Oracle Cloud Infrastructure - Dokumentation

Details zum Organisationsmanagement

In diesem Thema werden Details zum Schreiben von Policys beschrieben, die den Zugriff auf Organisationsmanagement kontrollieren.

Ressourcentypen

  • organizations-family
  • organizations-link
  • organizations-recipient-invitation
  • organizations-sender-invitation
  • organizations-invitation
  • organizations-domain
  • organizations-domain-governance
  • organizations-entity
  • organizations-tenancy
  • organizations-order
  • organizations-subscription
  • organizations-subscription-mapping
  • organizations-assigned-subscription
  • organizations-subscription-region
  • organizations-governance-rules
  • organizations-enforced-governance-rules

Unterstützte Variablen

Die Organisationsverwaltung unterstützt alle allgemeinen Variablen (siehe Allgemeine Variablen für Alle Anforderungen) sowie weitere hier aufgeführte Variablen:

Erforderliche Variablen (vom Service für jede Anforderung bereitgestellt):

Variable Variablentyp Kommentare
target.resource.kind Zeichenfolge Der Name der Ressourcenart der primären Ressource für die Anforderung.

Automatische Variablen (vom SDK für jede Anforderung bereitgestellt):

Variable Variablentyp Kommentare
target.tenant.id Entity (OCID) Die OCID der Zielmandanten-ID.

Details für Kombinationen aus Verb + Ressourcentyp

In den folgenden Tabellen werden die Berechtigungen und API-Vorgänge angezeigt, die von jedem Verb abgedeckt werden. Die Zugriffsebene ist kumulativ: inspect > read > use > manage. Beispiel: Eine Gruppe, die eine Ressource verwenden kann, kann diese Ressource auch prüfen und lesen. Ein Pluszeichen (+) in einer Tabellenzelle gibt einen inkrementellen Zugriff im Vergleich zur direkt darüber liegenden Zelle an, während "keine zusätzlichen" keinen inkrementellen Zugriff angibt.

organizations-family
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_LINK_INSPECT

ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT

ORGANIZATIONS_SENDER_INVITATION_INSPECT

ORGANIZATIONS_DOMAIN_INSPECT

ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT

ORGANIZATIONS_TENANCY_INSPECT

ORGANIZATIONS_SUBSCRIPTION_INSPECT

ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT

ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT

ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT

GOVERNANCE_RULE_INSPECT

ORGANIZATIONS_ENTITY_INSPECT

ORGANIZATIONS_TENANCY_INSPECT

 ListLinks


                                            ListRecipientInvitations
                                        


                                            ListSenderInvitations
                                        


                                            ListDomains
                                        


                                            ListDomainGovernances
                                        


                                            ListOrganizationTenancies
                                        


                                            ListSubscriptions
                                        


                                            ListSubscriptionMappings
                                        


                                            ListAssignedSubscriptions
                                            ListAvailableRegions
                                        


                                            ListGovernanceRules
                                        


                                            ListOrganizations
                                        

 kein Wert
READ PRÜFEN + ORGANIZATIONS_LINK_READ

ORGANIZATIONS_RECIPIENT_INVITATION_READ

ORGANIZATIONS_SENDER_INVITATION_READ

ORGANIZATIONS_DOMAIN_READ

ORGANIZATIONS_DOMAIN_GOVERNANCE_READ

ORGANIZATIONS_ENTITY_READ

ORGANIZATIONS_TENANCY_READ

ORGANIZATIONS_SUBSCRIPTION_READ

ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ

ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ

GOVERNANCE_RULE_READ

 PRÜFEN + GetLink


                                            GetRecipientInvitation
                                        


                                            GetSenderInvitation
                                        


                                            GetDomain
                                        


                                            GetDomainGovernance
                                        


                                            GetOrganizationTenancy
                                        


                                            GetSubscriptionMapping
                                        


                                            GetAssignedSubscription
                                        


                                            GetGovernanceRule
                                        


                                            ListTenancyAttachments
                                        


                                            GetTenancyAttachment
                                        

 kein Wert
USE LESEN + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE


ORGANIZATIONS_DOMAIN_UPDATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE

ORGANIZATIONS_ENTITY_UPDATE

ORGANIZATIONS_SENDER_INVITATION_UPDATE

GOVERNANCE_RULE_UPDATE

GOVERNANCE_RULE_RETRY

 LESEN + AcceptRecipientInvitation


                                            IgnoreRecipientInvitation
                                        


                                            CancelSenderInvitation
                                        


                                            UpdateSenderInvitation
                                        


                                            UpdateDomain
                                        


                                            UpdateDomainGovernance
                                        


                                            UpdateOrganization
                                        

GetGovernanceRule


                                            DeleteInclusionCriterion
                                        


                                            RetryGovernanceRule
                                        


                                            RetryTenancyAttachment
                                        

 kein Wert
MANAGE USE + ORGANIZATIONS_LINK_PARENT_DELETE

ORGANIZATIONS_LINK_CHILD_DELETE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

