Compliance¶
Permission | API | Action | Dependencies | IAM Project | Enterprise Project |
|---|---|---|---|---|---|
Querying all built-in policies | GET /v1/resource-manager/policy-definitions | rms:policyDefinitions:get |
| Y | x |
Querying a built-in policy | GET /v1/resource-manager/policy-definitions/{policy_definition_id} | rms:policyDefinitions:get |
| Y | x |
Modifying a rule | PUT /v1/resource-manager/domains/{domain_id}/policy-assignments/{policy_assignment_id} | rms:policyAssignments:update |
| Y | x |
Enabling a rule | POST /v1/resource-manager/domains/{domain_id}/policy-assignments/{policy_assignment_id}/enable | rms:policyAssignments:update |
| Y | x |
Disabling a rule | POST /v1/resource-manager/domains/{domain_id}/policy-assignments/{policy_assignment_id}/disable | rms:policyAssignments:update |
| Y | x |
Adding a rule | PUT /v1/resource-manager/domains/{domain_id}/policy-assignments | rms:policyAssignments:create |
| Y | x |
Querying all rules | GET /v1/resource-manager/domains/{domain_id}/policy-assignments | rms:policyAssignments:get |
| Y | x |
Querying a rule | GET /v1/resource-manager/domains/{domain_id}/policy-assignments/{policy_assignment_id} | rms:policyAssignments:get |
| Y | x |
Deleting a rule | DELETE /v1/resource-manager/domains/{domain_id}/policy-assignments/{policy_assignment_id} | rms:policyAssignments:delete |
| Y | x |
Querying the evaluation status of a rule | GET /v1/resource-manager/domains/{domain_id}/policy-states/evaluation-state | rms:policyStates:get |
| Y | x |
Querying the compliance results of a resource | GET /v1/resource-manager/domains/{domain_id}/resources/{resource_id}/policy-states | rms:policyStates:get |
| Y | x |
Querying all compliance results of resources under a user | GET /v1/resource-manager/domains/{domain_id}/policy-states | rms:policyStates:get |
| Y | x |
Querying all compliance results of resources evaluated by a rule | GET /v1/resource-manager/domains/{domain_id}/policy-assignments/{policy_assignment_id}/policy-states | rms:policyStates:get |
| Y | x |
Running a resource compliance evaluation | POST /v1/resource-manager/domains/{domain_id}/policy-assignments/{policy_assignment_id}/policy-states/run-evaluation | rms:policyStates:runEvaluation |
| Y | x |
Updating evaluation results | PUT /v1/resource-manager/domains/{domain_id}/policy-states | rms:policyStates:update |
| Y | x |