vpruthi/doc-exports
1
0
Fork 0
forked from docs/doc-exports
Code Pull Requests Activity
doc-exports/docs/iam/api-ref/iam_11_0016.html
Wei, Hongmin 80f18fd272 IAM API 2.6 Version 
Reviewed-by: Kabai, Zoltán Gábor <zoltan-gabor.kabai@t-systems.com>
Co-authored-by: Wei, Hongmin <weihongmin1@huawei.com>
Co-committed-by: Wei, Hongmin <weihongmin1@huawei.com>
2023-08-03 03:34:59 +00:00

567 lines
55 KiB
HTML
Raw Blame History

<a name="iam_11_0016"></a><a name="iam_11_0016"></a>
<h1 class="topictitle1">Creating a Custom Policy</h1>
<div id="body8662426"><div class="section" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_section158091053415"><h4 class="sectiontitle">Function</h4><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1780975164119">This API is provided for the administrator to create a custom policy.</p>
<p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p158104594118">The API can be called using both the global endpoint and region-specific endpoints.</p>
</div>
<div class="section" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_section681115516412"><h4 class="sectiontitle">URI</h4><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p188121512413">POST /v3.0/OS-ROLE/roles</p>
</div>
<div class="section" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_section1881313515410"><h4 class="sectiontitle">Request Parameters</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_HeaderParameter" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Parameters in the request header</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row198136574117"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p18159584119">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p17815451416">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.2.2.5.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p20816205194110">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.2.2.5.1.4"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1581617514419">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row28143515410"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p98175564115">Content-Type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p188181514118">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.2.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p6818105184113">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1819195114118">Fill <strong id="iam_11_0016__en-us_topic_0222393172_b1179492541115">application/json;charset=utf8</strong> in this field.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row581425184114"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1982035154112">X-Auth-Token</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p168206534115">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.2.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p582110524110">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.2.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p682116518418">Token with <strong id="iam_11_0016__b86981348132719">Security Administrator</strong> permissions.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_requestParameter" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Parameters in the request body</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row182217513417"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.3.2.5.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p148231953418">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.3.2.5.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p58238519413">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.3.2.5.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p282411534117">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.3.2.5.1.4"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p18251053416">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row9822155415"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p16825255416"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114Role">role</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.3.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p38261954418">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.3.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p15827458411">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.3.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p18827353410">Custom policy information.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114Role"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114Role"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114Role" frame="border" border="1" rules="all"><caption><b>Table 3 </b>role</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row88282511419"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.4.2.5.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1282905104120">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.4.2.5.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1783075134111">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.4.2.5.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p483025134113">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.4.2.5.1.4"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p68313534117">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row58282514110"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p8831125184116">display_name</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p183210518411">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p28333517418">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p118341356411">Display name of the custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1882895134119"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p128352584116">type</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p5835854415">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p188360515416">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p14837125184114">Display mode.</p>
<div class="note" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_note16838195184118"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul1083915534118"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li148397574111"><strong id="iam_11_0016__en-us_topic_0222393172_b762242312481">AX</strong>: Account level.</li><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li68401257419"><strong id="iam_11_0016__en-us_topic_0222393172_b638782419485">XA</strong>: Project level.</li><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li13840145144112">The display mode of a custom policy can only be <strong id="iam_11_0016__en-us_topic_0222393172_b1585914255481">AX</strong> or <strong id="iam_11_0016__en-us_topic_0222393172_b14859122524814">XA</strong>. A custom policy must be displayed at either of the two levels.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row128281656413"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p58411853411">description</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p118421152412">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p58426519414">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p16843175174115">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row138280524119"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1984419513410">description_cn</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p484445154117">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p148451952412">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1984618584118">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row9828055417"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p108463534117"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicy">policy</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.4.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1084725114110">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.4.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p484813518418">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.4.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p58497534112">Content of custom policy.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicy"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicy"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicy" frame="border" border="1" rules="all"><caption><b>Table 4 </b>role.policy</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1384910511419"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.5.2.5.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1385018518414">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.5.2.5.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1485115534118">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.5.2.5.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p68511584111">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.5.2.5.1.4"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1785217564114">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row20849195164117"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p385316516415">Version</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.5.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1985310512418">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p88544554111">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.5.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1385525104112">Policy version. When creating a custom policy, set this parameter to <strong id="iam_11_0016__en-us_topic_0222393172_b19561730174820">1.1</strong>.</p>
