Detalles del servicio de gestión de Java

En este tema se tratan los detalles de la escritura de políticas para controlar el acceso al servicio Java Management.

Tipos de recursos

fleets

jms-plugins

java-download-tokens

java-download-reports

Detalles de combinaciones de verbo + tipo de recurso

En las siguientes tablas, se muestran los permisos y las operaciones de API que abarca cada verbo. El nivel de acceso es acumulativo al recorrer la progresión inspect > read > use > manage. Por ejemplo, un grupo que puede utilizar un recurso también puede inspeccionar y leer ese recurso. Un signo más (+) en una celda de la tabla indica un acceso incremental en comparación con la celda directamente por encima, mientras que "no extra" indica que no hay acceso incremental.

fleets
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
inspect

FLEET_INSPECT

ListFleets

ListWorkRequest

ListWorkRequestErrors

ListWorkRequestLogs

ListBlocklists

ListWorkItems

ListDrsFiles

ninguna

read

INSPECT +

FLEET_READ

FLEET_QUERY_RESOURCES

GetFleet

GetWorkRequest

SummarizeJres

RequestSummarizedJres

SummarizeApplications

RequestSummarizedApplications

SummarizeInstallations

RequestSummarizedInstallations

SummarizeManagedInstances

RequestSummarizedManagedInstances

GetFleetAdvancedFeatureConfiguration

ListJreUsage

SummarizeJreUsage

SummarizeApplicationUsage

SummarizeDeployedApplicationUsage

SummarizeManagedInstanceUsage

SummarizeInstallationUsage

GetFleetAgentConfiguration

ListInstallationSites

ListFleetDiagnoses

SummarizeApplicationInstallationUsage

SummarizeDeployedApplicationInstallationUsage

SummarizeJavaServerUsage

SummarizeJavaServerInstanceUsage

SummarizeLibraryUsage

SummarizeResourceInventory

GetCryptoAnalysisResult

ListCryptoAnalysisResults

GetPerformanceTuningAnalysisResult

ListPerformanceTuningAnalysisResults

GetJavaMigrationAnalysisResult

ListJavaMigrationAnalysisResults

GetDrsFile

GetExportSetting

GetExportStatus

GenerateLoadPipelineScript

GenerateAgentInstallerConfiguration

ListAgentInstallers

GetAgentInstallerContent

ListFleetErrors

ListPluginErrors

SummarizeFleetErrors

SummarizePluginErrors

ninguna

use

READ +

FLEET_UPDATE

UpdateFleet

UpdateFleetAgentConfiguration

CreateBlocklist

DeleteBlocklist

CancelWorkRequest

RemoveFleetInstallationSites

GenerateAgentDeployScript

ScanJavaServerUsage

ScanLibraryUsage

RequestJfrRecordings

RequestCryptoAnalyses

DeleteCryptoAnalysisResult

RequestJavaMigrationAnalyses

RequestPerformanceTuningAnalyses

DeletePerformanceTuningAnalysisResult

DeleteJavaMigrationAnalysisResult

RequestDeployedApplicationMigrationAnalyses

EnableDrs

DisableDrs

UpdateExportSetting

ninguna

manage

USE +

FLEET_CREATE

FLEET_DELETE

FLEET_MOVE

FLEET_ADVANCED_FEATURES_UPDATE

CreateFleet

DeleteFleet

ChangeFleetCompartment

UpdateFleetAdvancedFeatureConfiguration

RequestUploadDrsFile

RequestUpdateDrsFile

DeleteDrsFile

CreateDrsFile

UpdateDrsFile

ninguna

jms-plugins
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
inspect JMS_PLUGIN_INSPECT ListJmsPlugins

ninguna

read

INSPECT +

JMS_PLUGIN_READ

GetJmsPlugin

ninguna

use

READ +

JMS_PLUGIN_UPDATE

UpdateJmsPlugin

ninguna

manage

USE +

JMS_PLUGIN_CREATE+JMS_PLUGIN_DELETE

CreateJmsPlugin

DeleteJmsPlugin

ninguna

java-download-tokens
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
inspect

JAVA_DOWNLOAD_TOKEN_INSPECT

ListJavaDownloadTokens

ListWorkRequest

ListWorkRequestErrors

ListWorkRequestLogs

ninguna

read

INSPECCIONAR + JAVA_DOWNLOAD_TOKEN_READ

GetJavaDownloadToken

GetWorkRequest

ninguna

use

READ

ninguna

ninguna

manage

USE +

JAVA_DOWNLOAD_TOKEN_CREATE

JAVA_DOWNLOAD_TOKEN_UPDATE

JAVA_DOWNLOAD_TOKEN_DELETE

CreateJavaDownloadToken

UpdateJavaDownloadToken

DeleteJavaDownloadToken

CancelWorkRequest

ninguna

java-download-reports
Verbos Permisos API totalmente cubiertas API parcialmente cubiertas
inspect

