Querying Custom Policy Details¶
Function¶
This API is provided for the administrator to query custom policy details.
The API can be called using both the global endpoint and region-specific endpoints.
URI¶
GET /v3.0/OS-ROLE/roles/{role_id}
Parameter | Mandatory | Type | Description |
---|---|---|---|
role_id | Yes | String | Custom policy ID. For details about how to obtain a custom policy ID, see Custom Policy ID. |
Request Parameters¶
Parameter | Mandatory | Type | Description |
---|---|---|---|
Content-Type | Yes | String | Fill application/json;charset=utf8 in this field. |
X-Auth-Token | Yes | String | Token with Security Administrator permissions. |
Response Parameters¶
Parameter | Type | Description |
---|---|---|
domain_id | String | Domain ID. |
references | Integer | Number of references. |
updated_time | String | Time when the custom policy was last updated. |
created_time | String | Time when the custom policy was created. |
description_cn | String | Description of the custom policy. |
catalog | String | Service catalog. |
name | String | Name of the custom policy. |
description | String | Description of the custom policy. |
Object | Resource link of the custom policy. | |
id | String | Policy ID. |
display_name | String | Display name of the custom policy. |
type | String | Display mode. Note
|
Object | Content of custom policy. |
Parameter | Type | Description |
---|---|---|
self | String | Resource link. |
Parameter | Type | Description |
---|---|---|
Version | String | Policy version. Note
|
Array of objects | Statement of the policy. A policy can contain a maximum of eight statements. |
Parameter | Type | Description |
---|---|---|
Action | Array of strings | Specific operation permission on a resource. A maximum of 100 actions are allowed. Note
|
Effect | String | Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements. Options:
|
Object | Conditions for the permission to take effect. A maximum of 10 conditions are allowed. | |
Resource | Array of strings | Cloud resource. The array can contain a maximum of 10 resource strings, and each string cannot exceed 128 characters. Note
|
Parameter | Type | Description |
---|---|---|
Object | Operator, for example, Bool and StringEquals.
|
Parameter | Type | Description |
---|---|---|
attribute | Array of strings | Condition key. The condition key must correspond to the specified operator. A maximum of 10 condition keys are allowed.
|
Example Request¶
GET https:///v3.0/OS-ROLE/roles/{role_id}
Example Response¶
Status code: 200
The request is successful.
{
"role": {
"domain_id": "d78cbac186b744899480f25bd02...",
"references": 0,
"description_cn": "Policy description",
"catalog": "CUSTOMED",
"name": "custom_d78cbac186b744899480f25bd022f468_11",
"description": "IAMDescription",
"links": {
"self": "https:///v3/roles/a24a71dcc41f4da989c2a1c900b52d1a"
},
"id": "a24a71dcc41f4da989c2a1c900b52d1a",
"display_name": "IAMCloudServicePolicy",
"type": "AX",
"policy": {
"Version": "1.1",
"Statement": [
{
"Condition": {
"StringStartWith": {
"g:ProjectName": [
""
]
}
},
"Action": [
"obs:bucket:GetBucketAcl"
],
"Resource": [
"obs:*:*:bucket:*"
],
"Effect": "Allow"
}
]
}
}
}
Status Codes¶
Status Code | Description |
---|---|
200 | The request is successful. |
400 | The server failed to process the request. |
401 | Authentication failed. |
403 | Access denied. |
500 | Internal server error. |
Error Codes¶
None