更新时间:2024-09-06 GMT+08:00

授权项

组织管理

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

创建组织

POST /v1/organizations

  • organizations:organizations:create
  • iam:agencies:createServiceLinkedAgency

×

×

查询所属组织信息

GET /v1/organizations

organizations:organizations:get

×

×

删除组织

DELETE /v1/organizations

organizations:organizations:delete

×

×

离开当前组织

POST /v1/organizations/leave

organizations:organizations:leave

×

×

列出组织的根

GET /v1/organizations/roots

organizations:roots:list

×

×

组织单元管理

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

创建组织单元

POST /v1/organizations/organizational-units

  • organizations:ous:create
  • organizations:resources:tag(如果请求带标签)

×

×

列出组织单元

GET /v1/organizations/organizational-units

organizations:ous:list

×

×

查询有关组织单元的信息

GET /v1/organizations/organizational-units/{organizational_unit_id}

organizations:ous:get

×

×

更改组织单元名称

PATCH /v1/organizations/organizational-units/{organizational_unit_id}

organizations:ous:update

×

×

删除组织单元

DELETE /v1/organizations/organizational-units/{organizational_unit_id}

organizations:ous:delete

×

×

账号管理

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

创建账号

POST /v1/organizations/accounts

  • organizations:accounts:create
  • organizations:resources:tag(如果请求带标签)

×

×

列出组织中的账号

GET /v1/organizations/accounts

organizations:accounts:list

×

×

查询账号信息

GET /v1/organizations/accounts/{account_id}

organizations:accounts:get

×

×

移除指定的账号

POST /v1/organizations/accounts/{account_id}/remove

organizations:accounts:remove

×

×

移动账号

POST /v1/organizations/accounts/{account_id}/move

organizations:accounts:move

×

×

邀请账号加入组织

POST /v1/organizations/invite-account

  • organizations:accounts:invite
  • organizations:resources:tag(如果请求带标签)

×

×

列出创建账号的状态

GET /v1/organizations/create-account-statuses

organizations:createAccountStatuses:list

×

×

查询有关创建账号状态的信息

GET /v1/organizations/create-account-statuses/{create_account_status_id}

organizations:createAccountStatuses:get

×

×

邀请管理

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

查询邀请相关信息

GET /v1/organizations/handshakes/{handshake_id}

organizations:handshakes:get

×

×

接受邀请

POST/v1/received-handshakes/{handshake_id}/accept

  • organizations:handshakes:accept
  • iam:agencies:createServiceLinkedAgency

×

×

拒绝邀请

POST /v1/received-handshakes/{handshake_id}/decline

organizations:handshakes:decline

×

×

取消邀请

POST /v1/organizations/handshakes/{handshake_id}/cancel

organizations:handshakes:cancel

×

×

列出收到的邀请

GET /v1/received-handshakes

organizations:receivedHandshakes:list

×

×

列出发送的邀请

GET /v1/organizations/handshakes

organizations:handshakes:list

×

×

可信服务管理

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

启用可信服务

POST /v1/organizations/enable-trusted-service

organizations:trustedServices:enable

×

×

禁用受信任服务

POST /v1/organizations/disable-trusted-service

organizations:trustedServices:disable

×

×

列出组织的可信服务列表

GET /v1/organizations/trusted-services

organizations:trustedServices:list

×

×

委托管理员管理

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

注册作为服务委托管理员

POST /v1/organizations/delegated-administrators/register

organizations:delegatedAdministrators:register

×

×

注销服务的委托管理员

POST /v1/organizations/delegated-administrators/deregister

organizations:delegatedAdministrators:deregister

×

×

列出指定账号是其委托管理员的服务

GET /v1/organizations/accounts/{account_id}/delegated-services

organizations:delegatedServices:list

×

×

列出此组织中指定为委托管理员的账号

GET /v1/organizations/delegated-administrators

organizations:delegatedAdministrators:list

×

×

策略管理

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

创建策略

POST /v1/organizations/policies

  • organizations:policies:create
  • organizations:resources:tag(如果请求带标签)

×

×

列出策略

GET /v1/organizations/policies

organizations:policies:list

×

×

查询策略相关信息

GET /v1/organizations/policies/{policy_id}

organizations:policies:get

×

×

更新策略

PATCH /v1/organizations/policies/{policy_id}

organizations:policies:update

×

×

删除策略

DELETE /v1/organizations/policies/{policy_id}

organizations:policies:delete

×

×

在根中启用策略类型

POST /v1/organizations/policies/enable

organizations:policies:enable

×

×

禁用根中的策略类型

POST /v1/organizations/policies/disable

organizations:policies:disable

×

×

将策略跟实体绑定

POST /v1/organizations/policies/{policy_id}/attach

organizations:policies:attach

×

×

将策略跟实体解绑

POST /v1/organizations/policies/{policy_id}/detach

organizations:policies:detach

×

×

列出跟指定策略绑定的所有实体

GET /v1/organizations/policies/{policy_id}/attached-entities

organizations:attachedEntities:list

×

×

标签管理

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

列出绑定到指定资源的标签

GET /v1/organizations/resources/{resource_id}/tags

organizations:tags:list

×

×

为指定的资源添加标签

POST /v1/organizations/resources/{resource_id}/tag

organizations:resources:tag

×

×

从指定资源中删除指定主键标签

POST /v1/organizations/resources/{resource_id}/untag

organizations:resources:untag

×

×

列出绑定到指定资源的标签

GET /v1/organizations/{resource_type}/{resource_id}/tags

organizations:tags:list

×

×

为指定资源添加标签

POST /v1/organizations/{resource_type}/{resource_id}/tags/create

organizations:resources:tag

×

×

从指定资源中删除指定主键标签

POST /v1/organizations/{resource_type}/{resource_id}/tags/delete

organizations:resources:untag

×

×

根据资源类型及标签信息查询实例列表

POST /v1/organizations/{resource_type}/resource-instances/filter

organizations:resources:listByTag

×

×

根据资源类型及标签信息查询实例数量

POST /v1/organizations/{resource_type}/resource-instances/count

organizations:resources:countByTag

×

×

查询资源标签

GET /v1/organizations/{resource_type}/tags

organizations:resources:list

×

×

其他

权限

对应API接口

授权项(Action)

IAM项目(Project)

企业项目(Enterprise Project)

查询有效的策略

GET /v1/organizations/entities/effective-policies

organizations:effectivePolicies:get

×

×

列出组织中的根、组织单元和账号

GET /v1/organizations/entities

organizations:entities:list

×

×

列出所有可以与组织服务集成的云服务

GET /v1/organizations/services

organizations:services:list

×

×

列出被添加到标签策略强制执行的资源类型

GET /v1/organizations/tag-policy-services

organizations:tagPolicyServices:list

×

×

列出租户的组织配额

GET /v1/organizations/quotas

organizations:quotas:list

×

×