JAVA_DOWNLOAD_REPORT_INSPECT

ListJavaDownloadReports

ninguna

read

INSPECCIONAR + JAVA_DOWNLOAD_REPORT_READ

GetJavaDownloadReport

GetJavaDownloadReportContent

RequestSummarizedJavaDownloadCounts

ListJavaDownloadRecords

ninguna

use

READ

ninguna

ninguna

manage

USE +

JAVA_DOWNLOAD_REPORT_CREATE

JAVA_DOWNLOAD_REPORT_DELETE

CreateJavaDownloadReport

DeleteJavaDownloadReport

ninguna

Permisos requeridos para cada operación de API

En la siguiente tabla se muestran las operaciones de API de conjuntos de Java Management Service:

Operación de API Permisos necesarios para utilizar la operación
ListFleets FLEET_INSPECT
GetFleet FLEET_READ
UpdateFleet

FLEET_UPDATE

ChangeFleetCompartment FLEET_MOVE
CreateFleet FLEET_CREATE
DeleteFleet

FLEET_DELETE

SummarizeJres FLEET_READ y FLEET_QUERY_RESOURCES
RequestSummarizedJres FLEET_READ y FLEET_QUERY_RESOURCES
SummarizeApplications FLEET_READ y FLEET_QUERY_RESOURCES
RequestSummarizedApplications FLEET_READ y FLEET_QUERY_RESOURCES
SummarizeInstallations FLEET_READ y FLEET_QUERY_RESOURCES
RequestSummarizedInstallations

FLEET_READ y FLEET_QUERY_RESOURCES

SummarizeManagedInstances FLEET_READ y FLEET_QUERY_RESOURCES
RequestSummarizedManagedInstances FLEET_READ y FLEET_QUERY_RESOURCES
ListWorkRequest FLEET_INSPECT
GetWorkRequest FLEET_READ
ListWorkRequestErrors FLEET_INSPECT
ListWorkRequestLogs FLEET_INSPECT
GetFleetAdvancedFeatureConfiguration FLEET_READ
UpdateFleetAdvancedFeatureConfiguration FLEET_ADVANCED_FEATURES_UPDATE