ORGANIZATIONS_SENDER_INVITATION_CREATE

ORGANIZATIONS_DOMAIN_CREATE

ORGANIZATIONS_DOMAIN_DELETE

ORGANIZATIONS_ORDER_ACTIVATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE

ORGANIZATIONS_ENTITY_UPDATE

ORGANIZATIONS_TENANCY_CREATE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE

ORGANIZATIONS_TENANCY_DELETE

ORGANIZATIONS_TENANCY_RESTORE

GOVERNANCE_RULE_CREATE

GOVERNANCE_RULE_DELETE

 USE + DeleteLink


                                            CreateSenderInvitation
                                        


                                            CreateDomain
                                        


                                            DeleteDomain
                                        


                                            ActivateOrder
                                        


                                            CreateDomainGovernance
                                        


                                            DeleteDomainGovernance
                                        


                                            UpdateOrganization
                                        


                                            CreateChildTenancy
                                        


                                            DeleteSubscriptionMapping
                                        


                                            DeleteOrganizationTenancy
                                        


                                            RestoreOrganizationTenancy
                                        


                                            CreateSubscriptionMapping
                                        


                                            CreateGovernanceRule
                                        


                                            DeleteGovernanceRule
                                        

 kein Wert
organizations-recipient-invitation
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT ListRecipientInvitations kein Wert
READ PRÜFEN + ORGANIZATIONS_RECIPIENT_INVITATION_READ PRÜFEN + GetRecipientInvitation kein Wert
USE, MANAGE LESEN + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE LESEN + AcceptRecipientInvitation


                                            IgnoreRecipientInvitation
                                        


                                            UpdateRecipientInvitation
                                        

 kein Wert
organizations-sender-invitation
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_SENDER_INVITATION_INSPECT ListRecipientInvitations kein Wert
READ PRÜFEN + ORGANIZATIONS_SENDER_INVITATION_READ PRÜFEN + GetSenderInvitation kein Wert
USE LESEN + ORGANIZATIONS_SENDER_INVITATION_UPDATE LESEN + UpdateSenderInvitation


                                            CancelSenderInvitation
                                        

 kein Wert
MANAGE USE + ORGANIZATIONS_SENDER_INVITATION_CREATE USE + CreateSenderInvitation kein Wert
organizations-invitation
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT

ORGANIZATIONS_SENDER_INVITATION_INSPECT

 ListRecipientInvitations


                                            ListSenderInvitations
                                        

 kein Wert
READ PRÜFEN + ORGANIZATIONS_RECIPIENT_INVITATION_READ

ORGANIZATIONS_SENDER_INVITATION_READ

 PRÜFEN + GetRecipientInvitation


                                            GetSenderInvitation
                                        

 kein Wert
USE LESEN + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE

ORGANIZATIONS_SENDER_INVITATION_UPDATE

 LESEN + AcceptRecipientInvitation


                                            UpdateRecipientInvitation
                                        


                                            UpdateSenderInvitation
                                        


                                            CancelSenderInvitation
                                        

 kein Wert
MANAGE USE + ORGANIZATIONS_SENDER_INVITATION_CREATE USE + CreateSenderInvitation kein Wert
organizations-domain
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_DOMAIN_INSPECT ListDomains kein Wert
READ PRÜFEN + ORGANIZATIONS_DOMAIN_READ PRÜFEN + GetDomain kein Wert
USE LESEN + ORGANIZATIONS_DOMAIN_UPDATE LESEN + UpdateDomain kein Wert
MANAGE USE + ORGANIZATIONS_DOMAIN_CREATE

