_id}/atelier/agency | 无 | iam:agencies:listAgencies | √ | √ |
| 查询委托对应的权限列表 | GET /v1/{project_id}/atelier/agency/{agency_name}/grants | 无 | iam:agencies:listAgencies | √ | √ |
| 无 | iam:permissions:listRolesForAgencyOnDomain iam:permissions:listRolesForAgencyOnProject iam:permissions:listRolesForAgency | √ | √ | ||
| 查询委托对应的权限列表 | GET /v2/{project_id}/atelier/agency/{agency_id}/grants | 无 | iam:permissions:listRolesForAgencyOnDomain iam:permissions:listRolesForAgencyOnProject iam:permissions:listRolesForAgency | √ | √ |
| 更新委托对应的权限列表 | POST /v1/{project_id}/atelier/agency/{agency_name}/grants | 无 | iam:quotas:list iam:roles:listRoles iam:roles:createRole iam:permissions:grantRoleToAgency | √ | √ |
| 查询服务配置的默认委托权限列表 | GET /v1/{project_id}/atelier/agency/default-grants | 无 | iam:permissions:grantRoleToAgency | √ | √ |
| 查询委托配额 | GET /v1/{project_id}/atelier/agency/quotas | 无 | iam:quotas:list | √ | √ |
| 删除委托 | DELETE /v1/{project_id}/atelier/agency/{agency_id} | 无 | iam:agencies:deleteAgency | √ | √ |
| 根据委托名称查询委托id | GET /v1/{project_id}/atelier/agency/info | 无 | iam:agencies:listAgencies | √ | √ |
| 查询users | GET /v1/{project_id}/atelier/users | 无 | iam:users:list | √ | √ |
