Details for the Java Management Service

This topic covers details for writing policies to control access to the Java Management service.

Resource-Types

fleet

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

fleet
Verbs Permissions APIs Fully Covered APIs Partially Covered
inspect

FLEET_INSPECT

ListFleets

ListWorkRequest

ListWorkRequestErrors

ListWorkRequestLogs

none

read

INSPECT +

FLEET_READ

FLEET_QUERY_RESOURCES

GetFleet

GetWorkRequest

SummarizeJres

RequestSummarizedJres

SummarizeApplications

RequestSummarizedApplications

SummarizeInstallations

RequestSummarizedInstallations

SummarizeManagedInstances

RequestSummarizedManagedInstances

none

use

READ +

FLEET_UPDATE

UpdateFleet

none

manage

USE +

FLEET_CREATE

FLEET_DELETE

FLEET_MOVE

CreateFleet

DeleteFleet

ChangeFleetCompartment

none

Permissions Required for Each API Operation

The following table lists the API operations in alphabetical order.

For information about permissions, see Permissions.

API Operation Permissions Required to Use the Operation
ListFleets FLEET_INSPECT
GetFleet FLEET_READ
UpdateFleet

FLEET_UPDATE

ChangeFleetCompartment FLEET_MOVE
CreateFleet FLEET_CREATE
DeleteFleet

FLEET_DELETE

SummarizeJres FLEET_READ and FLEET_QUERY_RESOURCES
RequestSummarizedJres FLEET_READ and FLEET_QUERY_RESOURCES
SummarizeApplications FLEET_READ and FLEET_QUERY_RESOURCES
RequestSummarizedApplications FLEET_READ and FLEET_QUERY_RESOURCES
SummarizeInstallations FLEET_READ and FLEET_QUERY_RESOURCES
RequestSummarizedInstallations

FLEET_READ and FLEET_QUERY_RESOURCES

SummarizeManagedInstances FLEET_READ and FLEET_QUERY_RESOURCES
RequestSummarizedManagedInstances FLEET_READ and FLEET_QUERY_RESOURCES
ListWorkRequest FLEET_INSPECT
GetWorkRequest FLEET_READ
ListWorkRequestErrors FLEET_INSPECT
ListWorkRequestLogs FLEET_INSPECT