diff --git a/umn/source/_static/images/en-us_image_0000002121759436.png b/umn/source/_static/images/en-us_image_0000002121759436.png deleted file mode 100644 index ba1ef66..0000000 Binary files a/umn/source/_static/images/en-us_image_0000002121759436.png and /dev/null differ diff --git a/umn/source/_static/images/en-us_image_0000002156930225.png b/umn/source/_static/images/en-us_image_0000002156930225.png deleted file mode 100644 index ef66143..0000000 Binary files a/umn/source/_static/images/en-us_image_0000002156930225.png and /dev/null differ diff --git a/umn/source/_static/images/en-us_image_0000002157074637.png b/umn/source/_static/images/en-us_image_0000002157074637.png deleted file mode 100644 index 29c0d07..0000000 Binary files a/umn/source/_static/images/en-us_image_0000002157074637.png and /dev/null differ diff --git a/umn/source/_static/images/en-us_image_0000002166544344.png b/umn/source/_static/images/en-us_image_0000002166544344.png new file mode 100644 index 0000000..03e7a5f Binary files /dev/null and b/umn/source/_static/images/en-us_image_0000002166544344.png differ diff --git a/umn/source/_static/images/en-us_image_0000002166698096.png b/umn/source/_static/images/en-us_image_0000002166698096.png new file mode 100644 index 0000000..072a2d7 Binary files /dev/null and b/umn/source/_static/images/en-us_image_0000002166698096.png differ diff --git a/umn/source/_static/images/en-us_image_0000002166704124.png b/umn/source/_static/images/en-us_image_0000002166704124.png new file mode 100644 index 0000000..257c0fc Binary files /dev/null and b/umn/source/_static/images/en-us_image_0000002166704124.png differ diff --git a/umn/source/_static/images/en-us_image_0000002194220965.png b/umn/source/_static/images/en-us_image_0000002194220965.png deleted file mode 100644 index 565319d..0000000 Binary files a/umn/source/_static/images/en-us_image_0000002194220965.png and /dev/null differ diff --git a/umn/source/_static/images/en-us_image_0000002202025297.png b/umn/source/_static/images/en-us_image_0000002202025297.png new file mode 100644 index 0000000..9fa47b1 Binary files /dev/null and b/umn/source/_static/images/en-us_image_0000002202025297.png differ diff --git a/umn/source/auditing.rst b/umn/source/auditing.rst index cd77077..1e26527 100644 --- a/umn/source/auditing.rst +++ b/umn/source/auditing.rst @@ -27,7 +27,7 @@ Supported RFS Operations +------------------------+---------------+-------------------------------------------------------+ | deployStack | stack | Deploying a stack directly | +------------------------+---------------+-------------------------------------------------------+ - | deleteStack | stack | Deleting a stack starts | + | deleteStack | stack | Deleting a stack started | +------------------------+---------------+-------------------------------------------------------+ | deleteStackEnd | stack | Deleting a stack finished | +------------------------+---------------+-------------------------------------------------------+ diff --git a/umn/source/iam_agency.rst b/umn/source/iam_agency.rst index 82cbadf..dc9e35a 100644 --- a/umn/source/iam_agency.rst +++ b/umn/source/iam_agency.rst @@ -25,12 +25,14 @@ RFS uses an agency only in resource operation requests, such as creating a stack 3. Enter an agency name, - the \ **Agency Type**\ is set to \ **Cloud Service** + - the **Cloud Service** is set to **RFS**. - **Figure 2** Creating an agency + .. figure:: /_static/images/en-us_image_0000002202025297.png + :alt: **Figure 2** Create an agency - |image1| + **Figure 2** Create an agency .. caution:: @@ -58,7 +60,6 @@ You can determine the permissions to be granted to an agency. OpenTelekom cloud 6. Click **OK**. The agency is created. Now you can use it in \ :ref:`Configure the stack. ` - |image2|\ For more information about IAM Agencies, see: `Cloud Service Agency `__. + |image1|\ For more information about IAM Agencies, see: `Cloud Service Agency `__. -.. |image1| image:: /_static/images/en-us_image_0000002156930225.png -.. |image2| image:: /_static/images/en-us_image_0000001991770693.png +.. |image1| image:: /_static/images/en-us_image_0000001991770693.png diff --git a/umn/source/managing_stacks/deleting_a_stack.rst b/umn/source/managing_stacks/deleting_a_stack.rst index 03ee8ce..5b2fab1 100644 --- a/umn/source/managing_stacks/deleting_a_stack.rst +++ b/umn/source/managing_stacks/deleting_a_stack.rst @@ -66,15 +66,14 @@ If a stack is no longer needed, you can perform the following steps to delete it b. and confirm the deletion by entering **Delete** in the text box and click **OK**. - .. _en-us_topic_0000001991890809____d0e1485: - **Figure 6** Dialog box for deleting a stack + .. figure:: /_static/images/en-us_image_0000002166698096.png + :alt: **Figure 6** Dialog box for deleting a stack - |image2| + **Figure 6** Dialog box for deleting a stack .. warning:: Stacks cannot be restored after being deleted. Exercise caution when performing this operation. .. |image1| image:: /_static/images/en-us_image_0000002158817102.png -.. |image2| image:: /_static/images/en-us_image_0000002194220965.png diff --git a/umn/source/managing_templates/deleting_a_template.rst b/umn/source/managing_templates/deleting_a_template.rst index d36aeda..da921b8 100644 --- a/umn/source/managing_templates/deleting_a_template.rst +++ b/umn/source/managing_templates/deleting_a_template.rst @@ -47,11 +47,11 @@ If a template is no longer in use, RFS supports deleting it. You can choose to d #. In the dialog box displayed, click **Yes** as shown in :ref:`Figure Dialog box for deleting a template `. The template(s) and all versions will be deleted. - .. _en-us_topic_0000002082821521____d0e1006: - **Figure 5** Dialog box for deleting a template + .. figure:: /_static/images/en-us_image_0000002166704124.png + :alt: **Figure 5** Dialog box for deleting a template - |image2| + **Figure 5** Dialog box for deleting a template .. caution:: @@ -59,4 +59,3 @@ If a template is no longer in use, RFS supports deleting it. You can choose to d - If you just want to delete a template version, please go to \ :ref:`View the Template Details `\ . .. |image1| image:: /_static/images/en-us_image_0000002194186605.png -.. |image2| image:: /_static/images/en-us_image_0000002121759436.png diff --git