Documentación de Oracle Cloud Infrastructure

Detalles de Gestión de organización

En este tema se tratan los detalles de la escritura de políticas para controlar el acceso a Gestión de organización.

Tipos de recursos

  • organizations-family
  • organizations-link
  • organizations-recipient-invitation
  • organizations-sender-invitation
  • organizations-invitation
  • organizations-domain
  • organizations-domain-governance
  • organizations-entity
  • organizations-tenancy
  • organizations-order
  • organizations-subscription
  • organizations-subscription-mapping
  • organizations-assigned-subscription
  • organizations-subscription-region
  • organizations-governance-rules
  • organizations-enforced-governance-rules

Variables soportadas

Organization Management soporta todas las variables generales (consulte Variables generales para todas las solicitudes), además de las adicionales que se muestran a continuación:

Variables necesarias (proporcionadas por el servicio para cada solicitud):

Variable Tipo de variable Comentarios
target.resource.kind Cadena Nombre de tipo de recurso del recurso primario de la solicitud.

Variables automáticas (proporcionadas por el SDK para cada solicitud):

Variable Tipo de variable Comentarios
target.tenant.id Entidad (OCID) OCID del ID de inquilino de destino.

Detalles de combinaciones de verbo + tipo de recurso

En las siguientes tablas, se muestran los permisos y las operaciones de API que abarca cada verbo. El nivel de acceso es acumulativo al recorrer la progresión inspect > read > use > manage. Por ejemplo, un grupo que puede utilizar un recurso también puede inspeccionar y leer ese recurso. Un signo más (+) en una celda de la tabla indica un acceso incremental en comparación con la celda directamente por encima, mientras que "no extra" indica que no hay acceso incremental.

organizations-family
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_LINK_INSPECT

ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT

ORGANIZATIONS_SENDER_INVITATION_INSPECT

ORGANIZATIONS_DOMAIN_INSPECT

ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT

ORGANIZATIONS_TENANCY_INSPECT

ORGANIZATIONS_SUBSCRIPTION_INSPECT

ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT

ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT

ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT

GOVERNANCE_RULE_INSPECT

ORGANIZATIONS_ENTITY_INSPECT

ORGANIZATIONS_TENANCY_INSPECT

 ListLinks


                                            ListRecipientInvitations
                                        


                                            ListSenderInvitations
                                        


                                            ListDomains
                                        


                                            ListDomainGovernances
                                        


                                            ListOrganizationTenancies
                                        


                                            ListSubscriptions
                                        


                                            ListSubscriptionMappings
                                        


                                            ListAssignedSubscriptions
                                            ListAvailableRegions
                                        


                                            ListGovernanceRules
                                        


                                            ListOrganizations
                                        

 ninguna
READ INSPECCIONAR + ORGANIZATIONS_LINK_READ

ORGANIZATIONS_RECIPIENT_INVITATION_READ

ORGANIZATIONS_SENDER_INVITATION_READ

ORGANIZATIONS_DOMAIN_READ

ORGANIZATIONS_DOMAIN_GOVERNANCE_READ

ORGANIZATIONS_ENTITY_READ

ORGANIZATIONS_TENANCY_READ

ORGANIZATIONS_SUBSCRIPTION_READ

ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ

ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ

GOVERNANCE_RULE_READ

 INSPECT + GetLink


                                            GetRecipientInvitation
                                        


                                            GetSenderInvitation
                                        


                                            GetDomain
                                        


                                            GetDomainGovernance
                                        


                                            GetOrganizationTenancy
                                        


                                            GetSubscriptionMapping
                                        


                                            GetAssignedSubscription
                                        


                                            GetGovernanceRule
                                        


                                            ListTenancyAttachments
                                        


                                            GetTenancyAttachment
                                        

 ninguna
USE LEER + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE


ORGANIZATIONS_DOMAIN_UPDATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE

ORGANIZATIONS_ENTITY_UPDATE

ORGANIZATIONS_SENDER_INVITATION_UPDATE

GOVERNANCE_RULE_UPDATE

GOVERNANCE_RULE_RETRY

 LEER + AcceptRecipientInvitation


                                            IgnoreRecipientInvitation
                                        


                                            CancelSenderInvitation
                                        


                                            UpdateSenderInvitation
                                        


                                            UpdateDomain
                                        


                                            UpdateDomainGovernance
                                        


                                            UpdateOrganization
                                        

GetGovernanceRule


                                            DeleteInclusionCriterion
                                        


                                            RetryGovernanceRule
                                        


                                            RetryTenancyAttachment
                                        

 ninguna
MANAGE USE + ORGANIZATIONS_LINK_PARENT_DELETE

ORGANIZATIONS_LINK_CHILD_DELETE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

