推理在线服务权限(新版）
场景级授权示例
| 策略名称 | 描述 | 类型 | 还需配置的IAM3.0的策略 |
|---|---|---|---|
| ModelArtsXInferReadOnlyPolicy | ModelArts服务"模型推理"的只读策略 | 系统身份策略 | - |
| ModelArtsXInferAllPolicy | ModelArts服务"模型推理"的所有策略(读写) | 系统身份策略 | - |
接口级授权说明
| 权限 | 对应API接口 | 授权项(v3) | 授权项（v5） | 依赖的授权项 | IAM项目 | 企业项目 |
|---|---|---|---|---|---|---|
| 查询资源标签 | GET /v2/{project_id}/modelarts-service-v2/{resource_id}/tags | modelarts:tag:listTags | modelarts::listTagsForResource | - | √ | √ |
| 添加标签 | POST /v2/{project_id}/modelarts-service-v2/{resource_id}/tags/create | modelarts:tag:create | modelarts::tagResource | - | √ | √ |
| 删除资源标签 | DELETE /v2/{project_id}/modelarts-service-v2/{resource_id}/tags/delete | modelarts:tag:delete | modelarts::unTagResource | - | √ | √ |
| 通过标签查询资源数量 | POST /v2/{project_id}/modelarts-service-v2/resource-instances/count | modelarts:tag:listTags | modelarts::listResourcesByTag | - | √ | √ |
| 通过标签反查资源列表 | POST /v2/{project_id}/modelarts-service-v2/resource-instances/filter | modelarts:tag:listTags | modelarts::listResourcesByTag | - | √ | √ |
| 查询某一类资源下的标签 | GET /v2/{project_id}/modelarts-service-v2/tags | modelarts:tag:listTags | modelarts::listTags | - | √ | √ |
| 查询服务实例组列表 | GET /v2/{project_id}/services/{id}/service-instance-groups | modelarts:service:get | modelarts:service:get | - | √ | √ |
| 删除Pod | DELETE /v2/{project_id}/services/{id}/service-instance-groups/{group_name}/service-instances/{instance_name}/pods/{name} | modelarts:service:update | modelarts:service:update | - | √ | √ |
| 查询Pod事件 | GET /v2/{project_id}/services/{id}/service-instance-groups/{group_name}/service-instances/{instance_name}/pods/{name}/events | modelarts:service:get | modelarts:service:get | - | √ | √ |
| 删除服务实例 | DELETE /v2/{project_id}/services/{id}/service-instance-groups/{group_name}/service-instances/{name} | modelarts:service:update | modelarts:service:update | - | √ | √ |
| 查询服务的pod的列表 | GET /v2/{project_id}/services/{id}/service-instance-groups/{group_name}/service-instances/{name}/pods | modelarts:service:get | modelarts:service:get | - | √ | √ |
| 查询服务实例列表 | GET /v2/{project_id}/services/{id}/service-instance-groups/{name}/service-instances | modelarts:service:get | modelarts:service:get | - | √ | √ |
| 创建自动扩缩容策略 | POST /v2/{project_id}/services/{service_id}/{group_id}/hpa | modelarts:service:createHpa | modelarts:service:createHpa | - | √ | √ |
| 查看自动扩缩容策略 | GET /v2/{project_id}/services/{service_id}/{group_id}/hpa | modelarts:service:getHpa | modelarts:service:getHpa | - | √ | √ |
| 删除自动扩缩容策略 | DELETE /v2/{project_id}/services/{service_id}/{group_id}/hpa | modelarts:service:deleteHpa | modelarts:service:deleteHpa | - | √ | √ |
| 修改自动扩缩容策略 | PUT /v2/{project_id}/services/{service_id}/{group_id}/hpa | modelarts:service:updateHpa | modelarts:service:updateHpa | - | √ | √ |
| 查看自动扩缩容策略事件 | GET /v2/{project_id}/services/{service_id}/{group_id}/hpa/events | modelarts:service:listHpaEvents | modelarts:service:listHpaEvents | - | √ | √ |
| 创建内网接入 | POST /v2/{project_id}/intranet-connection | modelarts:intranetConnection:create | modelarts::createIntranetConnection | vpc:vpcs:list vpc:subnets:list vpcep:endpointServices:delete vpcep:endpointServices:get vpcep:endpointServices:updateConnections vpcep:endpointServices:updatePermissions vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get vpcep:endpoints:list t | √ | √ |