ORGANIZATIONS_DOMAIN_DELETE

 USE + CreateDomain


                                            DeleteDomain
                                        

 kein Wert
organizations-domain-governance
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT ListDomainGovernances kein Wert
READ PRÜFEN + ORGANIZATIONS_DOMAIN_GOVERNANCE_READ PRÜFEN + GetDomainGovernance kein Wert
USE LESEN + ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE LESEN + UpdateDomainGovernance kein Wert
MANAGE USE + ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE

 USE + CreateDomainGovernance


                                            DeleteDomainGovernance
                                        

 kein Wert
organizations-entity
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_ENTITY_INSPECT ListOrganizations kein Wert
READ PRÜFEN + ORGANIZATIONS_ENTITY_READ PRÜFEN + GetOrganization kein Wert
USE LESEN + ORGANIZATIONS_ENTITY_UPDATE LESEN + UpdateOrganization kein Wert
MANAGE - - kein Wert
organizations-tenancy
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_TENANCY_INSPECT ListOrganizationTenancies kein Wert
READ, USE PRÜFEN + ORGANIZATIONS_TENANCY_READ PRÜFEN + GetOrganizationTenancy kein Wert
MANAGE USE + ORGANIZATIONS_TENANCY_CREATE

ORGANIZATIONS_TENANCY_DELETE

ORGANIZATIONS_TENANCY_RESTORE

 USE + CreateChildTenancy


                                            DeleteOrganizationTenancy
                                        


                                            RestoreOrganizationTenancy
                                        

 kein Wert
organizations-order
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT - - kein Wert
READ - - kein Wert
USE - - kein Wert
MANAGE ORGANIZATIONS_ORDER_ACTIVATE ActivateOrder kein Wert
organizations-subscription
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_SUBSCRIPTION_INSPECT ListSubscriptions kein Wert
READ PRÜFEN + ORGANIZATIONS_SUBSCRIPTION_READ PRÜFEN + GetSubscription kein Wert
USE, MANAGE USE + ORGANIZATIONS_SUBSCRIPTION_ASSIGN

ORGANIZATIONS_SUBSCRIPTION_DELETE
ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

 USE + AssignTenancySubscription


                                            AssignDefaultSubscription
                                        


                                            CreateSubscriptionMapping
                                        

 kein Wert
organizations-subscription-mapping
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT ListSubscriptionMappings kein Wert
READ PRÜFEN + ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ PRÜFEN + GetSubscriptionMapping kein Wert
USE, MANAGE USE + ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

 USE + DeleteSubscriptionMapping


                                            CreateSubscriptionMapping
                                        

 kein Wert
organizations-assigned-subscription
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT ListAssignedSubscriptions kein Wert
READ PRÜFEN + ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ PRÜFEN + GetAssignedSubscription kein Wert
USE - - kein Wert
MANAGE - - kein Wert
organizations-subscription-region
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT ListAvailableRegions kein Wert
READ - - kein Wert
USE - - kein Wert
MANAGE - - kein Wert
organizations-governance-rules
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT GOVERNANCE_RULE_INSPECT ListGovernanceRules


                                            ListOrganizations
                                        


                                            ListOrganizationTenancies
                                        

 kein Wert
READ PRÜFEN + GOVERNANCE_RULE_READ PRÜFEN + GetGovernanceRule


                                            ListTenancyAttachments
                                        


                                            GetTenancyAttachment
                                        

 kein Wert
USE LESEN + GOVERNANCE_RULE_UPDATE

GOVERNANCE_RULE_RETRY

 LESEN + GetGovernanceRule


                                            DeleteInclusionCriterion
                                        


                                            RetryGovernanceRule
                                        


                                            RetryTenancyAttachment
                                        

 kein Wert
MANAGE Verwenden + GOVERNANCE_RULE_CREATE

GOVERNANCE_RULE_DELETE

 USE + CreateGovernanceRule


                                            DeleteGovernanceRule
                                        

 kein Wert
organizations-enforced-governance-rules
Verben Berechtigungen Vollständig abgedeckte APIs Teilweise abgedeckte APIs
INSPECT GOVERNANCE_RULE_ENFORCED_INSPECT ListEnforcedGovernanceRules


                                            ListOrganizations
                                        


                                            ListOrganizationTenancies
                                        

 kein Wert
READ PRÜFEN + GOVERNANCE_RULE_ENFORCED_READ PRÜFEN + GetEnforcedGovernanceRule kein Wert
USE - - kein Wert
MANAGE - - kein Wert

Für jeden API-Vorgang erforderliche Berechtigungen

In der folgenden Tabelle werden die API-Vorgänge in einer logischen Reihenfolge nach Ressourcentyp gruppiert aufgeführt. Informationen zu Berechtigungen finden Sie unter Berechtigungen.

