开发环境权限

表1 开发环境细化权限说明
权限	对应API接口	授权项	依赖的授权项	IAM项目	企业项目
创建Notebook实例	POST /v1/{project_id}/notebooks	modelarts:notebook:create	swr:repo:listRepoTags swr:repo:getRepo swr:namespace:getNamespace swr:repo:getRepoDomain swr:repository:getTag swr:instance:get swr:instance:createTempCredential kps:SSHKeyPair:get vpc:vpcs:list vpc:subnets:get vpc:securityGroups:get vpc:quotas:list vpc:subnets:get csms:secret:get csms:secret:getVersion sfsturbo:shares:getShare obs:object:GetObject obs:bucket:HeadBucket obs:bucket:GetBucketPolicy obs:bucket:PutBucketPolicy obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl	√	√
查询Notebook实例列表	GET /v1/{project_id}/notebooks	modelarts:notebook:list	-	√	√
查询所有Notebook实例列表	GET /v1/{project_id}/notebooks/all	modelarts:notebook:listAllNotebooks	-	√	×
查询Notebook实例详情	GET /v1/{project_id}/notebooks/{id}	modelarts:notebook:get	-	√	√
更新Notebook实例	PUT /v1/{project_id}/notebooks/{id}	modelarts:notebook:update	csms:secret:get csms:secret:getVersion kps:SSHKeyPair:get	√	√
删除Notebook实例	DELETE /v1/{project_id}/notebooks/{id}	modelarts:notebook:delete	-	√	√
通过运行的实例保存成容器镜像	POST /v1/{project_id}/notebooks/{id}/create-image	modelarts:image:create	swr:namespace:getNamespace swr:repo:listRepoTags swr:repository:listNamespaces swr:repository:getTag	√	√
查询Notebook支持的有效规格列表	GET /v1/{project_id}/notebooks/flavors			√	√
查询Notebook支持的可切换规格列表	GET /v1/{project_id}/notebooks/{id}/flavors			√	√
查询运行中的Notebook可用时长	GET /v1/{project_id}/notebooks/{id}/lease			√	√
Notebook时长续约	PATCH /v1/{project_id}/notebooks/{id}/lease	modelarts:notebook:updateStopPolicy		√	√
启动Notebook实例	POST /v1/{project_id}/notebooks/{id}/start	modelarts:notebook:start	swr:repo:listRepoTags swr:repo:getRepo swr:namespace:getNamespace swr:repo:getRepoDomain swr:repository:getTag swr:instance:get swr:instance:createTempCredential kps:SSHKeyPair:get csms:secret:get csms:secret:getVersion sfsturbo:shares:getShare obs:object:GetObject obs:bucket:HeadBucket obs:bucket:GetBucketPolicy obs:bucket:PutBucketPolicy obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl	√	√
停止Notebook实例	POST /v1/{project_id}/notebooks/{id}/stop	modelarts:notebook:stop	-	√	√
获取动态挂载OBS实例信息列表	GET /v1/{project_id}/notebooks/{id}/storage	modelarts:notebook:listMountedStorages	-	√	√
动态挂载OBS	POST /v1/{project_id}/notebooks/{instance_id}/storage	modelarts:notebook:mountStorage	-	√	√
获取动态挂载OBS实例详情	GET /v1/{project_id}/notebooks/{instance_id}/storage/{storage_id}	modelarts:notebook:getMountedStorage	-	√	√
动态卸载OBS	DELETE /v1/{project_id}/notebooks/{instance_id}/storage/{storage_id}	modelarts:notebook:umountStorage	-	√	√
添加资源标签	POST /v1/{project_id}/notebooks/{resource_id}/tags/create	modelarts:notebook:update		√	√
删除资源标签	DELETE /v1/{project_id}/notebooks/{resource_id}/tags/delete	modelarts:notebook:update		√	√
查询Notebook资源类型下的标签	GET /v1/{project_id}/notebooks/tags	modelarts:tag:list		√	√
查询支持的镜像列表	GET /v1/{project_id}/images	modelarts:image:list	-	√	√
注册自定义镜像	POST /v1/{project_id}/images	modelarts:image:register	swr:repo:listRepoTags swr:repo:getRepo swr:repo:getRepoDomain swr:repo:createRepoDomain swr:repository:getTag	√	√
查询用户镜像列表	GET /v1/{project_id}/images/group	modelarts:image:listGroup	-	√	√
查询镜像详情	GET /v1/{project_id}/images/{id}	modelarts:image:get	-	√	√
删除自定义镜像	DELETE /v1/{project_id}/images/{id}	modelarts:image:delete	swr:repo:listRepoTags swr:repo:deleteRepoTag swr:repository:getTag swr:repository:deleteTag	√	√
同步自定义镜像	POST /v1/{project_id}/images/{id}/sync		swr:repo:listRepoTags swr:repo:getRepo swr:namespace:getNamespace swr:repo:getRepoDomain swr:repository:getTag	√	√
打开serverless 开发环境实例(codelab)	POST /v1/{project_id}/notebooks/open	modelarts:notebook:open	swr:repo:listRepoTags swr:repo:getRepo swr:namespace:getNamespace swr:repo:getRepoDomain swr:repository:getTag swr:instance:get swr:instance:createTempCredential	√	√