Documentazione dell'infrastruttura Oracle Cloud

Dettagli per Gestione organizzazione

In questo argomento vengono descritti i dettagli relativi alla scrittura dei criteri per controllare l'accesso a Gestione organizzazione.

Tipi di risorsa

  • organizations-family
  • organizations-link
  • organizations-recipient-invitation
  • organizations-sender-invitation
  • organizations-invitation
  • organizations-domain
  • organizations-domain-governance
  • organizations-entity
  • organizations-tenancy
  • organizations-order
  • organizations-subscription
  • organizations-subscription-mapping
  • organizations-assigned-subscription
  • organizations-subscription-region
  • organizations-governance-rules
  • organizations-enforced-governance-rules

Variabili supportate

Organization Management supporta tutte le variabili generali (vedere Variabili generali per tutte le richieste), oltre a quelle aggiuntive elencate di seguito.

Variabili obbligatorie (fornite dal servizio per ogni richiesta):

Variabile Tipo di variabile commenti
target.resource.kind Stringa Nome del tipo della risorsa primaria per la richiesta.

Variabili automatiche (fornite dall'SDK per ogni richiesta):

Variabile Tipo di variabile commenti
target.tenant.id Entità (OCID) OCID dell'ID tenant di destinazione.

Dettagli per le combinazioni verbo-tipo di risorsa

Le tabelle seguenti mostrano le operazioni autorizzazioni e API coperte da ciascun verbo. Il livello di accesso è cumulativo come si va da inspect > read > use > manage. Ad esempio, un gruppo che può utilizzare una risorsa può anche ispezionare e leggere tale risorsa. Un segno più (+) in una cella di tabella indica l'accesso incrementale rispetto alla cella direttamente sopra di essa, mentre "no extra" indica l'assenza di accesso incrementale.

organizations-family
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_LINK_INSPECT

ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT

ORGANIZATIONS_SENDER_INVITATION_INSPECT

ORGANIZATIONS_DOMAIN_INSPECT

ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT

ORGANIZATIONS_TENANCY_INSPECT

ORGANIZATIONS_SUBSCRIPTION_INSPECT

ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT

ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT

ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT

GOVERNANCE_RULE_INSPECT

ORGANIZATIONS_ENTITY_INSPECT

ORGANIZATIONS_TENANCY_INSPECT

 ListLinks


                                            ListRecipientInvitations
                                        


                                            ListSenderInvitations
                                        


                                            ListDomains
                                        


                                            ListDomainGovernances
                                        


                                            ListOrganizationTenancies
                                        


                                            ListSubscriptions
                                        


                                            ListSubscriptionMappings
                                        


                                            ListAssignedSubscriptions
                                            ListAvailableRegions
                                        


                                            ListGovernanceRules
                                        


                                            ListOrganizations
                                        

 nessuno
READ ISPEZIONA + ORGANIZATIONS_LINK_READ

ORGANIZATIONS_RECIPIENT_INVITATION_READ

ORGANIZATIONS_SENDER_INVITATION_READ

ORGANIZATIONS_DOMAIN_READ

ORGANIZATIONS_DOMAIN_GOVERNANCE_READ

ORGANIZATIONS_ENTITY_READ

ORGANIZATIONS_TENANCY_READ

ORGANIZATIONS_SUBSCRIPTION_READ

ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ

ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ

GOVERNANCE_RULE_READ

 ISPEZIONA + GetLink


                                            GetRecipientInvitation
                                        


                                            GetSenderInvitation
                                        


                                            GetDomain
                                        


                                            GetDomainGovernance
                                        


                                            GetOrganizationTenancy
                                        


                                            GetSubscriptionMapping
                                        


                                            GetAssignedSubscription
                                        


                                            GetGovernanceRule
                                        


                                            ListTenancyAttachments
                                        


                                            GetTenancyAttachment
                                        

 nessuno
USE LEGGI + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE


ORGANIZATIONS_DOMAIN_UPDATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE

ORGANIZATIONS_ENTITY_UPDATE

ORGANIZATIONS_SENDER_INVITATION_UPDATE

GOVERNANCE_RULE_UPDATE

GOVERNANCE_RULE_RETRY

 LEGGI + AcceptRecipientInvitation


                                            IgnoreRecipientInvitation
                                        


                                            CancelSenderInvitation
                                        


                                            UpdateSenderInvitation
                                        


                                            UpdateDomain
                                        


                                            UpdateDomainGovernance
                                        


                                            UpdateOrganization
                                        

GetGovernanceRule


                                            DeleteInclusionCriterion
                                        


                                            RetryGovernanceRule
                                        


                                            RetryTenancyAttachment
                                        

 nessuno
GESTISCI UTILIZZARE + ORGANIZATIONS_LINK_PARENT_DELETE

ORGANIZATIONS_LINK_CHILD_DELETE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

