Access control
Cloud Managed Network supports access control through Resource Access Management (RAM). This lets you manage permissions for RAM users on data views, aggregate data, devices, device tasks, inspection tasks, templates, scripts, and subscription items.
Authentication types
In addition to basic permission control for RAM users, authentication based on time, Multi-Factor Authentication (MFA), and IP address is also supported.
Resource descriptions
Resource | Meaning | ARN |
DataView | Data view | acs:cmn:{#regionId}:{#accountId}:dataview/{#DataViewId} |
DedicatedLine | Leased line | acs:cmn:{#regionId}:{#accountId}:dedicatedline/{#LineId} |
AggregateData | Aggregate data | acs:cmn:{#regionId}:{#accountId}:aggregatedata/{#AggregateDataId} |
AgentsTask | Device task | acs:cmn:{#regionId}:{#accountId}:agentstask/{#AgentsTaskId} |
Device | Device | acs:cmn:{#regionId}:{#accountId}:device/{#DeviceId} |
DeviceProperty | Device property | acs:cmn:{#regionId}:{#accountId}:deviceproperty/{#PropertyId} |
InspectionItem | Inspection item | acs:cmn:{#regionId}:{#accountId}:inspectionitem/{#ItemId} |
InspectionTask | Inspection task | acs:cmn:{#regionId}:{#accountId}:inspectiontask/{#inspectionTaskId} |
MonitorItem | Metric | acs:cmn:{#regionId}:{#accountId}:monitoritem/{#MonitorItemId} |
NotificationGroup | Notification group | acs:cmn:{#regionId}:{#accountId}:notificationgroup/{#NotificationGroupId} |
Order | Ticket | acs:cmn:{#regionId}:{#accountId}:order/{#OrderId} |
PhysicalSpace | Physical space | acs:cmn:{#regionId}:{#accountId}:physicalspace/{#SpaceId} |
PortCollection | Port collection | acs:cmn:{#regionId}:{#accountId}:portcollection/{#PortCollectionId} |
Scheme | Change plan | acs:cmn:{#regionId}:{#accountId}:scheme/{#SchemeId} |
Script | Automation script | acs:cmn:{#regionId}:{#accountId}:script/{#ScriptId} |
SubscriptionItem | Subscription item | acs:cmn:{#regionId}:{#accountId}:subscriptionitem/{#SubscriptionItemId} |
Task | Automation task | acs:cmn:{#regionId}:{#accountId}:task/{#TaskId} |
Template | Automation template | acs:cmn:{#regionId}:{#accountId}:template/{#TemplateId} |
TimePeriod | Time period | acs:cmn:{#regionId}:{#accountId}:timeperiod/{#timePeriodId} |
Agent | Device | acs:cmn:{#regionId}:{#accountId}:agent/{#AgentId} |
DeviceForm | Device form | acs:cmn:{#regionId}:{#accountId}:deviceform/{#FormId} |
InspectionScript | Inspection script | acs:cmn:{#regionId}:{#accountId}:inspectionscript/{#ScriptId} |
Operation descriptions
Each resource has five corresponding actions: Create, List, Get, Update, and Delete. The format is as follows:
Action | Meaning | Corresponding resource |
cmn:CreateAggregateData | Create aggregate data | AggregateData |
cmn:ListAggregateData | List aggregate data | AggregateData |
cmn:GetAggregateData | Get aggregate data | AggregateData |
cmn:UpdateAggregateData | Update aggregate data | AggregateData |
cmn:DeleteAggregateData | Delete aggregate data | AggregateData |
Note: All actions that start with `List` use a plural resource name, which typically ends in "s". The `ListAggregateData` action is an exception. For example, `cmn:ListAgentsTasks`, `cmn:ListPortCollections`, and `cmn:ListSubscriptionItems`.
Exceptions
Action | Meaning | Corresponding resource |
cmn:DeletePortCollections | Delete port collections | PortCollection |
cmn:DisableScheme | Disable a change plan | Scheme |
cmn:EnableScheme | Enable a change plan | Scheme |
cmn:OpenNotification | Enable notifications | MonitorItem |
cmn:StopTask | Stop a task | Task |
cmn:BatchRetryTasks | Retry tasks in a batch | InspectionTask |
cmn:CloseNotification | Disable notifications | MonitorItem |
cmn:GetAlarmStatus | Get alert status | MonitorItem |
cmn:GetDeviceConfig | Get device configuration | Device |
cmn:GetDeviceConfigDiff | Compare device configurations | Device |
cmn:GetOrderStep | Open a ticket | Order |
cmn:GetRealtimeTask | Get a real-time task | InspectionTask |
cmn:ListAgentSecurityDomains | List device security domains | Agent |
cmn:ListAgentsTaskLogs | List device task logs | AgentsTask |
cmn:ListAlarmStatus | List alert statuses | MonitorItem |
cmn:ListAlarmStatusHistories | List alert status histories | MonitorItem |
cmn:ListAtomicSteps | List change plan steps | Scheme |
cmn:ListCliTasks | List client tasks | Task |
cmn:ListDeviceTasks | List device tasks | Task |
cmn:ListDeviceValues | List device property values | DeviceProperty |
cmn:ListMonitorData | List metrics | MonitorItem |
cmn:ListMonitorItemDeploymentConfigs | List metric deployment configurations | MonitorItem |
cmn:ListNotificationHistories | List notification histories | MonitorItem |
cmn:ListOrderSteps | List ticket steps | Order |
cmn:ListScriptVersions | List script versions | Script |
cmn:ListTaskLogs | List task logs | Task |
cmn:ListTasksHistories | List task histories | InspectionTask |
cmn:UpdateMonitorItemDeploymentConfigs | Update metric deployment configurations | MonitorItem |
cmn:UpdateOrderStep | Updating a ticket | Order |
cmn:UpdateScriptRules | Update script rules | Script |
cmn:UpdateScriptVersion | Update a script version | Script |
cmn:VerifyCrontab | Verify an inspection item | InspectionItem |
cmn:UpdateInspectionScriptStatus | Update inspection script status | InspectionScript |
cmn:DeleteInspectionScript | Delete an inspection script | InspectionScript |