doc-exports/docs/iam/api-ref/iam_02_0014.html
Wei, Hongmin 80f18fd272 IAM API 2.6 Version
Reviewed-by: Kabai, Zoltán Gábor <zoltan-gabor.kabai@t-systems.com>
Co-authored-by: Wei, Hongmin <weihongmin1@huawei.com>
Co-committed-by: Wei, Hongmin <weihongmin1@huawei.com>
2023-08-03 03:34:59 +00:00

665 lines
67 KiB
HTML

<a name="iam_02_0014"></a><a name="iam_02_0014"></a>
<h1 class="topictitle1">Modifying a Custom Policy for Cloud Services</h1>
<div id="body8662426"><div class="section" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_section78418500317"><h4 class="sectiontitle">Function</h4><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p984120501337">This API is provided for the administrator to modify a custom policy for cloud services.</p>
<p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p168411508313">The API can be called using both the global endpoint and region-specific endpoints.</p>
</div>
<div class="section" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_section1684115503320"><h4 class="sectiontitle">URI</h4><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p6841550834">PATCH /v3.0/OS-ROLE/roles/{role_id}</p>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_table1784285012318" frame="border" border="1" rules="all"><caption><b>Table 1 </b>URI parameters</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row2841450836"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.3.2.5.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p98421501934">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.2.3.2.5.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p5842145014320">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.3.2.5.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1884213504312">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.2.3.2.5.1.4"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p16842150436">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1084112505313"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p188427501438">role_id</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.2.3.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1184245016311">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p28429501339">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.2.3.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p2084215502313">Custom policy ID. For details about how to obtain a custom policy ID, see <a href="iam_02_0011.html">Custom Policy ID</a>.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_section148421850934"><h4 class="sectiontitle">Request Parameters</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_HeaderParameter" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters in the request header</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row584375014316"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1884312501231">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p684316508318">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.2.2.5.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p78431509317">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.2.2.5.1.4"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1284313501832">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1284355014317"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p15844185018316">Content-Type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p128441450037">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.2.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p58441150238">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1584485012313">Fill <strong id="iam_02_0014__en-us_topic_0222393173_b178081578415">application/json;charset=utf8</strong> in this field.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row168431350439"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1084414501339">X-Auth-Token</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p2084411501311">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.2.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p28448503317">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p9844145020319">Token with <strong id="iam_02_0014__b13928810114617">Security Administrator</strong> permissions.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_requestParameter" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Parameters in the request body</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row10419125010310"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.2.5.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p164191350936">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.4.2.5.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1541915011310">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.2.5.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p17420750234">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.4.2.5.1.4"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p184202050436">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row54192501136"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p3420950439"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113Role">role</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.4.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p10420155016319">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p9420145011313">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.4.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p104201509310">Custom policy information.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113Role"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113Role"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113Role" frame="border" border="1" rules="all"><caption><b>Table 4 </b>role</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row8420135017315"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.5.2.5.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p184215501632">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.5.2.5.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p84211050536">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.5.2.5.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1542115509312">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.5.2.5.1.4"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p134211250133">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row20421145016319"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p114211050530">display_name</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.5.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1742211503316">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p114227501534">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p8422165012319">Display name of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1642120507313"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p042217507317">type</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.5.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1042212501134">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p17422115012318">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p144229504313">Display mode.</p>
<div class="note" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_note18422750538"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul14233509320"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li1942315500320"><strong id="iam_02_0014__en-us_topic_0222393173_b156371823105516">AX</strong>: Account level.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li1142315506314"><strong id="iam_02_0014__en-us_topic_0222393173_b1445914244552">XA</strong>: Project level.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li124233501832">The display mode of a custom policy can only be <strong id="iam_02_0014__en-us_topic_0222393173_b1358082525519">AX</strong> or <strong id="iam_02_0014__en-us_topic_0222393173_b1358013257554">XA</strong>. A custom policy must be displayed at either of the two levels.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row842135018312"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p74238501335">description</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.5.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p84231050439">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p11423115019311">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1842395011319">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row142105010312"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p14231750530">description_cn</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.5.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p342414505316">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p94243501131">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p542417501432">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row342155017318"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p142419501037"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicy">policy</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.5.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p144246501932">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.5.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p642418502033">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.5.