ListJreUsage

FLEET_READ y FLEET_QUERY_RESOURCES

SummarizeJreUsage

FLEET_READ y FLEET_QUERY_RESOURCES

RequestSummarizedJreUsage

FLEET_READ y FLEET_QUERY_RESOURCES

SummarizeApplicationUsage

FLEET_READ y FLEET_QUERY_RESOURCES

RequestSummarizedApplicationUsage

FLEET_READ y FLEET_QUERY_RESOURCES

SummarizeInstallationUsage

FLEET_READ y FLEET_QUERY_RESOURCES

RequestSummarizedInstallationUsage

FLEET_READ y FLEET_QUERY_RESOURCES

SummarizeManagedInstanceUsage

FLEET_READ y FLEET_QUERY_RESOURCES

RequestSummarizedManagedInstanceUsage

FLEET_READ y FLEET_QUERY_RESOURCES

ListBlocklists

FLEET_INSPECT

CreateBlocklist

FLEET_UPDATE

DeleteBlocklist

FLEET_UPDATE

CancelWorkRequest

FLEET_UPDATE

ListWorkItems

FLEET_INSPECT

ListInstallationSites

FLEET_READ y FLEET_QUERY_RESOURCES

RequestDeleteInstallationSites

FLEET_UPDATE

AddFleetInstallationSites

FLEET_UPDATE

RemoveFleetInstallationSites

FLEET_UPDATE

GenerateAgentDeployScript

FLEET_UPDATE

ListJavaFamilies

GetJavaFamily

ListJavaReleases

GetJavaRelease

ListAnnouncements

GetFleetAdvancedFeatureConfiguration

FLEET_READ

UpdateFleetAdvancedFeatureConfiguration

FLEET_ADVANCED_FEATURES_UPDATE
ListFleetDiagnoses FLEET_READ
SummarizeApplicationInstallationUsage FLEET_READ y FLEET_QUERY_RESOURCES
SummarizeDeployedApplicationInstallationUsage FLEET_READ y FLEET_QUERY_RESOURCES
SummarizeDeployedApplicationUsage FLEET_READ y FLEET_QUERY_RESOURCES
SummarizeJavaServerInstanceUsage FLEET_READ y FLEET_QUERY_RESOURCES
ScanJavaServerUsage FLEET_UPDATE
SummarizeJavaServerUsage FLEET_READ y FLEET_QUERY_RESOURCES
RequestJfrRecordings FLEET_UPDATE
RequestCryptoAnalyses FLEET_UPDATE
ListCryptoAnalysisResults FLEET_QUERY_RESOURCES
GetCryptoAnalysisResult FLEET_READ
DeleteCryptoAnalysisResult FLEET_UPDATE
RequestJavaMigrationAnalyses FLEET_UPDATE
RequestPerformanceTuningAnalyses FLEET_UPDATE
DeletePerformanceTuningAnalysisResult FLEET_UPDATE
GetPerformanceTuningAnalysisResult FLEET_READ
ListPerformanceTuningAnalysisResults FLEET_QUERY_RESOURCES
SummarizeResourceInventory FLEET_READ y FLEET_QUERY_RESOURCES
DeleteJavaMigrationAnalysisResult FLEET_UPDATE
GetJavaMigrationAnalysisResult FLEET_READ
RequestDeployedApplicationMigrationAnalyses FLEET_UPDATE
ListJavaMigrationAnalysisResults FLEET_QUERY_RESOURCES
RequestUploadDrsFile FLEET_ADVANCED_FEATURES_UPDATE
RequestUpdateDrsFile FLEET_ADVANCED_FEATURES_UPDATE
DeleteDrsFile FLEET_ADVANCED_FEATURES_UPDATE
ListDrsFiles FLEET_INSPECT
GetDrsFile FLEET_READ
EnableDrs FLEET_UPDATE
DisableDrs FLEET_UPDATE
CreateDrsFile FLEET_ADVANCED_FEATURES_UPDATE
UpdateDrsFile FLEET_ADVANCED_FEATURES_UPDATE
GetExportSetting FLEET_READ
UpdateExportSetting FLEET_UPDATE
GetExportStatus FLEET_READ
GenerateLoadPipelineScript FLEET_READ
GenerateAgentInstallerConfiguration FLEET_READ
ListAgentInstallers FLEET_READ
GetAgentInstallerContent FLEET_READ
ListFleetErrors FLEET_READ y FLEET_QUERY_RESOURCES
ListPluginErrors FLEET_READ y FLEET_QUERY_RESOURCES
SummarizeFleetErrors FLEET_READ y FLEET_QUERY_RESOURCES
SummarizePluginErrors FLEET_READ y FLEET_QUERY_RESOURCES

En la siguiente tabla, se muestran las operaciones de API JmsPlugin de Java Management Service en orden alfabético:

Operación de API Permisos necesarios para utilizar la operación
CreateJmsPlugin JMS_PLUGIN_CREATE
DeleteJmsPlugin JMS_PLUGIN_DELETE
GetJmsPlugin JMS_PLUGIN_READ
ListJmsPlugins JMS_PLUGIN_INSPECT
UpdateJmsPlugin JMS_PLUGIN_UPDATE

En la siguiente tabla se muestran las operaciones de API de descarga de Java de Java Management Service en orden alfabético:

Operación de API Permisos necesarios para utilizar la operación
CancelWorkRequest JAVA_DOWNLOAD_TOKEN_DELETE
CreateJavaDownloadReport JAVA_DOWNLOAD_REPORT_CREATE
CreateJavaDownloadToken JAVA_DOWNLOAD_TOKEN_CREATE
DeleteJavaDownloadReport

JAVA_DOWNLOAD_REPORT_DELETE

DeleteJavaDownloadToken JAVA_DOWNLOAD_TOKEN_DELETE
GetJavaDownloadReport JAVA_DOWNLOAD_REPORT_READ
GetJavaDownloadReportContent JAVA_DOWNLOAD_REPORT_READ
GetJavaDownloadToken JAVA_DOWNLOAD_TOKEN_READ
GetWorkRequest JAVA_DOWNLOAD_TOKEN_READ
ListJavaDownloadRecords JAVA_DOWNLOAD_REPORT_READ
ListJavaDownloadReports JAVA_DOWNLOAD_REPORT_INSPECT
ListJavaDownloadTokens JAVA_DOWNLOAD_TOKEN_INSPECT
ListWorkRequest JAVA_DOWNLOAD_TOKEN_INSPECT
ListWorkRequestErrors JAVA_DOWNLOAD_TOKEN_INSPECT
ListWorkRequestLogs JAVA_DOWNLOAD_TOKEN_INSPECT
RequestSummarizedJavaDownloadCounts JAVA_DOWNLOAD_REPORT_READ
UpdateJavaDownloadToken

JAVA_DOWNLOAD_TOKEN_UPDATE

Para obtener más información sobre los permisos, consulte Permisos.