All Products
Search
Document Center

WUYING Workspace:DescribePolicyGroups

Last Updated:Apr 03, 2024

Queries the information about one or more policies.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

  • Operation: the value that you can use in the Action element to specify the operation on a resource.
  • Access level: the access level of each operation. The levels are read, write, and list.
  • Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
    • The required resource types are displayed in bold characters.
    • If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
  • Condition Key: the condition key that is defined by the cloud service.
  • Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
OperationAccess levelResource typeCondition keyAssociated operation
ecd:DescribePolicyGroupsLIST
  • All Resources
    *
    none
none

Request parameters

ParameterTypeRequiredDescriptionExample
RegionIdstringYes

The region ID. You can call the DescribeRegions operation to query the most recent region list.

cn-hangzhou
MaxResultsintegerNo

The number of entries per page.

  • Valid values: 1 to 100
  • Default value: 10
10
NextTokenstringNo

The pagination token that is used in the next request to retrieve a new page of results. You do not need to specify this parameter for the first request. You must specify the token that is obtained from the previous query as the value of NextToken.

caeba0bbb2be03f84eb48b699f0a4883
PolicyGroupIdarrayNo

The policy IDs. You can specify one or more policy IDs.

stringNo

The policy ID.

system-all-enabled-policy
ScopestringNo

The effective scope of the policy. Valid values:

  • GLOBAL: The policy takes effect globally.
  • IP: The policy takes effect based on the IP address.
  • ALL: The policy takes effect without limits.

Default value: GLOBAL.

ALL

Response parameters

ParameterTypeDescriptionExample
object

The response parameters.

NextTokenstring

A pagination token. It can be used in the next request to retrieve a new page of results. If NextToken is empty, no next page exists.

caeba0bbb2be03f84eb48b699f0a****
RequestIdstring

The request ID.

473469C7-AA6F-4DC5-B3DB-A3DC0DE3****
DescribePolicyGroupsobject []

The details of the policies.

PolicyStatusstring

The policy status.

Valid values:

  • AVAILABLE
  • CREATING
AVAILABLE
Html5Accessstring

Indicates whether the access policy on HTML5 clients is allowed.

Valid values:

  • off (default)
  • on
off
WatermarkTypestring

The watermark type.

Valid values:

  • HostName,EndUserId: The watermark is displayed in the following format: Rightmost 15 characters of the cloud desktop ID,Username.
  • EndUserId: The username is displayed.
  • EndUserId,HostName: The watermark is displayed in the following format: Username,Rightmost 15 characters of the cloud desktop ID.
  • HostName: The rightmost 15 characters of the cloud desktop ID are displayed.
EndUserId
PreemptLoginstring

Indicates whether user preemption is allowed. The value is fixed to off, which indicates that user preemption is not allowed.

off
WatermarkCustomTextstring

This parameter is unavailable for public use.

test
Clipboardstring

The permissions on the clipboard.

Valid values:

  • read: One-way transfer is allowed.
  • readwrite: Two-way transfer is allowed.
  • off: Two-way transfer is not allowed.
readwrite
DomainListstring

Indicates whether the access control for domain names is enabled. The domain names can contain wildcard characters (*). Multiple domain names are separated by commas (,). Valid values:

  • off
  • on
off
PolicyGroupIdstring

The policy ID.

pg-gx2x1dhsmthe9****
PrinterRedirectionstring

Indicates whether the printer redirection feature is enabled.

Valid values:

  • off
  • on
on
WatermarkTransparencystring

The watermark transparency.

Valid values:

  • LIGHT
  • DARK
  • MIDDLE
LIGHT
Html5FileTransferstring

The file transfer policy for HTML5 clients.

Valid values:

  • all: Files can be uploaded and downloaded between your local computer and HTML5 clients.
  • download: Files on HTML5 clients can be downloaded to your local computer.
  • upload: Files on your local computer can be uploaded to HTML5 clients.
  • off (default): File transfer between HTML5 clients and your computer is disabled.
off
UsbRedirectstring

Indicates whether the USB redirection feature is enabled.

Valid values:

  • off
  • on
on
PolicyGroupTypestring

The policy type.

Valid values:

  • SYSTEM
  • CUSTOM
SYSTEM
Watermarkstring

Indicates whether the watermarking feature is enabled.

Valid values:

  • off
  • on
on
VisualQualitystring

The image display quality.

Valid values:

  • high: high-definition (HD)
  • low: fluent
  • medium (default): adaptive
  • lossless: no quality loss
medium
EdsCountinteger

The number of cloud desktops that are associated with the policy.
This parameter is returned only for custom policies.

1
Namestring

The policy name.

testPolicyGroupName
LocalDrivestring

The permissions on local disk mapping.