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p442416505310">Content of custom policy.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicy"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicy"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicy" frame="border" border="1" rules="all"><caption><b>Table 5 </b>role.policy</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1942418501331"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.6.2.5.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p64251350330">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.6.2.5.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p642518501933">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.6.2.5.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1425250434">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.6.2.5.1.4"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p64256507310">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row194251950530"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.6.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p24254501635">Version</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.6.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p24251350437">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.6.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p542611507311">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.6.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p3427950739">Policy version. When creating a custom policy, set this parameter to <strong id="iam_02_0014__en-us_topic_0222393173_b217218303559">1.1</strong>.</p>
<div class="note" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_note124277504318"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul15427850639"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li4427145017312"><strong id="iam_02_0014__en-us_topic_0222393173_b16322631145510">1.0</strong>: System-defined role. Only a limited number of service-level roles are provided for authorization.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li0427550936"><strong id="iam_02_0014__en-us_topic_0222393173_b1496753545513">1.1</strong>: Policy. A policy defines the permissions required to perform operations on a specific cloud resource under certain conditions.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row94251650038"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.6.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p104274504313"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritem">Statement</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.6.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p6427850033">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.6.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1442711505311">Array of objects</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.6.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p174282501536">Statement of the policy. A policy can contain a maximum of eight statements.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritem"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritem"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritem" frame="border" border="1" rules="all"><caption><b>Table 6 </b>role.policy.Statement</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row194281150539"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.7.2.5.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p142865019318">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.7.2.5.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p6428175016317">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.7.2.5.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p5429750336">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.7.2.5.1.4"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1342945017311">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row24281450534"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.7.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p5429165016320">Action</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.7.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p5429165016314">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.7.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1543016509316">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.7.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p9430175011313">Specific operation permission on a resource. A maximum of 100 actions are allowed.</p>
<div class="note" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_note1743113501237"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul1743145019314"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li174311550135">The value format is <em id="iam_02_0014__en-us_topic_0222393173_i1499215305441">Service name</em>:<em id="iam_02_0014__en-us_topic_0222393173_i18992113074413">Resource type</em>:<em id="iam_02_0014__en-us_topic_0222393173_i2099233013449">Operation</em>, for example, <strong id="iam_02_0014__en-us_topic_0222393173_b1992113015447">vpc:ports:create</strong>.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li1843135019314"><em id="iam_02_0014__en-us_topic_0222393173_i355113816441">Service name</em>: indicates the product name, such as <strong id="iam_02_0014__en-us_topic_0222393173_b9561238194414">ecs</strong>, <strong id="iam_02_0014__en-us_topic_0222393173_b1656143874416">evs</strong>, or <strong id="iam_02_0014__en-us_topic_0222393173_b10561386442">vpc</strong>. Only lowercase letters are allowed. Resource types and operations are not case-sensitive. You can use an asterisk (*) to represent all operations.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row18428185014319"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.7.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p184316501337">Effect</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.7.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p24311150832">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.7.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1443111501317">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.7.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p54316501734">Effect of the permission. The value can be <strong id="iam_02_0014__en-us_topic_0222393173_b31223198102">Allow</strong> or <strong id="iam_02_0014__en-us_topic_0222393173_b1912231912109">Deny</strong>. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.</p>
<p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p7431145016317">Options:</p>
<ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul1843113505315"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li164322501831">Allow</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li2043216501539">Deny</li></ul>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row174281850633"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.7.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p943218502313"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritemCondition">Condition</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.7.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1943220501933">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.7.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p174321501311">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.7.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p124321350131">Conditions for the permission to take effect. A maximum of 10 conditions are allowed.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row54281350835"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.7.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p164335501635">Resource</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.7.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p194331450436">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.7.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p8433195017317">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.7.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p343318501535">Cloud resource. The array can contain a maximum of 10 resource strings, and each string cannot exceed 128 characters.</p>