ORGANIZATIONS_SENDER_INVITATION_CREATE

ORGANIZATIONS_DOMAIN_CREATE

ORGANIZATIONS_DOMAIN_DELETE

ORGANIZATIONS_ORDER_ACTIVATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE

ORGANIZATIONS_ENTITY_UPDATE

ORGANIZATIONS_TENANCY_CREATE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE

ORGANIZATIONS_TENANCY_DELETE

ORGANIZATIONS_TENANCY_RESTORE

GOVERNANCE_RULE_CREATE

GOVERNANCE_RULE_DELETE

 UTILIZZARE + DeleteLink


                                            CreateSenderInvitation
                                        


                                            CreateDomain
                                        


                                            DeleteDomain
                                        


                                            ActivateOrder
                                        


                                            CreateDomainGovernance
                                        


                                            DeleteDomainGovernance
                                        


                                            UpdateOrganization
                                        


                                            CreateChildTenancy
                                        


                                            DeleteSubscriptionMapping
                                        


                                            DeleteOrganizationTenancy
                                        


                                            RestoreOrganizationTenancy
                                        


                                            CreateSubscriptionMapping
                                        


                                            CreateGovernanceRule
                                        


                                            DeleteGovernanceRule
                                        

 nessuno
organizations-recipient-invitation
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT ListRecipientInvitations nessuno
READ ISPEZIONA + ORGANIZATIONS_RECIPIENT_INVITATION_READ ISPEZIONA + GetRecipientInvitation nessuno
USA, GESTISCI LEGGI + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE LEGGI + AcceptRecipientInvitation


                                            IgnoreRecipientInvitation
                                        


                                            UpdateRecipientInvitation
                                        

 nessuno
organizations-sender-invitation
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_SENDER_INVITATION_INSPECT ListRecipientInvitations nessuno
READ ISPEZIONA + ORGANIZATIONS_SENDER_INVITATION_READ ISPEZIONA + GetSenderInvitation nessuno
USE LEGGI + ORGANIZATIONS_SENDER_INVITATION_UPDATE LEGGI + UpdateSenderInvitation


                                            CancelSenderInvitation
                                        

 nessuno
GESTISCI UTILIZZARE + ORGANIZATIONS_SENDER_INVITATION_CREATE UTILIZZARE + CreateSenderInvitation nessuno
organizations-invitation
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT

ORGANIZATIONS_SENDER_INVITATION_INSPECT

 ListRecipientInvitations


                                            ListSenderInvitations
                                        

 nessuno
READ ISPEZIONA + ORGANIZATIONS_RECIPIENT_INVITATION_READ

ORGANIZATIONS_SENDER_INVITATION_READ

 ISPEZIONA + GetRecipientInvitation


                                            GetSenderInvitation
                                        

 nessuno
USE LEGGI + ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE

ORGANIZATIONS_SENDER_INVITATION_UPDATE

 LEGGI + AcceptRecipientInvitation


                                            UpdateRecipientInvitation
                                        


                                            UpdateSenderInvitation
                                        


                                            CancelSenderInvitation
                                        

 nessuno
GESTISCI UTILIZZARE + ORGANIZATIONS_SENDER_INVITATION_CREATE UTILIZZARE + CreateSenderInvitation nessuno
organizations-domain
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_DOMAIN_INSPECT ListDomains nessuno
READ ISPEZIONA + ORGANIZATIONS_DOMAIN_READ ISPEZIONA + GetDomain nessuno
USE LEGGI + ORGANIZATIONS_DOMAIN_UPDATE LEGGI + UpdateDomain nessuno
GESTISCI UTILIZZARE + ORGANIZATIONS_DOMAIN_CREATE

ORGANIZATIONS_DOMAIN_DELETE

 UTILIZZARE + CreateDomain


                                            DeleteDomain
                                        

 nessuno
organizations-domain-governance
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT ListDomainGovernances nessuno
READ ISPEZIONA + ORGANIZATIONS_DOMAIN_GOVERNANCE_READ ISPEZIONA + GetDomainGovernance nessuno
USE LEGGI + ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE LEGGI + UpdateDomainGovernance nessuno
GESTISCI UTILIZZARE + ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE

ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE

 UTILIZZARE + CreateDomainGovernance


                                            DeleteDomainGovernance
                                        

 nessuno
organizations-entity
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_ENTITY_INSPECT ListOrganizations nessuno
READ ISPEZIONA + ORGANIZATIONS_ENTITY_READ ISPEZIONA + GetOrganization nessuno
USE LEGGI + ORGANIZATIONS_ENTITY_UPDATE LEGGI + UpdateOrganization nessuno
GESTISCI - - nessuno
organizations-tenancy
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_TENANCY_INSPECT ListOrganizationTenancies nessuno
LETTURA, USO ISPEZIONA + ORGANIZATIONS_TENANCY_READ ISPEZIONA + GetOrganizationTenancy nessuno
GESTISCI UTILIZZARE + ORGANIZATIONS_TENANCY_CREATE

ORGANIZATIONS_TENANCY_DELETE

ORGANIZATIONS_TENANCY_RESTORE

 UTILIZZARE + CreateChildTenancy


                                            DeleteOrganizationTenancy
                                        


                                            RestoreOrganizationTenancy
                                        

 nessuno
organizations-order
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT - - nessuno
READ - - nessuno
USE - - nessuno
GESTISCI ORGANIZATIONS_ORDER_ACTIVATE ActivateOrder nessuno
organizations-subscription
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_SUBSCRIPTION_INSPECT ListSubscriptions nessuno
READ ISPEZIONA + ORGANIZATIONS_SUBSCRIPTION_READ ISPEZIONA + GetSubscription nessuno
USA, GESTISCI UTILIZZARE + ORGANIZATIONS_SUBSCRIPTION_ASSIGN

ORGANIZATIONS_SUBSCRIPTION_DELETE
ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

 UTILIZZARE + AssignTenancySubscription


                                            AssignDefaultSubscription
                                        


                                            CreateSubscriptionMapping
                                        

 nessuno
organizations-subscription-mapping
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT ListSubscriptionMappings nessuno
READ ISPEZIONA + ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ ISPEZIONA + GetSubscriptionMapping nessuno
USA, GESTISCI UTILIZZARE + ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE

ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE

 UTILIZZARE + DeleteSubscriptionMapping


                                            CreateSubscriptionMapping
                                        

 nessuno
organizations-assigned-subscription
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT ListAssignedSubscriptions nessuno
READ ISPEZIONA + ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ ISPEZIONA + GetAssignedSubscription nessuno
USE - - nessuno
GESTISCI - - nessuno
organizations-subscription-region
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT ListAvailableRegions nessuno
READ - - nessuno
USE - - nessuno
GESTISCI - - nessuno
organizations-governance-rules
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT GOVERNANCE_RULE_INSPECT ListGovernanceRules


                                            ListOrganizations
                                        


                                            ListOrganizationTenancies
                                        

 nessuno
READ ISPEZIONA + GOVERNANCE_RULE_READ ISPEZIONA + GetGovernanceRule


                                            ListTenancyAttachments
                                        


                                            GetTenancyAttachment
                                        

 nessuno
USE LEGGI + GOVERNANCE_RULE_UPDATE

GOVERNANCE_RULE_RETRY

 LEGGI + GetGovernanceRule


                                            DeleteInclusionCriterion
                                        


                                            RetryGovernanceRule
                                        


                                            RetryTenancyAttachment
                                        

 nessuno
GESTISCI UTILIZZARE + GOVERNANCE_RULE_CREATE

GOVERNANCE_RULE_DELETE

 UTILIZZARE + CreateGovernanceRule


                                            DeleteGovernanceRule
                                        

 nessuno
organizations-enforced-governance-rules
Verbs Autorizzazioni API completamente coperte API parzialmente coperte
INSPECT GOVERNANCE_RULE_ENFORCED_INSPECT ListEnforcedGovernanceRules


                                            ListOrganizations
                                        


                                            ListOrganizationTenancies
                                        

 nessuno
READ ISPEZIONA + GOVERNANCE_RULE_ENFORCED_READ ISPEZIONA + GetEnforcedGovernanceRule nessuno
USE - - nessuno
GESTISCI - - nessuno

Autorizzazioni necessarie per ogni operazione API

Nella tabella seguente sono elencate le operazioni API in ordine logico, raggruppate per tipo di risorsa. Per informazioni sulle autorizzazioni, vedere Autorizzazioni.