a/umn/source/managing_templates/replicating_a_template.rst b/umn/source/managing_templates/replicating_a_template.rst index 116f9ab..72b0178 100644 --- a/umn/source/managing_templates/replicating_a_template.rst +++ b/umn/source/managing_templates/replicating_a_template.rst @@ -44,7 +44,11 @@ Replicating a Template #. A dialog box is displayed where you can specify the name, description and version description of the new template. - |image3| + + .. figure:: /_static/images/en-us_image_0000002166544344.png + :alt: **Figure 5** Dialog box for replicating a template + + **Figure 5** Dialog box for replicating a template .. note:: @@ -57,4 +61,3 @@ Replicating a Template .. |image1| image:: /_static/images/en-us_image_0000002194220969.png .. |image2| image:: /_static/images/en-us_image_0000002121776826.png -.. |image3| image:: /_static/images/en-us_image_0000002157074637.png diff --git a/umn/source/permission_management/custom_policies.rst b/umn/source/permission_management/custom_policies.rst index 678ee81..ee5f630 100644 --- a/umn/source/permission_management/custom_policies.rst +++ b/umn/source/permission_management/custom_policies.rst @@ -29,7 +29,7 @@ The following lists examples of custom policies for RFS. “Deny” permissions should be used together with “Allow” permissions. If “Deny” and “Allow” permissions are both assigned, the “Deny” permissions take precedence over the “Allow” permissions. - Assume that you want to grant the RF FullAccess permissions to users but do not want them to delete stacks. You can create a custom policy for denying stack deletion, and attach this policy together with the RF FullAccess policy to the users. As an explicit deny in any policy overrides any allows, the users can perform all operations on stacks except deleting them. The following shows an example policy for denying stack deletion. + Assume that you want to grant the **RF FullAccess** permissions to users but do not want them to delete stacks. You can create a custom policy for denying stack deletion, and attach this policy together with the **RF FullAccess** policy to the users. As an explicit deny in any policy overrides any allows, the users can perform all operations on stacks except deleting them. The following shows an example policy for denying stack deletion. .. code-block:: diff --git a/umn/source/service_overview/permission.rst b/umn/source/service_overview/permission.rst index 221eec8..b8c71b4 100644 --- a/umn/source/service_overview/permission.rst +++ b/umn/source/service_overview/permission.rst @@ -30,71 +30,67 @@ You can grant permissions by using roles and policies. .. table:: **Table 2** Common RFS operations supported by system-defined permissions - +----------------------------------+---------------+------------------------------------+-------------------+ - | Operation | RF FullAccess | RF DeployByExecutionPlanOperations | RF ReadOnlyAccess | - +==================================+===============+====================================+===================+ - | Creating a template | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Creating a template version | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Delete a template | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Delete a template version | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | List templates | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | List template versions | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Show template metadata | Y | x | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Show template version content | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Show template version metadata | Y | x | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Update template metadata | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Parse template variables | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Apply execution plan | Y | Y | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Create execution plan | Y | Y | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Delete execution plan | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Get execution plan | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Get execution plan metadata | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | List execution plans | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Create stack | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Delete stack | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Deploy stack | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Continue to deploy stack | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Continue to rollback stack | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Get stack metadata | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Get stack template | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | List stack events | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | List stack outputs | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | List stack resources | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | List stacks | Y | Y | Y | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Update stack | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Update stack deletion protection | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ - | Import stack resources | Y | x | x | - +----------------------------------+---------------+------------------------------------+-------------------+ + +--------------------------------+---------------+------------------------------------+-------------------+ + | Operation | RF FullAccess | RF DeployByExecutionPlanOperations | RF ReadOnlyAccess | + +================================+===============+====================================+===================+ + | Create a template | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Create a template version | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Delete a template | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Delete a template version | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | List templates | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | List template versions | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Show template metadata | Y | x | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Show template version content | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Show template version metadata | Y | x | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Update template metadata | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Parse template variables | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Apply execution plan | Y | Y | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Create execution plan | Y | Y | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Delete execution plan | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Get execution plan | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Get execution plan metadata | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | List execution plans | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Create stack | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Delete stack | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Deploy stack | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Continue to deploy stack | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Continue to rollback stack | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Get stack metadata | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Get stack template | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | List stack events | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | List stack outputs | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | List stack resources | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | List stacks | Y | Y | Y | + +--------------------------------+---------------+------------------------------------+-------------------+ + | Update stack | Y | x | x | + +--------------------------------+---------------+------------------------------------+-------------------+ If predefined permissions cannot meet your requirements, you can create custom policies. Custom policies allow you to perform fine-grained access control flexibly. For details about how to create a custom policy, see \ `Creating a Custom Policy `__\ . For details about RFS example custom policies, see \ :ref:`Custom Policies `\ . @@ -104,71 +100,67 @@ The following table lists fine-grained actions and dependencies for RFS. .. table:: **Table 3** RFS fine-grained actions - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | System-defined Permission | Description | Dependencies | Scenario | - +========================================+=======================================================+==============+===============================================+ - | rf:privateTemplate:create | Grant permissions to create a template | None | Creating a template | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:createVersion | Grant permissions to create a template version | None | Creating a template version | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:delete | Grant permissions to delete a template | None | Delete a template | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:deleteVersion | Grant permissions to delete a template version | None | Delete a template version | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:list | Grant permissions to list templates | None | List templates | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:listVersions | Grant permissions to list template versions | None | List template versions | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:showMetadata | Grant permissions to show template metadata | None | Show template metadata | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:showVersionContent | Grant permissions to show template version content | None | Show template version content | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:showVersionMetadata | Grant permissions to show template version metadata | None | Show template version metadata | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:privateTemplate:updateMetadata | Grant permissions to update template metadata | None | Update template metadata | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:template:parseTemplateVariables | Grant permissions to parse template variables | None | Parse template variables | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:applyExecutionPlan | Grant permissions to apply execution plan | None | Deploy a stack via applying an execution plan | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:createExecutionPlan | Grant permissions to create execution plan | None | Create execution plan | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:deleteExecutionPlan | Grant permissions to delete execution plan | None | Delete execution plan | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:getExecutionPlan | Grant permissions to get execution plan | None | Get execution plan | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:getExecutionPlanMetadata | Grant permissions to get execution plan metadata | None | Get execution plan metadata | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:listExecutionPlans | Grant permissions to list execution plans | None | List execution plans | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:createStack | Grant permissions to create stack | None | Create stack | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:deleteStack | Grant permissions to delete stack | None | Delete stack | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:deployStack | Grant permissions to deploy stack | None | Deploy stack directly | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:continueDeployStack | Grant permissions to continue to deploy stack | None | Continue to deploy stack | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:continueRollbackStack | Grant permissions to continue to rollback stack | None | Continue to rollback stack | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:getStackMetadata | Grant permissions to get stack metadata | None | Get stack metadata | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:getStackTemplate | Grant permissions to get stack template | None | Get stack template | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:listStackEvents | Grant permissions to list stack events | None | List stack events | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:listStackOutputs | Grant permissions to list stack outputs | None | List stack outputs | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:listStackResources | Grant permissions to list stack resources | None | List stack resources | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:listStacks | Grant permissions to list stacks | None | List stacks | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:updateStack | Grant permissions to update stack | None | Update stack | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:updateStackDeletionProtection | Grant permissions to update stack deletion protection | None | Update stack deletion protection | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ - | rf:stack:importResources | Grant permissions to import stack resources | None | Import stack resources | - +----------------------------------------+-------------------------------------------------------+--------------+-----------------------------------------------+ + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | System-defined Permission | Description | Dependencies | Scenario | + +========================================+=====================================================+==============+==============================================================================================================+ + | rf:privateTemplate:create | Grant permissions to create a template | None | Creating a template | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:createVersion | Grant permissions to create a template version | None | Creating a template version | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:delete | Grant permissions to delete a template | None | Delete a template | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:deleteVersion | Grant permissions to delete a template version | None | Delete a template version | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:list | Grant permissions to list templates | None | List templates | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:listVersions | Grant permissions to list template versions | None | List template versions | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:showMetadata | Grant permissions to show template metadata | None | Show template properties such as template ID and description | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:showVersionContent | Grant permissions to show template version content | None | Show template version content | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:showVersionMetadata | Grant permissions to show template version metadata | None | Show template version properties such as template ID, template name and version description | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:privateTemplate:updateMetadata | Grant permissions to update template metadata | None | Update template properties such as template description | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:template:parseTemplateVariables | Grant permissions to parse template variables | None | Parse template variables | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:applyExecutionPlan | Grant permissions to apply execution plan | None | Deploy a stack via applying an execution plan | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:createExecutionPlan | Grant permissions to create execution plan | None | Create execution plan | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:deleteExecutionPlan | Grant permissions to delete execution plan | None | Delete execution plan | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:getExecutionPlan | Grant permissions to get execution plan | None | Get execution plan which provides a preview of stack changes such as operations to be performed on resources | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:getExecutionPlanMetadata | Grant permissions to get execution plan metadata | None | Get execution plan properties such as stack id, execution plan id and description. | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:listExecutionPlans | Grant permissions to list execution plans | None | List execution plans | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:createStack | Grant permissions to create stack | None | Create stack | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:deleteStack | Grant permissions to delete stack | None | Delete stack | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:deployStack | Grant permissions to deploy stack | None | Deploy stack directly | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:continueDeployStack | Grant permissions to continue to deploy stack | None | Retry failed stack deployment | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:continueRollbackStack | Grant permissions to continue to rollback stack | None | Retry failed stack rollback | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:getStackMetadata | Grant permissions to get stack metadata | None | Get stack properties such as stack id, name and description | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:getStackTemplate | Grant permissions to get stack template | None | Get stack template | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:listStackEvents | Grant permissions to list stack events | None | List stack events | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:listStackOutputs | Grant permissions to list stack outputs | None | List stack outputs | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:listStackResources | Grant permissions to list stack resources | None | List stack resources | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:listStacks | Grant permissions to list stacks | None | List stacks | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ + | rf:stack:updateStack | Grant permissions to update stack | None | Update stack properties such as description, auto-rollback and deletion protection | + +----------------------------------------+-----------------------------------------------------+--------------+--------------------------------------------------------------------------------------------------------------+ Related Documents -----------------