<div class="note" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_note04331650133"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul2433185011318"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li14331250431">Format: <em id="iam_02_0014__en-us_topic_0222393173_i11238844195515">::::</em>. For example, <strong id="iam_02_0014__en-us_topic_0222393173_b423804495515">obs:</strong><strong id="iam_02_0014__en-us_topic_0222393173_b12239164495520"><em id="iam_02_0014__i123944485515">:</em></strong><strong id="iam_02_0014__en-us_topic_0222393173_b15240644105513">:bucket:*</strong>. Asterisks are allowed.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li843314505313">The region segment can be <strong id="iam_02_0014__en-us_topic_0222393173_b0406133845415">*</strong> or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.</li></ul>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritemCondition"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritemCondition"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritemCondition" frame="border" border="1" rules="all"><caption><b>Table 7 </b>role.policy.Statement.Condition</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row104349507310"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.8.2.5.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p184346502315">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.8.2.5.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p194343502314">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.8.2.5.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p143420505319">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.8.2.5.1.4"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p74341502313">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row143419500314"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.8.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p843518505312"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritemConditionAdditionalproperties">&lt;operator&gt;</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.8.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p54354506320">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.8.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p134358500315">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.8.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p2435165016317">Operator, for example, Bool and StringEquals.</p>
<ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul6435150832"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li17435250730">The parameter type is custom object.</li></ul>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritemConditionAdditionalproperties"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritemConditionAdditionalproperties"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_request_Rq113RolePolicyStatementArritemConditionAdditionalproperties" frame="border" border="1" rules="all"><caption><b>Table 8 </b>role.policy.Statement.Condition.&lt;operator&gt;</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row2435185016312"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.9.2.5.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1343610508314">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.9.2.5.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p124362501635">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.9.2.5.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1243665017316">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.9.2.5.1.4"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p2436105018320">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1943520502038"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.9.2.5.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p34362504315">&lt;attribute&gt;</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.9.2.5.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p143713501139">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.9.2.5.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p12437850733">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.9.2.5.1.4 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p3437135014312">Condition key. The condition key must correspond to the specified operator. A maximum of 10 condition keys are allowed.</p>
<ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul1243710501634"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li8437105017313">The parameter type is custom character string array.</li></ul>
</td>
</tr>
</tbody>
</table>
</div>
<div class="section" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_section144371504310"><h4 class="sectiontitle">Response Parameters</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_responseParameter" frame="border" border="1" rules="all"><caption><b>Table 9 </b>Parameters in the response body</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row143745014318"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.2.2.4.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p19438250233">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.2.2.4.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1643845010311">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.10.2.2.4.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p54386509318">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row8437205015316"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.2.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1343810501837"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113Role">role</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.2.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p143825016319">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.2.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p124387501631">Custom policy information.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113Role"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113Role"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113Role" frame="border" border="1" rules="all"><caption><b>Table 10 </b>role</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1843945017320"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.3.2.4.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p04391550834">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.3.2.4.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p17439550230">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.10.3.2.4.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1744011501632">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row18439950930"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p194401750339">catalog</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p6440750435">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p184401850534">Service catalog.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row443920501535"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p244019501939">display_name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p19440195015316">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p9440195015314">Display name of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row14392502313"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1944017501931">description</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p134401950337">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1944185017311">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row843917507317"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p104415501038"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RoleLinks">links</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p34411050736">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p104413501732">Resource link of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row34391950839"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p154411350538"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicy">policy</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1744113501132">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p4441125018313">Content of custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row643916501739"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p84411950232">description_cn</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p444115012319">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p04420503318">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row164399503311"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p174424501230">domain_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p144285014318">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1244219503313">Domain ID.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1439125020318"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p204424503310">type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p7442350837">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p744213503315">Display mode.</p>
