统一身份认证服务 IAM-授权项:委托管理

时间:2023-11-01 16:23:05

委托管理

权限

对应API接口

授权项

IAM项目

(Project)

企业项目

(Enterprise Project)

创建委托

POST /v3.0/OS-AGENCY/agencies

iam:agencies:createAgency

-

-

查询指定条件下的委托列表

GET /v3.0/OS-AGENCY/agencies

iam:agencies:listAgencies

-

-

查询委托详情

GET /v3.0/OS-AGENCY/agencies/{agency_id}

iam:agencies:getAgency

-

-

修改委托

PUT /v3.0/OS-AGENCY/agencies/{agency_id}

iam:agencies:updateAgency

-

-

删除委托

DELETE /v3.0/OS-AGENCY/agencies/{agency_id}

iam:agencies:deleteAgency

-

-

为委托授予项目服务权限

PUT /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}

iam:permissions:grantRoleToAgencyOnProject

-

-

查询委托是否拥有项目服务权限

HEAD /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}

iam:permissions:checkRoleForAgencyOnProject

-

-

查询项目服务中的委托权限

GET /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles

iam:permissions:listRolesForAgencyOnProject

-

-

移除委托的项目服务权限

DELETE /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}

iam:permissions:revokeRoleFromAgencyOnProject

-

-

为委托授予全局服务权限

PUT /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}

iam:permissions:grantRoleToAgencyOnDomain

-

-

查询委托是否拥有全局服务权限

HEAD /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}

iam:permissions:checkRoleForAgencyOnDomain

-

-

查询全局服务中的委托权限

GET /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles

iam:permissions:listRolesForAgencyOnDomain

-

-

移除委托的全局服务权限

DELETE /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}

iam:permissions:revokeRoleFromAgencyOnDomain

-

-

查询委托的所有权限

GET /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/inherited_to_projects

iam:permissions:listRolesForAgency

-

-

查询委托是否拥有指定权限

HEAD /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects

iam:permissions:checkRoleForAgency

-

-

为委托授予指定权限

PUT /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects

iam:permissions:grantRoleToAgency

-

-

移除委托的指定权限

DELETE /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects

iam:permissions:revokeRoleFromAgency

-

-

support.huaweicloud.com/api-iam/iam_19_0001.html