权限和授权项
策略包含系统策略和自定义策略,如果系统策略不满足授权要求,租户管理员可以创建自定义策略,并通过给用户组授予自定义策略来进行精细的访问控制。策略支持的操作与API相对应,授权项列表说明如下:
- 权限:允许或拒绝某项操作。
- 对应API接口:自定义策略实际调用的API接口。
- 授权项:自定义策略中支持的Action,在自定义策略中的Action中写入授权项,可以实现授权项对应的权限功能。
- 依赖的授权项:部分Action存在对其他Action的依赖,需要将依赖的Action同时写入授权项,才能实现对应的权限功能。
- IAM项目(Project)/企业项目(Enterprise Project):自定义策略的授权范围,包括IAM项目与企业项目。授权范围如果同时支持IAM项目和企业项目,表示此授权项对应的自定义策略,可以在IAM和企业管理两个服务中给用户组授权并生效。如果仅支持IAM项目,不支持企业项目,表示仅能在IAM中给用户组授权并生效,如果在企业管理中授权,则该自定义策略不生效。关于IAM项目与企业项目的区别,详情请参见:IAM与企业管理的区别。
授权项(Action) |
对应API接口 |
授权项说明 |
IAM项目(Project) |
企业项目(Enterprise Project) |
---|---|---|---|---|
workspace:desktops:create |
POST /v2/{project_id}/desktops |
创建桌面 |
√ |
√ |
workspace:desktops:update |
PUT /v2/{project_id}/desktops/{desktop_id} |
更新桌面信息 |
√ |
√ |
workspace:desktops:delete |
DELETE /v2/{project_id}/desktops/{desktop_id} |
删除桌面 |
√ |
√ |
workspace:desktops:get |
GET /v2/{project_id}/desktops/{desktop_id} |
查询桌面详情 |
√ |
√ |
workspace:desktops:list |
GET /v2/{project_id}/desktops |
查询桌面列表 |
√ |
√ |
workspace:desktops:listDetail |
GET /v2/{project_id}/desktops/detail |
查询桌面详情列表 |
√ |
√ |
workspace:desktops:batchDelete |
POST /v2/{project_id}/desktops/batch-delete |
批量删除桌面 |
√ |
√ |
workspace:desktops:operate |
POST /v2/{project_id}/desktops/action |
操作桌面(开关机、重启、休眠) |
√ |
√ |
workspace:desktops:reboot |
POST /v2/{project_id}/desktops/reboot |
重启桌面 |
√ |
√ |
workspace:desktops:start |
POST /v2/{project_id}/desktops/start |
启动桌面 |
√ |
√ |
workspace:desktops:stop |
POST /v2/{project_id}/desktops/stop |
关闭桌面 |
√ |
√ |
workspace:desktops:getLastDeleteTime |
GET /v2/{project_id}/desktops/last-desktop-delete-time |
查询租户最后一台计算机的删除时间 |
√ |
x |
workspace:desktops:resize |
POST /v2/{project_id}/desktops/resize |
变更规格 |
√ |
√ |
workspace:desktops:rebuild |
POST /v2/{project_id}/desktops/rebuild |
重建桌面 |
√ |
√ |
workspace:desktops:getActions |
GET /v2/{project_id}/desktops/{desktop_id}/actions |
查询桌面开关机信息 |
√ |
√ |
workspace:desktops:getMonitor |
GET /v2/{project_id}/desktop-monitor/{desktop_id} |
查询桌面监控信息 |
√ |
√ |
workspace:desktops:createConsole |
GET /v2/{project_id}/desktops/{desktop_id}/remote-consoles |
获取远程登录控制台地址 |
√ |
√ |
workspace:desktops:updateSids |
PUT /v2/{project_id}/desktops/sids |
更新桌面SID |
√ |
√ |
workspace:desktops:rejoinDomain |
POST /v2/{project_id}/desktops/{desktop_id}/rejoin-domain |
重新加入AD域 |
√ |
√ |
workspace:desktops:createImage |
POST /v2/{project_id}/desktops/desktop-to-image |
桌面转镜像 |
√ |
x |
workspace:desktops:export |
GET /v2/{project_id}/desktops/export |
导出桌面列表 |
√ |
√ |
workspace:desktops:detach |
POST /v2/{project_id}/desktops/detach |
解绑用户 |
√ |
√ |
workspace:desktops:attach |
POST /v2/{project_id}/desktops/attach |
分配用户 |
√ |
√ |
workspace:desktops:getSysprepVersion |
GET /v2/{project_id}/desktops/{desktop_id}/sysprep |
查询Sysprep版本信息 |
√ |
x |