| 变更内网申请 | PUT /v2/{project_id}/intranet-connection/{id} | modelarts:intranetConnection:update | modelarts::updateIntranetConnection | vpc:vpcs:list vpc:subnets:list vpcep:endpointServices:delete vpcep:endpointServices:get vpcep:endpointServices:updateConnections vpcep:endpointServices:updatePermissions vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get vpcep:endpoints:list | √ | √ |
| 修改内网接入 | POST /v2/{project_id}/intranet-connection/{id}/modify | modelarts:intranetConnection:update | modelarts::updateIntranetConnection | vpc:vpcs:list vpc:subnets:list vpcep:endpointServices:delete vpcep:endpointServices:get vpcep:endpointServices:updateConnections vpcep:endpointServices:updatePermissions vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get vpcep:endpoints:list | √ | √ |
| 批量删除内网接入 | POST /v2/{project_id}/intranet-connection/delete | modelarts:intranetConnection:delete | modelarts::deleteIntranetConnection | vpc:vpcs:list vpc:subnets:list vpcep:endpointServices:delete vpcep:endpointServices:get vpcep:endpointServices:updateConnections vpcep:endpointServices:updatePermissions vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get vpcep:endpoints:list | √ | √ |
| 查询当前租户的内网接入申请列表 | GET /v2/{project_id}/intranet-connection/requests | modelarts:intranetConnection:list | modelarts::listIntranetConnection | vpc:vpcs:list vpc:subnets:list vpcep:endpointServices:delete vpcep:endpointServices:get vpcep:endpointServices:updateConnections vpcep:endpointServices:updatePermissions vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get vpcep:endpoints:list | √ | √ |
| 查询当前租户的内网接入审批列表 | GET /v2/{project_id}/intranet-connection/reviews | modelarts:intranetConnection:list | modelarts::listIntranetConnection | vpc:vpcs:list vpc:subnets:list vpcep:endpointServices:delete vpcep:endpointServices:get vpcep:endpointServices:updateConnections vpcep:endpointServices:updatePermissions vpcep:endpoints:create vpcep:endpoints:delete vpcep:endpoints:get vpcep:endpoints:list | √ | √ |
| 绑定应用密钥 | POST /v2/{project_id}/services/{service_id}/api-keys/{key_id}/bind | modelarts:apikey:bind | modelarts:apikey:bind | - | √ | √ |
| 解绑应用密钥 | POST /v2/{project_id}/services/{service_id}/api-keys/{key_id}/unbind | modelarts:apikey:unbind | modelarts:apikey:unbind | - | √ | √ |
| 批量绑定应用密钥 | POST /v2/{project_id}/services/{service_id}/api-keys/batch-bind | modelarts:apikey:bind | modelarts:apikey:bind | - | √ | √ |
| 批量解绑应用密钥 | POST /v2/{project_id}/services/{service_id}/api-keys/batch-unbind | modelarts:apikey:unbind | modelarts:apikey:unbind | - | √ | √ |
| 查询应用密钥 | GET /v2/{project_id}/services/api-keys | modelarts:apikey:list | modelarts::listApikeys | - | √ | √ |
| 创建应用密钥 | POST /v2/{project_id}/services/api-keys | modelarts:apikey:create | modelarts::createApikey | - | √ | √ |
| 删除应用密钥 | DELETE /v2/{project_id}/services/api-keys/{key_id} | modelarts:apikey:delete | modelarts:apikey:delete | - | √ | √ |
| 查询服务列表 | GET /v2/{project_id}/services | modelarts:service:list | modelarts:service:list | - | √ | √ |
| 查询服务总览 | GET /v2/{project_id}/services/overview | modelarts:service:getOverview | modelarts:service:getOverview | - | ||
