From 46d24ba35819bcea8865ffd421f1007aab28dae3 Mon Sep 17 00:00:00 2001 From: weihongmin1 Date: Wed, 14 Jan 2026 14:13:49 +0000 Subject: [PATCH] IAM API 0401 Version Reviewed-by: Belejkanic, Lukas Co-authored-by: weihongmin1 Co-committed-by: weihongmin1 --- docs/iam/api-ref/ALL_META.TXT.json | 444 ++++---- docs/iam/api-ref/CLASS.TXT.json | 696 ++++++------ docs/iam/api-ref/en-us_topic_0057845554.html | 74 +- docs/iam/api-ref/en-us_topic_0057845558.html | 134 +-- docs/iam/api-ref/en-us_topic_0057845561.html | 106 +- docs/iam/api-ref/en-us_topic_0057845562.html | 102 +- docs/iam/api-ref/en-us_topic_0057845564.html | 24 +- docs/iam/api-ref/en-us_topic_0057845567.html | 207 +++- docs/iam/api-ref/en-us_topic_0057845568.html | 396 ++++++- docs/iam/api-ref/en-us_topic_0057845571.html | 356 +++++-- docs/iam/api-ref/en-us_topic_0057845574.html | 46 +- docs/iam/api-ref/en-us_topic_0057845575.html | 119 ++- docs/iam/api-ref/en-us_topic_0057845581.html | 14 +- docs/iam/api-ref/en-us_topic_0057845583.html | 852 ++++++++++----- docs/iam/api-ref/en-us_topic_0057845585.html | 331 +++++- docs/iam/api-ref/en-us_topic_0057845586.html | 9 + docs/iam/api-ref/en-us_topic_0057845587.html | 135 ++- docs/iam/api-ref/en-us_topic_0057845590.html | 395 ++++++- docs/iam/api-ref/en-us_topic_0057845591.html | 24 +- docs/iam/api-ref/en-us_topic_0057845595.html | 111 +- docs/iam/api-ref/en-us_topic_0057845596.html | 94 +- docs/iam/api-ref/en-us_topic_0057845600.html | 125 ++- docs/iam/api-ref/en-us_topic_0057845602.html | 77 +- docs/iam/api-ref/en-us_topic_0057845603.html | 260 ++++- docs/iam/api-ref/en-us_topic_0057845609.html | 113 +- docs/iam/api-ref/en-us_topic_0057845611.html | 139 ++- docs/iam/api-ref/en-us_topic_0057845612.html | 14 +- docs/iam/api-ref/en-us_topic_0057845613.html | 60 +- docs/iam/api-ref/en-us_topic_0057845615.html | 40 +- docs/iam/api-ref/en-us_topic_0057845616.html | 68 +- docs/iam/api-ref/en-us_topic_0057845618.html | 108 +- docs/iam/api-ref/en-us_topic_0057845622.html | 142 ++- docs/iam/api-ref/en-us_topic_0057845625.html | 76 +- docs/iam/api-ref/en-us_topic_0057845626.html | 4 +- docs/iam/api-ref/en-us_topic_0057845629.html | 474 ++++++++- docs/iam/api-ref/en-us_topic_0057845637.html | 40 +- docs/iam/api-ref/en-us_topic_0057845638.html | 87 +- docs/iam/api-ref/en-us_topic_0057845639.html | 103 +- docs/iam/api-ref/en-us_topic_0057845640.html | 268 ++++- docs/iam/api-ref/en-us_topic_0057845644.html | 96 +- docs/iam/api-ref/en-us_topic_0057845645.html | 203 +++- docs/iam/api-ref/en-us_topic_0057845650.html | 112 +- docs/iam/api-ref/en-us_topic_0057845652.html | 43 +- docs/iam/api-ref/en-us_topic_0057845653.html | 49 +- docs/iam/api-ref/en-us_topic_0064274720.html | 822 +++++++++++--- docs/iam/api-ref/en-us_topic_0066154565.html | 134 ++- docs/iam/api-ref/en-us_topic_0066154566.html | 149 ++- docs/iam/api-ref/en-us_topic_0066154567.html | 124 ++- docs/iam/api-ref/en-us_topic_0067148043.html | 156 ++- docs/iam/api-ref/en-us_topic_0067148044.html | 142 ++- docs/iam/api-ref/en-us_topic_0067148045.html | 111 +- docs/iam/api-ref/en-us_topic_0067148046.html | 129 ++- docs/iam/api-ref/en-us_topic_0074171149.html | 45 +- docs/iam/api-ref/en-us_topic_0079466135.html | 20 +- docs/iam/api-ref/en-us_topic_0079467614.html | 12 +- docs/iam/api-ref/en-us_topic_0079467615.html | 10 +- docs/iam/api-ref/en-us_topic_0079467617.html | 137 ++- docs/iam/api-ref/en-us_topic_0079467622.html | 8 +- docs/iam/api-ref/en-us_topic_0079467623.html | 127 ++- docs/iam/api-ref/en-us_topic_0079467625.html | 10 +- docs/iam/api-ref/en-us_topic_0079467627.html | 8 +- docs/iam/api-ref/en-us_topic_0079578164.html | 252 ++++- docs/iam/api-ref/en-us_topic_0079578165.html | 8 +- docs/iam/api-ref/en-us_topic_0079578166.html | 224 +++- docs/iam/api-ref/en-us_topic_0097949518.html | 366 +++++-- docs/iam/api-ref/iam_01_0008.html | 2 +- docs/iam/api-ref/iam_02_0003.html | 255 ++++- docs/iam/api-ref/iam_02_0004.html | 136 ++- docs/iam/api-ref/iam_02_0006.html | 15 +- docs/iam/api-ref/iam_02_0007.html | 73 +- docs/iam/api-ref/iam_02_0008.html | 14 +- docs/iam/api-ref/iam_02_0011.html | 44 +- docs/iam/api-ref/iam_02_0012.html | 8 +- docs/iam/api-ref/iam_02_0013.html | 4 +- docs/iam/api-ref/iam_02_0014.html | 276 ++--- docs/iam/api-ref/iam_02_0022.html | 93 +- docs/iam/api-ref/iam_02_0023.html | 2 +- docs/iam/api-ref/iam_02_0024.html | 7 +- docs/iam/api-ref/iam_02_0027.html | 196 +++- docs/iam/api-ref/iam_02_0028.html | 83 +- docs/iam/api-ref/iam_02_0029.html | 124 ++- docs/iam/api-ref/iam_02_0030.html | 45 +- docs/iam/api-ref/iam_02_0046.html | 944 ++++++++++------ docs/iam/api-ref/iam_02_0113.html | 38 +- docs/iam/api-ref/iam_02_0510.html | 12 +- docs/iam/api-ref/iam_02_0511.html | 6 +- docs/iam/api-ref/iam_02_0633.html | 192 ++++ docs/iam/api-ref/iam_02_0634.html | 183 ++++ docs/iam/api-ref/iam_03_0002.html | 2 +- docs/iam/api-ref/iam_03_0006.html | 1006 ++++++++++++++++++ docs/iam/api-ref/iam_08_0004.html | 16 +- docs/iam/api-ref/iam_08_0014.html | 6 +- docs/iam/api-ref/iam_08_0015.html | 23 +- docs/iam/api-ref/iam_08_0016.html | 4 +- docs/iam/api-ref/iam_08_0021.html | 44 +- docs/iam/api-ref/iam_10_0011.html | 8 +- docs/iam/api-ref/iam_12_0513.html | 17 + docs/iam/api-ref/iam_13_0605.html | 298 ++++-- docs/iam/api-ref/iam_13_0606.html | 213 +++- docs/iam/api-ref/iam_19_0003.html | 4 +- docs/iam/api-ref/iam_20_0000.html | 2 + 101 files changed, 11708 insertions(+), 3051 deletions(-) create mode 100644 docs/iam/api-ref/iam_02_0633.html create mode 100644 docs/iam/api-ref/iam_02_0634.html create mode 100644 docs/iam/api-ref/iam_03_0006.html create mode 100644 docs/iam/api-ref/iam_12_0513.html diff --git a/docs/iam/api-ref/ALL_META.TXT.json b/docs/iam/api-ref/ALL_META.TXT.json index b947b34b4..1627635d3 100644 --- a/docs/iam/api-ref/ALL_META.TXT.json +++ b/docs/iam/api-ref/ALL_META.TXT.json @@ -91,7 +91,7 @@ "node_id":"iam_02_0008.xml", "product_code":"iam", "code":"5", - "des":"This section describes the structure of a REST API request, and uses the IAM API for obtaining a user token (see Obtaining a User Token) as an example to demonstrate how ", + "des":"This section describes the structure of a REST API request, and uses the IAM API for obtaining a user token (see Obtaining a User Token Through Password Authentication) a", "doc_type":"api", "kw":"Making an API Request,Calling APIs,API Reference", "search_title":"", @@ -198,7 +198,7 @@ "code":"10", "des":"This API is used to obtain a token through username/password authentication. A token is a system object encapsulating the identity and permissions of a user. When calling", "doc_type":"api", - "kw":"Obtaining a User Token,Token Management,API Reference", + "kw":"Obtaining a User Token Through Password Authentication,Token Management,API Reference", "search_title":"", "metedata":[ { @@ -209,14 +209,35 @@ "IsBot":"Yes" } ], - "title":"Obtaining a User Token", + "title":"Obtaining a User Token Through Password Authentication", + "githuburl":"" + }, + { + "uri":"iam_03_0006.html", + "node_id":"iam_03_0006.xml", + "product_code":"iam", + "code":"11", + "des":"This API is used to obtain an IAM user token using the username, password, and virtual MFA device. To use this API, ensure that virtual MFA-based login protection has bee", + "doc_type":"api", + "kw":"Obtaining a User Token Through Password Authentication and Virtual MFA,Token Management,API Referenc", + "search_title":"", + "metedata":[ + { + "documenttype":"api", + "prodname":"iam", + "Ismulti":"No", + "opensource":"true", + "IsBot":"Yes" + } + ], + "title":"Obtaining a User Token Through Password Authentication and Virtual MFA", "githuburl":"" }, { "uri":"en-us_topic_0064274720.html", "node_id":"en-us_topic_0064274720.xml", "product_code":"iam", - "code":"11", + "code":"12", "des":"This API is used to obtain an agency token. For example, after a trust relationship is established between account A (delegating party) and account B (delegated party), t", "doc_type":"api", "kw":"Obtaining an Agency Token,Token Management,API Reference", @@ -237,8 +258,8 @@ "uri":"en-us_topic_0057845585.html", "node_id":"en-us_topic_0057845585.xml", "product_code":"iam", - "code":"12", - "des":"This API is used to check the validity of a specified token. If the token is valid, detailed information about the token will be returned.GET /v3/auth/tokensParameters in", + "code":"13", + "des":"This API is used to check the validity of a specified token. If the token is valid, detailed information about the token will be returned.GET /v3/auth/tokensQuery paramet", "doc_type":"api", "kw":"Verifying a Token and Returning a Valid Token,Token Management,API Reference", "search_title":"", @@ -258,7 +279,7 @@ "uri":"en-us_topic_0057845586.html", "node_id":"en-us_topic_0057845586.xml", "product_code":"iam", - "code":"13", + "code":"14", "des":"This API can be used by the administrator to verify the token of a user or used by a user to verify their token. The administrator can only verify the token of a user cre", "doc_type":"api", "kw":"Verifying a Token,Token Management,API Reference", @@ -279,7 +300,7 @@ "uri":"iam_02_0063.html", "node_id":"iam_02_0063.xml", "product_code":"iam", - "code":"14", + "code":"15", "des":"This API is used to delete a token no matter whether the token has expired or not.DELETE /v3/auth/tokensParameters in the request headerParameterMandatoryTypeDescriptionX", "doc_type":"api", "kw":"Deleting a User Token,Token Management,API Reference", @@ -300,7 +321,7 @@ "uri":"en-us_topic_0097942776.html", "node_id":"en-us_topic_0097942776.xml", "product_code":"iam", - "code":"15", + "code":"16", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Access Key Management", @@ -321,7 +342,7 @@ "uri":"en-us_topic_0097949518.html", "node_id":"en-us_topic_0097949518.xml", "product_code":"iam", - "code":"16", + "code":"17", "des":"You can obtain a temporary AK/SK and security token (offline AK/SK) by using a user token, agency token, and federated token. A temporary AK/SK is a token with temporary ", "doc_type":"api", "kw":"Obtaining a Temporary AK/SK,Access Key Management,API Reference", @@ -342,7 +363,7 @@ "uri":"iam_03_0001.html", "node_id":"iam_03_0001.xml", "product_code":"iam", - "code":"17", + "code":"18", "des":"This API can be used by the administrator to create a permanent access key for an IAM user or used by an IAM user to create a permanent access key for itself.Access keys ", "doc_type":"api", "kw":"Creating a Permanent Access Key,Access Key Management,API Reference", @@ -363,7 +384,7 @@ "uri":"iam_03_0003.html", "node_id":"iam_03_0003.xml", "product_code":"iam", - "code":"18", + "code":"19", "des":"This API can be used by the administrator to list all permanent access key of an IAM user or used by an IAM user to list all of their permanent access keys.The API can be", "doc_type":"api", "kw":"Listing Permanent Access Keys,Access Key Management,API Reference", @@ -384,7 +405,7 @@ "uri":"iam_03_0002.html", "node_id":"iam_03_0002.xml", "product_code":"iam", - "code":"19", + "code":"20", "des":"This API can be used by the administrator to query the specified permanent access key of an IAM user or used by an IAM user to query one of their permanent access keys.Th", "doc_type":"api", "kw":"Querying a Permanent Access Key,Access Key Management,API Reference", @@ -405,7 +426,7 @@ "uri":"iam_03_0004.html", "node_id":"iam_03_0004.xml", "product_code":"iam", - "code":"20", + "code":"21", "des":"This API can be used by the administrator to modify the specified permanent access key of an IAM user or used by an IAM user to modify one of their permanent access keys.", "doc_type":"api", "kw":"Modifying a Permanent Access Key,Access Key Management,API Reference", @@ -426,7 +447,7 @@ "uri":"iam_03_0005.html", "node_id":"iam_03_0005.xml", "product_code":"iam", - "code":"21", + "code":"22", "des":"This API can be used by the administrator to delete the specified permanent access key of an IAM user or used by an IAM user to delete one of their permanent access keys.", "doc_type":"api", "kw":"Deleting a Permanent Access Key,Access Key Management,API Reference", @@ -447,7 +468,7 @@ "uri":"en-us_topic_0067148042.html", "node_id":"en-us_topic_0067148042.xml", "product_code":"iam", - "code":"22", + "code":"23", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Region Management", @@ -468,7 +489,7 @@ "uri":"en-us_topic_0067148043.html", "node_id":"en-us_topic_0067148043.xml", "product_code":"iam", - "code":"23", + "code":"24", "des":"This API is used to query a region list.GET /v3/regionsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill application/json;charset", "doc_type":"api", "kw":"Querying a Region List,Region Management,API Reference", @@ -489,7 +510,7 @@ "uri":"en-us_topic_0067148044.html", "node_id":"en-us_topic_0067148044.xml", "product_code":"iam", - "code":"24", + "code":"25", "des":"This API is used to query region details.URI formatGET /v3/regions/{region_id}GET /v3/regions/{region_id}URI parametersParameterMandatoryTypeDescriptionregion_idYesString", "doc_type":"api", "kw":"Querying Region Details,Region Management,API Reference", @@ -510,7 +531,7 @@ "uri":"en-us_topic_0057845642.html", "node_id":"en-us_topic_0057845642.xml", "product_code":"iam", - "code":"25", + "code":"26", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Project Management", @@ -531,8 +552,8 @@ "uri":"en-us_topic_0057845625.html", "node_id":"en-us_topic_0057845625.xml", "product_code":"iam", - "code":"26", - "des":"This API is used to query project information based