<div class="note" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_note2856185164111"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul38571058414"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li208578515412"><strong id="iam_11_0016__en-us_topic_0222393172_b1895673013488">1.0</strong>: System-defined role. Only a limited number of service-level roles are provided for authorization.</li><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li10858105184118"><strong id="iam_11_0016__en-us_topic_0222393172_b141721933134820">1.1</strong>: Policy. A policy defines the permissions required to perform operations on a specific cloud resource under certain conditions.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row15849658419"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1285935164115"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicyStatementArritem">Statement</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.5.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p17860355413">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.5.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p158602584110">Array of objects</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.5.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p28611051419">Statement of the policy. A policy can contain a maximum of eight statements.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicyStatementArritem"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicyStatementArritem"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicyStatementArritem" frame="border" border="1" rules="all"><caption><b>Table 5 </b>role.policy.Statement</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row17862754411"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.6.2.5.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p786355174113">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.6.2.5.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p086465164118">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.6.2.5.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p13865350411">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.6.2.5.1.4"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p13865853413">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row386215174114"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p28668511413">Action</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.6.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p4866135184110">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p128670514116">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.6.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p7868165194118">An action item is a specific operation permission on a resource.</p>
<div class="note" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_note386925184113"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul287020524111"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li587010524118">For a custom policy for agencies, this parameter should be set to <em id="iam_11_0016__i1531817344451">"Action": ["iam:agencies:assume"]</em>.</li></ul>
</div></div>
<p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p7871056415">Options:</p>
<ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul208711564117"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li78721153416">iam:agencies:assume</li></ul>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1586212511412"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p887218514116">Effect</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.6.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p158731594116">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1487411514110">String</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.6.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1987417519410">Effect of the permission. The value can be <strong id="iam_11_0016__en-us_topic_0222393172_b1490107163115">Allow</strong> or <strong id="iam_11_0016__en-us_topic_0222393172_b3490127183110">Deny</strong>. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.</p>
<p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p8875155174119">Options:</p>
<ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul9875259415"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li08768524113">Allow</li><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li3876165104116">Deny</li></ul>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row7862125184117"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p3877105114118"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicyStatementArritemResource">Resource</a></p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.6.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p187815514410">No</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.6.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p187811514417">Object</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.6.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1287912594115">Resources to be managed. After an account establishes multiple trust relationships between itself and your account, you can authorize IAM users in different user groups to manage resources of the delegating party. Each IAM user can only switch to the delegated agencies. For example:</p>
<pre class="screen" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_screen13880145184119">"Resource": {"uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"]}</pre>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicyStatementArritemResource"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicyStatementArritemResource"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_request_Rq114RolePolicyStatementArritemResource" frame="border" border="1" rules="all"><caption><b>Table 6 </b>role.policy.Statement.Resource</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row2880205134120"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.7.2.5.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p16882125134115">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="10%" id="mcps1.3.3.7.2.5.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p288211511413">Mandatory</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.7.2.5.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1988319574116">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.3.7.2.5.1.4"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p4884559412">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row3880165124110"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.7.2.5.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p158847524119">uri</p>
</td>
<td class="cellrowborder" valign="top" width="10%" headers="mcps1.3.3.7.2.5.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p5885155144113">Yes</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.7.2.5.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p28852515412">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.3.7.2.5.1.4 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1788618524119">URI of a delegated resource, which can contain a maximum of 128 characters. Format: /iam/agencies/<em id="iam_11_0016__en-us_topic_0222393172_i29541283506">delegation ID</em>. For example:</p>
<pre class="screen" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_screen1088619524115">"uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"]</pre>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_section1288815514110"><h4 class="sectiontitle">Response Parameters</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_responseParameter" frame="border" border="1" rules="all"><caption><b>Table 7 </b>Parameters in the response body</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row288945204117"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.2.2.4.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p38908518417">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.2.2.4.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p2890115134116">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.2.2.4.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p789113584113">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row5889157419"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.2.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p108921754416"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114Role">role</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.2.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1989318574115">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.2.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p28940524113">Custom policy information.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114Role"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114Role"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114Role" frame="border" border="1" rules="all"><caption><b>Table 8 </b>role</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row189519554114"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.3.2.4.