| 创建服务 | POST /v2/{project_id}/services | modelarts:service:create | modelarts:service:create | lts:groups:create lts:groups:get lts:groups:list lts:topics:create lts:topics:delete lts:topics:get lts:topics:list sfsturbo:shares:getShare sfsturbo:shares:showFsDir swr:repo:listRepoTags swr:repository:getTag obs:object:DeleteObject obs:object:GetObject obs:bucket:CreateBucket obs:bucket:ListBucket obs:object:PutObject obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS csms:secretVersion:get modelarts:image:get modelarts:pool:get modelarts:workspace:get | √ | √ |
| 更新服务配置 | PUT /v2/{project_id}/services/{service_id} | modelarts:service:update | modelarts:service:update | lts:groups:create lts:groups:get lts:groups:list lts:topics:create lts:topics:delete lts:topics:get lts:topics:list sfsturbo:shares:getShare sfsturbo:shares:showFsDir swr:repo:listRepoTags swr:repository:getTag obs:object:DeleteObject obs:object:GetObject obs:bucket:CreateBucket obs:bucket:ListBucket obs:object:PutObject obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS csms:secretVersion:get modelarts:image:get modelarts:pool:get modelarts:workspace:get | √ | √ |
| 切换服务到指定版本 | POST /v2/{project_id}/services/{service_id}/versions/switch | modelarts:service:switchVersion | modelarts:service:switchVersion | lts:groups:create lts:groups:get lts:groups:list lts:topics:create lts:topics:delete lts:topics:get lts:topics:list sfsturbo:shares:getShare sfsturbo:shares:showFsDir swr:repo:listRepoTags swr:repository:getTag obs:object:DeleteObject obs:object:GetObject obs:bucket:CreateBucket obs:bucket:ListBucket obs:object:PutObject obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS csms:secretVersion:get modelarts:image:get modelarts:pool:get modelarts:workspace:get | √ | √ |
| 删除指定服务列表 | POST /v2/{project_id}/services/delete | modelarts:service:delete | modelarts:service:delete | lts:groups:create lts:groups:get lts:groups:list lts:topics:create lts:topics:delete lts:topics:get lts:topics:list sfsturbo:shares:getShare sfsturbo:shares:showFsDir swr:repo:listRepoTags swr:repository:getTag obs:object:DeleteObject obs:object:GetObject obs:bucket:CreateBucket obs:bucket:ListBucket obs:object:PutObject obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS csms:secretVersion:get modelarts:image:get modelarts:pool:get modelarts:workspace:get | √ | √ |
| 查询服务配置 | GET /v2/{project_id}/services/config | modelarts:config:get | modelarts::getConfig | - | √ | √ |
| 查询服务详情 | GET /v2/{project_id}/services/{service_id} | modelarts:service:get | modelarts:service:get | - | √ | √ |
| 获取在线服务事件列表 | GET /v2/{project_id}/services/{service_id}/events | modelarts:service:listEvents | modelarts:service:listEvents | - | √ | √ |
| 查询服务exec登录信息 | GET /v2/{project_id}/services/{service_id}/exec | modelarts:service:getExecInfo | modelarts:service:getExecInfo | - | √ | √ |
| 中断服务 | POST /v2/{project_id}/services/{service_id}/interrupt | modelarts:service:interrupt | modelarts:service:interrupt | - | √ | √ |
| 启动在线服务 | POST /v2/{project_id}/services/{service_id}/start | modelarts:service:start | modelarts:service:start | - | √ | √ |
| 停止在线服务 | POST /v2/{project_id}/services/{service_id}/stop | modelarts:service:stop | modelarts:service:stop | - | √ | √ |
| 查询在线服务版本列表 | GET /v2/{project_id}/services/{service_id}/versions | modelarts:service:listVersions | modelarts:service:listVersions | - | √ | √ |
| 查询在线服务版本详情 | GET /v2/{project_id}/services/{service_id}/versions/{version_id} | modelarts:service:getVersion | modelarts:service:getVersion | - | √ | √ |