workspace:desktops:getConnectStatus |
GET /v2/{project_id}/connections/status |
查询桌面登录状态统计数据 |
√ |
x |
workspace:agencies:create |
POST /v2/{project_id}/agencies |
创建委托 |
√ |
x |
workspace:agencies:get |
GET /v2/{project_id}/agencies |
查询委托 |
√ |
x |
workspace:desktops:verifyDesktopName |
POST /v2/{project_id}/verification/desktop-name |
校验桌面名称 |
√ |
x |
workspace:desktops:getAdStatus |
GET /v2/{project_id}/ad/status |
查询AD网络状态 |
√ |
x |
workspace:desktopPools:create |
POST /v2/{project_id}/desktop-pools |
创建桌面池 |
√ |
√ |
workspace:desktopPools:update |
PUT /v2/{project_id}/desktop-pools/{pool_id} |
修改桌面池属性 |
√ |
√ |
workspace:desktopPools:delete |
DELETE /v2/{project_id}/desktop-pools/{pool_id} |
删除桌面池 |
√ |
√ |
workspace:desktopPools:get |
GET /v2/{project_id}/desktop-pools/{pool_id} |
查询桌面池详情 |
√ |
√ |
workspace:desktopPools:list |
GET /v2/{project_id}/desktop-pools |
查询桌面池列表 |
√ |
√ |
workspace:desktopPools:expand |
POST /v2/{project_id}/desktop-pools/{pool_id}/expand |
扩容桌面池 |
√ |
√ |
workspace:desktopPools:resize |
POST /v2/{project_id}/desktop-pools/{pool_id}/resize |
桌面池变更规格 |
√ |
√ |
workspace:desktopPools:rebuild |
POST /v2/{project_id}/desktop-pools/{pool_id}/rebuild |
桌面池重建系统盘 |
√ |
√ |
workspace:desktopPools:batchAddVolumes |
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-add |
桌面池批量添加磁盘 |
√ |
√ |
workspace:desktopPools:batchDeleteVolumes |
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-delete |
桌面池批量删除磁盘 |
√ |
√ |
workspace:desktopPools:batchExpandVolumes |
POST /v2/{project_id}/desktop-pools/{pool_id}/volumes/batch-expand |
桌面池批量扩容磁盘 |
√ |
√ |
workspace:desktopPools:operate |
POST /v2/{project_id}/desktop-pools/{pool_id}/action |
操作桌面池 |
√ |
√ |
workspace:desktopPools:authorizeUsers |
POST /v2/{project_id}/desktop-pools/{pool_id}/users |
桌面池授权用户、用户组 |
√ |
√ |
workspace:desktopPools:listUsers |
GET /v2/{project_id}/desktop-pools/{pool_id}/users |
查询桌面池授权的用户、用户组 |
√ |
√ |
workspace:desktops:tag |
POST /v2/{project_id}/desktops/{desktop_id}/tags |
创建桌面标签 |
√ |
x |
workspace:desktops:listTags |
GET /v2/{project_id}/desktops/{desktop_id}/tags |
查询桌面标签 |
√ |
x |
workspace:desktops:untag |
DELETE /v2/{project_id}/desktops/{desktop_id}/tags/{key} |
删除桌面标签 |
√ |
x |
workspace:desktops:listProjectTags |
GET /v2/{project_id}/desktops/tags |
查询项目标签 |
√ |
x |
workspace:desktops:operateTags |
POST /v2/{project_id}/desktops/{desktop_id}/tags/action |
批量添加删除标签 |
√ |
x |
workspace:desktops:listByTags |
POST /v2/{project_id}/desktops/resource_instances/action |
使用标签过滤桌面 |
√ |
x |
workspace:jobs:list |
POST /v2/{project_id}/workspace-jobs |
查询任务列表 |
√ |
x |
workspace:jobs:get |
GET /v2/{project_id}/workspace-jobs/{job_id} |
查询任务详情 |
√ |
x |
workspace:jobs:listSubJobs |
GET /v2/{project_id}/workspace-sub-jobs |
查询子任务列表 |
√ |
x |
workspace:jobs:retry |