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p489715184119">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.3.2.4.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p589712511414">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.3.2.4.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p08981658414">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row18951458413"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1689813514117">catalog</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1889913517411">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p2090012512417">Service catalog.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row11895154417"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p179001856410">display_name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p159014594113">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p790118564114">Display name of the custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row08953544113"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p790275114120">description</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p9903185114118">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p29032052410">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1389518574118"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1690411515419"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RoleLinks">links</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p139058514416">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p6905195134116">Resource link of the custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row589519517416"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p290613574116"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicy">policy</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p8906165174115">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1590716544115">Content of custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row28958520419"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p4908125144116">description_cn</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1890816534117">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p179091052418">Description of the custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1389525134114"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1291018514414">domain_id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p89103517413">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p8911454412">Domain ID.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row138967516415"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p791119544110">type</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p19912165114110">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p2912454418">Display mode.</p>
<div class="note" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_note1391411534110"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul99156584115"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li69154524110"><strong id="iam_11_0016__en-us_topic_0222393172_b14406402539">AX</strong>: Account level.</li><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li791511574115"><strong id="iam_11_0016__en-us_topic_0222393172_b548344110535">XA</strong>: Project level.</li><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li19161553416">The display mode of a custom policy can only be <strong id="iam_11_0016__en-us_topic_0222393172_b108551411536">AX</strong> or <strong id="iam_11_0016__en-us_topic_0222393172_b085584115531">XA</strong>. A custom policy must be displayed at either of the two levels.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row68969515410"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1091711513412">id</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1791710518418">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1691875154114">Policy ID.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row6896356411"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p15918456415">name</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p7919355411">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p12920855419">Name of the custom policy.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row189613511411"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p492011517417">updated_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p59212052413">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p139221858411">Time when the custom policy was last updated.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1889685164119"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1292316514415">created_time</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1192310517419">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1892415164113">Time when the custom policy was created.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row98961451417"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1492514515411">references</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.3.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1192545124111">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.3.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1992616504116">Number of references.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RoleLinks"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RoleLinks"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RoleLinks" frame="border" border="1" rules="all"><caption><b>Table 9 </b>role.links</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1292616518416"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.4.2.4.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1192717511415">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.4.2.4.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p392816510413">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.4.2.4.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p159293514411">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1692610512415"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.4.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p179296514417">self</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.4.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p14930557412">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.4.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1393014513410">Resource link.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicy"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicy"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicy" frame="border" border="1" rules="all"><caption><b>Table 10 </b>role.policy</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row793118554120"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.5.2.4.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p99321544120">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.5.2.4.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p493320514413">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.5.2.4.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p159335514110">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row79311755417"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p8934259416">Version</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p199349515418">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.5.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p293512511416">Policy version.</p>
<div class="note" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_note12936165134112"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul19937751419"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li8938956415"><strong id="iam_11_0016__en-us_topic_0222393172_b495084917532">1.0</strong>: System-defined role. Only a limited number of service-level roles are provided for authorization.</li><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li6938135134110"><strong id="iam_11_0016__en-us_topic_0222393172_b14806195214539">1.1</strong>: Policy. A policy defines the permissions required to perform operations on a specific cloud resource under certain conditions.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1393116515419"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p2939850418"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicyStatementArritem">Statement</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.5.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p29403515410">Array of objects</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.5.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p169411053412">Statement of the policy. A policy can contain a maximum of eight statements.</p>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicyStatementArritem"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicyStatementArritem"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicyStatementArritem" frame="border" border="1" rules="all"><caption><b>Table 11 </b>role.policy.Statement</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row149417554112"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.6.2.4.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p14943195184113">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.6.2.4.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p16943959418">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.6.2.4.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1594485164113">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row69421251410"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1721818613418">Action</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p2219146114117">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.6.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p132191464418">An action item is a specific operation permission on a resource.</p>