| 删除在线服务版本 | DELETE /v2/{project_id}/services/{service_id}/versions/{version_id} | modelarts:service:deleteVersion | modelarts:service:deleteVersion | - | √ | √ |
| 查询纳管集群详情 | GET /v2/{project_id}/services/clusters/{id} | modelarts:pool:get | modelarts:pool:get | - | √ | √ |
| 查询支持可切换规格列表 | GET /v2/{project_id}/services/flavors | modelarts:clusterFlavor:list | modelarts::listClusterFlavors | - | √ | √ |
| 删除Pod | DELETE /v2/{project_id}/services/{id}/deployments/{deployment_name}/instances/{instance_name}/pods/{name} | modelarts:service:deleteDeploymentPod | modelarts:service:deleteDeploymentPod | - | √ | √ |
| 查询Pod事件 | GET /v2/{project_id}/services/{id}/deployments/{deployment_name}/instances/{instance_name}/pods/{name}/events | modelarts:service:listDeploymentPodEvents | modelarts:service:listDeploymentPodEvents | - | √ | √ |
| 删除服务部署的实例 | DELETE /v2/{project_id}/services/{id}/deployments/{deployment_name}/instances/{name} | modelarts:service:deleteDeploymentInstance | modelarts:service:deleteDeploymentInstance | - | √ | √ |
| 查询服务部署的pod的列表 | GET /v2/{project_id}/services/{id}/deployments/{deployment_name}/instances/{name}/pods | modelarts:service:listDeploymentPods | modelarts:service:listDeploymentPods | - | √ | √ |
| 查询服务部署实例列表 | GET /v2/{project_id}/services/{id}/deployments/{name}/instances | modelarts:service:listDeploymentInstances | modelarts:service:listDeploymentInstances | - | √ | √ |
| 查询在线服务部署版本列表 | GET /v2/{project_id}/services/{service_id}/deployment/versions | modelarts:service:listDeploymentVersions | modelarts:service:listDeploymentVersions | - | √ | √ |
| 删除在线服务部署版本 | DELETE /v2/{project_id}/services/{service_id}/deployment/{deployment_id}/versions/{version} | modelarts:service:deleteDeploymentVersion | modelarts:service:deleteDeploymentVersion | - | √ | √ |
| 查询在线服务版本详情 | GET /v2/{project_id}/services/{service_id}/deployment/{deployment_id}/versions/{version} | modelarts:service:getDeploymentVersion | modelarts:service:getDeploymentVersion | - | √ | √ |
| 切换部署到指定版本 | POST /v2/{project_id}/services/{service_id}/deployment/{deployment_id}/versions/{version}/switch | modelarts:service:switchDeploymentVersion | modelarts:service:switchDeploymentVersion | - | √ | √ |
| 查询服务列表 | GET /v2/{project_id}/services/{service_id}/deployments | modelarts:service:listDeployments | modelarts:service:listDeployments | - | √ | √ |
| 添加部署 | POST /v2/{project_id}/services/{service_id}/deployments | modelarts:service:createDeployment | modelarts:service:createDeployment | lts:groups:create lts:groups:get lts:groups:list lts:topics:create lts:topics:delete lts:topics:get lts:topics:list sfsturbo:shares:getShare sfsturbo:shares:showFsDir swr:repo:listRepoTags swr:repository:getTag obs:object:DeleteObject obs:object:GetObject obs:bucket:CreateBucket obs:bucket:ListBucket obs:object:PutObject obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS csms:secretVersion:get modelarts:image:get modelarts:pool:get modelarts:workspace:get | √ | √ |
| 删除服务部署 | DELETE /v2/{project_id}/services/{service_id}/deployments/{deployment_id} | modelarts:service:deleteDeployment | modelarts:service:deleteDeployment | lts:groups:create lts:groups:get lts:groups:list lts:topics:create lts:topics:delete lts:topics:get lts:topics:list sfsturbo:shares:getShare sfsturbo:shares:showFsDir swr:repo:listRepoTags swr:repository:getTag obs:object:DeleteObject obs:object:GetObject obs:bucket:CreateBucket obs:bucket:ListBucket obs:object:PutObject obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS csms:secretVersion:get modelarts:image:get modelarts:pool:get modelarts:workspace:get | √ | √ |