on the specified criteria.URI formatGET /v3/projects{?domain_id,name,enabled,parent_id,is_domain,page,per_page}GET /v3", + "code":"27", + "des":"This API is used to query project information based on the specified criteria.URI formatGET /v3/projectsGET /v3/projectsURI parametersParameterMandatoryTypeDescriptiondom", "doc_type":"api", "kw":"Querying Project Information Based on the Specified Criteria,Project Management,API Reference", "search_title":"", @@ -552,7 +573,7 @@ "uri":"en-us_topic_0057845622.html", "node_id":"en-us_topic_0057845622.xml", "product_code":"iam", - "code":"27", + "code":"28", "des":"This API is used to query the project list of a specified user.URI formatGET /v3/users/{user_id}/projectsGET /v3/users/{user_id}/projectsURI parametersParameterMandatoryT", "doc_type":"api", "kw":"Querying a User Project List,Project Management,API Reference", @@ -573,7 +594,7 @@ "uri":"en-us_topic_0057845558.html", "node_id":"en-us_topic_0057845558.xml", "product_code":"iam", - "code":"28", + "code":"29", "des":"This API is used to query the list of projects accessible to users.GET /v3/auth/projectsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesSt", "doc_type":"api", "kw":"Querying the List of Projects Accessible to Users,Project Management,API Reference", @@ -594,7 +615,7 @@ "uri":"en-us_topic_0066154565.html", "node_id":"en-us_topic_0066154565.xml", "product_code":"iam", - "code":"29", + "code":"30", "des":"This API is used to create a project.POST /v3/projectsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill application/json;charset=", "doc_type":"api", "kw":"Creating a Project,Project Management,API Reference", @@ -615,7 +636,7 @@ "uri":"en-us_topic_0066154566.html", "node_id":"en-us_topic_0066154566.xml", "product_code":"iam", - "code":"30", + "code":"31", "des":"This API is used to modify project information.URI formatPATCH /v3/projects/{project_id}PATCH /v3/projects/{project_id}URI parametersParameterMandatoryTypeDescriptionproj", "doc_type":"api", "kw":"Modifying Project Data,Project Management,API Reference", @@ -636,7 +657,7 @@ "uri":"en-us_topic_0066154567.html", "node_id":"en-us_topic_0066154567.xml", "product_code":"iam", - "code":"31", + "code":"32", "des":"This API is used to query detailed information about a project based on the project ID.URI formatGET /v3/projects/{project_id}GET /v3/projects/{project_id}URI parametersP", "doc_type":"api", "kw":"Querying Information About a Specified Project,Project Management,API Reference", @@ -657,7 +678,7 @@ "uri":"en-us_topic_0074171149.html", "node_id":"en-us_topic_0074171149.xml", "product_code":"iam", - "code":"32", + "code":"33", "des":"This API is used to set the status of a specified project. The project statuses include Normal and Suspended.URI formatPUT /v3-ext/projects/{project_id}PUT /v3-ext/projec", "doc_type":"api", "kw":"Setting the Status of a Specified Project,Project Management,API Reference", @@ -678,7 +699,7 @@ "uri":"en-us_topic_0079466135.html", "node_id":"en-us_topic_0079466135.xml", "product_code":"iam", - "code":"33", + "code":"34", "des":"This API is used to query details about a specified project, including the project status.URI formatGET /v3-ext/projects/{project_id}GET /v3-ext/projects/{project_id}URI ", "doc_type":"api", "kw":"Querying Information and Status of a Specified Project,Project Management,API Reference", @@ -699,7 +720,7 @@ "uri":"en-us_topic_0094012960.html", "node_id":"en-us_topic_0094012960.xml", "product_code":"iam", - "code":"34", + "code":"35", "des":"This API is used to delete a project.URI formatDELETE /v3/projects/{project_id}DELETE /v3/projects/{project_id}URI parametersParameterMandatoryTypeDescriptionproject_idYe", "doc_type":"api", "kw":"Deleting a Project,Project Management,API Reference", @@ -720,7 +741,7 @@ "uri":"iam_02_0037.html", "node_id":"iam_02_0037.xml", "product_code":"iam", - "code":"35", + "code":"36", "des":"This API is used to query the quotas of a specified project.URI formatGET /v3.0/OS-QUOTA/projects/{project_id}GET /v3.0/OS-QUOTA/projects/{project_id}URI parametersStatus", "doc_type":"api", "kw":"Querying the Quotas of a Project,Project Management,API Reference", @@ -741,7 +762,7 @@ "uri":"en-us_topic_0057845621.html", "node_id":"en-us_topic_0057845621.xml", "product_code":"iam", - "code":"36", + "code":"37", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Tenant Management", @@ -762,7 +783,7 @@ "uri":"en-us_topic_0057845574.html", "node_id":"en-us_topic_0057845574.xml", "product_code":"iam", - "code":"37", + "code":"38", "des":"This API is used to query the list of domains accessible to users.GET /v3/auth/domainsParameters in the request headerParameterMandatoryTypeDescriptionX-Auth-TokenYesStri", "doc_type":"api", "kw":"Querying the List of Domains Accessible to Users,Tenant Management,API Reference", @@ -783,7 +804,7 @@ "uri":"iam_02_0007.html", "node_id":"iam_02_0007.xml", "product_code":"iam", - "code":"38", + "code":"39", "des":"This API is used to query the password strength policy, including its regular expression and description.URI formatGET /v3/domains/{domain_id}/config/security_complianceG", "doc_type":"api", "kw":"Querying the Password Strength Policy,Tenant Management,API Reference", @@ -804,7 +825,7 @@ "uri":"iam_02_0113.html", "node_id":"iam_02_0113.xml", "product_code":"iam", - "code":"39", + "code":"40", "des":"This API is used to query the password strength policy by option. The option can be the regular expression and description of the password strength policy.URI formatGET /", "doc_type":"api", "kw":"Querying the Password Strength Policy by Option,Tenant Management,API Reference", @@ -825,7 +846,7 @@ "uri":"iam_02_0114.html", "node_id":"iam_02_0114.xml", "product_code":"iam", - "code":"40", + "code":"41", "des":"This API is used to query a resource quota. You can query the quota of users, user groups, identity providers, agencies, and policies.URI formatGET /v3.0/OS-QUOTA/domains", "doc_type":"api", "kw":"Querying a Resource Quota,Tenant Management,API Reference", @@ -846,7 +867,7 @@ "uri":"en-us_topic_0057845593.html", "node_id":"en-us_topic_0057845593.xml", "product_code":"iam", - "code":"41", + "code":"42", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"User Management", @@ -867,7 +888,7 @@ "uri":"en-us_topic_0057845638.html", "node_id":"en-us_topic_0057845638.xml", "product_code":"iam", - "code":"42", + "code":"43", "des":"This API is used to query a user list.URI formatGET /v3/usersGET /v3/usersURI parametersParameterMandatoryTypeDescriptiondomain_idNoStringID of the domain that a user bel", "doc_type":"api", "kw":"Querying a User List,User Management,API Reference", @@ -888,7 +909,7 @@ "uri":"en-us_topic_0057845652.html", "node_id":"en-us_topic_0057845652.xml", "product_code":"iam", - "code":"43", + "code":"44", "des":"This API is used to query detailed information about a specified user.URI formatGET /v3/users/{user_id}GET /v3/users/{user_id}URI parametersParameterMandatoryTypeDescript", "doc_type":"api", "kw":"Querying User Details,User Management,API Reference", @@ -909,7 +930,7 @@ "uri":"iam_08_0004.html", "node_id":"iam_08_0004.xml", "product_code":"iam", - "code":"44", + "code":"45", "des":"This API can be used by the administrator to query the details about a specified user or used by a user to query their details.GET /v3.0/OS-USER/users/{user_id}Status cod", "doc_type":"api", "kw":"Querying User Details (Recommended),User Management,API Reference", @@ -930,7 +951,7 @@ "uri":"en-us_topic_0057845554.html", "node_id":"en-us_topic_0057845554.xml", "product_code":"iam", - "code":"45", + "code":"46", "des":"This API is used to query the information about the user group to which a specified user belongs.URI formatGET /v3/users/{user_id}/groupsGET /v3/users/{user_id}/groupsURI", "doc_type":"api", "kw":"Querying the User Group to Which a User Belongs,User Management,API Reference", @@ -951,7 +972,7 @@ "uri":"en-us_topic_0057845561.html", "node_id":"en-us_topic_0057845561.xml", "product_code":"iam", - "code":"46", + "code":"47", "des":"This API is used to query users in a user group.URI formatGET /v3/groups/{group_id}/usersGET /v3/groups/{group_id}/usersURI parametersParameterMandatoryTypeDescriptiongro", "doc_type":"api", "kw":"Querying Users in a User Group,User Management,API Reference", @@ -972,7 +993,7 @@ "uri":"iam_08_0015.html", "node_id":"iam_08_0015.xml", "product_code":"iam", - "code":"47", + "code":"48", "des":"This API is provided for the administrator to create an IAM user.POST /v3.0/OS-USER/usersRequest for an administrator to create an IAM user named IAMUser, with the email ", "doc_type":"api", "kw":"Creating an IAM User (Recommended),User Management,API Reference", @@ -993,7 +1014,7 @@ "uri":"en-us_topic_0057845637.html", "node_id":"en-us_topic_0057845637.xml", "product_code":"iam", - "code":"48", + "code":"49", "des":"This API is used to create a user under a domain.POST /v3/usersParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill application/json", "doc_type":"api", "kw":"Creating a User,User Management,API Reference", @@ -1014,7 +1035,7 @@ "uri":"en-us_topic_0057845653.html", "node_id":"en-us_topic_0057845653.xml", "product_code":"iam", - "code":"49", + "code":"50", "des":"This API is used to change the password for a user.URI formatPOST /v3/users/{user_id}/passwordPOST /v3/users/{user_id}/passwordURI parametersParameterMandatoryTypeDescrip", "doc_type":"api", "kw":"Changing a Password,User Management,API Reference", @@ -1035,7 +1056,7 @@ "uri":"en-us_topic_0057845611.html", "node_id":"en-us_topic_0057845611.xml", "product_code":"iam", - "code":"50", + "code":"51", "des":"This API is used to modify user information under a domain.URI formatPATCH /v3/users/{user_id}PATCH /v3/users/{user_id}URI parametersParameterMandatoryTypeDescriptionuser", "doc_type":"api", "kw":"Modifying User Information,User Management,API Reference", @@ -1056,7 +1077,7 @@ "uri":"iam_08_0011.html", "node_id":"iam_08_0011.xml", "product_code":"iam", - "code":"51", + "code":"52", "des":"This API is provided for the administrator to modify user information.PUT /v3.0/OS-USER/users/{user_id}Status code: 200The request is successful.", "doc_type":"api", "kw":"Modifying User Information (Including Email Address and Mobile Number) as the Administrator,User Man", @@ -1077,7 +1098,7 @@ "uri":"en-us_topic_0057845630.html", "node_id":"en-us_topic_0057845630.xml", "product_code":"iam", - "code":"52", + "code":"53", "des":"This API is used to delete a user.URI formatDELETE /v3/users/{user_id}DELETE /v3/users/{user_id}URI parametersParameterMandatoryTypeDescriptionuser_idYesStringUser ID.Par", "doc_type":"api", "kw":"Deleting a User,User Management,API Reference", @@ -1098,7 +1119,7 @@ "uri":"en-us_topic_0057845601.html", "node_id":"en-us_topic_0057845601.xml", "product_code":"iam", - "code":"53", + "code":"54", "des":"This API is used to delete a user from a user group.URI formatDELETE /v3/groups/{group_id}/users/{user_id}DELETE /v3/groups/{group_id}/users/{user_id}URI parametersParame", "doc_type":"api", "kw":"Deleting a User from a User Group,User Management,API Reference", @@ -1119,7 +1140,7 @@ "uri":"iam_08_0025.html", "node_id":"iam_08_0025.xml", "product_code":"iam", - "code":"54", + "code":"55", "des":"This API is used by the administrator to send a welcome email to a user.The welcome email contains a one-time password-free login link, which can be used by the user to s", "doc_type":"api", "kw":"Sending a Welcome Email to a User,User Management,API Reference", @@ -1140,7 +1161,7 @@ "uri":"en-us_topic_0057845641.html", "node_id":"en-us_topic_0057845641.xml", "product_code":"iam", - "code":"55", + "code":"56", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"User Group Management", @@ -1161,8 +1182,8 @@ "uri":"en-us_topic_0057845602.html", "node_id":"en-us_topic_0057845602.xml", "product_code":"iam", - "code":"56", - "des":"This API is used to query user group information.URI formatGET /v3/groups{?domain_id,name}GET /v3/groups{?domain_id,name}Query parametersParameterMandatoryTypeDescription", + "code":"57", + "des":"This API is used to query user group information.URI formatGET /v3/groupsGET /v3/groupsQuery parametersParameterMandatoryTypeDescriptiondomain_idNoStringID of the domain ", "doc_type":"api", "kw":"Listing User Groups,User Group Management,API Reference", "search_title":"", @@ -1182,7 +1203,7 @@ "uri":"en-us_topic_0057845618.html", "node_id":"en-us_topic_0057845618.xml", "product_code":"iam", - "code":"57", + "code":"58", "des":"This API is used to query detailed information about a user group.URI formatGET /v3/groups/{group_id}GET /v3/groups/{group_id}Query parametersParameterMandatoryTypeDescri", "doc_type":"api", "kw":"Querying User Group Details,User Group Management,API Reference", @@ -1203,7 +1224,7 @@ "uri":"en-us_topic_0057845650.html", "node_id":"en-us_topic_0057845650.xml", "product_code":"iam", - "code":"58", + "code":"59", "des":"This API is used to create a user group.POST /v3/groupsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill application/json;charset", "doc_type":"api", "kw":"Creating a User Group,User Group Management,API Reference", @@ -1224,7 +1245,7 @@ "uri":"en-us_topic_0057845654.html", "node_id":"en-us_topic_0057845654.xml", "product_code":"iam", - "code":"59", + "code":"60", "des":"This API is used to add a user to a user group.URI formatPUT /v3/groups/{group_id}/users/{user_id}PUT /v3/groups/{group_id}/users/{user_id}URI