POST /v2/{project_id}/workspace-jobs/{job_id}/actions |
重试任务 |
√ |
x |
workspace:jobs:deleteSubJobRecords |
POST /v2/{project_id}/workspace-sub-jobs/batch-delete |
删除子任务记录 |
√ |
x |
workspace:networks:createNat |
POST /v2/{project_id}/internet |
开通NAT网关上网功能 |
√ |
√ |
workspace:networks:listNats |
GET /v2/{project_id}/internet |
查询NAT网关上网功能 |
√ |
√ |
workspace:networks:createEips |
POST /v2/{project_id}/eips |
创建EIP |
√ |
√ |
workspace:networks:listEips |
GET /v2/{project_id}/eips |
查询EIP列表 |
√ |
√ |
workspace:networks:bindEips |
POST /v2/{project_id}/eips/binding |
绑定EIP |
√ |
√ |
workspace:networks:unbindEips |
POST /v2/{project_id}/eips/unbinding |
解绑EIP |
√ |
√ |
workspace:networks:getEipQuota |
GET /v2/{project_id}/eips/quotas |
查询EIP配额 |
√ |
√ |
workspace:networks:listVpcs |
GET /v2/{project_id}/vpcs |
查询查询vpc |
√ |
√ |
workspace:networks:listSubnets |
GET /v2/{project_id}/subnets |
查询子网列表 |
√ |
√ |
workspace:networks:listSecurityGroups |
GET /v2/{project_id}/security-groups |
查询安全组列表 |
√ |
√ |
workspace:networks:getAvailableIp |
GET /v2/{project_id}/subnets/{subnet_id}/available-ip |
根据子网id查询该子网下可用的ip |
√ |
√ |
workspace:orders:create |
POST /v2/{project_id}/periodic/subscribe/order |
包周期下单 |
√ |
√ |
workspace:orders:change |
POST /v2/{project_id}/periodic/{desktop_id}/change/order |
创建变更订单 |
√ |
√ |
workspace:renderDesktops:create |
POST /v2/{project_id}/render-desktops |
创建渲染桌面 |
√ |
√ |
workspace:renderDesktops:delete |
DELETE /v2/{project_id}/render-desktops |
删除渲染桌面 |
√ |
√ |
workspace:renderDesktops:list |
GET /v2/{project_id}/render-desktops |
查询渲染桌面列表 |
√ |
√ |
workspace:renderDesktops:action |
POST /v2/{project_id}/render-desktops/action |
操作渲染桌面 |
√ |
√ |
workspace:renderDesktops:createConsole |
GET /v2/{project_id}/render-desktops/{desktop_id}/remote-consoles |
获取远程登录控制台地址 |
√ |
√ |
workspace:renderDesktops:resize |
PUT /v2/{project_id}/render-desktops/resize |
变更渲染桌面规格 |
√ |
√ |
workspace:scheduledTasks:create |
POST /v2/{project_id}/scheduled-tasks |
创建定时任务 |
√ |
x |
workspace:scheduledTasks:list |
GET /v2/{project_id}/scheduled-tasks |
查询定时任务列表 |
√ |
x |
workspace:scheduledTasks:update |
PUT /v2/{project_id}/scheduled-tasks/{task_id} |
更新定时任务 |
√ |
x |
workspace:scheduledTasks:delete |
DELETE /v2/{project_id}/scheduled-tasks/{task_id} |
删除定时任务 |
√ |
x |
workspace:scheduledTasks:get |
GET /v2/{project_id}/scheduled-tasks/{task_id} |
查询定时任务详情 |
√ |
x |
workspace:scheduledTasks:getFuture |
POST /v2/{project_id}/scheduled-tasks/future-executions |
查询定时任务未来执行时间 |
√ |
x |
workspace:scheduledTasks:batchDelete |
POST /v2/{project_id}/scheduled-tasks/batch-delete |
批量删除定时任务 |
√ |
x |
workspace:scheduledTasks:listRecords |
GET /v2/{project_id}/scheduled-tasks/{task_id}/records |
查询定时任务执行记录 |
√ |
x |
workspace:scheduledTasks:getRecord |
GET /v2/{project_id}/scheduled-tasks/{task_id}/records/{record_id} |