Valid values:

  • read: read-only
  • readwrite: read and write
  • off: no permissions
readwrite
AuthorizeSecurityPolicyRulesobject []

The security group rules.

Typestring

The direction of the security group rule.

Valid values:

  • outflow: outbound
  • inflow: inbound
inflow
Policystring

The authorization of the security group rule.

Valid values:

  • drop: denies all access requests.
  • accept: accepts all access requests.
accept
Descriptionstring

The description of the security group rule.

test
PortRangestring

The port range of the security group rule.

22/22
IpProtocolstring

The protocol type of the security group rule.

Valid values:

  • tcp: Transmission Control Protocol (TCP)
  • udp: User Datagram Protocol (UDP)
  • all: all protocols
  • gre: Generic Routing Encapsulation (GRE)
  • icmp: Internet Control Message Protocol (ICMP) for IPv4
tcp
Prioritystring

The priority of the security group rule. A smaller value indicates a higher priority.

1
CidrIpstring

The object to which the security group rule applies. The value is an IPv4 CIDR block.

47.100.XX.XX/16
AuthorizeAccessPolicyRulesobject []

The client CIDR blocks in a whitelist.

Descriptionstring

The remarks on the CIDR block that is allowed to access the client.

test
CidrIpstring

The CIDR block that is allowed to access the client. The value is an IPv4 CIDR block.

47.100.XX.XX/16
ClientTypesobject []

The logon methods.

Statusstring

Indicates whether a specific type of client is allowed to connect to the cloud desktop.

Valid values:

  • OFF
  • ON
ON
ClientTypestring

The client type.

Valid values:

  • html5: web client
  • linux: WUYING hardware terminal
  • android: Android client
  • windows: Windows client
  • ios: iOS client
  • macos: macOS client
windows
PreemptLoginUsersarray

The names of the users that are allowed to connect to the cloud desktop to which another user is logged on.

string

The name of the user that is allowed to connect to the cloud desktop to which another user is logged on.

Alice
GpuAccelerationstring

Indicates whether the image quality feature is enabled for Graphics cloud desktops. If you have high requirements for desktop performance and user experience, we recommend that you enable this feature. For example, you can enable this feature in professional graphic design scenarios.

Valid values:

  • off
  • on
off
UsbSupplyRedirectRuleobject []

The USB redirection rule.

VendorIdstring

The vendor ID (VID). For more information, see Valid USB VIDs.

04**
ProductIdstring

The product ID.

08**
Descriptionstring

The rule description.

Test
UsbRedirectTypelong

Indicates whether USB redirection is allowed.

Valid values:

  • 1: allowed
  • 2: not allowed
1
DeviceClassstring

The device class. This parameter is required when usbRuleType is set to 1. For more information, see Defined Class Codes.

0Eh
DeviceSubclassstring

The subclass of the device. This parameter is required when usbRuleType is set to 1. For more information, see Defined Class Codes.

xxh
UsbRuleTypelong

The type of the USB redirection rule.

Valid values:

  • 1: by device class
  • 2: by device vendor
1
DomainResolveRuleTypestring

Indicates whether the switch for domain name resolution is turned on.

Valid values:

  • off
  • on
on
DomainResolveRuleobject []

The rule of domain name resolution.

Domainstring

The domain name.

*.com
Policystring

Indicates whether the domain name resolution is allowed. Valid values:

  • allow
  • block
allow
Descriptionstring

The rule description.

Test
NetRedirectRuleobject []

The network redirection rule.

Note This parameter is in invitational preview and not available to the public.
Domainstring

The rule content.

*.com
RuleTypestring

The rule type.

Valid values:

  • prc: process
  • domain: domain name
domain
Policystring

Indicates whether the rule is allowed.

Valid values:

  • allow
  • block
allow
Recordingstring

Indicates whether the screen recording feature is enabled.

Valid values:

  • ALLTIME: All operations that are performed by end users on cloud desktops are recorded. The recording starts immediately when end users connect to cloud desktops and ends after the end users disconnect from the cloud desktops.
  • PERIOD: The operations that are performed by end users on cloud desktops during a specified period of time are recorded. You must specify the start time and the end time of the recording.
  • OFF: The screen recording feature is disabled.
OFF
RecordingStartTimestring

The time when the screen recording was started. The value is in the HH:MM:SS format. The value takes effect only when Recording is set to PERIOD.

08:00:00
RecordingEndTimestring

The time when the screen recording ended. The value is in the HH:MM:SS format. The value takes effect only when Recording is set to PERIOD.

08:59:00
RecordingFpslong

The frame rate of screen recording. Unit: fps. Valid values:

  • 2
  • 5
  • 10
  • 15
5
RecordingExpireslong

The period in which the screen recording audit is valid. Valid values: 15 to 180. Unit: day.

15
CameraRedirectstring

Indicates whether the webcam redirection feature is enabled.

