Details for the Events Service
This topic covers details for writing user IAM policies that control access to rules for the Events service.
Resource-Types
cloudevents-rules
Supported Variables
Only the general variables are supported (see General Variables for All Requests).
Details for Verb + Resource-Type Combinations
The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. For example, a group that can use a resource can also inspect and read that resource. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.
For example, the read verb for cloudevents-rules includes the same permissions and API
operations as the inspect verb, plus the EVENTRULE_READ permissions and
the corresponding API operation GetEventRule. The use
verb adds no extra permissions or API operations compared to read.
However, manage adds more permissions and operations compared to
use.
cloudevents-rules
| Verbs | Permissions | APIs Fully Covered | APIs Partially Covered |
|---|---|---|---|
| inspect |
EVENTRULE_LIST |
ListRules
|
none |
| read |
INSPECT + EVENTRULE_READ |
INSPECT +
|
none |
| use |
no extra |
no extra |
none |
| manage |
USE + EVENTRULE_CREATE EVENTRULE_DELETE EVENTRULE_MODIFY |
USE +
|
none |
Permissions Required for Each API Operation
The following table lists the API operations in a logical order, grouped by resource type.
For information about permissions, see Permissions.
| API Operation | Permissions Required to Use the Operation |
|---|---|
ListRules
|
EVENTRULE_LIST |
CreateRule
|
EVENTRULE_CREATE |
GetRule
|
EVENTRULE_READ |
DeleteRule
|
EVENTRULE_DELETE |
UpdateRule
|
EVENTRULE_MODIFY |
ChangeRuleCompartment
|
EVENTRULE_MODIFY |