<div class="note" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_note421912615415"><span class="notetitle"> NOTE: </span><div class="notebody"><ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul162191164416"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li192191660414">For a custom policy for agencies, this parameter should be set to <em id="iam_11_0016__i5687104014456">"Action": ["iam:agencies:assume"]</em>.</li></ul>
</div></div>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row994211519418"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p7220865416">Effect</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p102201269419">String</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.6.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p02205618415">Effect of the permission. The value can be <strong id="iam_11_0016__en-us_topic_0222393172_b298982516017">Allow</strong> or <strong id="iam_11_0016__en-us_topic_0222393172_b189901225306">Deny</strong>. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.</p>
<p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p32211610416">Options:</p>
<ul id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_ul1222106174115"><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li622196174114">Allow</li><li id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_li1522112624115">Deny</li></ul>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1494213584115"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1322212616417"><a href="#iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicyStatementArritemResource">Resource</a></p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.6.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1422211654120">Object</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.6.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p8222669419">Resources to be managed. After an account establishes multiple trust relationships between itself and your account, you can authorize IAM users in different user groups to manage resources of the delegating party. Each IAM user can only switch to the delegated agencies. For example:</p>
<pre class="screen" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_screen1022246154120">"Resource": {"uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"]}</pre>
</td>
</tr>
</tbody>
</table>
</div>
<div class="tablenoborder"><a name="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicyStatementArritemResource"></a><a name="en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicyStatementArritemResource"></a><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_response_Rs114RolePolicyStatementArritemResource" frame="border" border="1" rules="all"><caption><b>Table 12 </b>role.policy.Statement.Resource</caption><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row1095114519418"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.7.2.4.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p20223196204112">Parameter</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.4.7.2.4.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p922415634114">Type</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="60%" id="mcps1.3.4.7.2.4.1.3"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p11224464417">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row16951105114119"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.7.2.4.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p2224065412">uri</p>
</td>
<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.4.7.2.4.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1822418654115">Array of strings</p>
</td>
<td class="cellrowborder" valign="top" width="60%" headers="mcps1.3.4.7.2.4.1.3 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1722420610412">URI of a delegated resource, which can contain a maximum of 128 characters. Format: /iam/agencies/<em id="iam_11_0016__en-us_topic_0222393172_i3761192212543">delegation ID</em>. For example:</p>
<pre class="screen" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_screen0225060419">"uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"]</pre>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_section102257617417"><h4 class="sectiontitle">Example Request</h4><pre class="screen" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_screen99871513398">POST https://<em id="iam_11_0016__i563814316249"></em>iam.eu-de.otc.t-systems.com/v3.0/OS-ROLE/roles</pre>
<pre class="screen" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_screen112256664112">{
"role": {
"display_name": "IAMAgencyPolicy",
"type": "AX",
"description": "IAMDescription",
"description_cn": "Policy description",
"policy": {
"Version": "1.1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"iam:agencies:assume"
],
"Resource": {
"uri": [
"/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"
]
}
}
]
}
}
}</pre>
</div>
<div class="section" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_section1323118674111"><h4 class="sectiontitle">Example Response</h4><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p323136104113"><strong id="iam_11_0016__en-us_topic_0222393172_b13149112819549">Status code: 201</strong></p>
<p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p152316618412">The request is successful.</p>
<pre class="screen" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_screen423216624113">{
"role": {
"catalog": "CUSTOMED",
"display_name": "IAMAgencyPolicy",
"description": "IAMDescription",
"links": {
"self": "https://<em id="iam_11_0016__i190111111414"></em>iam.eu-de.otc.t-systems.com/v3/roles/f67224e84dc849ab954ce29fb4f47f8e"
},
"policy": {
"Version": "1.1",
"Statement": [
{
"Action": [
"iam:agencies:assume"
],
"Resource": {
"uri": [
"/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"
]
},
"Effect": "Allow"
}
]
},
"description_cn": "Policy description",
"domain_id": "d78cbac186b744899480f25bd02...",
"type": "AX",
"id": "f67224e84dc849ab954ce29fb4f47f8e",
"name": "custom_d78cbac186b744899480f25bd022f468_0"
}
}</pre>
</div>
<div class="section" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_section112401615413"><h4 class="sectiontitle">Status Codes</h4>
<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_table289" frame="border" border="1" rules="all"><thead align="left"><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row29746534115"><th align="left" class="cellrowborder" valign="top" width="15%" id="mcps1.3.7.2.1.3.1.1"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p924010634115">Status Code</p>
</th>
<th align="left" class="cellrowborder" valign="top" width="85%" id="mcps1.3.7.2.1.3.1.2"><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p192401661410">Description</p>
</th>
</tr>
</thead>
<tbody><tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row209741750412"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p02417619417">201</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p724117664119">The request is successful.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row19974951417"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1424114618410">400</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p72411615419">The server failed to process the request.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row897420519417"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p10242166184118">401</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p1524236134115">Authentication failed.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row997416517415"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p12421669411">403</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p2242368411">Access denied.</p>
</td>
</tr>
<tr id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_row597485194117"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p22431864415">500</p>
</td>
<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p724318674114">Internal server error.</p>
</td>
</tr>
</tbody>
</table>
</div>
</div>
<div class="section" id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_section224312619410"><h4 class="sectiontitle">Error Codes</h4><p id="iam_11_0016__en-us_topic_0222393172_en-us_topic_0222037565_p92437654113">None</p>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="iam_02_0010.html">Custom Policy Management</a></div>
</div>
</div>
View Git Blame Copy Permalink