ORGANIZATIONS_SENDER_INVITATION_CREATE

ORGANIZATIONS_DOMAIN_CREATE

ORGANIZATIONS_DOMAIN_DELETE

ORGANIZATIONS_ORDER_ACTIVATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE

ORGANIZATIONS_ENTITY_UPDATE

ORGANIZATIONS_TENANCY_CREATE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE

ORGANIZATIONS_TENANCY_DELETE

ORGANIZATIONS_TENANCY_RESTORE

GOVERNANCE_RULE_CREATE

GOVERNANCE_RULE_DELETE

 USE + DeleteLink


                                            CreateSenderInvitation
                                        


                                            CreateDomain
                                        


                                            DeleteDomain
                                        


                                            ActivateOrder
                                        


                                            CreateDomainGovernance
                                        


                                            DeleteDomainGovernance
                                        


                                            UpdateOrganization
                                        


                                            CreateChildTenancy
                                        


                                            DeleteSubscriptionMapping
                                        


                                            DeleteOrganizationTenancy
                                        


                                            RestoreOrganizationTenancy
                                        


                                            CreateSubscriptionMapping
                                        


                                            CreateGovernanceRule
                                        


                                            DeleteGovernanceRule
                                        

 ninguna
organizations-recipient-invitation
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT ListRecipientInvitations ninguna
READ INSPECCIONAR + ORGANIZATIONS_RECIPIENT_INVITATION_READ INSPECT + GetRecipientInvitation ninguna
USE, MANAGE LEER + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE LEER + AcceptRecipientInvitation


                                            IgnoreRecipientInvitation
                                        


                                            UpdateRecipientInvitation
                                        

 ninguna
organizations-sender-invitation
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_SENDER_INVITATION_INSPECT ListRecipientInvitations ninguna
READ INSPECCIONAR + ORGANIZATIONS_SENDER_INVITATION_READ INSPECT + GetSenderInvitation ninguna
USE LEER + ORGANIZATIONS_SENDER_INVITATION_UPDATE LEER + UpdateSenderInvitation


                                            CancelSenderInvitation
                                        

 ninguna
MANAGE USE + ORGANIZATIONS_SENDER_INVITATION_CREATE USE + CreateSenderInvitation ninguna
organizations-invitation
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT

ORGANIZATIONS_SENDER_INVITATION_INSPECT

 ListRecipientInvitations


                                            ListSenderInvitations
                                        

 ninguna
READ INSPECCIONAR + ORGANIZATIONS_RECIPIENT_INVITATION_READ

ORGANIZATIONS_SENDER_INVITATION_READ

 INSPECT + GetRecipientInvitation


                                            GetSenderInvitation
                                        

 ninguna
USE LEER + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE

ORGANIZATIONS_SENDER_INVITATION_UPDATE

 LEER + AcceptRecipientInvitation


                                            UpdateRecipientInvitation
                                        


                                            UpdateSenderInvitation
                                        


                                            CancelSenderInvitation
                                        

 ninguna
MANAGE USE + ORGANIZATIONS_SENDER_INVITATION_CREATE USE + CreateSenderInvitation ninguna
organizations-domain
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_DOMAIN_INSPECT ListDomains ninguna
READ INSPECCIONAR + ORGANIZATIONS_DOMAIN_READ INSPECT + GetDomain ninguna
USE LEER + ORGANIZATIONS_DOMAIN_UPDATE LEER + UpdateDomain ninguna
MANAGE USE + ORGANIZATIONS_DOMAIN_CREATE

