GrantUserPermissions - Alibaba Cloud Service Mesh - Alibaba Cloud Documentation Center

Grants permissions to a Resource Access Management (RAM) user.

Debugging

There is currently no authorization information disclosed in the API.

Parameter	Type	Required	Description	Example
SubAccountUserId	string	Yes	The ID of the RAM user or RAM role.	27852573609480****
Permissions	string	No	The permissions that are granted to an entity. The content is a string that consists of JSON arrays. You must specify all permissions that you want to grant to an entity. You can add or remove permissions by modifying the content. Field definition of the sample code: `IsCustom`: a parameter that is required by the system. Set the value to `true`. `Cluster`: the ID of the Service Mesh (ASM) instance. `RoleName`: the name of the permissions. Valid values: `istio-admin`, `istio-ops`, and `istio-readonly`. A value of istio-admin indicates the permissions of ASM administrators. A value of istio-ops indicates the permissions of ASM restricted users. A value of istio-readonly indicates the read-only permissions. `IsRamRole`: the entity to which you want to grant the permissions. To grant the permissions to a RAM role, set the value to `true`. Otherwise, set the value to `false`.	[{"IsCustom":true,"RoleName":"istio-ops","Cluster":"c57b848115458460583a4260cb713**","RoleType":"custom","IsRamRole":false},{"IsCustom":true,"RoleName":"istio-ops","Cluster":"c4ec191f4e12145c09286ea3e2b8f**","RoleType":"custom","IsRamRole":false}]
SubAccountUserIds	array	No	The IDs of RAM users or RAM roles. You can grant permissions to multiple users at a time.
	string	No	The ID of the RAM user or RAM role.	27852573609480****

Parameter	Type	Description	Example
	object
RequestId	string	The request ID.	5A7C9E37-C171-584F-9A99-869B48C4****

Sample success responses

JSONformat

{
  "RequestId": "5A7C9E37-C171-584F-9A99-869B48C4****"
}

For a list of error codes, visit the Service error codes.

Change time

Summary of changes

Operation

2023-08-21

The internal configuration of the API is changed, but the call is not affected

Change item	Change content
	The internal configuration of the API is changed, but the call is not affected.

2023-06-08

The request parameters of the API has changed

Change item	Change content
Input Parameters	The request parameters of the API has changed.
	Added Input Parameters: SubAccountUserIds