API-Vorgang Erforderliche Berechtigungen für den Vorgang
GetLink ORGANIZATIONS_LINK_READ
ListLinks ORGANIZATIONS_LINK_INSPECT
DeleteLink ORGANIZATIONS_LINK_CHILD_DELETE

ORGANIZATIONS_LINK_PARENT_DELETE
GetRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_READ
AcceptRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
IgnoreRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
UpdateRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
ListRecipientInvitations ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT
CreateSenderInvitation ORGANIZATIONS_SENDER_INVITATION_CREATE
GetSenderInvitation ORGANIZATIONS_SENDER_INVITATION_READ
ListSenderInvitations ORGANIZATIONS_SENDER_INVITATION_INSPECT
CancelSenderInvitation ORGANIZATIONS_SENDER_INVITATION_UPDATE
UpdateSenderInvitation ORGANIZATIONS_SENDER_INVITATION_UPDATE
UpdateSenderInvitation ORGANIZATIONS_DOMAIN_READ
ListDomains ORGANIZATIONS_DOMAIN_INSPECT
CreateDomain ORGANIZATIONS_DOMAIN_CREATE
UpdateDomain ORGANIZATIONS_DOMAIN_UPDATE
DeleteDomain ORGANIZATIONS_DOMAIN_DELETE
GetDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_READ
ListDomainGovernances ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT
CreateDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE
UpdateDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE
DeleteDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE
GetOrganization ORGANIZATIONS_ENTITY_READ
ListOrganizations ORGANIZATIONS_ENTITY_INSPECT
UpdateOrganization ORGANIZATIONS_ENTITY_UPDATE
GetOrganizationTenancy ORGANIZATIONS_TENANCY_READ
ListOrganizationTenancies ORGANIZATIONS_TENANCY_INSPECT
ApproForTransfer/unapproveForTransfer ORGANIZATIONS_TENANCY_TRANSFER_APPROVAL_UPDATE
CreateChildTenancy ORGANIZATIONS_TENANCY_CREATE

Hinweis: Wenn das Attribut subscriptionId für einen erstellten untergeordneten Mandanten angegeben wird, ist auch ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE erforderlich. Weitere Informationen finden Sie unter CreateChildTenancyDetails Reference.
DeleteOrganizationTenancy ORGANIZATIONS_TENANCY_DELETE
RestoreOrganizationTenancy ORGANIZATIONS_TENANCY_RESTORE
ActivateOrder ORGANIZATIONS_ORDER_ACTIVATE
ListSubscriptions ORGANIZATIONS_SUBSCRIPTION_INSPECT
ListSubscriptionMappings ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT
GetSubscription ORGANIZATIONS_SUBSCRIPTION_READ
GetSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ
AssignTenancySubscription ORGANIZATIONS_SUBSCRIPTION_ASSIGN
AssignDefaultSubscription ORGANIZATIONS_SUBSCRIPTION_ASSIGN
DeleteSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE
CreateSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE
ListAssignedSubscriptions ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT
GetAssignedSubscription ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ
ListAvailableRegions ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT
ListGovernanceRules GOVERNANCE_RULE_INSPECT
GetGovernanceRule GOVERNANCE_RULE_READ
CreateGovernanceRule GOVERNANCE_RULE_CREATE
UpdateGovernanceRule GOVERNANCE_RULE_UPDATE
DeleteGovernanceRule GOVERNANCE_RULE_DELETE
RetryGovernanceRule GOVERNANCE_RULE_RETRY
CreateInclusionCriterion GOVERNANCE_RULE_UPDATE
DeleteInclusionCriterion GOVERNANCE_RULE_UPDATE
ListTenancyAttachments GOVERNANCE_RULE_READ
GetTenancyAttachment GOVERNANCE_RULE_READ
RetryTenancyAttachment GOVERNANCE_RULE_RETRY
ListEnforcedGovernanceRules GOVERNANCE_RULE_ENFORCED_INSPECT
GetEnforcedGovernanceRule GOVERNANCE_RULE_ENFORCED_READ