parametersParameterMandator", "doc_type":"api", "kw":"Adding a User to a User Group,User Group Management,API Reference", @@ -1245,7 +1266,7 @@ "uri":"en-us_topic_0057845600.html", "node_id":"en-us_topic_0057845600.xml", "product_code":"iam", - "code":"60", + "code":"61", "des":"This API is used to update user group information.URI formatPATCH /v3/groups/{group_id}PATCH /v3/groups/{group_id}URI parametersParameterMandatoryTypeDescriptiongroup_idY", "doc_type":"api", "kw":"Updating a User Group,User Group Management,API Reference", @@ -1266,7 +1287,7 @@ "uri":"en-us_topic_0057845566.html", "node_id":"en-us_topic_0057845566.xml", "product_code":"iam", - "code":"61", + "code":"62", "des":"This API is used to delete a user group.URI formatDELETE /v3/groups/{group_id}DELETE /v3/groups/{group_id}URI parametersParameterMandatoryTypeDescriptiongroup_idYesString", "doc_type":"api", "kw":"Deleting a User Group,User Group Management,API Reference", @@ -1287,7 +1308,7 @@ "uri":"en-us_topic_0057845599.html", "node_id":"en-us_topic_0057845599.xml", "product_code":"iam", - "code":"62", + "code":"63", "des":"This API is used to query whether a user belongs to a user group.URI formatHEAD /v3/groups/{group_id}/users/{user_id}HEAD /v3/groups/{group_id}/users/{user_id}URI paramet", "doc_type":"api", "kw":"Querying Whether a User Belongs to a User Group,User Group Management,API Reference", @@ -1308,7 +1329,7 @@ "uri":"en-us_topic_0057845579.html", "node_id":"en-us_topic_0057845579.xml", "product_code":"iam", - "code":"63", + "code":"64", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Permission Management", @@ -1329,7 +1350,7 @@ "uri":"en-us_topic_0057845591.html", "node_id":"en-us_topic_0057845591.xml", "product_code":"iam", - "code":"64", + "code":"65", "des":"This API is used to query a role list, including the permissions policies of a role. A role is a set of permissions and represents a group of actions.GET /v3/rolesStatus ", "doc_type":"api", "kw":"Querying a Role List,Permission Management,API Reference", @@ -1350,7 +1371,7 @@ "uri":"en-us_topic_0057845603.html", "node_id":"en-us_topic_0057845603.xml", "product_code":"iam", - "code":"65", + "code":"66", "des":"This API is used to query role details, including the permissions policies of a role. A role is a set of permissions and represents a group of actions.URI formatGET /v3/r", "doc_type":"api", "kw":"Querying Role Details,Permission Management,API Reference", @@ -1371,7 +1392,7 @@ "uri":"en-us_topic_0000001362626928.html", "node_id":"en-us_topic_0000001362626928.xml", "product_code":"iam", - "code":"66", + "code":"67", "des":"This API is used to query permission assignment records of a specified account.GET /v3.0/OS-PERMISSION/role-assignmentsStatus code: 200The request is successful.{\n \"ro", "doc_type":"api", "kw":"Querying Permission Assignment Records,Permission Management,API Reference", @@ -1392,7 +1413,7 @@ "uri":"iam_11_0003.html", "node_id":"iam_11_0003.xml", "product_code":"iam", - "code":"67", + "code":"68", "des":"This API is used to query the user groups to which a specified role has been assigned.URI formatGET /v3/role_assignments{?role.id,user.id,group.id,scope.project.id,scope.", "doc_type":"api", "kw":"Querying Role Assignments (Discarded),Permission Management,API Reference", @@ -1413,7 +1434,7 @@ "uri":"en-us_topic_0057845571.html", "node_id":"en-us_topic_0057845571.xml", "product_code":"iam", - "code":"68", + "code":"69", "des":"This API is used to query the permissions of a user group under a domain. A role is a set of permissions and represents a group of actions.URI formatGET /v3/domains/{doma", "doc_type":"api", "kw":"Querying Permissions of a User Group Under a Domain,Permission Management,API Reference", @@ -1434,7 +1455,7 @@ "uri":"en-us_topic_0057845640.html", "node_id":"en-us_topic_0057845640.xml", "product_code":"iam", - "code":"69", + "code":"70", "des":"This API is used to query the permissions of a specified user group corresponding to a project. A role is a set of permissions and represents a group of actions.URI forma", "doc_type":"api", "kw":"Querying Permissions of a User Group Corresponding to a Project,Permission Management,API Reference", @@ -1455,7 +1476,7 @@ "uri":"en-us_topic_0057845623.html", "node_id":"en-us_topic_0057845623.xml", "product_code":"iam", - "code":"70", + "code":"71", "des":"This API is used to grant permissions to a user group of a domain. A role is a set of permissions and represents a group of actions.URI formatPUT /v3/domains/{domain_id}/", "doc_type":"api", "kw":"Granting Permissions to a User Group of a Domain,Permission Management,API Reference", @@ -1476,7 +1497,7 @@ "uri":"en-us_topic_0057845597.html", "node_id":"en-us_topic_0057845597.xml", "product_code":"iam", - "code":"71", + "code":"72", "des":"This API is used to grant permissions to a user group corresponding to a project. A role is a set of permissions and represents a group of actions.URI formatPUT /v3/proje", "doc_type":"api", "kw":"Granting Permissions to a User Group Corresponding to a Project,Permission Management,API Reference", @@ -1497,7 +1518,7 @@ "uri":"en-us_topic_0057845572.html", "node_id":"en-us_topic_0057845572.xml", "product_code":"iam", - "code":"72", + "code":"73", "des":"This API is used to delete permissions of a user group corresponding to a project. A role is a set of permissions and represents a group of actions.URI formatDELETE /v3/p", "doc_type":"api", "kw":"Deleting Permissions of a User Group Corresponding to a Project,Permission Management,API Reference", @@ -1518,7 +1539,7 @@ "uri":"en-us_topic_0057845560.html", "node_id":"en-us_topic_0057845560.xml", "product_code":"iam", - "code":"73", + "code":"74", "des":"This API is used to delete permissions of a specified user group of a domain. A role is a set of permissions and represents a group of actions.URI formatDELETE /v3/domain", "doc_type":"api", "kw":"Deleting Permissions of a User Group of a Domain,Permission Management,API Reference", @@ -1539,7 +1560,7 @@ "uri":"en-us_topic_0057845632.html", "node_id":"en-us_topic_0057845632.xml", "product_code":"iam", - "code":"74", + "code":"75", "des":"This API is used to query whether a specified user group under a domain has specific permissions. A role is a set of permissions and represents a group of actions.URI for", "doc_type":"api", "kw":"Querying Whether a User Group Under a Domain Has Specific Permissions,Permission Management,API Refe", @@ -1560,7 +1581,7 @@ "uri":"en-us_topic_0057845620.html", "node_id":"en-us_topic_0057845620.xml", "product_code":"iam", - "code":"75", + "code":"76", "des":"This API is used to query whether a user group corresponding to a project has specific permissions. A role is a set of permissions and represents a group of actions.URI f", "doc_type":"api", "kw":"Querying Whether a User Group Corresponding to a Project Has Specific Permissions,Permission Managem", @@ -1581,7 +1602,7 @@ "uri":"iam_02_0519.html", "node_id":"iam_02_0519.xml", "product_code":"iam", - "code":"76", + "code":"77", "des":"This API is used to grant permissions to a user group for all projects.URI formatPUT /v3/OS-INHERIT/domains/{domain_id}/groups/{group_id}/roles/{role_id}/inherited_to_pro", "doc_type":"api", "kw":"Granting Permissions to a User Group for All Projects,Permission Management,API Reference", @@ -1602,7 +1623,7 @@ "uri":"iam_10_0013.html", "node_id":"iam_10_0013.xml", "product_code":"iam", - "code":"77", + "code":"78", "des":"This API is provided for the administrator to remove the specified permissions of a user group in all projects.DELETE /v3/OS-INHERIT/domains/{domain_id}/groups/{group_id}", "doc_type":"api", "kw":"Removing Specified Permissions of a User Group in All Projects,Permission Management,API Reference", @@ -1623,7 +1644,7 @@ "uri":"iam_10_0012.html", "node_id":"iam_10_0012.xml", "product_code":"iam", - "code":"78", + "code":"79", "des":"This API is provided for the administrator to check whether a user group has specified permissions for all projects.HEAD /v3/OS-INHERIT/domains/{domain_id}/groups/{group_", "doc_type":"api", "kw":"Checking Whether a User Group Has Specified Permissions for All Projects,Permission Management,API R", @@ -1644,7 +1665,7 @@ "uri":"iam_10_0011.html", "node_id":"iam_10_0011.xml", "product_code":"iam", - "code":"79", + "code":"80", "des":"This API is provided for the administrator to query all permissions that have been assigned to a user group.GET /v3/OS-INHERIT/domains/{domain_id}/groups/{group_id}/roles", "doc_type":"api", "kw":"Querying All Permissions of a User Group,Permission Management,API Reference", @@ -1665,7 +1686,7 @@ "uri":"iam_02_0010.html", "node_id":"iam_02_0010.xml", "product_code":"iam", - "code":"80", + "code":"81", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Custom Policy Management", @@ -1686,7 +1707,7 @@ "uri":"iam_02_0011.html", "node_id":"iam_02_0011.xml", "product_code":"iam", - "code":"81", + "code":"82", "des":"This API is provided for the administrator to list all custom policies.The API can be called using both the global endpoint and region-specific endpoints.GET /v3.0/OS-ROL", "doc_type":"api", "kw":"Listing Custom Policies,Custom Policy Management,API Reference", @@ -1707,7 +1728,7 @@ "uri":"iam_02_0012.html", "node_id":"iam_02_0012.xml", "product_code":"iam", - "code":"82", + "code":"83", "des":"This API is provided for the administrator to query custom policy details.The API can be called using both the global endpoint and region-specific endpoints.GET /v3.0/OS-", "doc_type":"api", "kw":"Querying Custom Policy Details,Custom Policy Management,API Reference", @@ -1728,7 +1749,7 @@ "uri":"iam_02_0013.html", "node_id":"iam_02_0013.xml", "product_code":"iam", - "code":"83", + "code":"84", "des":"This API is provided for the administrator to create a custom policy for cloud services.The API can be called using both the global endpoint and region-specific endpoints", "doc_type":"api", "kw":"Creating a Custom Policy for Cloud Services,Custom Policy Management,API Reference", @@ -1749,7 +1770,7 @@ "uri":"iam_11_0016.html", "node_id":"iam_11_0016.xml", "product_code":"iam", - "code":"84", + "code":"85", "des":"This API is provided for the administrator to create a custom policy.The API can be called using both the global endpoint and region-specific endpoints.POST /v3.0/OS-ROLE", "doc_type":"api", "kw":"Creating a Custom Policy,Custom Policy Management,API Reference", @@ -1770,7 +1791,7 @@ "uri":"iam_02_0014.html", "node_id":"iam_02_0014.xml", "product_code":"iam", - "code":"85", + "code":"86", "des":"This API is provided for the administrator to modify a custom policy for cloud services.The API can be called using both the global endpoint and region-specific endpoints", "doc_type":"api", "kw":"Modifying a Custom Policy for Cloud Services,Custom Policy Management,API Reference", @@ -1791,7 +1812,7 @@ "uri":"iam_11_0017.html", "node_id":"iam_11_0017.xml", "product_code":"iam", - "code":"86", + "code":"87", "des":"This API is provided for the administrator to modify a custom policy.The API can be called using both the global endpoint and region-specific endpoints.PATCH /v3.0/OS-ROL", "doc_type":"api", "kw":"Modifying a Custom Policy,Custom Policy Management,API Reference", @@ -1812,7 +1833,7 @@ "uri":"iam_02_0015.html", "node_id":"iam_02_0015.xml", "product_code":"iam", - "code":"87", + "code":"88", "des":"This API is provided for the administrator to delete a custom policy.The API can be called using both the global endpoint and region-specific endpoints.DELETE /v3.0/OS-RO", "doc_type":"api", "kw":"Deleting a Custom Policy,Custom Policy Management,API Reference", @@ -1833,7 +1854,7 @@ "uri":"en-us_topic_0079467612.html", "node_id":"en-us_topic_0079467612.xml", "product_code":"iam", - "code":"88", + "code":"89", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Agency Management", @@ -1854,7 +1875,7 @@ "uri":"en-us_topic_0079467617.html", "node_id":"en-us_topic_0079467617.xml", "product_code":"iam", - "code":"89", + "code":"90", "des":"This API is used to create an agency.POST /v3.0/OS-AGENCY/agenciesParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringapplication/json;c", "doc_type":"api", "kw":"Creating an Agency,Agency Management,API Reference", @@ -1875,8 +1896,8 @@ "uri":"en-us_topic_0079467614.html", "node_id":"en-us_topic_0079467614.xml", "product_code":"iam", - "code":"90", - "des":"This API is used to query an agency list based on the specified conditions.URI formatGET /v3.0/OS-AGENCY/agencies{?domain_id,name,trust_domain_id}GET /v3.0/OS-AGENCY/agen", + "code":"91", + "des":"This API is used to query an agency list based on the specified conditions.URI formatGET /v3.0/OS-AGENCY/agenciesGET /v3.0/OS-AGENCY/agenciesQuery parametersParameterMand", "doc_type":"api", "kw":"Querying an Agency List Based on the Specified Conditions,Agency Management,API Reference", "search_title":"", @@ -1896,7 +1917,7 @@ "uri":"en-us_topic_0079467615.html", "node_id":"en-us_topic_0079467615.xml", "product_code":"iam", - "code":"91", + "code":"92", "des":"This API is used to obtain the details of a specified agency.URI formatGET /v3.0/OS-AGENCY/agencies/{agency_id}GET /v3.0/OS-AGENCY/agencies/{agency_id}URI parametersParam", "doc_type":"api", "kw":"Obtaining Details of a Specified Agency,Agency Management,API Reference", @@ -1917,7 +1938,7 @@ "uri":"en-us_topic_0079467623.html", "node_id":"en-us_topic_0079467623.xml", "product_code":"iam", - "code":"92", + "code":"93", "des":"This API is used to modify agency information, including