查询定时任务执行记录详情 |
√ |
x |
workspace:scheduledTasks:exportRecords |
POST /v2/{project_id}/scheduled-tasks/{task_id}/records/export |
导出定时任务记录及执行详情 |
√ |
x |
workspace:statistics:getRunState |
GET /v2/{project_id}/desktops/statistics/run-state |
运行状态统计 |
√ |
x |
workspace:statistics:getLoginState |
GET /v2/{project_id}/desktops/statistics/login-state |
登录状态统计 |
√ |
x |
workspace:statistics:getUnused |
GET /v2/{project_id}/desktops/statistics/unused |
查询在指定时间段未使用的桌面 |
√ |
x |
workspace:statistics:getUsed |
POST /v2/{project_id}/desktops/statistics/used |
查询使用桌面的时长 |
√ |
x |
workspace:bindingPolicies:getConfig |
GET /v2/{project_id}/terminals/binding-desktops/config |
查询终端与桌面绑定的开关配置信息 |
√ |
x |
workspace:bindingPolicies:createConfig |
POST /v2/{project_id}/terminals/binding-desktops/config |
设置终端与桌面绑定的开关配置 |
√ |
x |
workspace:bindingPolicies:get |
GET /v2/{project_id}/terminals/binding-desktops |
查询终端与桌面绑定配置列表 |
√ |
x |
workspace:bindingPolicies:add |
POST /v2/{project_id}/terminals/binding-desktops |
增加终端与桌面绑定配置 |
√ |
x |
workspace:bindingPolicies:update |
PUT /v2/{project_id}/terminals/binding-desktops |
修改终端与桌面绑定配置 |
√ |
x |
workspace:bindingPolicies:delete |
POST /v2/{project_id}/terminals/binding-desktops/batch-delete |
删除终端与桌面绑定配置 |
√ |
x |
workspace:bindingPolicies:getTemplate |
GET /v2/{project_id}/terminals/binding-desktops/template |
下载终端与桌面绑定模板 |
√ |
x |
workspace:bindingPolicies:import |
POST /v2/{project_id}/terminals/binding-desktops/template/import |
批量导入终端与桌面绑定 |
√ |
x |
workspace:bindingPolicies:export |
GET /v2/{project_id}/terminals/binding-desktops/template/export |
导出终端与桌面绑定配置excel |
√ |
x |
workspace:volumes:add |
POST /v2/{project_id}/desktops/{desktop_id}/volumes |
增加桌面磁盘 |
√ |
√ |
workspace:volumes:delete |
POST /v2/{project_id}/desktops/{desktop_id}/volumes/batch-delete |
删除桌面数据盘 |
√ |
√ |
workspace:volumes:batchAdd |
POST /v2/{project_id}/desktops/volumes |
多个桌面增加桌面磁盘 |
√ |
√ |
workspace:volumes:batchAdd |
POST /v2/{project_id}/volumes |
增加桌面磁盘 |
√ |
√ |
workspace:volumes:expand |
POST /v2/{project_id}/desktops/{desktop_id}/volumes/{volume_id}/expand |
扩容磁盘 |
√ |
√ |
workspace:volumes:batchExpand |
POST /v2/{project_id}/volumes/expand |
扩容桌面磁盘 |
√ |
√ |
workspace:volumes:listDssPoolsDetail |
GET /v2/{project_id}/dss-pools/detail |
获取专属分布式存储池详情列表 |
√ |
√ |
workspace:wdh:listDesktops |
GET /v2/{project_id}/hosts/{host_id}/servers |
查询云办公主机包含桌面信息 |
√ |
√ |
workspace:wdh:getType |
GET /v2/{project_id}/hosts/types |
查询云办公主机类型 |
√ |
√ |
workspace:wdh:create |
POST /v2/{project_id}/hosts |
购买云办公主机 |
√ |
√ |
workspace:wdh:get |
GET /v2/{project_id}/hosts |
查询云办公主机列表 |
√ |
√ |
workspace:wdh:update |
PUT /v2/{project_id}/hosts |
更新云办公主机信息 |
√ |
√ |
workspace:tenants:get |
GET /v2/{project_id}/workspaces |
查询云办公服务详情 |
√ |
x |
workspace:tenants:open |