Valid values:

  • off
  • on (default)
on
NetRedirectstring

Indicates whether the network redirection feature is enabled. Valid values:

  • on
  • off

Default value: off.

Note This parameter is in invitational preview and not available to the public.
off
AppContentProtectionstring

Indicates whether the anti-screenshot feature is enabled. Valid values:

  • on
  • off

Default value: off.

off
RecordContentstring

Indicates whether the custom screen recording feature is enabled. Valid values:

  • on
  • off

Default value: off.

off
RecordContentExpireslong

The period when the custom screen recording can be retained before expiration. Default value: 30 days.

30
RemoteCoordinatestring

The permissions on the keyboard and mouse to control the cloud desktop during remote assistance. Valid values:

  • fullControl: The keyboard and mouse are fully controlled.
  • optionalControl: By default, you do not have the permissions on the keyboard or mouse to control the cloud desktop during remote assistance. You can apply for the permissions.
  • disableControl: The keyboard and mouse are not controlled.
fullControl
RecordingDurationinteger

This parameter is used with the Recording parameter to generate a screen recording file after you specify the duration of screen recording.

10
Scopestring

The effective scope of the policy. Valid values:

  • GLOBAL: The policy takes effect globally.
  • IP: The policy takes effect based on IP addresses.
GLOBAL
ScopeValuearray

This parameter is required when Scope is set to IP. This parameter takes effect when Scope is set to IP.

string

The CIDR block on which the policy takes effect.

47.100.XX.XX/24
RecordingAudiostring

Indicates whether to record audio or video data that is generated on the cloud desktop during screen recording. Valid values:

  • on: records audio and video data.
  • off: records only video data.
on
InternetCommunicationProtocolstring

The protocol that is used for network communication. Valid values:

  • TCP: Only TCP can be used.
  • BOTH: TCP or UDP can be used. The system switches between TCP and UDP based on the actual network condition.

Default value: TCP.

BOTH
VideoRedirectstring

Indicates whether the multimedia redirection feature is enabled. Valid values: on and off.

off
WatermarkTransparencyValueinteger

The watermark transparency. A greater value indicates that the watermark is less transparent. Valid values: 10 to 100.

10
WatermarkColorinteger

The font color in red, green, and blue (RGB) of the watermark. Valid values: 0 to 16777215.

0
WatermarkFontSizeinteger

The font size of the watermark. Valid values: 10 to 20.

10
WatermarkFontStylestring

The font style of the watermark. Valid values:

  • plain
  • bold
plain
WatermarkDegreedouble

The slope of the watermark. Valid values: -10 to -30.

-10
WatermarkRowAmountinteger

The number of watermark rows. This parameter is now invalid.

5
EndUserApplyAdminCoordinatestring

Indicates whether the switch for end users to ask for assistance from the administrator is turned on. Valid values: on and off.

on
EndUserGroupCoordinatestring

Indicates whether the switch for stream collaboration between end users is turned on. Valid values: on and off.

on
CpuProtectedModestring

Indicates whether the switch for CPU protection mode is turned on. Valid values: on and off.

on
CpuRateLimitinteger

The overall CPU utilization. Valid values: 70 to 90.

70
CpuSampleDurationinteger

The overall CPU sampling duration. Valid values: 10 to 60.

10
CpuSingleRateLimitinteger

The usage of a single CPU. Valid values: 70 to 100.

70
CpuDownGradeDurationinteger

The CPU underclocking duration. Valid values: 30 to 120.

30
CpuProcessorsarray

The process whitelist that is not restricted by the CPU usage limit.

string

The process name.

chrome.exe
MemoryProtectedModestring

Indicates whether the switch for memory protection mode is turned on. Valid values: on and off.

on
MemoryRateLimitinteger

The overall memory usage. Valid values: 70 to 90.

70
MemorySampleDurationinteger

The overall sampling duration of memory statistics. Valid values: 30 to 60.

30
MemorySingleRateLimitinteger

The memory usage of a single process. Valid values: 30 to 60.

30
MemoryDownGradeDurationinteger

The duration required for underclocking memory by a single process. Valid values: 30 to 120.

30
MemoryProcessorsarray

The whitelist of processes that are not restricted by the memory usage limit.

string

The process name.

notepad.exe
WatermarkSecuritystring

Indicates whether the security priority for invisible watermarks is enabled. Valid values: on and off.

on
WatermarkAntiCamstring

Indicates whether the anti-screen photo feature is enabled for invisible watermarks. Valid values: on and off.

off
WatermarkPowerstring

The invisible watermark enhancement feature. Valid values: low, medium, and high.

medium
RecordingUserNotifystring

Indicates whether the client notification of screen recording is enabled. Valid values: on and off.

off
RecordingUserNotifyMessagestring

The notification content of screen recording. By default, this parameter is left empty.