ORGANIZATIONS_DOMAIN_DELETE

 USE + CreateDomain


                                            DeleteDomain
                                        

 ninguna
organizations-domain-governance
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT ListDomainGovernances ninguna
READ INSPECCIONAR + ORGANIZATIONS_DOMAIN_GOVERNANCE_READ INSPECT + GetDomainGovernance ninguna
USE LEER + ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE LEER + UpdateDomainGovernance ninguna
MANAGE USE + ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE

 USE + CreateDomainGovernance


                                            DeleteDomainGovernance
                                        

 ninguna
organizations-entity
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_ENTITY_INSPECT ListOrganizations ninguna
READ INSPECT + ORGANIZATIONS_ENTITY_READ INSPECT + GetOrganization ninguna
USE LEER + ORGANIZATIONS_ENTITY_UPDATE LEER + UpdateOrganization ninguna
MANAGE - - ninguna
organizations-tenancy
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_TENANCY_INSPECT ListOrganizationTenancies ninguna
LEER, USAR INSPECT + ORGANIZATIONS_TENANCY_READ (INSPECCIÓN) INSPECT + GetOrganizationTenancy ninguna
MANAGE USE + ORGANIZATIONS_TENANCY_CREATE

ORGANIZATIONS_TENANCY_DELETE

ORGANIZATIONS_TENANCY_RESTORE

 USE + CreateChildTenancy


                                            DeleteOrganizationTenancy
                                        


                                            RestoreOrganizationTenancy
                                        

 ninguna
organizations-order
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT - - ninguna
READ - - ninguna
USE - - ninguna
MANAGE ORGANIZATIONS_ORDER_ACTIVATE ActivateOrder ninguna
organizations-subscription
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_SUBSCRIPTION_INSPECT ListSubscriptions ninguna
READ INSPECT + ORGANIZATIONS_SUBSCRIPTION_READ INSPECT + GetSubscription ninguna
USE, MANAGE USE + ORGANIZATIONS_SUBSCRIPTION_ASSIGN

ORGANIZATIONS_SUBSCRIPTION_DELETE
ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

 USE + AssignTenancySubscription


                                            AssignDefaultSubscription
                                        


                                            CreateSubscriptionMapping
                                        

 ninguna
organizations-subscription-mapping
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT ListSubscriptionMappings ninguna
READ INSPECCIONAR + ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ INSPECT + GetSubscriptionMapping ninguna
USE, MANAGE USE + ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

 USE + DeleteSubscriptionMapping


                                            CreateSubscriptionMapping
                                        

 ninguna
organizations-assigned-subscription
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT ListAssignedSubscriptions ninguna
READ INSPECCIONAR + ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ INSPECT + GetAssignedSubscription ninguna
USE - - ninguna
MANAGE - - ninguna
organizations-subscription-region
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT ListAvailableRegions ninguna
READ - - ninguna
USE - - ninguna
MANAGE - - ninguna
organizations-governance-rules
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT GOVERNANCE_RULE_INSPECT ListGovernanceRules


                                            ListOrganizations
                                        


                                            ListOrganizationTenancies
                                        

 ninguna
READ INSPECT + GOVERNANCE_RULE_READ INSPECT + GetGovernanceRule


                                            ListTenancyAttachments
                                        


                                            GetTenancyAttachment
                                        

 ninguna
USE LEER + GOVERNANCE_RULE_UPDATE

GOVERNANCE_RULE_RETRY

 LEER + GetGovernanceRule


                                            DeleteInclusionCriterion
                                        


                                            RetryGovernanceRule
                                        


                                            RetryTenancyAttachment
                                        

 ninguna
MANAGE USE + GOVERNANCE_RULE_CREATE

GOVERNANCE_RULE_DELETE

 USE + CreateGovernanceRule


                                            DeleteGovernanceRule
                                        

 ninguna
organizations-enforced-governance-rules
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
INSPECT GOVERNANCE_RULE_ENFORCED_INSPECT ListEnforcedGovernanceRules


                                            ListOrganizations
                                        


                                            ListOrganizationTenancies
                                        

 ninguna
READ INSPECCIONAR + GOVERNANCE_RULE_ENFORCED_READ INSPECT + GetEnforcedGovernanceRule ninguna
USE - - ninguna
MANAGE - - ninguna

Permisos requeridos para cada operación de API

En la siguiente tabla, se muestran las operaciones de API en un orden lógico, agrupadas por tipo de recurso. Para obtener más información sobre los permisos, consulte Permisos.

