Obtains role-based access control (RBAC) permissions.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer. OpenAPI Explorer dynamically generates the sample code of the operation for different SDKs.

Request parameters

Parameter Type Required Example Description
Action String Yes DescribeUserPermissions

The operation that you want to perform. Set the value to DescribeUserPermissions.

SubAccountUserId String Yes 27852573609480****

The ID of the RAM user or RAM role.

Response parameters

Parameter Type Example Description
RequestId String 5A7C9E37-C171-584F-9A99-869B48C4196D

The ID of the request.

Permissions Array of Permission

The permissions that are granted to an entity.

ParentId String 0

This parameter is required by the system. The return value is fixed to 0.

IsRamRole String false

The entity to which the permissions are granted. A value of true indicates that the permissions are granted to a RAM user. A value of false indicates that the permissions are granted to a RAM role.

ResourceType String cluster

This parameter is required by the system. The return value is fixed to cluster.

RoleType String custom

This parameter is required by the system. The return value is fixed to custom.

RoleName String istio-admin

The name of the permissions. Valid values:

  • istio-admin: the permissions of Alibaba Cloud Service Mesh (ASM) administrators.
  • istio-ops: the permissions of ASM restricted users.
  • istio-readonly: the read-only permissions.
ResourceId String c57b848115458460583a4260cb713****

The ID of the ASM instance.

Examples

Sample requests

http(s)://[Endpoint]/?Action=DescribeUserPermissions
&SubAccountUserId=27852573609480****
&<Common request parameters>

Sample responses

XML format 

HTTP/1.1 200 OK
Content-Type:application/xml

<DescribeUserPermissionsResponse>
    <RequestId>5A7C9E37-C171-584F-9A99-869B48C4196D</RequestId>
    <Permissions>
        <ParentId>0</ParentId>
        <IsRamRole>false</IsRamRole>
        <ResourceType>cluster</ResourceType>
        <RoleType>custom</RoleType>
        <RoleName>istio-admin</RoleName>
        <ResourceId>c57b848115458460583a4260cb713****</ResourceId>
    </Permissions>
</DescribeUserPermissionsResponse>

JSON format 

HTTP/1.1 200 OK
Content-Type:application/json

{
  "RequestId" : "5A7C9E37-C171-584F-9A99-869B48C4196D",
  "Permissions" : {
    "ParentId" : 0,
    "IsRamRole" : false,
    "ResourceType" : "cluster",
    "RoleType" : "custom",
    "RoleName" : "istio-admin",
    "ResourceId" : "c57b848115458460583a4260cb713****"
  }
}

Error codes

For a list of error codes, visit the API Error Center.