Your desktop is being recorded
AdminAccessstring

Indicates whether users have the administrator permissions after they connect to cloud desktops.

Note This parameter is in invitational preview and not available to the public.
deny

Examples

Sample success responses

JSONformat

{
  "NextToken": "caeba0bbb2be03f84eb48b699f0a****",
  "RequestId": "473469C7-AA6F-4DC5-B3DB-A3DC0DE3****",
  "DescribePolicyGroups": [
    {
      "PolicyStatus": "AVAILABLE",
      "Html5Access": "off",
      "WatermarkType": "EndUserId",
      "PreemptLogin": "off",
      "WatermarkCustomText": "test",
      "Clipboard": "readwrite",
      "DomainList": "off",
      "PolicyGroupId": "pg-gx2x1dhsmthe9****",
      "PrinterRedirection": "on",
      "WatermarkTransparency": "LIGHT",
      "Html5FileTransfer": "off",
      "UsbRedirect": "on",
      "PolicyGroupType": "SYSTEM",
      "Watermark": "on",
      "VisualQuality": "medium",
      "EdsCount": 1,
      "Name": "testPolicyGroupName",
      "LocalDrive": "readwrite",
      "AuthorizeSecurityPolicyRules": [
        {
          "Type": "inflow",
          "Policy": "accept",
          "Description": "test",
          "PortRange": "22/22",
          "IpProtocol": "tcp",
          "Priority": "1",
          "CidrIp": "47.100.XX.XX/16"
        }
      ],
      "AuthorizeAccessPolicyRules": [
        {
          "Description": "test",
          "CidrIp": "47.100.XX.XX/16"
        }
      ],
      "ClientTypes": [
        {
          "Status": "ON",
          "ClientType": "windows"
        }
      ],
      "PreemptLoginUsers": [
        "Alice"
      ],
      "GpuAcceleration": "off",
      "UsbSupplyRedirectRule": [
        {
          "VendorId": "04**",
          "ProductId": "08**",
          "Description": "Test\n",
          "UsbRedirectType": 1,
          "DeviceClass": "0Eh",
          "DeviceSubclass": "xxh",
          "UsbRuleType": 1
        }
      ],
      "DomainResolveRuleType": "on",
      "DomainResolveRule": [
        {
          "Domain": "*.com",
          "Policy": "allow",
          "Description": "Test\n"
        }
      ],
      "NetRedirectRule": [
        {
          "Domain": "*.com",
          "RuleType": "domain",
          "Policy": "allow"
        }
      ],
      "Recording": "OFF",
      "RecordingStartTime": "08:00:00",
      "RecordingEndTime": "08:59:00",
      "RecordingFps": 5,
      "RecordingExpires": 15,
      "CameraRedirect": "on",
      "NetRedirect": "off",
      "AppContentProtection": "off",
      "RecordContent": "off",
      "RecordContentExpires": 30,
      "RemoteCoordinate": "fullControl",
      "RecordingDuration": 10,
      "Scope": "GLOBAL",
      "ScopeValue": [
        "47.100.XX.XX/24"
      ],
      "RecordingAudio": "on",
      "InternetCommunicationProtocol": "BOTH",
      "VideoRedirect": "off",
      "WatermarkTransparencyValue": 10,
      "WatermarkColor": 0,
      "WatermarkFontSize": 10,
      "WatermarkFontStyle": "plain",
      "WatermarkDegree": -10,
      "WatermarkRowAmount": 5,
      "EndUserApplyAdminCoordinate": "on",
      "EndUserGroupCoordinate": "on",
      "CpuProtectedMode": "on",
      "CpuRateLimit": 70,
      "CpuSampleDuration": 10,
      "CpuSingleRateLimit": 70,
      "CpuDownGradeDuration": 30,
      "CpuProcessors": [
        "chrome.exe"
      ],
      "MemoryProtectedMode": "on",
      "MemoryRateLimit": 70,
      "MemorySampleDuration": 30,
      "MemorySingleRateLimit": 30,
      "MemoryDownGradeDuration": 30,
      "MemoryProcessors": [
        "notepad.exe"
      ],
      "WatermarkSecurity": "on",
      "WatermarkAntiCam": "off",
      "WatermarkPower": "medium",
      "RecordingUserNotify": "off",
      "RecordingUserNotifyMessage": "Your desktop is being recorded\n",
      "AdminAccess": "deny"
    }
  ]
}

Error codes

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
2024-01-26The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.
2024-01-05The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.
2023-09-20The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.
2023-04-24The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.
2023-03-14The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.
2022-11-04The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.
2022-10-08The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.
2022-01-11The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.
2021-11-30The response structure of the API has changedsee changesets
Change itemChange content
Output ParametersThe response structure of the API has changed.