POST /v2/{project_id}/workspaces |
开通云办公服务 |
√ |
x |
workspace:tenants:update |
PUT /v2/{project_id}/workspaces |
修改云办公服务属性 |
√ |
x |
workspace:tenants:delete |
DELETE /v2/{project_id}/workspaces |
注销云办公服务 |
√ |
x |
workspace:tenants:checkEnterpriseIds |
POST /v2/{project_id}/workspaces/enterprise-ids/check |
检查企业ID是否已被使用 |
√ |
x |
workspace:tenants:updateEnterpriseId |
PUT /v2/{project_id}/workspaces/enterprise-id |
修改企业ID |
√ |
x |
workspace:tenants:getRealms |
GET /v2/{project_id}/workspaces/realms |
查询租户域信息 |
√ |
x |
workspace:tenants:getLockStatus |
GET /v2/{project_id}/workspaces/lock-status |
查询云办公服务是否被锁定 |
√ |
x |
workspace:tenants:unlock |
PUT /v2/{project_id}/workspaces/lock-status |
解除云办公服务锁定状态 |
√ |
x |
workspace:tenants:getRoles |
GET /v2/{project_id}/tenants/roles |
查询租户角色 |
√ |
x |
workspace:natMappings:getConfig |
GET /v2/{project_id}/nat-mapping-configs |
查询租户的NAT映射配置项 |
√ |
x |
workspace:natMappings:updateConfig |
PUT /v2/{project_id}/nat-mapping-configs |
修改租户的NAT映射配置项 |
√ |
x |
workspace:sites:get |
GET /v2/{project_id}/sites |
查询站点信息 |
√ |
x |
workspace:sites:add |
POST /v2/{project_id}/sites |
新增站点 |
√ |
x |
workspace:sites:delete |
DELETE /v2/{project_id}/sites/{site_id} |
删除站点 |
√ |
x |
workspace:sites:updateAccessMode |
PUT /v2/{project_id}/sites/{site_id}/access-mode |
修改站点接入方式 |
√ |
x |
workspace:sites:updateSubnets |
PUT /v2/{project_id}/sites/{site_id}/subnet-ids |
修改站点业务子网 |
√ |
x |
workspace:privacystatements:sign |
POST /v2/{project_id}/privacystatement |
签署隐私声明 |
√ |
x |
workspace:quotas:get |
GET /v2/{project_id}/quotas |
查询租户配额 |
√ |
x |
workspace:authConfigs:get |
GET /v2/{project_id}/auth-config/method-config |
查询认证登录方式配置信息 |
√ |
x |
workspace:authConfigs:update |
PUT /v2/{project_id}/auth-config/method-config |
更新认证策略配置信息 |
√ |
x |
workspace:assistAuthConfigs:get |
GET /v2/{project_id}/assist-auth-config/method-config |
查询辅助认证的配置信息 |
√ |
x |
workspace:assistAuthConfigs:update |
PUT /v2/{project_id}/assist-auth-config/method-config |
更新辅助认证配置 |
√ |
x |
workspace:accessPolicies:create |
POST /v2/{project_id}/access-policy |
创建接入策略 |
√ |
x |
workspace:accessPolicies:delete |
DELETE /v2/{project_id}/access-policy |
删除指定接入策略 |
√ |
x |
workspace:accessPolicies:get |
GET /v2/{project_id}/access-policy |
查询接入策略 |
√ |
x |
workspace:accessPolicies:getTarget |
GET /v2/{project_id}/access-policy/{access_policy_id}/objects |
查询指定接入策略的应用对象 |
√ |
x |
workspace:accessPolicies:updateTarget |
PUT /v2/{project_id}/access-policy/{access_policy_id}/objects |
更新指定接入策略的应用对象 |
√ |
x |
workspace:availabilityZones:list |
GET /v2/{project_id}/availability-zones |
查询支持的可用分区列表 |
√ |
x |
workspace:availabilityZones:getSummary |
GET /v2/{project_id}/availability-zones/summary |
查询可用分区列表概要 |
√ |
x |
workspace:availabilityZones:get |
GET /v2/{project_id}/availability-zones/detail |
