文档首页/ 魔坊（ModelArts）模型训推平台/ API参考/ 权限策略和授权项/ Workflow权限
更新时间：2026-07-03 GMT+08:00
查看PDF
分享

Workflow权限

场景级授权示例

  • IAM新版控制台，提供基于IAM5.0版本的系统身份策略。用户可以直接在IAM服务新版控制台进行场景级授权配置。
    表1 IAM新版控制台Workflow操作场景的授权

    策略名称

    描述

    类型

    还需配置的IAM3.0的策略

    ModelArtsExemlflowReadOnlyPolicy

    ModelArts服务"模型开发-Workflow"的只读策略

    系统身份策略

    -

    ModelArtsExemlflowAllPolicy

    ModelArts服务"模型开发-Workflow"的所有策略(读写)

    系统身份策略

    -
  • IAM旧版控制台，不提供基于IAM3.0版本的系统身份策略，用户需要在IAM服务旧版控制台自定义身份策略来进行场景级授权配置。详情参考下表进行配置。
    表2 IAM旧版控制台Workflow操作场景的授权

    操作场景

    示例

    读写（IAM3.0）

    		 
    {
      "Version":"1.1",
      "Statement":[
          {
              "Action":[
          "modelarts:workflow:delete",
          "modelarts:workflow:list",
          "modelarts:workflow:get",
          "modelarts:workflow:create",
          "modelarts:workflow:execute",
          "modelarts:workflow:update"
              ],
              "Effect":"Allow"
          }

    只读（IAM3.0）

    		 
    {
      "Version":"1.1",
      "Statement":[
          {
              "Action":[
          "modelarts:workflow:list",
          "modelarts:workflow:get",
              "Effect":"Allow"
          }

接口级授权

如果您需要使用管理控制台workflow的相关功能并进行权限管理，可参照如下表格进行操作。

表3 workflow细化权限说明

权限

对应API接口

授权项

依赖的授权项

IAM项目

企业项目

新建Workflow

POST /v2/{project_id}/workflows

modelarts:workflow:create

无

√

√

获取workflow列表

GET /v2/{project_id}/workflows

modelarts:workflow:list

无

√

√

查询Workflow

GET /v2/{project_id}/workflows/{workflow_id}

modelarts:workflow:get

无

√

√

修改Workflow

PUT /v2/{project_id}/workflows/{workflow_id}

modelarts:workflow:update

无

√

√

删除Workflow

DELETE /v2/{project_id}/workflows/{workflow_id}

modelarts:workflow:delete

无

√

√

总览Workflow

GET /v2/{project_id}/workflows/overview

modelarts:workflow:list

无

√

√

查询Workflow待办事项

GET /v2/{project_id}/workflows/todolist

modelarts:workflow:list

无

√

√

Workflow列表所有标签

GET /v2/{project_id}/workflows/labels

modelarts:workflow:list

无

√

√

新建Workflow的执行

POST /v2/{project_id}/workflows/{workflow_id}/executions

modelarts:workflow:execute

无

√

√

获取Execution列表

GET /v2/{project_id}/workflows/{workflow_id}/executions

modelarts:workflow:list

无

√

√

获取Workflow Execution列表的所有标签

GET /v2/{project_id}/workflows/{workflow_id}/executions/labels

modelarts:workflow:list

无

√

√

查询Execution

GET /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}

modelarts:workflow:get

无

√

√

更新Execution

PUT /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}

modelarts:workflow:update

无

√

√

删除Execution

DELETE /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}

modelarts:workflow:delete

无

√

√

操作Execution

POST /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}/actions

modelarts:workflow:execute

无

√

√

操作StepExecution

POST /v2/{project_id}/workflows/{workflow_id}/executions/{execution_id}/step-executions/{step_execution_id}/actions

modelarts:workflow:execute

无

√

√

新建消息订阅

POST /v2/{project_id}/workflows/{workflow_id}/subscriptions

modelarts:workflow:update

smn:tag:list

smn:topic:get

√

√

查询Subscription详情

GET /v2/{project_id}/workflows/{workflow_id}/subscriptions/{subscription_id}

modelarts:workflow:get

无

√

√

更新Subscription

PUT /v2/{project_id}/workflows/{workflow_id}/subscriptions/{subscription_id}

modelarts:workflow:update

smn:tag:list

smn:topic:get

√

√

删除Subscription

DELETE /v2/{project_id}/workflows/{workflow_id}/subscriptions/{subscription_id}

modelarts:workflow:delete

无

√

√

获取OverviewExeml

GET /v2/{project_id}/workflows/exeml-overview

modelarts:workflow:list

无

√

√

获取StepExecution列表

GET /v2/{project_id}/workflows/{workflow_id}/step-executions

modelarts:workflow:get

无

√

√