检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
检测到您已登录华为云国际站账号，为了您更好的体验，建议您访问国际站服务网站 https://www.huaweicloud.com/intl/zh-cn
不再显示此消息
If the organization is no longer needed, you can delete it. Managing Organizations OU management You can use your management account to add, modify, view, and delete OUs.
/delete cnad:blackWhiteIpList:delete - PUT /v1/cnad/protected-ips/tags cnad:ipTag:put - GET /v1/cnad/packages cnad:package:list - PUT /v1/cnad/packages/{package_id}/name cnad:package:put - POST /v1/cnad/policies cnad:policy:create - DELETE /v1/cnad/policies/{policy_id} cnad:policy
cfw:ipGroup:listIpGroupMember - GET /v1/{project_id}/address-sets cfw:ipGroup:listIpGroups - DELETE /v1/{project_id}/domain-set/domains/{set_id} cfw:domainGroup:delete - GET /v1/{project_id}/service-items cfw:serviceGroup:listServiceGroupMember - DELETE /v1/{project_id}/service-items
Grants permission to delete a stack. write stack * - rf:stack:getTemplate Grants permission to get the template of a stack. read stack * - rf:stack:listEvents Grants permission to list deployment events of a stack. list stack * - rf:stack:listResources Grants permission to list all
/v3/groups/{group_id} iam:groups:delete - PATCH /v3/groups/{group_id} iam:groups:update - GET /v3/groups/{group_id}/users iam:groups:listUsers - HEAD /v3/groups/{group_id}/users/{user_id} iam:groups:checkUser - PUT /v3/groups/{group_id}/users/{user_id} iam:groups:addUser - DELETE
Grants permission to delete predefined tags. write - - tms:resourceTags:list Grants permission to list resource tags. list - - tms:resourceTags:create Grants permission to create resource tags. write - - tms:resourceTags:delete Grants permission to delete resource tags. write - -
/{id} cc:cloudConnectionRoutes:get - GET /v3/{domain_id}/ccaas/cloud-connection-routes cc:cloudConnectionRoutes:list - POST /v3/{domain_id}/ccaas/authorisations cc:authorisation:create - DELETE /v3/{domain_id}/ccaas/authorisations/{id} cc:authorisation:delete - PUT /v3/{domain_id}
task. write synctask - oms:synctask:get Grants permission to query details about a synchronization task. read synctask - oms:synctask:delete Grants permission to delete a synchronization task. write synctask - oms:synctask:statistics Grants permission to query statistics about a
Grants permission to delete a share member. permission_management backup * g:EnterpriseProjectId cbr:vaults:showCheckpoint Grants permission to query a restore point. read - - cbr:vaults:showSummary Grants permission to query the vault overview. list - - cbr:vaults:replicate Grants
repo:listSharedRepos - GET /v2/manage/namespaces/{namespace}/repos/{repository} swr:repo:getRepo - PATCH /v2/manage/namespaces/{namespace}/repos/{repository} swr:repo:updateRepo - DELETE /v2/manage/namespaces/{namespace}/repos/{repository}/tags/{tag} swr:repo:deleteRepoTag - GET
Grant the permission to delete a cluster. write cluster * g:EnterpriseProjectId g:ResourceTag/<tag-key> css:cluster:modifySpecifications Grant the permission to modify cluster specifications. write cluster * g:EnterpriseProjectId g:ResourceTag/<tag-key> css:cluster:list Grant the
chart:upload - DELETE /v2/charts/{chart_id} cce:chart:delete - PUT /v2/charts/{chart_id} cce:chart:update - GET /v2/charts/{chart_id} cce:chart:getChart - GET /v2/charts cce:chart:listChart - GET /v2/charts/{chart_id}/archive cce:chart:download - GET /v2/charts/{project_id}/quotas
Table 1 Actions supported by PCA Action Description Access Level Resource Type (*: Required) Condition Key pca:ca:create Grants the permission to create a private CA. write ca * - - g:EnterpriseProjectId pca:ca:delete Grants the permission to delete a private CA. write ca * g:ResourceTag
Table 1 Actions supported by DCS Action Description Access Level Resource Type (*: Required) Condition Key dsc:asset:delete Grants permission to delete data assets. write asset * - dsc:asset:list Grants permission to query the data asset list. list asset * - dsc:asset:create Grants
Table 2 Actions and dependencies supported by VPC Endpoint APIs API Action Dependencies POST /v1/{project_id}/vpc-endpoints vpcep:endpoints:create - DELETE /v1/{project_id}/vpc-endpoints/{vpc_endpoint_id} vpcep:endpoints:delete - GET /v1/{project_id}/vpc-endpoints vpcep:endpoints:
/<tag-key> g:TagKeys ecs:cloudServers:batchDeleteServerTags Grants permission to delete tags from an ECS in a batch. write instance * g:RequestTag/<tag-key> g:TagKeys ecs:cloudServers:start Grants permission to start ECSs in a batch. write instance * - ecs:cloudServers:stop Grants
/v3/{project_id}/backups/{backups_id} dds:backup:delete - GET /v3/{project_id}/backups?
Before disabling trusted access for the LTS service, delete the configurations of multi-account log aggregation on the LTS console and then disable the trusted access on the Organizations console.
/v2/{project_id}/cas/environments/{environment_id} servicestage:environment:delete - GET /v2/{project_id}/cas/environments/{environment_id} servicestage:environment:get - PATCH /v2/{project_id}/cas/environments/{environment_id}/resources servicestage:environment:modify - POST /v2
Grants permission to disable Cost Center functions. write - - costCenter:costdetailreport:viewReportTask Grants permission to view the task list for exporting cost details to OBS. read - - costCenter:costdetailreport:configReportTask Grants permission to create, modify, or delete