查询可用分区详情 |
√ |
x |
workspace:connections:securityList |
GET /v2/{project_id}/connections/desktops |
查询连接信息 |
√ |
x |
workspace:connections:securityExport |
GET /v2/{project_id}/connections/desktops/export |
导出连接记录 |
√ |
x |
workspace:connections:securityList |
GET /v2/{project_id}/desktops/connections |
查询连接信息 |
√ |
x |
workspace:connections:securityExport |
GET /v2/{project_id}/desktops/connections/export |
导出连接记录 |
√ |
x |
workspace:policyGroups:create |
POST /v2/{project_id}/policy-groups |
新增策略组 |
√ |
x |
workspace:policyGroups:delete |
DELETE /v2/{project_id}/policy-groups/{policy_group_id} |
删除策略组 |
√ |
x |
workspace:policyGroups:update |
PUT /v2/{project_id}/policy-groups/{policy_group_id} |
修改策略组 |
√ |
x |
workspace:policyGroups:list |
GET /v2/{project_id}/policy-groups |
查询策略组列表 |
√ |
x |
workspace:policyGroups:get |
GET /v2/{project_id}/policy-groups/{policy_group_id} |
查询策略组 |
√ |
x |
workspace:policyGroups:export |
POST /v2/{project_id}/policy-groups/export |
导出策略组 |
√ |
x |
workspace:policyGroups:import |
POST /v2/{project_id}/policy-groups/import |
导入策略组 |
√ |
x |
workspace:policyGroups:listPolicies |
GET /v2/{project_id}/policy-groups/{policy_group_id}/policies |
查询策略组中的策略项 |
√ |
x |
workspace:policyGroups:updatePolicies |
PUT /v2/{project_id}/policy-groups/{policy_group_id}/policies |
修改策略组中的策略项 |
√ |
x |
workspace:policyGroups:listTargets |
GET /v2/{project_id}/policy-groups/{policy_group_id}/targets |
查询策略组应用对象 |
√ |
x |
workspace:policyGroups:updateTargets |
PUT /v2/{project_id}/policy-groups/{policy_group_id}/targets |
修改策略组应用对象 |
√ |
x |
workspace:policyGroups:listDetail |
GET /v2/{project_id}/policy-groups/detail |
查询策略组详情列表 |
√ |
x |
workspace:policyGroups:getQuotas |
GET /v2/{project_id}/policy-groups/quotas |
查询策略组上限数量 |
√ |
x |
workspace:policyGroups:getMaxPriority |
GET /v2/{project_id}/policy-groups/max-priority |
查询策略组最大优先级 |
√ |
x |
workspace:policyGroups:getOriginalPolicies |
GET /v2/{project_id}/policy-groups/original-policies |
查询初始策略项 |
√ |
x |
workspace:policyGroups:createTemplate |
POST /v2/{project_id}/policy-groups/policy-template |
创建策略模板 |
√ |
x |
workspace:policyGroups:updateTemplate |
PUT /v2/{project_id}/policy-groups/policy-template/{policy_group_id} |
更新策略模板 |
√ |
x |
workspace:userGroups:create |
POST /v2/{project_id}/groups |
创建用户组 |
√ |
x |
workspace:userGroups:list |
GET /v2/{project_id}/groups |
查询用户组列表 |
√ |
x |
workspace:userGroups:update |
PUT /v2/{project_id}/groups/{group_id} |
修改用户组信息 |
√ |
x |
workspace:userGroups:delete |
DELETE /v2/{project_id}/groups/{group_id} |
删除桌面用户组 |
√ |
x |
workspace:userGroups:batchDelete |
POST /v2/{project_id}/groups/batch-delete |
批量删除用户组 |
√ |
x |
workspace:userGroups:operate |
POST /v2/{project_id}/groups/{group_id}/actions |
操作用户组 |
√ |
x |
workspace:userGroups:getUsers |
