All Products
Search
Document Center

Alibaba Cloud Service Mesh:DescribeUserPermissions

Last Updated:Mar 05, 2024

Obtains role-based access control (RBAC) permissions.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

ParameterTypeRequiredDescriptionExample
SubAccountUserIdstringYes

The ID of a RAM user or RAM role.

27852573609480****

Response parameters

ParameterTypeDescriptionExample
object
RequestIdstring

The request ID.

5A7C9E37-C171-584F-9A99-869B48C4196D
Permissionsobject []

The permissions that are granted to an entity.

ParentIdstring

The value is fixed as 0.

0
IsRamRolestring

The entity to which the permissions are granted. A value of true indicates that the permissions are granted to a RAM user. A value of false indicates that the permissions are granted to a RAM role.

false
ResourceTypestring

The value is fixed as cluster.

cluster
RoleTypestring

The value is fixed as custom.

custom
RoleNamestring

The name of the permissions. Valid values:

  • istio-admin: the permissions of ASM administrators.
  • istio-ops: the permissions of ASM restricted users.
  • istio-readonly: the read-only permissions.
istio-admin
ResourceIdstring

The ID of the ASM instance.

c57b848115458460583a4260cb713****

Examples

Sample success responses

JSONformat

{
  "RequestId": "5A7C9E37-C171-584F-9A99-869B48C4196D",
  "Permissions": [
    {
      "ParentId": "0",
      "IsRamRole": "false",
      "ResourceType": "cluster",
      "RoleType": "custom",
      "RoleName": "istio-admin",
      "ResourceId": "c57b848115458460583a4260cb713****"
    }
  ]
}

Error codes

For a list of error codes, visit the Service error codes.