Authorization

Some HSS functions depend on other cloud services. To use these functions, you need to assign HSS the permissions for the cloud service resources.

Table 1 describes the cloud service resource permissions that HSS needs you to assign.

Table 1 Required permissions on other cloud service resources
Function	Required Permission	Cloud Service Permission		Usage
Function	Required Permission	Permission	Action	Usage
Container audit (image repository audit)	CTSOperatePolicy	Query audit events	cts:trace:list	Obtain image operation logs (CTS logs of SWR).
Installation and configuration on servers	VPCOperatePolicy	Create a port	vpc:ports:create	Create network interface cards (NICs) and modify security groups to ensure that the port used for installing the agent is accessible.
		Delete a port	vpc:ports:delete
		Create a security group rule	vpc:securityGroupRules:create
		Delete a security group rule	vpc:securityGroupRules:delete
		Query ports or details about a port	vpc:ports:get
		Query networks or details about a network	vpc:networks:get
		Query subnets or details about a subnet	vpc:subnets:get
	VPCEPOperatePolicy	Create an endpoint	vpcep:endpoints:create	Maintain the network channel Between the agent and the HSS cloud protection center (master).
		Query endpoints	vpcep:endpoints:list
		Delete a VPC endpoint	vpcep:endpoints:delete
Installation and configuration on containers	CCEOperatePolicy	Query Cluster Information	cce:cluster:get	Manage the lifecycle of HSS-Daemonset and Configmap in a CCE cluster.
		Query Clusters in a Project	cce:cluster:list
		Query Agencies Based on Specified Conditions	iam:agencies:listAgencies

Log in to the management console.
Click in the upper left corner of the page, select a region, and choose Security > Host Security Service. The HSS page is displayed.

In the navigation pane, choose Installation & Configuration > Permissions Management.
Click Assign. The Assign dialog box is displayed.
Select permissions and click OK.

Log in to the management console.
Click in the upper left corner of the page, select a region, and choose Security > Host Security Service. The HSS page is displayed.
In the navigation pane, choose Installation & Configuration > Permissions Management.
Locate a permission and click Remove in the Operation column. The Remove Permissions dialog box is displayed.
Alternatively, select multiple permissions and click Remove above the list.
Confirm the permission information, enter DELETE in the dialog box, and click OK.
If the permission is no longer displayed in the permission list, it indicates the permission has been removed.

Была ли эта статья полезна?