All Products
Search
Document Center

Alibaba Cloud Service Mesh:GrantUserPermissions

Last Updated:Mar 05, 2024

Grants permissions to a Resource Access Management (RAM) user.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

ParameterTypeRequiredDescriptionExample
SubAccountUserIdstringYes

The ID of the RAM user or RAM role.

27852573609480****
PermissionsstringNo

The permissions that are granted to an entity. The content is a string that consists of JSON arrays. You must specify all permissions that you want to grant to an entity. You can add or remove permissions by modifying the content. Field definition of the sample code:

  • IsCustom: a parameter that is required by the system. Set the value to true.
  • Cluster: the ID of the Service Mesh (ASM) instance.
  • RoleName: the name of the permissions. Valid values: istio-admin, istio-ops, and istio-readonly. A value of istio-admin indicates the permissions of ASM administrators. A value of istio-ops indicates the permissions of ASM restricted users. A value of istio-readonly indicates the read-only permissions.
  • IsRamRole: the entity to which you want to grant the permissions. To grant the permissions to a RAM role, set the value to true. Otherwise, set the value to false.
[{"IsCustom":true,"RoleName":"istio-ops","Cluster":"c57b848115458460583a4260cb713****","RoleType":"custom","IsRamRole":false},{"IsCustom":true,"RoleName":"istio-ops","Cluster":"c4ec191f4e12145c09286ea3e2b8f****","RoleType":"custom","IsRamRole":false}]
SubAccountUserIdsarrayNo

The IDs of RAM users or RAM roles. You can grant permissions to multiple users at a time.

stringNo

The ID of the RAM user or RAM role.

27852573609480****

Response parameters

ParameterTypeDescriptionExample
object
RequestIdstring

The request ID.

5A7C9E37-C171-584F-9A99-869B48C4****

Examples

Sample success responses

JSONformat

{
  "RequestId": "5A7C9E37-C171-584F-9A99-869B48C4****"
}

Error codes

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2023-08-21The internal configuration of the API is changed, but the call is not affectedsee changesets
Change itemChange content
The internal configuration of the API is changed, but the call is not affected.
2023-06-08The request parameters of the API has changedsee changesets
Change itemChange content
Input ParametersThe request parameters of the API has changed.
    Added Input Parameters: SubAccountUserIds