| 查询服务部署详情 | GET /v2/{project_id}/services/{service_id}/deployments/{deployment_id} | modelarts:service:getDeployment | modelarts:service:getDeployment | - | √ | √ |
| 更新服务部署配置 | PUT /v2/{project_id}/services/{service_id}/deployments/{deployment_id} | modelarts:service:updateDeployment | modelarts:service:updateDeployment | lts:groups:create lts:groups:get lts:groups:list lts:topics:create lts:topics:delete lts:topics:get lts:topics:list sfsturbo:shares:getShare sfsturbo:shares:showFsDir swr:repo:listRepoTags swr:repository:getTag obs:object:DeleteObject obs:object:GetObject obs:bucket:CreateBucket obs:bucket:ListBucket obs:object:PutObject obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl obs:bucket:PutBucketCORS csms:secretVersion:get modelarts:image:get modelarts:pool:get modelarts:workspace:get | √ | √ |
| 删除自动扩缩容策略 | DELETE /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa | modelarts:service:deleteHpa | modelarts:service:deleteHpa | - | √ | √ |
| 查看自动扩缩容策略 | GET /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa | modelarts:service:getHpa | modelarts:service:getHpa | - | √ | √ |
| 创建自动扩缩容策略 | POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa | modelarts:service:createHpa | modelarts:service:createHpa | - | √ | √ |
| 修改自动扩缩容策略 | PUT /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa | modelarts:service:updateHpa | modelarts:service:updateHpa | - | √ | √ |
| 查看自动扩缩容策略事件 | GET /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hpa/events | modelarts:service:listHpaEvents | modelarts:service:listHpaEvents | - | √ | √ |
| 创建优雅降级策略 | POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hra | modelarts:service:createHra | modelarts:service:createHra | - | √ | √ |
| 查看优雅降级策略 | GET /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hra | modelarts:service:getHra | modelarts:service:getHra | - | √ | √ |
| 修改优雅降级策略 | PUT /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/hra | modelarts:service:updateHra | modelarts:service:updateHra | - | √ | √ |
| 中断服务部署 | POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/interrupt | modelarts:service:interruptDeployment | modelarts:service:interruptDeployment | - | √ | √ |
| 启动服务部署 | POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/start | modelarts:service:startDeployment | modelarts:service:startDeployment | - | √ | √ |
| 停止在线服务部署 | POST /v2/{project_id}/services/{service_id}/deployments/{deployment_id}/stop | modelarts:service:stopDeployment | modelarts:service:stopDeployment | - | √ | √ |
| 服务扩缩容 | PUT /v2/{project_id}/services/{service_id}/deployments/{deployment_name}/scale | modelarts:service:scaleDeployment | modelarts:service:scaleDeployment | - | √ | √ |
| 查询服务实例列表 | GET /v2/{project_id}/services/{service_id}/service-instance-groups/{name}/service-instances | modelarts:service:get | modelarts:service:get | - | √ | √ |
| 更新服务实例权重 | POST /v2/{project_id}/services/{service_id}/service-instance-groups/{name}/service-instances | modelarts:service:update | modelarts:service:update | - | √ | √ |
| 查询子网列表 | GET /v1/{project_id}/subnets | vpc:subnets:get | - | - | √ | √ |
| 查询VPC列表 | GET /v3/{project_id}/vpc/vpcs | vpc:vpcs:list | - | - | √ | √ |