GET /v2/{project_id}/groups/{group_id}/users |
查询用户组中的用户 |
√ |
x |
workspace:ou:create |
POST /v2/{project_id}/ous |
新增OU信息 |
√ |
x |
workspace:ou:delete |
DELETE /v2/{project_id}/ous/{ou_id} |
删除OU信息 |
√ |
x |
workspace:ou:update |
PUT /v2/{project_id}/ous/{ou_id} |
更新OU信息 |
√ |
x |
workspace:ou:get |
GET /v2/{project_id}/ous |
查询OU信息 |
√ |
x |
workspace:users:create |
POST /v2/{project_id}/users |
创建用户 |
√ |
x |
workspace:users:delete |
DELETE /v2/{project_id}/users/{user_id} |
删除指定用户 |
√ |
x |
workspace:users:update |
PUT /v2/{project_id}/users/{user_id} |
修改用户信息 |
√ |
x |
workspace:users:list |
GET /v2/{project_id}/users |
查询用户列表 |
√ |
x |
workspace:users:get |
GET /v2/{project_id}/users/{user_id} |
查询用户详情信息 |
√ |
x |
workspace:users:operate |
POST /v2/{project_id}/users/{user_id}/actions |
操作用户(锁定、解锁和重置密码) |
√ |
x |
workspace:users:resetPassword |
POST /v2/{project_id}/users/password |
重置用户密码 |
√ |
x |
workspace:users:resendEmail |
POST /v2/{project_id}/users/{user_id}/resend-email |
重新发送邮件 |
√ |
x |
workspace:users:batchDelete |
POST /v2/{project_id}/users/batch-delete |
批量删除用户 |
√ |
x |
workspace:users:uploadTemplate |
POST /v2/{project_id}/users/template-upload |
上传用户模板文件 |
√ |
x |
workspace:users:getTemplate |
GET /v2/{project_id}/users/desktop-users/template |
用户模板下载 |
√ |
x |
workspace:users:importUser |
POST /v2/{project_id}/users/desktop-users/action/import |
导入用户列表 |
√ |
x |
workspace:users:checkExist |
POST /v2/{project_id}/users/exist |
校验用户是否存在 |
√ |
x |
workspace:users:listOtps |
GET /v2/{project_id}/users/{user_id}/otp-devices |
查询OTP设备 |
√ |
x |
workspace:users:deleteOtps |
DELETE /v2/{project_id}/users/{user_id}/otp-devices |
解绑OTP设备 |
√ |
x |
workspace:users:getImportTemplate |
GET /v2/{project_id}/users/template/download |
创建用户模板下载 |
√ |
x |
workspace:users:import |
POST /v2/{project_id}/users/import |
导入用户 |
√ |
x |
workspace:users:export |
POST /v2/{project_id}/users/export |
导出用户 |
√ |
x |
workspace:users:batchCreate |
POST /v2/{project_id}/users/batch-create |
批量创建用户 |
√ |
x |
workspace:users:randomPassword |
GET /v2/{project_id}/users/{user_id}/random-password |
给用户重置随机密码 |
√ |
x |
workspace:images:list |
GET /v2/{project_id}/images |
查询产品镜像列表 |
√ |
√ |
workspace:appcenter:listApps |
GET /v1/{project_id}/app-center/apps |
按照名称分页查询应用 |
√ |
x |
workspace:appcenter:createApp |
POST /v1/{project_id}/app-center/apps |
上传应用 |
√ |
x |
workspace:appcenter:updateApp |
PATCH /v1/{project_id}/app-center/apps/{app_id} |
修改应用 |
√ |
x |
workspace:appcenter:deleteApp |
DELETE /v1/{project_id}/app-center/apps/{app_id} |
删除应用 |
√ |
x |
workspace:appcenter:installApp |
POST /v1/{project_id}/app-center/apps/{app_id}/actions/auto-install |
自动安装应用 |
√ |
x |
workspace:appcenter:listAppAuthorizations |
GET /v1/{project_id}/app-center/apps/{app_id}/authorizations |
查询应用授权信息 |