<div class="note" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_note44421950236"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul17442950338"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li344316505313"><strong id="iam_02_0014__en-us_topic_0222393173_b15112411569">AX</strong>: Account level.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li14431650632"><strong id="iam_02_0014__en-us_topic_0222393173_b7588104135613">XA</strong>: Project level.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li64431850734">The display mode of a custom policy can only be <strong id="iam_02_0014__en-us_topic_0222393173_b1112819565618">AX</strong> or <strong id="iam_02_0014__en-us_topic_0222393173_b1812905145617">XA</strong>. A custom policy must be displayed at either of the two levels.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1543911505317"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p15443650734">id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p14435501234">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1544310501637">Policy ID.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row14392501539"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p044317501239">name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p34436504315">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1144395013316">Name of the custom policy.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1343913501731"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1844315017312">updated_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p544412502039">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p6444150633">Time when the custom policy was last updated.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row143965020314"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p104444502316">created_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p844435010312">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p12444650731">Time when the custom policy was created.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row144394501339"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p144418506316">references</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.3.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p244445017315">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.3.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p14444550534">Number of references.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RoleLinks"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RoleLinks"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RoleLinks" frame="border" border="1" rules="all"><caption><b>Table 11 </b>role.links</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row164462506318"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.4.2.4.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p12447205016312">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.4.2.4.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p844715507319">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.10.4.2.4.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p14471350531">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row5446150835"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.4.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p94479501734">self</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.4.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p444714506315">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.4.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p444714501430">Resource link.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicy"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicy"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicy" frame="border" border="1" rules="all"><caption><b>Table 12 </b>role.policy</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row7447350431"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.5.2.4.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p144489501535">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.5.2.4.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p185481350239">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.10.5.2.4.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p654915011317">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row74472507311"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.5.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p4549250838">Version</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.5.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1254935016317">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.5.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p105499501235">Policy version.</p>
<div class="note" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_note4549195020314"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul554985019310"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li9549350131"><strong id="iam_02_0014__en-us_topic_0222393173_b1354818156564">1.0</strong>: System-defined role. Only a limited number of service-level roles are provided for authorization.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li175491550032"><strong id="iam_02_0014__en-us_topic_0222393173_b16331717105612">1.1</strong>: Policy. A policy defines the permissions required to perform operations on a specific cloud resource under certain conditions.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row154471250936"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.5.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p75491508315"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritem">Statement</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.5.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p4549750335">Array of objects</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.5.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p05491850538">Statement of the policy. A policy can contain a maximum of eight statements.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritem"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritem"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritem" frame="border" border="1" rules="all"><caption><b>Table 13 </b>role.policy.Statement</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row3449350332"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.6.2.4.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p18549145017314">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.6.2.4.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p454914501634">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.10.6.2.4.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p054911501435">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row194491508316"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.6.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p954917501539">Action</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.6.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1554915503312">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.6.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p14549105016317">Specific operation permission on a resource. A maximum of 100 actions are allowed.</p>
<div class="note" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_note5549175017313"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul145498501238"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li185495507312">The value format is <em id="iam_02_0014__en-us_topic_0222393173_i141050115553">Service name</em>:<em id="iam_02_0014__en-us_topic_0222393173_i13106311205514">Resource type</em>:<em id="iam_02_0014__en-us_topic_0222393173_i110711115558">Operation</em>, for example, <strong id="iam_02_0014__en-us_topic_0222393173_b1010881175515">vpc:ports:create</strong>.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li65491650232"><em id="iam_02_0014__en-us_topic_0222393173_i12371331173316">Service name</em>: indicates the product name, such as <strong id="iam_02_0014__en-us_topic_0222393173_b63813118335">ecs</strong>, <strong id="iam_02_0014__en-us_topic_0222393173_b9387314338">evs</strong>, or <strong id="iam_02_0014__en-us_topic_0222393173_b1381031183318">vpc</strong>. Only lowercase letters are allowed. Resource types and operations are not case-sensitive. You can use an asterisk (*) to represent all operations.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row64493508320"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.6.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p155491550638">Effect</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.6.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p185491950239">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.6.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p185496501232">Effect of the permission. The value can be <strong id="iam_02_0014__en-us_topic_0222393173_b1269242183316">Allow</strong> or <strong id="iam_02_0014__en-us_topic_0222393173_b369218233312">Deny</strong>. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.</p>
<p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p95497501137">Options:</p>
<ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul6549145012312"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li12549105016316">Allow</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li175492501936">Deny</li></ul>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row54491150333"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.6.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p155491501034"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritemCondition">Condition</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.6.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1554919501438">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.6.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p554912508319">Conditions for the permission to take effect. A maximum of 10 conditions are allowed.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row134491507314"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.6.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p85492050234">Resource</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.6.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p115495507312">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.6.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p13549650433">Cloud resource. The array can contain a maximum of 10 resource strings, and each string cannot exceed 128 characters.</p>