the trust_domain_id, description, and trust_domain_name parameters.URI formatPUT /v3.0/OS-AGENCY/agencies/{agency", "doc_type":"api", "kw":"Modifying an Agency,Agency Management,API Reference", @@ -1938,7 +1959,7 @@ "uri":"en-us_topic_0079467625.html", "node_id":"en-us_topic_0079467625.xml", "product_code":"iam", - "code":"93", + "code":"94", "des":"This API is used to delete an agency.After this operation, the delegated party can no longer access the relevant resources. Exercise caution when performing this operatio", "doc_type":"api", "kw":"Deleting an Agency,Agency Management,API Reference", @@ -1959,7 +1980,7 @@ "uri":"en-us_topic_0079467620.html", "node_id":"en-us_topic_0079467620.xml", "product_code":"iam", - "code":"94", + "code":"95", "des":"This API is used to grant permissions to an agency for a project.URI formatPUT /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}PUT /v3.0/OS-AGEN", "doc_type":"api", "kw":"Granting Permissions to an Agency for a Project,Agency Management,API Reference", @@ -1980,7 +2001,7 @@ "uri":"en-us_topic_0079578163.html", "node_id":"en-us_topic_0079578163.xml", "product_code":"iam", - "code":"95", + "code":"96", "des":"This API is used to check whether an agency has the specified permissions on a project.URI formatHEAD /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{ro", "doc_type":"api", "kw":"Checking Whether an Agency Has the Specified Permissions on a Project,Agency Management,API Referenc", @@ -2001,7 +2022,7 @@ "uri":"en-us_topic_0079578164.html", "node_id":"en-us_topic_0079578164.xml", "product_code":"iam", - "code":"96", + "code":"97", "des":"This API is used to query the list of permissions of an agency on a project.URI formatGET /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/rolesGET /v3.0/OS-AGE", "doc_type":"api", "kw":"Querying the List of Permissions of an Agency on a Project,Agency Management,API Reference", @@ -2022,7 +2043,7 @@ "uri":"en-us_topic_0079467627.html", "node_id":"en-us_topic_0079467627.xml", "product_code":"iam", - "code":"97", + "code":"98", "des":"This API is used to delete permissions of an agency on a project.URI formatDELETE /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}DELETE /v3.0/O", "doc_type":"api", "kw":"Deleting Permissions of an Agency on a Project,Agency Management,API Reference", @@ -2043,7 +2064,7 @@ "uri":"en-us_topic_0079467624.html", "node_id":"en-us_topic_0079467624.xml", "product_code":"iam", - "code":"98", + "code":"99", "des":"This API is used to grant permissions to an agency on a domain.URI formatPUT /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}PUT /v3.0/OS-AGENCY/d", "doc_type":"api", "kw":"Granting Permissions to an Agency on a Domain,Agency Management,API Reference", @@ -2064,7 +2085,7 @@ "uri":"en-us_topic_0079578165.html", "node_id":"en-us_topic_0079578165.xml", "product_code":"iam", - "code":"99", + "code":"100", "des":"This API is used to check whether an agency has the specified permissions on a domain.URI formatHEAD /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_", "doc_type":"api", "kw":"Checking Whether an Agency Has the Specified Permissions on a Domain,Agency Management,API Reference", @@ -2085,7 +2106,7 @@ "uri":"en-us_topic_0079578166.html", "node_id":"en-us_topic_0079578166.xml", "product_code":"iam", - "code":"100", + "code":"101", "des":"This API is used to query the list of permissions of an agency on a domain.URI formatGET /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/rolesGET /v3.0/OS-AGENCY", "doc_type":"api", "kw":"Querying the List of Permissions of an Agency on a Domain,Agency Management,API Reference", @@ -2106,7 +2127,7 @@ "uri":"en-us_topic_0079467622.html", "node_id":"en-us_topic_0079467622.xml", "product_code":"iam", - "code":"101", + "code":"102", "des":"This API is used to delete permissions of an agency on a domain.URI formatDELETE /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}DELETE /v3.0/OS-A", "doc_type":"api", "kw":"Deleting Permissions of an Agency on a Domain,Agency Management,API Reference", @@ -2127,7 +2148,7 @@ "uri":"iam_02_0040.html", "node_id":"iam_02_0040.xml", "product_code":"iam", - "code":"102", + "code":"103", "des":"This API is provided for the administrator to query all permissions that have been assigned to an agency.GET /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/rol", "doc_type":"api", "kw":"Querying All Permissions of an Agency,Agency Management,API Reference", @@ -2148,7 +2169,7 @@ "uri":"iam_02_0041.html", "node_id":"iam_02_0041.xml", "product_code":"iam", - "code":"103", + "code":"104", "des":"This API is provided for the administrator to grant specified permissions to an agency for all projects.PUT /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/role", "doc_type":"api", "kw":"Granting Specified Permissions to an Agency for All Projects,Agency Management,API Reference", @@ -2169,7 +2190,7 @@ "uri":"iam_02_0042.html", "node_id":"iam_02_0042.xml", "product_code":"iam", - "code":"104", + "code":"105", "des":"This API is provided for the administrator to check whether an agency has specified permissions.HEAD /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role", "doc_type":"api", "kw":"Checking Whether an Agency Has Specified Permissions,Agency Management,API Reference", @@ -2190,7 +2211,7 @@ "uri":"iam_02_0043.html", "node_id":"iam_02_0043.xml", "product_code":"iam", - "code":"105", + "code":"106", "des":"This API is provided for the administrator to remove the specified permissions of an agency in all projects.DELETE /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_i", "doc_type":"api", "kw":"Removing Specified Permissions of an Agency in All Projects,Agency Management,API Reference", @@ -2211,7 +2232,7 @@ "uri":"iam_02_0020.html", "node_id":"iam_02_0020.xml", "product_code":"iam", - "code":"106", + "code":"107", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Security Settings", @@ -2232,7 +2253,7 @@ "uri":"iam_02_0022.html", "node_id":"iam_02_0022.xml", "product_code":"iam", - "code":"107", + "code":"108", "des":"This API is used to query the operation protection policy.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/protect-policyStatus code: 200The request is successful.Status c", "doc_type":"api", "kw":"Querying the Operation Protection Policy,Security Settings,API Reference", @@ -2253,7 +2274,7 @@ "uri":"iam_02_0021.html", "node_id":"iam_02_0021.xml", "product_code":"iam", - "code":"108", + "code":"109", "des":"This API is provided for the administrator to modify the operation protection policy.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/protect-policyStatus code: 200The req", "doc_type":"api", "kw":"Modifying the Operation Protection Policy,Security Settings,API Reference", @@ -2274,7 +2295,7 @@ "uri":"iam_02_0024.html", "node_id":"iam_02_0024.xml", "product_code":"iam", - "code":"109", + "code":"110", "des":"This API is used to query the password policy.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/password-policyStatus code: 200The request is successful.Status code: 403Acc", "doc_type":"api", "kw":"Querying the Password Policy,Security Settings,API Reference", @@ -2295,7 +2316,7 @@ "uri":"iam_02_0023.html", "node_id":"iam_02_0023.xml", "product_code":"iam", - "code":"110", + "code":"111", "des":"This API is provided for the administrator to modify the password policy.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/password-policyStatus code: 200The request is suc", "doc_type":"api", "kw":"Modifying the Password Policy,Security Settings,API Reference", @@ -2316,7 +2337,7 @@ "uri":"iam_02_0026.html", "node_id":"iam_02_0026.xml", "product_code":"iam", - "code":"111", + "code":"112", "des":"This API is used to query the login authentication policy.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/login-policyStatus code: 200The request is successful.Status cod", "doc_type":"api", "kw":"Querying the Login Authentication Policy,Security Settings,API Reference", @@ -2337,7 +2358,7 @@ "uri":"iam_02_0025.html", "node_id":"iam_02_0025.xml", "product_code":"iam", - "code":"112", + "code":"113", "des":"This API is provided for the administrator to modify the login authentication policy.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/login-policyStatus code: 200The reque", "doc_type":"api", "kw":"Modifying the Login Authentication Policy,Security Settings,API Reference", @@ -2358,7 +2379,7 @@ "uri":"iam_02_0028.html", "node_id":"iam_02_0028.xml", "product_code":"iam", - "code":"113", + "code":"114", "des":"This API is used to query the ACL for console access.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/console-acl-policyStatus code: 200The request is successful.Status co", "doc_type":"api", "kw":"Querying the ACL for Console Access,Security Settings,API Reference", @@ -2379,7 +2400,7 @@ "uri":"iam_02_0027.html", "node_id":"iam_02_0027.xml", "product_code":"iam", - "code":"114", + "code":"115", "des":"This API is provided for the administrator to modify the ACL for console access.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/console-acl-policyStatus code: 200The requ", "doc_type":"api", "kw":"Modifying the ACL for Console Access,Security Settings,API Reference", @@ -2400,7 +2421,7 @@ "uri":"iam_02_0030.html", "node_id":"iam_02_0030.xml", "product_code":"iam", - "code":"115", + "code":"116", "des":"This API is used to query the ACL for API access.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/api-acl-policyStatus code: 200The request is successful.Status code: 403A", "doc_type":"api", "kw":"Querying the ACL for API Access,Security Settings,API Reference", @@ -2421,7 +2442,7 @@ "uri":"iam_02_0029.html", "node_id":"iam_02_0029.xml", "product_code":"iam", - "code":"116", + "code":"117", "des":"This API is provided for the administrator to modify the ACL for API access.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/api-acl-policyStatus code: 200The request is s", "doc_type":"api", "kw":"Modifying the ACL for API Access,Security Settings,API Reference", @@ -2442,7 +2463,7 @@ "uri":"iam_08_0012.html", "node_id":"iam_08_0012.xml", "product_code":"iam", - "code":"117", + "code":"118", "des":"This API is provided for the administrator to query the MFA device information of users.GET /v3.0/OS-MFA/virtual-mfa-devicesStatus code: 200The request is successful.Stat", "doc_type":"api", "kw":"Querying MFA Device Information of Users,Security Settings,API Reference", @@ -2463,7 +2484,7 @@ "uri":"iam_08_0013.html", "node_id":"iam_08_0013.xml", "product_code":"iam", - "code":"118", + "code":"119", "des":"This API can be used by the administrator to query the MFA device information of a specified user or used by a user to query their MFA device information.GET /v3.0/OS-MFA", "doc_type":"api", "kw":"Querying the MFA Device Information of a User,Security Settings,API Reference", @@ -2484,7 +2505,7 @@ "uri":"iam_08_0014.html", "node_id":"iam_08_0014.xml", "product_code":"iam", - "code":"119", + "code":"120", "des":"This API is provided for the administrator to query the login protection configurations of users.GET /v3.0/OS-USER/login-protectsStatus code: 200The request is successful", "doc_type":"api", "kw":"Querying Login Protection Configurations of Users,Security Settings,API Reference", @@ -2505,7 +2526,7 @@ "uri":"iam_08_0016.html", "node_id":"iam_08_0016.xml", "product_code":"iam", - "code":"120", + "code":"121", "des":"This API can be used by the administrator to query the login protection configuration of a specified user or used by a user to query their login protection configuration.", "doc_type":"api", "kw":"Querying the Login Protection Configuration of a User,Security Settings,API Reference", @@ -2526,7 +2547,7 @@ "uri":"iam_08_0021.html", "node_id":"iam_08_0021.xml", "product_code":"iam", - "code":"121", + "code":"122", "des":"This API is provided for the administrator to modify the login protection configuration of a user.PUT /v3.0/OS-USER/users/{user_id}/login-protectStatus code: 200Status co", "doc_type":"api", "kw":"Modifying the Login Protection Configuration of a User,Security Settings,API Reference", @@ -2547,7 +2568,7 @@ "uri":"iam_08_0017.html", "node_id":"iam_08_0017.xml", "product_code":"iam", - "code":"122", + "code":"123", "des":"This API is provided for IAM users to bind a virtual MFA device.PUT /v3.0/OS-MFA/mfa-devices/bindNoneNone", "doc_type":"api", "kw":"Binding a Virtual MFA Device,Security Settings,API Reference", @@ -2568,7 +2589,7 @@ "uri":"iam_08_0018.html", "node_id":"iam_08_0018.xml", "product_code":"iam", - "code":"123", + "code":"124", "des":"This API is used by the administrator to unbind a virtual MFA device from an IAM user, or used by an IAM user to unbind their own virtual MFA device.PUT /v3.0/OS-MFA/mfa-", "doc_type":"api", "kw":"Unbinding a Virtual MFA Device,Security Settings,API Reference", @@ -2589,7 +2610,7 @@ "uri":"iam_08_0019.html", "node_id":"iam_08_0019.xml", "product_code":"iam", - "code":"124", + "code":"125", "des":"This API is provided for IAM users to create a virtual MFA device.POST /v3.0/OS-MFA/virtual-mfa-devicesStatus code: 201Status code: 201The request is successful.", "doc_type":"api", "kw":"Creating a Virtual MFA Device,Security Settings,API Reference", @@ -2610,7 +2631,7 @@ "uri":"iam_08_0020.html", "node_id":"iam_08_0020.xml", "product_code":"iam", - "code":"125", + "code":"126", "des":"This API is provided for the administrator to delete their own virtual MFA device.DELETE /v3.0/OS-MFA/virtual-mfa-devicesNoneNone", "doc_type":"api", "kw":"Deleting a Virtual MFA Device,Security Settings,API Reference", @@ -2627,11 +2648,74 @@ "title":"Deleting a Virtual MFA Device", "githuburl":"" }, + { + "uri":"iam_12_0513.html", + "node_id":"iam_12_0513.xml", + "product_code":"iam", + "code":"127", + "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "doc_type":"api", + "kw":"Enterprise Project Management", + "search_title":"", + "metedata":[ + { + "documenttype":"api", + "prodname":"iam", + "opensource":"true", + "Ismulti":"No", + "IsBot":"Yes" + } + ], + "title":"Enterprise Project Management", + "githuburl":"" + }, + { + "uri":"iam_02_0633.html", + "node_id":"iam_02_0633.xml", + "product_code":"iam", + "code":"128", + "des":"This API is used to grant permissions to agencies associated with specified enterprise projects.PUT /v3.0/OS-PERMISSION/subjects/agency/scopes/enterprise-project/role-ass", + "doc_type":"api", + "kw":"Granting Permissions to Agencies Associated with Specified Enterprise Projects,Enterprise Project Ma", + "search_title":"", + "metedata":[ + { + "documenttype":"api", + "prodname":"iam", + "opensource":"true", + "Ismulti":"No", + "IsBot":"Yes" + } + ], + "title":"Granting Permissions to Agencies Associated with Specified Enterprise Projects", + "githuburl":"" + }, + { + "uri":"iam_02_0634.html", + "node_id":"iam_02_0634.xml", + "product_code":"iam", + "code":"129", + "des":"This API is used to remove permissions of agencies associated with specified enterprise projects.DELETE /v3.0/OS-PERMISSION/subjects/agency/scopes/enterprise-project/role", + "doc_type":"api", + "kw":"Removing Permissions of Agencies Associated with Specified Enterprise Projects,Enterprise Project Ma", + "search_title":"", + "metedata":[ + { + "documenttype":"api", + "prodname":"iam", + "opensource":"true", + "Ismulti":"No", + "IsBot":"Yes" + } + ], + "title":"Removing Permissions of Agencies Associated with Specified Enterprise Projects", + "githuburl":"" + }, { "uri":"en-us_topic_0057845573.html", "node_id":"en-us_topic_0057845573.xml", "product_code":"iam", - "code":"126", + "code":"130", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Federated Identity Authentication Management", @@ -2652,7 +2736,7 @@ "uri":"en-us_topic_0057845646.html", "node_id":"en-us_topic_0057845646.xml", "product_code":"iam", - "code":"127", + "code":"131", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Obtaining a Token in Federated Identity Authentication Mode", @@ -2673,7 +2757,7 @@ "uri":"iam_02_0001.html", "node_id":"iam_02_0001.xml", "product_code":"iam", - "code":"128", + "code":"132", "des":"OpenStack and Shibboleth are widely used open-source federated identity authentication solutions. They provide powerful SSO capabilities and connect users to various appl", "doc_type":"api", "kw":"SP Initiated,Obtaining a Token in Federated Identity Authentication Mode,API Reference", @@ -2694,7 +2778,7 @@ "uri":"iam_02_0002.html", "node_id":"iam_02_0002.xml", "product_code":"iam", - "code":"129", + "code":"133", "des":"This section uses the Client4ShibbolethIdP script as an example to describe how to obtain a federated authentication token in the IdP-initiated mode. The Client4Shibbolet", "doc_type":"api", "kw":"IdP Initiated,Obtaining a Token in Federated Identity Authentication Mode,API Reference", @@ -2715,7 +2799,7 @@ "uri":"en-us_topic_0057845605.html", "node_id":"en-us_topic_0057845605.xml", "product_code":"iam", - "code":"130", + "code":"134", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Identity Provider", @@ -2736,7 +2820,7 @@ "uri":"en-us_topic_0057845581.html", "node_id":"en-us_topic_0057845581.xml", "product_code":"iam", - "code":"131", + "code":"135", "des":"This API is used to query the identity provider list.GET /v3/OS-FEDERATION/identity_providersParameters in the request headerParameterMandatoryTypeDescriptionContent-Type", "doc_type":"api", "kw":"Querying the Identity Provider List,Identity Provider,API Reference", @@ -2757,7 +2841,7 @@ "uri":"en-us_topic_0057845639.html", "node_id":"en-us_topic_0057845639.xml", "product_code":"iam", - "code":"132", + "code":"136", "des":"This API is used to query the information about an identity provider.URI formatGET /v3/OS-FEDERATION/identity_providers/{id}GET /v3/OS-FEDERATION/identity_providers/{id}U", "doc_type":"api", "kw":"Querying an Identity Provider,Identity Provider,API Reference", @@ -2778,7 +2862,7 @@ "uri":"en-us_topic_0057845606.html", "node_id":"en-us_topic_0057845606.xml", "product_code":"iam", - "code":"133", + "code":"137", "des":"This API is provided for the administrator to create an identity provider.URI formatPUT /v3/OS-FEDERATION/identity_providers/{id}PUT /v3/OS-FEDERATION/identity_providers/", "doc_type":"api", "kw":"Creating an Identity Provider,Identity Provider,API Reference", @@ -2799,7 +2883,7 @@ "uri":"iam_13_0207.html", "node_id":"iam_13_0207.xml", "product_code":"iam", - "code":"134", + "code":"138", "des":"This API is provided for the administrator to create an OpenID Connect identity provider.POST /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-configStatus ", "doc_type":"api", "kw":"Creating an OpenID Connect Identity Provider,Identity Provider,API Reference", @@ -2820,7 +2904,7 @@ "uri":"en-us_topic_0057845612.html", "node_id":"en-us_topic_0057845612.xml", "product_code":"iam", - "code":"135", + "code":"139", "des":"This API is used to update the information about a SAML identity provider.URI formatPATCH /v3/OS-FEDERATION/identity_providers/{id}PATCH /v3/OS-FEDERATION/identity_provid", "doc_type":"api", "kw":"Updating a SAML Identity Provider,Identity Provider,API Reference", @@ -2841,7 +2925,7 @@ "uri":"iam_13_0208.html", "node_id":"iam_13_0208.xml", "product_code":"iam", - "code":"136", + "code":"140", "des":"This API is provided for the administrator to modify an OpenID Connect identity provider.PUT /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-configStatus c", "doc_type":"api", "kw":"Updating an OpenID Connect Identity Provider,Identity Provider,API Reference", @@ -2862,7 +2946,7 @@ "uri":"iam_13_0209.html", "node_id":"iam_13_0209.xml", "product_code":"iam", - "code":"137", + "code":"141", "des":"This API is provided for the administrator to query an OpenID Connect identity provider.GET /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-configStatus co", "doc_type":"api", "kw":"Querying an OpenID Connect Identity Provider,Identity Provider,API Reference", @@ -2883,7 +2967,7 @@ "uri":"en-us_topic_0057845570.html", "node_id":"en-us_topic_0057845570.xml", "product_code":"iam", - "code":"138", + "code":"142", "des":"This API is used to delete a SAML or OpenID Connect identity provider.URI formatDELETE /v3/OS-FEDERATION/identity_providers/{id}DELETE /v3/OS-FEDERATION/identity_provider", "doc_type":"api", "kw":"Deleting an Identity Provider,Identity Provider,API Reference", @@ -2904,7 +2988,7 @@ "uri":"en-us_topic_0057845588.html", "node_id":"en-us_topic_0057845588.xml", "product_code":"iam", - "code":"139", + "code":"143", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Mapping", @@ -2925,7 +3009,7 @@ "uri":"en-us_topic_0057845567.html", "node_id":"en-us_topic_0057845567.xml", "product_code":"iam", - "code":"140", + "code":"144", "des":"This API is used to query the mapping list.GET /v3/OS-FEDERATION/mappingsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill applic", "doc_type":"api", "kw":"Querying the Mapping List,Mapping,API Reference", @@ -2946,7 +3030,7 @@ "uri":"en-us_topic_0057845645.html", "node_id":"en-us_topic_0057845645.xml", "product_code":"iam", - "code":"141", + "code":"145", "des":"This API is used to query the information about a mapping.URI formatGET /v3/OS-FEDERATION/mappings/{id}GET /v3/OS-FEDERATION/mappings/{id}URI parametersParameterMandatory", "doc_type":"api", "kw":"Querying a Mapping,Mapping,API Reference", @@ -2967,7 +3051,7 @@ "uri":"en-us_topic_0057845590.html", "node_id":"en-us_topic_0057845590.xml", "product_code":"iam", - "code":"142", + "code":"146", "des":"This API is used to create a mapping.URI formatPUT /v3/OS-FEDERATION/mappings/{id}PUT /v3/OS-FEDERATION/mappings/{id}URI parametersParameterMandatoryTypeDescriptionidYesS", "doc_type":"api", "kw":"Creating a Mapping,Mapping,API Reference", @@ -2988,7 +3072,7 @@ "uri":"en-us_topic_0057845568.html", "node_id":"en-us_topic_0057845568.xml", "product_code":"iam", - "code":"143", + "code":"147", "des":"This API is used to update the information about a mapping.URI formatPATCH /v3/OS-FEDERATION/mappings/{id}PATCH /v3/OS-FEDERATION/mappings/{id}URI parametersParameterMand", "doc_type":"api", "kw":"Updating a Mapping,Mapping,API Reference", @@ -3009,7 +3093,7 @@ "uri":"en-us_topic_0057845648.html", "node_id":"en-us_topic_0057845648.xml", "product_code":"iam", - "code":"144", + "code":"148", "des":"This API is used to delete the information about a mapping.URI formatDELETE /v3/OS-FEDERATION/mappings/{id}DELETE /v3/OS-FEDERATION/mappings/{id}URI parametersParameterMa", "doc_type":"api", "kw":"Deleting a Mapping,Mapping,API Reference", @@ -3030,7 +3114,7 @@ "uri":"en-us_topic_0057845619.html", "node_id":"en-us_topic_0057845619.xml", "product_code":"iam", - "code":"145", + "code":"149", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Protocol", @@ -3051,7 +3135,7 @@ "uri":"en-us_topic_0057845644.html", "node_id":"en-us_topic_0057845644.xml", "product_code":"iam", - "code":"146", + "code":"150", "des":"This API is used to query the protocol list.URI formatGET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocolsGET /v3/OS-FEDERATION/identity_providers/{idp_id}/protoco", "doc_type":"api", "kw":"Querying the Protocol List,Protocol,API Reference", @@ -3072,7 +3156,7 @@ "uri":"en-us_topic_0057845616.html", "node_id":"en-us_topic_0057845616.xml", "product_code":"iam", - "code":"147", + "code":"151", "des":"This API is used to query the information about a protocol.URI formatGET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}GET /v3/OS-FEDERATION/identi", "doc_type":"api", "kw":"Querying a Protocol,Protocol,API Reference", @@ -3093,7 +3177,7 @@ "uri":"en-us_topic_0057845575.html", "node_id":"en-us_topic_0057845575.xml", "product_code":"iam", - "code":"148", + "code":"152", "des":"This API is used to register a protocol, that is, associate a rule with an identity provider.URI formatPUT /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protoc", "doc_type":"api", "kw":"Registering a Protocol,Protocol,API Reference", @@ -3114,7 +3198,7 @@ "uri":"en-us_topic_0057845609.html", "node_id":"en-us_topic_0057845609.xml", "product_code":"iam", - "code":"149", + "code":"153", "des":"This API is used to update the information about a protocol.URI formatPATCH /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}PATCH /v3/OS-FEDERATION/i", "doc_type":"api", "kw":"Updating a Protocol,Protocol,API Reference", @@ -3135,7 +3219,7 @@ "uri":"en-us_topic_0057845559.html", "node_id":"en-us_topic_0057845559.xml", "product_code":"iam", - "code":"150", + "code":"154", "des":"This API is used to delete the information about a protocol.URI formatDELETE /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}DELETE /v3/OS-FEDERATION", "doc_type":"api", "kw":"Deleting a Protocol,Protocol,API Reference", @@ -3156,7 +3240,7 @@ "uri":"en-us_topic_0057845607.html", "node_id":"en-us_topic_0057845607.xml", "product_code":"iam", - "code":"151", + "code":"155", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Metadata", @@ -3177,7 +3261,7 @@ "uri":"en-us_topic_0057845553.html", "node_id":"en-us_topic_0057845553.xml", "product_code":"iam", - "code":"152", + "code":"156", "des":"This API is used to query the content of the metadata file imported by an identity provider to the IAM system.URI formatGET /v3-ext/OS-FEDERATION/identity_providers/{idp_", "doc_type":"api", "kw":"Querying a Metadata File,Metadata,API Reference", @@ -3198,7 +3282,7 @@ "uri":"en-us_topic_0057845577.html", "node_id":"en-us_topic_0057845577.xml", "product_code":"iam", - "code":"153", + "code":"157", "des":"This API is used to query the metadata file of the keystone.GET /v3-ext/auth/OS-FEDERATION/SSO/metadataParameters in the request headerParameterMandatoryTypeDescriptionun", "doc_type":"api", "kw":"Querying the Metadata File of Keystone,Metadata,API Reference", @@ -3219,7 +3303,7 @@ "uri":"en-us_topic_0057845615.html", "node_id":"en-us_topic_0057845615.xml", "product_code":"iam", - "code":"154", + "code":"158", "des":"Before using the federated identity authentication function, a metadata file must be imported to the IAM system. This API is used to import a metadata file of a domain.UR", "doc_type":"api", "kw":"Importing a Metadata File,Metadata,API Reference", @@ -3240,7 +3324,7 @@ "uri":"en-us_topic_0057845565.html", "node_id":"en-us_topic_0057845565.xml", "product_code":"iam", - "code":"155", + "code":"159", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Token", @@ -3261,7 +3345,7 @@ "uri":"en-us_topic_0057845629.html", "node_id":"en-us_topic_0057845629.xml", "product_code":"iam", - "code":"156", + "code":"160", "des":"This API is used to obtain an unscoped token in SP-initiated federated identity authentication mode.An unscoped token cannot be used for authentication. If a federated us", "doc_type":"api", "kw":"Obtaining an Unscoped Token (SP Initiated),Token,API Reference", @@ -3282,7 +3366,7 @@ "uri":"iam_02_0003.html", "node_id":"iam_02_0003.xml", "product_code":"iam", - "code":"157", + "code":"161", "des":"This API is used to obtain an unscoped token in