Operación de API Permisos necesarios para utilizar la operación
GetLink ORGANIZATIONS_LINK_READ
ListLinks ORGANIZATIONS_LINK_INSPECT
DeleteLink ORGANIZATIONS_LINK_CHILD_DELETE

ORGANIZATIONS_LINK_PARENT_DELETE
GetRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_READ
AcceptRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
IgnoreRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
UpdateRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
ListRecipientInvitations ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT
CreateSenderInvitation ORGANIZATIONS_SENDER_INVITATION_CREATE
GetSenderInvitation ORGANIZATIONS_SENDER_INVITATION_READ
ListSenderInvitations ORGANIZATIONS_SENDER_INVITATION_INSPECT
CancelSenderInvitation ORGANIZATIONS_SENDER_INVITATION_UPDATE
UpdateSenderInvitation ORGANIZATIONS_SENDER_INVITATION_UPDATE
UpdateSenderInvitation ORGANIZATIONS_DOMAIN_READ
ListDomains ORGANIZATIONS_DOMAIN_INSPECT
CreateDomain ORGANIZATIONS_DOMAIN_CREATE
UpdateDomain ORGANIZATIONS_DOMAIN_UPDATE
DeleteDomain ORGANIZATIONS_DOMAIN_DELETE
GetDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_READ
ListDomainGovernances ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT
CreateDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE
UpdateDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE
DeleteDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE
GetOrganization ORGANIZATIONS_ENTITY_READ
ListOrganizations ORGANIZATIONS_ENTITY_INSPECT
UpdateOrganization ORGANIZATIONS_ENTITY_UPDATE
GetOrganizationTenancy ORGANIZATIONS_TENANCY_READ
ListOrganizationTenancies ORGANIZATIONS_TENANCY_INSPECT
apruebeForTransfer/unapproveForTransfer ORGANIZATIONS_TENANCY_TRANSFER_APPROVAL_UPDATE
CreateChildTenancy ORGANIZATIONS_TENANCY_CREATE

Nota: Cuando se especifica el atributo subscriptionId para un arrendamiento secundario creado, también es necesario ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE. Para obtener más información, consulte CreateChildTenancyDetails Reference.
DeleteOrganizationTenancy ORGANIZATIONS_TENANCY_DELETE
RestoreOrganizationTenancy ORGANIZATIONS_TENANCY_RESTORE
ActivateOrder ORGANIZATIONS_ORDER_ACTIVATE
ListSubscriptions ORGANIZATIONS_SUBSCRIPTION_INSPECT
ListSubscriptionMappings ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT
GetSubscription ORGANIZATIONS_SUBSCRIPTION_READ
GetSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ
AssignTenancySubscription ORGANIZATIONS_SUBSCRIPTION_ASSIGN
AssignDefaultSubscription ORGANIZATIONS_SUBSCRIPTION_ASSIGN
DeleteSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE
CreateSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE
ListAssignedSubscriptions ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT
GetAssignedSubscription ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ
ListAvailableRegions ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT
ListGovernanceRules GOVERNANCE_RULE_INSPECT
GetGovernanceRule GOVERNANCE_RULE_READ
CreateGovernanceRule GOVERNANCE_RULE_CREATE
UpdateGovernanceRule GOVERNANCE_RULE_UPDATE
DeleteGovernanceRule GOVERNANCE_RULE_DELETE
RetryGovernanceRule GOVERNANCE_RULE_RETRY
CreateInclusionCriterion GOVERNANCE_RULE_UPDATE
DeleteInclusionCriterion GOVERNANCE_RULE_UPDATE
ListTenancyAttachments GOVERNANCE_RULE_READ
GetTenancyAttachment GOVERNANCE_RULE_READ
RetryTenancyAttachment GOVERNANCE_RULE_RETRY
ListEnforcedGovernanceRules GOVERNANCE_RULE_ENFORCED_INSPECT
GetEnforcedGovernanceRule GOVERNANCE_RULE_ENFORCED_READ