<div class="note" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_note16549185017311"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul354965015318"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li135501501134">Format: <em id="iam_02_0014__en-us_topic_0222393173_i869872065610">::::</em>. For example, <strong id="iam_02_0014__en-us_topic_0222393173_b116991220185615">obs:</strong><strong id="iam_02_0014__en-us_topic_0222393173_b1269913206565"><em id="iam_02_0014__i15699102055618">:</em></strong><strong id="iam_02_0014__en-us_topic_0222393173_b147001220165617">:bucket:*</strong>. Asterisks are allowed.</li><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li1555085015312">The region segment can be <strong id="iam_02_0014__en-us_topic_0222393173_b787114019555">*</strong> or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.</li></ul>
</div></div>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritemCondition"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritemCondition"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritemCondition" frame="border" border="1" rules="all"><caption><b>Table 14 </b>role.policy.Statement.Condition</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1245212501538"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.7.2.4.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p05502501031">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.7.2.4.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p7550150733">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.10.7.2.4.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p175501350637">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row545245014314"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.7.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p755016502314"><a href="#iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritemConditionOperator">operator</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.7.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p8550650833">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.7.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p15501150138">Operator, for example, Bool and StringEquals.</p>
<ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul155012506313"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li055075011313">The parameter type is custom object.</li></ul>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritemConditionOperator"></a><a name="en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritemConditionOperator"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_response_Rs113RolePolicyStatementArritemConditionOperator" frame="border" border="1" rules="all"><caption><b>Table 15 </b>role.policy.Statement.Condition.operator</caption><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row645311504317"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.8.2.4.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p7550185014320">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.10.8.2.4.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p15502504315">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.10.8.2.4.1.3"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p25501750736">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1445315504312"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.8.2.4.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p4550135020311">attribute</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.10.8.2.4.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p455013505314">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.10.8.2.4.1.3 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p4550115010313">Condition key. The condition key must correspond to the specified operator. A maximum of 10 condition keys are allowed.</p>
<ul id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_ul115501501335"><li id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_li25501450438">The parameter type is custom character string array.</li></ul>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_section796795012310"><h4 class="sectiontitle">Example Request</h4><pre class="screen" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_screen1460923216402">PATCH https://<em id="iam_02_0014__i563814316249"></em>iam.eu-de.otc.t-systems.com/v3.0/OS-ROLE/roles/{role_id}</pre>
<pre class="screen" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_screen69675502030">{
"role": {
"display_name": "IAMCloudServicePolicy",
"type": "AX",
"description": "IAMDescription",
"description_cn": "Policy description",
"policy": {
"Version": "1.1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"obs:bucket:GetBucketAcl"
],
"Condition": {
"StringStartWith": {
"g:ProjectName": [
"eu-de"
]
}
},
"Resource": [
"obs:*:*:bucket:*"
]
}
]
}
}
}</pre>
</div>
<div class="section" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_section1496720501316"><h4 class="sectiontitle">Example Response</h4><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p119671750235"><strong id="iam_02_0014__en-us_topic_0222393173_b1974918264562">Status code: 200</strong></p>
<p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p69674501537">The request is successful.</p>
<pre class="screen" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_screen1996855018311">{
"role": {
"catalog": "CUSTOMED",
"display_name": "IAMCloudServicePolicy",
"description": "IAMDescription",
"links": {
"self": "https://<em id="iam_02_0014__i033712813262"></em>iam.eu-de.otc.t-systems.com/v3/roles/93879fd90f1046f69e6e0b31c94d2615"
},
"policy": {
"Version": "1.1",
"Statement": [
{
"Action": [
"obs:bucket:GetBucketAcl"
],
"Resource": [
"obs:*:*:bucket:*"
],
"Effect": "Allow",
"Condition": {
"StringStartWith": {
"g:ProjectName": [
"eu-de"
]
}
}
}
]
},
"description_cn": "Policy description",
"domain_id": "d78cbac186b744899480f25bd0...",
"type": "AX",
"id": "93879fd90f1046f69e6e0b31c94d2615",
"name": "custom_d78cbac186b744899480f25bd022f468_1"
}
}</pre>
</div>
<div class="section" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_section1896895013319"><h4 class="sectiontitle">Status Codes</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_table286" frame="border" border="1" rules="all"><thead align="left"><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row178771750135"><th align="left" class="cellrowborder" valign="top" width="15%" id="mcps1.3.13.2.1.3.1.1"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p109688502314">Status Code</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="85%" id="mcps1.3.13.2.1.3.1.2"><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p09681950732">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row1887735015320"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.13.2.1.3.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p29681350735">200</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.13.2.1.3.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p169684501938">The request is successful.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row487712501739"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.13.2.1.3.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p2968175018312">400</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.13.2.1.3.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p4968155017316">The server failed to process the request.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row287717501310"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.13.2.1.3.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p196835014315">401</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.13.2.1.3.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p17968155019320">Authentication failed.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row387718500312"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.13.2.1.3.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1196810501032">403</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.13.2.1.3.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p9968105015311">Access denied.</p>
</td>
</tr>
<tr id="iam_02_0014__row15716192310263"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.13.2.1.3.1.1 "><p id="iam_02_0014__afdb561456cde471196b97d32e9fabc07">404</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.13.2.1.3.1.2 "><p id="iam_02_0014__a40a9daaa05214097afbecd31933fb2c4">The requested resource cannot be found.</p>
</td>
</tr>
<tr id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_row4877850831"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.13.2.1.3.1.1 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p996835014318">500</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.13.2.1.3.1.2 "><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p129681450937">Internal server error.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_section159681506316"><h4 class="sectiontitle">Error Codes</h4><p id="iam_02_0014__en-us_topic_0222393173_en-us_topic_0222037504_p1896885010310">None</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="iam_02_0010.html">Custom Policy Management</a></div>
</div>
</div>