统一身份认证服务 IAM-授权项:委托管理
委托管理
权限 |
对应API接口 |
授权项 |
IAM项目 (Project) |
企业项目 (Enterprise Project) |
---|---|---|---|---|
创建委托 |
POST /v3.0/OS-AGENCY/agencies |
iam:agencies:createAgency |
- |
- |
查询指定条件下的委托列表 |
GET /v3.0/OS-AGENCY/agencies |
iam:agencies:listAgencies |
- |
- |
查询委托详情 |
GET /v3.0/OS-AGENCY/agencies/{agency_id} |
iam:agencies:getAgency |
- |
- |
修改委托 |
PUT /v3.0/OS-AGENCY/agencies/{agency_id} |
iam:agencies:updateAgency |
- |
- |
删除委托 |
DELETE /v3.0/OS-AGENCY/agencies/{agency_id} |
iam:agencies:deleteAgency |
- |
- |
为委托授予项目服务权限 |
PUT /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id} |
iam:permissions:grantRoleToAgencyOnProject |
- |
- |
查询委托是否拥有项目服务权限 |
HEAD /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id} |
iam:permissions:checkRoleForAgencyOnProject |
- |
- |
查询项目服务中的委托权限 |
GET /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles |
iam:permissions:listRolesForAgencyOnProject |
- |
- |
移除委托的项目服务权限 |
DELETE /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id} |
iam:permissions:revokeRoleFromAgencyOnProject |
- |
- |
为委托授予全局服务权限 |
PUT /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id} |
iam:permissions:grantRoleToAgencyOnDomain |
- |
- |
查询委托是否拥有全局服务权限 |
HEAD /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id} |
iam:permissions:checkRoleForAgencyOnDomain |
- |
- |
查询全局服务中的委托权限 |
GET /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles |
iam:permissions:listRolesForAgencyOnDomain |
- |
- |
移除委托的全局服务权限 |
DELETE /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id} |
iam:permissions:revokeRoleFromAgencyOnDomain |
- |
- |
查询委托的所有权限 |
GET /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/inherited_to_projects |
iam:permissions:listRolesForAgency |
- |
- |
查询委托是否拥有指定权限 |
HEAD /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects |
iam:permissions:checkRoleForAgency |
- |
- |
为委托授予指定权限 |
PUT /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects |
iam:permissions:grantRoleToAgency |
- |
- |
移除委托的指定权限 |
DELETE /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects |
iam:permissions:revokeRoleFromAgency |
- |
- |