IdP-initiated federated identity authentication mode.An unscoped token cannot be used for authentication. If a federated u", "doc_type":"api", "kw":"Obtaining an Unscoped Token (IdP Initiated),Token,API Reference", @@ -3303,7 +3387,7 @@ "uri":"iam_13_0604.html", "node_id":"iam_13_0604.xml", "product_code":"iam", - "code":"158", + "code":"162", "des":"This API is used to obtain a scoped token through federated identity authentication.POST /v3/auth/tokensStatus code: 201The scoped token is obtained successfully.None", "doc_type":"api", "kw":"Obtaining a Scoped Token,Token,API Reference", @@ -3324,7 +3408,7 @@ "uri":"iam_13_0605.html", "node_id":"iam_13_0605.xml", "product_code":"iam", - "code":"159", + "code":"163", "des":"This API is used to obtain a federated identity authentication token using an OpenID Connect ID token.POST /v3.0/OS-AUTH/id-token/tokensStatus code: 201Request for obtain", "doc_type":"api", "kw":"Obtaining a Token with an OpenID Connect ID Token,Token,API Reference", @@ -3345,7 +3429,7 @@ "uri":"iam_13_0606.html", "node_id":"iam_13_0606.xml", "product_code":"iam", - "code":"160", + "code":"164", "des":"This API is used to obtain an unscoped token using an OpenID Connect ID token.POST /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}/authStatus code: ", "doc_type":"api", "kw":"Obtaining an Unscoped Token with an OpenID Connect ID Token,Token,API Reference", @@ -3366,7 +3450,7 @@ "uri":"en-us_topic_0057845633.html", "node_id":"en-us_topic_0057845633.xml", "product_code":"iam", - "code":"161", + "code":"165", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Domain", @@ -3387,7 +3471,7 @@ "uri":"en-us_topic_0057845596.html", "node_id":"en-us_topic_0057845596.xml", "product_code":"iam", - "code":"162", + "code":"166", "des":"This API is used to query the list of domains accessible to federated users.GET /v3/OS-FEDERATION/domainsParameters in the request headerParameterMandatoryTypeDescription", "doc_type":"api", "kw":"Querying the List of Domains Accessible to Federated Users,Domain,API Reference", @@ -3408,7 +3492,7 @@ "uri":"en-us_topic_0057845643.html", "node_id":"en-us_topic_0057845643.xml", "product_code":"iam", - "code":"163", + "code":"167", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Project", @@ -3429,7 +3513,7 @@ "uri":"en-us_topic_0057845595.html", "node_id":"en-us_topic_0057845595.xml", "product_code":"iam", - "code":"164", + "code":"168", "des":"This API is used to query the list of projects accessible to federated users. The project list is used to obtain the scoped token in federated identity authentication mod", "doc_type":"api", "kw":"Querying the List of Projects Accessible to Federated Users,Project,API Reference", @@ -3450,7 +3534,7 @@ "uri":"en-us_topic_0057845631.html", "node_id":"en-us_topic_0057845631.xml", "product_code":"iam", - "code":"165", + "code":"169", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Version Information Management", @@ -3471,7 +3555,7 @@ "uri":"en-us_topic_0057845569.html", "node_id":"en-us_topic_0057845569.xml", "product_code":"iam", - "code":"166", + "code":"170", "des":"This API is used to obtain the keystone API version information.GET /Example requestResponse parameter descriptionParameterMandatoryTypeDescriptionversionsYesObjectKeysto", "doc_type":"api", "kw":"Querying Keystone API Version Information,Version Information Management,API Reference", @@ -3492,7 +3576,7 @@ "uri":"en-us_topic_0057845613.html", "node_id":"en-us_topic_0057845613.xml", "product_code":"iam", - "code":"167", + "code":"171", "des":"This API is used to obtain the information about the keystone API version 3.0.GET /v3Example requestcurl -i -k -X GET https://sample.domain.com/v3Response parameter descr", "doc_type":"api", "kw":"Querying Information About Keystone API Version 3.0,Version Information Management,API Reference", @@ -3513,7 +3597,7 @@ "uri":"en-us_topic_0057845604.html", "node_id":"en-us_topic_0057845604.xml", "product_code":"iam", - "code":"168", + "code":"172", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Services and Endpoints", @@ -3534,8 +3618,8 @@ "uri":"en-us_topic_0057845587.html", "node_id":"en-us_topic_0057845587.xml", "product_code":"iam", - "code":"169", - "des":"This API is used to query the service list.URI formatGET /v3/services{?type}GET /v3/services{?type}URI parametersParameterMandatoryTypeDescriptiontypeNoStringService type", + "code":"173", + "des":"This API is used to query the service list.URI formatGET /v3/servicesGET /v3/servicesURI parametersParameterMandatoryTypeDescriptiontypeNoStringService type.The value can", "doc_type":"api", "kw":"Querying Services,Services and Endpoints,API Reference", "search_title":"", @@ -3555,8 +3639,8 @@ "uri":"en-us_topic_0067148045.html", "node_id":"en-us_topic_0067148045.xml", "product_code":"iam", - "code":"170", - "des":"This API is used to query service details.URI formatGET /v3/services/{service_id}GET /v3/services/{service_id}URI parametersParameterMandatoryTypeDescriptionservice_idYes", + "code":"174", + "des":"This API is used to query service details.URI formatGET /v3/services/{service_id}GET /v3/services/{service_id}Parameter descriptionParameterMandatoryTypeDescriptionservic", "doc_type":"api", "kw":"Querying Service Details,Services and Endpoints,API Reference", "search_title":"", @@ -3576,7 +3660,7 @@ "uri":"en-us_topic_0057845562.html", "node_id":"en-us_topic_0057845562.xml", "product_code":"iam", - "code":"171", + "code":"175", "des":"This API is used to query the list of terminal addresses and provides a service access entry.URI formatGET /v3/endpoints{?interface, service_id}GET /v3/endpoints{?interfa", "doc_type":"api", "kw":"Querying Endpoints,Services and Endpoints,API Reference", @@ -3597,7 +3681,7 @@ "uri":"en-us_topic_0067148046.html", "node_id":"en-us_topic_0067148046.xml", "product_code":"iam", - "code":"172", + "code":"176", "des":"This API is used to query endpoint details.URI formatGET /v3/endpoints/{endpoint_id}GET /v3/endpoints/{endpoint_id}URI parametersParameterMandatoryTypeDescriptionendpoint", "doc_type":"api", "kw":"Querying Endpoint Details,Services and Endpoints,API Reference", @@ -3618,7 +3702,7 @@ "uri":"iam_02_0004.html", "node_id":"iam_02_0004.xml", "product_code":"iam", - "code":"173", + "code":"177", "des":"This API is used to query the service catalog corresponding to X-Auth-Token contained in the request.GET /v3/auth/catalogParameters in the request headerParameterMandator", "doc_type":"api", "kw":"Querying the Service Catalog,Services and Endpoints,API Reference", @@ -3639,7 +3723,7 @@ "uri":"iam_19_0004.html", "node_id":"iam_19_0004.xml", "product_code":"iam", - "code":"174", + "code":"178", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Permissions Policies and Supported Actions", @@ -3660,7 +3744,7 @@ "uri":"iam_19_0003.html", "node_id":"iam_19_0003.xml", "product_code":"iam", - "code":"175", + "code":"179", "des":"By default, new users do not have permissions assigned. You need to add a user to one or more groups, and attach permissions policies to these groups. Users inherit permi", "doc_type":"api", "kw":"Introduction,Permissions Policies and Supported Actions,API Reference", @@ -3681,7 +3765,7 @@ "uri":"iam_02_0046.html", "node_id":"iam_02_0046.xml", "product_code":"iam", - "code":"176", + "code":"180", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Action List,Permissions Policies and Supported Actions,API Reference", @@ -3702,7 +3786,7 @@ "uri":"iam_02_0512.html", "node_id":"iam_02_0512.xml", "product_code":"iam", - "code":"177", + "code":"181", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Appendix", @@ -3723,7 +3807,7 @@ "uri":"iam_02_0005.html", "node_id":"iam_02_0005.xml", "product_code":"iam", - "code":"178", + "code":"182", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Status Codes,Appendix,API Reference", @@ -3744,7 +3828,7 @@ "uri":"iam_02_0006.html", "node_id":"iam_02_0006.xml", "product_code":"iam", - "code":"179", + "code":"183", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Error Codes,Appendix,API Reference", @@ -3765,7 +3849,7 @@ "uri":"en-us_topic_0057845624.html", "node_id":"en-us_topic_0057845624.xml", "product_code":"iam", - "code":"180", + "code":"184", "des":"Your username, user ID, account name, account ID, project name, and project ID need to be specified in the URI and request body for calling certain APIs. Obtain these par", "doc_type":"api", "kw":"Obtaining User, Account, User Group, Project, and Agency Information,Appendix,API Reference", @@ -3786,7 +3870,7 @@ "uri":"en-us_topic_0057845564.html", "node_id":"en-us_topic_0057845564.xml", "product_code":"iam", - "code":"181", + "code":"185", "des":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", "doc_type":"api", "kw":"Change History,API Reference", diff --git a/docs/iam/api-ref/CLASS.TXT.json b/docs/iam/api-ref/CLASS.TXT.json index 41bbf3c1d..b89d55f22 100644 --- a/docs/iam/api-ref/CLASS.TXT.json +++ b/docs/iam/api-ref/CLASS.TXT.json @@ -36,7 +36,7 @@ "code":"4" }, { - "desc":"This section describes the structure of a REST API request, and uses the IAM API for obtaining a user token (see Obtaining a User Token) as an example to demonstrate how ", + "desc":"This section describes the structure of a REST API request, and uses the IAM API for obtaining a user token (see Obtaining a User Token Through Password Authentication) a", "product_code":"iam", "title":"Making an API Request", "uri":"iam_02_0008.html", @@ -83,12 +83,21 @@ { "desc":"This API is used to obtain a token through username/password authentication. A token is a system object encapsulating the identity and permissions of a user. When calling", "product_code":"iam", - "title":"Obtaining a User Token", + "title":"Obtaining a User Token Through Password Authentication", "uri":"en-us_topic_0057845583.html", "doc_type":"api", "p_code":"9", "code":"10" }, + { + "desc":"This API is used to obtain an IAM user token using the username, password, and virtual MFA device. To use this API, ensure that virtual MFA-based login protection has bee", + "product_code":"iam", + "title":"Obtaining a User Token Through Password Authentication and Virtual MFA", + "uri":"iam_03_0006.html", + "doc_type":"api", + "p_code":"9", + "code":"11" + }, { "desc":"This API is used to obtain an agency token. For example, after a trust relationship is established between account A (delegating party) and account B (delegated party), t", "product_code":"iam", @@ -96,16 +105,16 @@ "uri":"en-us_topic_0064274720.html", "doc_type":"api", "p_code":"9", - "code":"11" + "code":"12" }, { - "desc":"This API is used to check the validity of a specified token. If the token is valid, detailed information about the token will be returned.GET /v3/auth/tokensParameters in", + "desc":"This API is used to check the validity of a specified token. If the token is valid, detailed information about the token will be returned.GET /v3/auth/tokensQuery paramet", "product_code":"iam", "title":"Verifying a Token and Returning a Valid Token", "uri":"en-us_topic_0057845585.html", "doc_type":"api", "p_code":"9", - "code":"12" + "code":"13" }, { "desc":"This API can be used by the administrator to verify the token of a user or used by a user to verify their token. The administrator can only verify the token of a user cre", @@ -114,7 +123,7 @@ "uri":"en-us_topic_0057845586.html", "doc_type":"api", "p_code":"9", - "code":"13" + "code":"14" }, { "desc":"This API is used to delete a token no matter whether the token has expired or not.DELETE /v3/auth/tokensParameters in the request headerParameterMandatoryTypeDescriptionX", @@ -123,7 +132,7 @@ "uri":"iam_02_0063.html", "doc_type":"api", "p_code":"9", - "code":"14" + "code":"15" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -132,7 +141,7 @@ "uri":"en-us_topic_0097942776.html", "doc_type":"api", "p_code":"8", - "code":"15" + "code":"16" }, { "desc":"You can obtain a temporary AK/SK and security token (offline AK/SK) by using a user token, agency token, and federated token. A temporary AK/SK is a token with temporary ", @@ -140,8 +149,8 @@ "title":"Obtaining a Temporary AK/SK", "uri":"en-us_topic_0097949518.html", "doc_type":"api", - "p_code":"15", - "code":"16" + "p_code":"16", + "code":"17" }, { "desc":"This API can be used by the administrator to create a permanent access key for an IAM user or used by an IAM user to create a permanent access key for itself.Access keys ", @@ -149,8 +158,8 @@ "title":"Creating a Permanent Access Key", "uri":"iam_03_0001.html", "doc_type":"api", - "p_code":"15", - "code":"17" + "p_code":"16", + "code":"18" }, { "desc":"This API can be used by the administrator to list all permanent access key of an IAM user or used by an IAM user to list all of their permanent access keys.The API can be", @@ -158,8 +167,8 @@ "title":"Listing Permanent Access Keys", "uri":"iam_03_0003.html", "doc_type":"api", - "p_code":"15", - "code":"18" + "p_code":"16", + "code":"19" }, { "desc":"This API can be used by the administrator to query the specified permanent access key of an IAM user or used by an IAM user to query one of their permanent access keys.Th", @@ -167,8 +176,8 @@ "title":"Querying a Permanent Access Key", "uri":"iam_03_0002.html", "doc_type":"api", - "p_code":"15", - "code":"19" + "p_code":"16", + "code":"20" }, { "desc":"This API can be used by the administrator to modify the specified permanent access key of an IAM user or used by an IAM user to modify one of their permanent access keys.", @@ -176,8 +185,8 @@ "title":"Modifying a Permanent Access Key", "uri":"iam_03_0004.html", "doc_type":"api", - "p_code":"15", - "code":"20" + "p_code":"16", + "code":"21" }, { "desc":"This API can be used by the administrator to delete the specified permanent access key of an IAM user or used by an IAM user to delete one of their permanent access keys.", @@ -185,8 +194,8 @@ "title":"Deleting a Permanent Access Key", "uri":"iam_03_0005.html", "doc_type":"api", - "p_code":"15", - "code":"21" + "p_code":"16", + "code":"22" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -195,7 +204,7 @@ "uri":"en-us_topic_0067148042.html", "doc_type":"api", "p_code":"8", - "code":"22" + "code":"23" }, { "desc":"This API is used to query a region list.GET /v3/regionsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill application/json;charset", @@ -203,8 +212,8 @@ "title":"Querying a Region List", "uri":"en-us_topic_0067148043.html", "doc_type":"api", - "p_code":"22", - "code":"23" + "p_code":"23", + "code":"24" }, { "desc":"This API is used to query region details.URI formatGET /v3/regions/{region_id}GET /v3/regions/{region_id}URI parametersParameterMandatoryTypeDescriptionregion_idYesString", @@ -212,8 +221,8 @@ "title":"Querying Region Details", "uri":"en-us_topic_0067148044.html", "doc_type":"api", - "p_code":"22", - "code":"24" + "p_code":"23", + "code":"25" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -222,16 +231,16 @@ "uri":"en-us_topic_0057845642.html", "doc_type":"api", "p_code":"8", - "code":"25" + "code":"26" }, { - "desc":"This API is used to query project information based on the specified criteria.URI formatGET /v3/projects{?domain_id,name,enabled,parent_id,is_domain,page,per_page}GET /v3", + "desc":"This API is used to query project information based on the specified criteria.URI formatGET /v3/projectsGET /v3/projectsURI parametersParameterMandatoryTypeDescriptiondom", "product_code":"iam", "title":"Querying Project Information Based on the Specified Criteria", "uri":"en-us_topic_0057845625.html", "doc_type":"api", - "p_code":"25", - "code":"26" + "p_code":"26", + "code":"27" }, { "desc":"This API is used to query the project list of a specified user.URI formatGET /v3/users/{user_id}/projectsGET /v3/users/{user_id}/projectsURI parametersParameterMandatoryT", @@ -239,8 +248,8 @@ "title":"Querying a User Project List", "uri":"en-us_topic_0057845622.html", "doc_type":"api", - "p_code":"25", - "code":"27" + "p_code":"26", + "code":"28" }, { "desc":"This API is used to query the list of projects accessible to users.GET /v3/auth/projectsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesSt", @@ -248,8 +257,8 @@ "title":"Querying the List of Projects Accessible to Users", "uri":"en-us_topic_0057845558.html", "doc_type":"api", - "p_code":"25", - "code":"28" + "p_code":"26", + "code":"29" }, { "desc":"This API is used to create a project.POST /v3/projectsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill application/json;charset=", @@ -257,8 +266,8 @@ "title":"Creating a Project", "uri":"en-us_topic_0066154565.html", "doc_type":"api", - "p_code":"25", - "code":"29" + "p_code":"26", + "code":"30" }, { "desc":"This API is used to modify project information.URI formatPATCH /v3/projects/{project_id}PATCH /v3/projects/{project_id}URI parametersParameterMandatoryTypeDescriptionproj", @@ -266,8 +275,8 @@ "title":"Modifying Project Data", "uri":"en-us_topic_0066154566.html", "doc_type":"api", - "p_code":"25", - "code":"30" + "p_code":"26", + "code":"31" }, { "desc":"This API is used to query detailed information about a project based on the project ID.URI formatGET /v3/projects/{project_id}GET /v3/projects/{project_id}URI parametersP", @@ -275,8 +284,8 @@ "title":"Querying Information About a Specified Project", "uri":"en-us_topic_0066154567.html", "doc_type":"api", - "p_code":"25", - "code":"31" + "p_code":"26", + "code":"32" }, { "desc":"This API is used to set the status of a specified project. The project statuses include Normal and Suspended.URI formatPUT /v3-ext/projects/{project_id}PUT /v3-ext/projec", @@ -284,8 +293,8 @@ "title":"Setting the Status of a Specified Project", "uri":"en-us_topic_0074171149.html", "doc_type":"api", - "p_code":"25", - "code":"32" + "p_code":"26", + "code":"33" }, { "desc":"This API is used to query details about a specified project, including the project status.URI formatGET /v3-ext/projects/{project_id}GET /v3-ext/projects/{project_id}URI ", @@ -293,8 +302,8 @@ "title":"Querying Information and Status of a Specified Project", "uri":"en-us_topic_0079466135.html", "doc_type":"api", - "p_code":"25", - "code":"33" + "p_code":"26", + "code":"34" }, { "desc":"This API is used to delete a project.URI formatDELETE /v3/projects/{project_id}DELETE /v3/projects/{project_id}URI parametersParameterMandatoryTypeDescriptionproject_idYe", @@ -302,8 +311,8 @@ "title":"Deleting a Project", "uri":"en-us_topic_0094012960.html", "doc_type":"api", - "p_code":"25", - "code":"34" + "p_code":"26", + "code":"35" }, { "desc":"This API is used to query the quotas of a specified project.URI formatGET /v3.0/OS-QUOTA/projects/{project_id}GET /v3.0/OS-QUOTA/projects/{project_id}URI parametersStatus", @@ -311,8 +320,8 @@ "title":"Querying the Quotas of a Project", "uri":"iam_02_0037.html", "doc_type":"api", - "p_code":"25", - "code":"35" + "p_code":"26", + "code":"36" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -321,7 +330,7 @@ "uri":"en-us_topic_0057845621.html", "doc_type":"api", "p_code":"8", - "code":"36" + "code":"37" }, { "desc":"This API is used to query the list of domains accessible to users.GET /v3/auth/domainsParameters in the request headerParameterMandatoryTypeDescriptionX-Auth-TokenYesStri", @@ -329,8 +338,8 @@ "title":"Querying the List of Domains Accessible to Users", "uri":"en-us_topic_0057845574.html", "doc_type":"api", - "p_code":"36", - "code":"37" + "p_code":"37", + "code":"38" }, { "desc":"This API is used to query the password strength policy, including its regular expression and description.URI formatGET /v3/domains/{domain_id}/config/security_complianceG", @@ -338,8 +347,8 @@ "title":"Querying the Password Strength Policy", "uri":"iam_02_0007.html", "doc_type":"api", - "p_code":"36", - "code":"38" + "p_code":"37", + "code":"39" }, { "desc":"This API is used to query the password strength policy by option. The option can be the regular expression and description of the password strength policy.URI formatGET /", @@ -347,8 +356,8 @@ "title":"Querying the Password Strength Policy by Option", "uri":"iam_02_0113.html", "doc_type":"api", - "p_code":"36", - "code":"39" + "p_code":"37", + "code":"40" }, { "desc":"This API is used to query a resource quota. You can query the quota of users, user groups, identity providers, agencies, and policies.URI formatGET /v3.0/OS-QUOTA/domains", @@ -356,8 +365,8 @@ "title":"Querying a Resource Quota", "uri":"iam_02_0114.html", "doc_type":"api", - "p_code":"36", - "code":"40" + "p_code":"37", + "code":"41" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -366,7 +375,7 @@ "uri":"en-us_topic_0057845593.html", "doc_type":"api", "p_code":"8", - "code":"41" + "code":"42" }, { "desc":"This API is used to query a user list.URI formatGET /v3/usersGET /v3/usersURI parametersParameterMandatoryTypeDescriptiondomain_idNoStringID of the domain that a user bel", @@ -374,8 +383,8 @@ "title":"Querying a User List", "uri":"en-us_topic_0057845638.html", "doc_type":"api", - "p_code":"41", - "code":"42" + "p_code":"42", + "code":"43" }, { "desc":"This API is used to query detailed information about a specified user.URI formatGET /v3/users/{user_id}GET /v3/users/{user_id}URI parametersParameterMandatoryTypeDescript", @@ -383,8 +392,8 @@ "title":"Querying User Details", "uri":"en-us_topic_0057845652.html", "doc_type":"api", - "p_code":"41", - "code":"43" + "p_code":"42", + "code":"44" }, { "desc":"This API can be used by the administrator to query the details about a specified user or used by a user to query their details.GET /v3.0/OS-USER/users/{user_id}Status cod", @@ -392,8 +401,8 @@ "title":"Querying User Details (Recommended)", "uri":"iam_08_0004.html", "doc_type":"api", - "p_code":"41", - "code":"44" + "p_code":"42", + "code":"45" }, { "desc":"This API is used to query the information about the user group to which a specified user belongs.URI formatGET /v3/users/{user_id}/groupsGET /v3/users/{user_id}/groupsURI", @@ -401,8 +410,8 @@ "title":"Querying the User Group to Which a User Belongs", "uri":"en-us_topic_0057845554.html", "doc_type":"api", - "p_code":"41", - "code":"45" + "p_code":"42", + "code":"46" }, { "desc":"This API is used to query users in a user group.URI formatGET /v3/groups/{group_id}/usersGET /v3/groups/{group_id}/usersURI parametersParameterMandatoryTypeDescriptiongro", @@ -410,8 +419,8 @@ "title":"Querying Users in a User Group", "uri":"en-us_topic_0057845561.html", "doc_type":"api", - "p_code":"41", - "code":"46" + "p_code":"42", + "code":"47" }, { "desc":"This API is provided for the administrator to create an IAM user.POST /v3.0/OS-USER/usersRequest for an administrator to create an IAM user named IAMUser, with the email ", @@ -419,8 +428,8 @@ "title":"Creating an IAM User (Recommended)", "uri":"iam_08_0015.html", "doc_type":"api", - "p_code":"41", - "code":"47" + "p_code":"42", + "code":"48" }, { "desc":"This API is used to create a user under a domain.POST /v3/usersParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill application/json", @@ -428,8 +437,8 @@ "title":"Creating a User", "uri":"en-us_topic_0057845637.html", "doc_type":"api", - "p_code":"41", - "code":"48" + "p_code":"42", + "code":"49" }, { "desc":"This API is used to change the password for a user.URI formatPOST /v3/users/{user_id}/passwordPOST /v3/users/{user_id}/passwordURI parametersParameterMandatoryTypeDescrip", @@ -437,8 +446,8 @@ "title":"Changing a Password", "uri":"en-us_topic_0057845653.html", "doc_type":"api", - "p_code":"41", - "code":"49" + "p_code":"42", + "code":"50" }, { "desc":"This API is used to modify user information under a domain.URI formatPATCH /v3/users/{user_id}PATCH /v3/users/{user_id}URI parametersParameterMandatoryTypeDescriptionuser", @@ -446,8 +455,8 @@ "title":"Modifying User Information", "uri":"en-us_topic_0057845611.html", "doc_type":"api", - "p_code":"41", - "code":"50" + "p_code":"42", + "code":"51" }, { "desc":"This API is provided for the administrator to modify user information.PUT /v3.0/OS-USER/users/{user_id}Status code: 200The request is successful.", @@ -455,8 +464,8 @@ "title":"Modifying User Information (Including Email Address and Mobile Number) as the Administrator", "uri":"iam_08_0011.html", "doc_type":"api", - "p_code":"41", - "code":"51" + "p_code":"42", + "code":"52" }, { "desc":"This API is used to delete a user.URI formatDELETE /v3/users/{user_id}DELETE /v3/users/{user_id}URI parametersParameterMandatoryTypeDescriptionuser_idYesStringUser ID.Par", @@ -464,8 +473,8 @@ "title":"Deleting a User", "uri":"en-us_topic_0057845630.html", "doc_type":"api", - "p_code":"41", - "code":"52" + "p_code":"42", + "code":"53" }, { "desc":"This API is used to delete a user from a user group.URI formatDELETE /v3/groups/{group_id}/users/{user_id}DELETE /v3/groups/{group_id}/users/{user_id}URI parametersParame", @@ -473,8 +482,8 @@ "title":"Deleting a User from a User Group", "uri":"en-us_topic_0057845601.html", "doc_type":"api", - "p_code":"41", - "code":"53" + "p_code":"42", + "code":"54" }, { "desc":"This API is used by the administrator to send a welcome email to a user.The welcome email contains a one-time password-free login link, which can be used by the user to s", @@ -482,8 +491,8 @@ "title":"Sending a Welcome Email to a User", "uri":"iam_08_0025.html", "doc_type":"api", - "p_code":"41", - "code":"54" + "p_code":"42", + "code":"55" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -492,16 +501,16 @@ "uri":"en-us_topic_0057845641.html", "doc_type":"api", "p_code":"8", - "code":"55" + "code":"56" }, { - "desc":"This API is used to query user group information.URI formatGET /v3/groups{?domain_id,name}GET /v3/groups{?domain_id,name}Query parametersParameterMandatoryTypeDescription", + "desc":"This API is used to query user group information.URI formatGET /v3/groupsGET /v3/groupsQuery parametersParameterMandatoryTypeDescriptiondomain_idNoStringID of the domain ", "product_code":"iam", "title":"Listing User Groups", "uri":"en-us_topic_0057845602.html", "doc_type":"api", - "p_code":"55", - "code":"56" + "p_code":"56", + "code":"57" }, { "desc":"This API is used to query detailed information about a user group.URI formatGET /v3/groups/{group_id}GET /v3/groups/{group_id}Query parametersParameterMandatoryTypeDescri", @@ -509,8 +518,8 @@ "title":"Querying User Group Details", "uri":"en-us_topic_0057845618.html", "doc_type":"api", - "p_code":"55", - "code":"57" + "p_code":"56", + "code":"58" }, { "desc":"This API is used to create a user group.POST /v3/groupsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill application/json;charset", @@ -518,8 +527,8 @@ "title":"Creating a User Group", "uri":"en-us_topic_0057845650.html", "doc_type":"api", - "p_code":"55", - "code":"58" + "p_code":"56", + "code":"59" }, { "desc":"This API is used to add a user to a user group.URI formatPUT /v3/groups/{group_id}/users/{user_id}PUT /v3/groups/{group_id}/users/{user_id}URI parametersParameterMandator", @@ -527,8 +536,8 @@ "title":"Adding a User to a User Group", "uri":"en-us_topic_0057845654.html", "doc_type":"api", - "p_code":"55", - "code":"59" + "p_code":"56", + "code":"60" }, { "desc":"This