Operazione API Autorizzazioni necessarie per utilizzare l'operazione
GetLink ORGANIZATIONS_LINK_READ
ListLinks ORGANIZATIONS_LINK_INSPECT
DeleteLink ORGANIZATIONS_LINK_CHILD_DELETE

ORGANIZATIONS_LINK_PARENT_DELETE
GetRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_READ
AcceptRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
IgnoreRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
UpdateRecipientInvitation ORGANIZATIONS_RECIPIENT_INVITATION_UPDATE
ListRecipientInvitations ORGANIZATIONS_RECIPIENT_INVITATION_INSPECT
CreateSenderInvitation ORGANIZATIONS_SENDER_INVITATION_CREATE
GetSenderInvitation ORGANIZATIONS_SENDER_INVITATION_READ
ListSenderInvitations ORGANIZATIONS_SENDER_INVITATION_INSPECT
CancelSenderInvitation ORGANIZATIONS_SENDER_INVITATION_UPDATE
UpdateSenderInvitation ORGANIZATIONS_SENDER_INVITATION_UPDATE
UpdateSenderInvitation ORGANIZATIONS_DOMAIN_READ
ListDomains ORGANIZATIONS_DOMAIN_INSPECT
CreateDomain ORGANIZATIONS_DOMAIN_CREATE
UpdateDomain ORGANIZATIONS_DOMAIN_UPDATE
DeleteDomain ORGANIZATIONS_DOMAIN_DELETE
GetDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_READ
ListDomainGovernances ORGANIZATIONS_DOMAIN_GOVERNANCE_INSPECT
CreateDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_CREATE
UpdateDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_UPDATE
DeleteDomainGovernance ORGANIZATIONS_DOMAIN_GOVERNANCE_DELETE
GetOrganization ORGANIZATIONS_ENTITY_READ
ListOrganizations ORGANIZATIONS_ENTITY_INSPECT
UpdateOrganization ORGANIZATIONS_ENTITY_UPDATE
GetOrganizationTenancy ORGANIZATIONS_TENANCY_READ
ListOrganizationTenancies ORGANIZATIONS_TENANCY_INSPECT
approvaForTransfer/unapproveForTransfer ORGANIZATIONS_TENANCY_TRANSFER_APPROVAL_UPDATE
CreateChildTenancy ORGANIZATIONS_TENANCY_CREATE

Nota: quando si specifica l'attributo subscriptionId per una tenancy figlio creata, è necessario specificare anche ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE. Per ulteriori informazioni, consultare CreateChildTenancyDetails Reference.
DeleteOrganizationTenancy ORGANIZATIONS_TENANCY_DELETE
RestoreOrganizationTenancy ORGANIZATIONS_TENANCY_RESTORE
ActivateOrder ORGANIZATIONS_ORDER_ACTIVATE
ListSubscriptions ORGANIZATIONS_SUBSCRIPTION_INSPECT
ListSubscriptionMappings ORGANIZATIONS_SUBSCRIPTION_MAPPING_INSPECT
GetSubscription ORGANIZATIONS_SUBSCRIPTION_READ
GetSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_READ
AssignTenancySubscription ORGANIZATIONS_SUBSCRIPTION_ASSIGN
AssignDefaultSubscription ORGANIZATIONS_SUBSCRIPTION_ASSIGN
DeleteSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_DELETE
CreateSubscriptionMapping ORGANIZATIONS_SUBSCRIPTION_MAPPING_CREATE
ListAssignedSubscriptions ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_INSPECT
GetAssignedSubscription ORGANIZATIONS_ASSIGNED_SUBSCRIPTION_READ
ListAvailableRegions ORGANIZATIONS_SUBSCRIPTION_REGION_INSPECT
ListGovernanceRules GOVERNANCE_RULE_INSPECT
GetGovernanceRule GOVERNANCE_RULE_READ
CreateGovernanceRule GOVERNANCE_RULE_CREATE
UpdateGovernanceRule GOVERNANCE_RULE_UPDATE
DeleteGovernanceRule GOVERNANCE_RULE_DELETE
RetryGovernanceRule GOVERNANCE_RULE_RETRY
CreateInclusionCriterion GOVERNANCE_RULE_UPDATE
DeleteInclusionCriterion GOVERNANCE_RULE_UPDATE
ListTenancyAttachments GOVERNANCE_RULE_READ
GetTenancyAttachment GOVERNANCE_RULE_READ
RetryTenancyAttachment GOVERNANCE_RULE_RETRY
ListEnforcedGovernanceRules GOVERNANCE_RULE_ENFORCED_INSPECT
GetEnforcedGovernanceRule GOVERNANCE_RULE_ENFORCED_READ