√ |
x |
workspace:appcenter:updateAppAuthorizations |
POST /v1/{project_id}/app-center/apps/{app_id}/actions/assign-authorizations |
设置应用授权 |
√ |
x |
workspace:appcenter:batchDeleteApps |
POST /v1/{project_id}/app-center/apps/actions/batch-delete |
批量删除应用 |
√ |
x |
workspace:appcenter:batchDisableApps |
POST /v1/{project_id}/app-center/apps/actions/batch-disable |
批量设置应用不可见 |
√ |
x |
workspace:appcenter:batchEnableApps |
POST /v1/{project_id}/app-center/apps/actions/batch-enable |
批量设置应用可见 |
√ |
x |
workspace:appcenter:batchUpdateAppAuthorizations |
POST /v1/{project_id}/app-center/apps/actions/batch-assign-authorization |
批量设置应用授权 |
√ |
x |
workspace:appcenter:batchInstallApps |
POST /v1/{project_id}/app-center/apps/actions/batch-auto-install |
批量自动安装安装应用 |
√ |
x |
workspace:appcenter:listAppCatalogs |
GET /v1/{project_id}/app-center/app-catalogs |
查询应用分类信息 |
√ |
x |
workspace:appcenter:listJobs |
GET /v1/{project_id}/app-center/jobs |
查询应用安装job信息 |
√ |
x |
workspace:appcenter:batchDeleteJobs |
POST /v1/{project_id}/app-center/jobs/actions/batch-delete |
批量删除job |
√ |
x |
workspace:appcenter:retryJobs |
POST /v1/{project_id}/app-center/jobs/actions/retry |
重试失败job |
√ |
x |
workspace:appcenter:createAppRule |
POST /v1/{project_id}/app-center/app-rules |
创建应用规则 |
√ |
x |
workspace:appcenter:listAppRule |
GET /v1/{project_id}/app-center/app-rules |
查询应用规则 |
√ |
x |
workspace:appcenter:updateAppRule |
PATCH /v1/{project_id}/app-center/app-rules/{rule_id} |
修改应用规则 |
√ |
x |
workspace:appcenter:deleteAppRule |
DELETE /v1/{project_id}/app-center/app-rules/{rule_id} |
删除应用规则 |
√ |
x |
workspace:appcenter:batchDeleteAppRules |
POST /v1/{project_id}/app-center/app-rules/batch-delete |
批量删除应用规则 |
√ |
x |
workspace:appcenter:enableRuleRestriction |
POST /v1/{project_id}/app-center/app-rules/actions/enable-rule-restriction |
启用规则管控 |
√ |
x |
workspace:appcenter:disableRuleRestriction |
POST /v1/{project_id}/app-center/app-rules/actions/disable-rule-restriction |
禁用规则管控 |
√ |
x |
workspace:appcenter:addRestrictedRule |
POST /v1/{project_id}/app-center/app-restricted-rules |
增加管控规则 |
√ |
x |
workspace:appcenter:listRestrictedRule |
GET /v1/{project_id}/app-center/app-restricted-rules |
查询管控规则列表 |
√ |
x |
workspace:appcenter:deleteRestrictedRule |
POST /v1/{project_id}/app-center/app-restricted-rules/actions/batch-delete |
批量删除管控规则列表 |
√ |
x |
workspace:appcenter:updateTenantProfile |
PATCH /v1/{project_id}/app-center/profiles |
启禁用租户功能 |
√ |
x |
workspace:appcenter:listTenantProfiles |
GET /v1/{project_id}/app-center/profiles |
查询租户功能状态 |
√ |
x |
workspace:appcenter:createBucketCredential |
POST /v1/{project_id}/app-center/buckets/actions/create-credential |
生成OBS桶凭证信息信息 |
√ |
x |
workspace:appcenter:createAndAuthorizeBucket |
POST /v1/{project_id}/app-center/buckets |
添加并授权默认OBS桶 |
√ |
x |