API is used to update user group information.URI formatPATCH /v3/groups/{group_id}PATCH /v3/groups/{group_id}URI parametersParameterMandatoryTypeDescriptiongroup_idY", @@ -536,8 +545,8 @@ "title":"Updating a User Group", "uri":"en-us_topic_0057845600.html", "doc_type":"api", - "p_code":"55", - "code":"60" + "p_code":"56", + "code":"61" }, { "desc":"This API is used to delete a user group.URI formatDELETE /v3/groups/{group_id}DELETE /v3/groups/{group_id}URI parametersParameterMandatoryTypeDescriptiongroup_idYesString", @@ -545,8 +554,8 @@ "title":"Deleting a User Group", "uri":"en-us_topic_0057845566.html", "doc_type":"api", - "p_code":"55", - "code":"61" + "p_code":"56", + "code":"62" }, { "desc":"This API is used to query whether a user belongs to a user group.URI formatHEAD /v3/groups/{group_id}/users/{user_id}HEAD /v3/groups/{group_id}/users/{user_id}URI paramet", @@ -554,8 +563,8 @@ "title":"Querying Whether a User Belongs to a User Group", "uri":"en-us_topic_0057845599.html", "doc_type":"api", - "p_code":"55", - "code":"62" + "p_code":"56", + "code":"63" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -564,7 +573,7 @@ "uri":"en-us_topic_0057845579.html", "doc_type":"api", "p_code":"8", - "code":"63" + "code":"64" }, { "desc":"This API is used to query a role list, including the permissions policies of a role. A role is a set of permissions and represents a group of actions.GET /v3/rolesStatus ", @@ -572,8 +581,8 @@ "title":"Querying a Role List", "uri":"en-us_topic_0057845591.html", "doc_type":"api", - "p_code":"63", - "code":"64" + "p_code":"64", + "code":"65" }, { "desc":"This API is used to query role details, including the permissions policies of a role. A role is a set of permissions and represents a group of actions.URI formatGET /v3/r", @@ -581,8 +590,8 @@ "title":"Querying Role Details", "uri":"en-us_topic_0057845603.html", "doc_type":"api", - "p_code":"63", - "code":"65" + "p_code":"64", + "code":"66" }, { "desc":"This API is used to query permission assignment records of a specified account.GET /v3.0/OS-PERMISSION/role-assignmentsStatus code: 200The request is successful.{\n \"ro", @@ -590,8 +599,8 @@ "title":"Querying Permission Assignment Records", "uri":"en-us_topic_0000001362626928.html", "doc_type":"api", - "p_code":"63", - "code":"66" + "p_code":"64", + "code":"67" }, { "desc":"This API is used to query the user groups to which a specified role has been assigned.URI formatGET /v3/role_assignments{?role.id,user.id,group.id,scope.project.id,scope.", @@ -599,8 +608,8 @@ "title":"Querying Role Assignments (Discarded)", "uri":"iam_11_0003.html", "doc_type":"api", - "p_code":"63", - "code":"67" + "p_code":"64", + "code":"68" }, { "desc":"This API is used to query the permissions of a user group under a domain. A role is a set of permissions and represents a group of actions.URI formatGET /v3/domains/{doma", @@ -608,8 +617,8 @@ "title":"Querying Permissions of a User Group Under a Domain", "uri":"en-us_topic_0057845571.html", "doc_type":"api", - "p_code":"63", - "code":"68" + "p_code":"64", + "code":"69" }, { "desc":"This API is used to query the permissions of a specified user group corresponding to a project. A role is a set of permissions and represents a group of actions.URI forma", @@ -617,8 +626,8 @@ "title":"Querying Permissions of a User Group Corresponding to a Project", "uri":"en-us_topic_0057845640.html", "doc_type":"api", - "p_code":"63", - "code":"69" + "p_code":"64", + "code":"70" }, { "desc":"This API is used to grant permissions to a user group of a domain. A role is a set of permissions and represents a group of actions.URI formatPUT /v3/domains/{domain_id}/", @@ -626,8 +635,8 @@ "title":"Granting Permissions to a User Group of a Domain", "uri":"en-us_topic_0057845623.html", "doc_type":"api", - "p_code":"63", - "code":"70" + "p_code":"64", + "code":"71" }, { "desc":"This API is used to grant permissions to a user group corresponding to a project. A role is a set of permissions and represents a group of actions.URI formatPUT /v3/proje", @@ -635,8 +644,8 @@ "title":"Granting Permissions to a User Group Corresponding to a Project", "uri":"en-us_topic_0057845597.html", "doc_type":"api", - "p_code":"63", - "code":"71" + "p_code":"64", + "code":"72" }, { "desc":"This API is used to delete permissions of a user group corresponding to a project. A role is a set of permissions and represents a group of actions.URI formatDELETE /v3/p", @@ -644,8 +653,8 @@ "title":"Deleting Permissions of a User Group Corresponding to a Project", "uri":"en-us_topic_0057845572.html", "doc_type":"api", - "p_code":"63", - "code":"72" + "p_code":"64", + "code":"73" }, { "desc":"This API is used to delete permissions of a specified user group of a domain. A role is a set of permissions and represents a group of actions.URI formatDELETE /v3/domain", @@ -653,8 +662,8 @@ "title":"Deleting Permissions of a User Group of a Domain", "uri":"en-us_topic_0057845560.html", "doc_type":"api", - "p_code":"63", - "code":"73" + "p_code":"64", + "code":"74" }, { "desc":"This API is used to query whether a specified user group under a domain has specific permissions. A role is a set of permissions and represents a group of actions.URI for", @@ -662,8 +671,8 @@ "title":"Querying Whether a User Group Under a Domain Has Specific Permissions", "uri":"en-us_topic_0057845632.html", "doc_type":"api", - "p_code":"63", - "code":"74" + "p_code":"64", + "code":"75" }, { "desc":"This API is used to query whether a user group corresponding to a project has specific permissions. A role is a set of permissions and represents a group of actions.URI f", @@ -671,8 +680,8 @@ "title":"Querying Whether a User Group Corresponding to a Project Has Specific Permissions", "uri":"en-us_topic_0057845620.html", "doc_type":"api", - "p_code":"63", - "code":"75" + "p_code":"64", + "code":"76" }, { "desc":"This API is used to grant permissions to a user group for all projects.URI formatPUT /v3/OS-INHERIT/domains/{domain_id}/groups/{group_id}/roles/{role_id}/inherited_to_pro", @@ -680,8 +689,8 @@ "title":"Granting Permissions to a User Group for All Projects", "uri":"iam_02_0519.html", "doc_type":"api", - "p_code":"63", - "code":"76" + "p_code":"64", + "code":"77" }, { "desc":"This API is provided for the administrator to remove the specified permissions of a user group in all projects.DELETE /v3/OS-INHERIT/domains/{domain_id}/groups/{group_id}", @@ -689,8 +698,8 @@ "title":"Removing Specified Permissions of a User Group in All Projects", "uri":"iam_10_0013.html", "doc_type":"api", - "p_code":"63", - "code":"77" + "p_code":"64", + "code":"78" }, { "desc":"This API is provided for the administrator to check whether a user group has specified permissions for all projects.HEAD /v3/OS-INHERIT/domains/{domain_id}/groups/{group_", @@ -698,8 +707,8 @@ "title":"Checking Whether a User Group Has Specified Permissions for All Projects", "uri":"iam_10_0012.html", "doc_type":"api", - "p_code":"63", - "code":"78" + "p_code":"64", + "code":"79" }, { "desc":"This API is provided for the administrator to query all permissions that have been assigned to a user group.GET /v3/OS-INHERIT/domains/{domain_id}/groups/{group_id}/roles", @@ -707,8 +716,8 @@ "title":"Querying All Permissions of a User Group", "uri":"iam_10_0011.html", "doc_type":"api", - "p_code":"63", - "code":"79" + "p_code":"64", + "code":"80" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -717,7 +726,7 @@ "uri":"iam_02_0010.html", "doc_type":"api", "p_code":"8", - "code":"80" + "code":"81" }, { "desc":"This API is provided for the administrator to list all custom policies.The API can be called using both the global endpoint and region-specific endpoints.GET /v3.0/OS-ROL", @@ -725,8 +734,8 @@ "title":"Listing Custom Policies", "uri":"iam_02_0011.html", "doc_type":"api", - "p_code":"80", - "code":"81" + "p_code":"81", + "code":"82" }, { "desc":"This API is provided for the administrator to query custom policy details.The API can be called using both the global endpoint and region-specific endpoints.GET /v3.0/OS-", @@ -734,8 +743,8 @@ "title":"Querying Custom Policy Details", "uri":"iam_02_0012.html", "doc_type":"api", - "p_code":"80", - "code":"82" + "p_code":"81", + "code":"83" }, { "desc":"This API is provided for the administrator to create a custom policy for cloud services.The API can be called using both the global endpoint and region-specific endpoints", @@ -743,8 +752,8 @@ "title":"Creating a Custom Policy for Cloud Services", "uri":"iam_02_0013.html", "doc_type":"api", - "p_code":"80", - "code":"83" + "p_code":"81", + "code":"84" }, { "desc":"This API is provided for the administrator to create a custom policy.The API can be called using both the global endpoint and region-specific endpoints.POST /v3.0/OS-ROLE", @@ -752,8 +761,8 @@ "title":"Creating a Custom Policy", "uri":"iam_11_0016.html", "doc_type":"api", - "p_code":"80", - "code":"84" + "p_code":"81", + "code":"85" }, { "desc":"This API is provided for the administrator to modify a custom policy for cloud services.The API can be called using both the global endpoint and region-specific endpoints", @@ -761,8 +770,8 @@ "title":"Modifying a Custom Policy for Cloud Services", "uri":"iam_02_0014.html", "doc_type":"api", - "p_code":"80", - "code":"85" + "p_code":"81", + "code":"86" }, { "desc":"This API is provided for the administrator to modify a custom policy.The API can be called using both the global endpoint and region-specific endpoints.PATCH /v3.0/OS-ROL", @@ -770,8 +779,8 @@ "title":"Modifying a Custom Policy", "uri":"iam_11_0017.html", "doc_type":"api", - "p_code":"80", - "code":"86" + "p_code":"81", + "code":"87" }, { "desc":"This API is provided for the administrator to delete a custom policy.The API can be called using both the global endpoint and region-specific endpoints.DELETE /v3.0/OS-RO", @@ -779,8 +788,8 @@ "title":"Deleting a Custom Policy", "uri":"iam_02_0015.html", "doc_type":"api", - "p_code":"80", - "code":"87" + "p_code":"81", + "code":"88" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -789,7 +798,7 @@ "uri":"en-us_topic_0079467612.html", "doc_type":"api", "p_code":"8", - "code":"88" + "code":"89" }, { "desc":"This API is used to create an agency.POST /v3.0/OS-AGENCY/agenciesParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringapplication/json;c", @@ -797,17 +806,17 @@ "title":"Creating an Agency", "uri":"en-us_topic_0079467617.html", "doc_type":"api", - "p_code":"88", - "code":"89" + "p_code":"89", + "code":"90" }, { - "desc":"This API is used to query an agency list based on the specified conditions.URI formatGET /v3.0/OS-AGENCY/agencies{?domain_id,name,trust_domain_id}GET /v3.0/OS-AGENCY/agen", + "desc":"This API is used to query an agency list based on the specified conditions.URI formatGET /v3.0/OS-AGENCY/agenciesGET /v3.0/OS-AGENCY/agenciesQuery parametersParameterMand", "product_code":"iam", "title":"Querying an Agency List Based on the Specified Conditions", "uri":"en-us_topic_0079467614.html", "doc_type":"api", - "p_code":"88", - "code":"90" + "p_code":"89", + "code":"91" }, { "desc":"This API is used to obtain the details of a specified agency.URI formatGET /v3.0/OS-AGENCY/agencies/{agency_id}GET /v3.0/OS-AGENCY/agencies/{agency_id}URI parametersParam", @@ -815,8 +824,8 @@ "title":"Obtaining Details of a Specified Agency", "uri":"en-us_topic_0079467615.html", "doc_type":"api", - "p_code":"88", - "code":"91" + "p_code":"89", + "code":"92" }, { "desc":"This API is used to modify agency information, including the trust_domain_id, description, and trust_domain_name parameters.URI formatPUT /v3.0/OS-AGENCY/agencies/{agency", @@ -824,8 +833,8 @@ "title":"Modifying an Agency", "uri":"en-us_topic_0079467623.html", "doc_type":"api", - "p_code":"88", - "code":"92" + "p_code":"89", + "code":"93" }, { "desc":"This API is used to delete an agency.After this operation, the delegated party can no longer access the relevant resources. Exercise caution when performing this operatio", @@ -833,8 +842,8 @@ "title":"Deleting an Agency", "uri":"en-us_topic_0079467625.html", "doc_type":"api", - "p_code":"88", - "code":"93" + "p_code":"89", + "code":"94" }, { "desc":"This API is used to grant permissions to an agency for a project.URI formatPUT /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}PUT /v3.0/OS-AGEN", @@ -842,8 +851,8 @@ "title":"Granting Permissions to an Agency for a Project", "uri":"en-us_topic_0079467620.html", "doc_type":"api", - "p_code":"88", - "code":"94" + "p_code":"89", + "code":"95" }, { "desc":"This API is used to check whether an agency has the specified permissions on a project.URI formatHEAD /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{ro", @@ -851,8 +860,8 @@ "title":"Checking Whether an Agency Has the Specified Permissions on a Project", "uri":"en-us_topic_0079578163.html", "doc_type":"api", - "p_code":"88", - "code":"95" + "p_code":"89", + "code":"96" }, { "desc":"This API is used to query the list of permissions of an agency on a project.URI formatGET /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/rolesGET /v3.0/OS-AGE", @@ -860,8 +869,8 @@ "title":"Querying the List of Permissions of an Agency on a Project", "uri":"en-us_topic_0079578164.html", "doc_type":"api", - "p_code":"88", - "code":"96" + "p_code":"89", + "code":"97" }, { "desc":"This API is used to delete permissions of an agency on a project.URI formatDELETE /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}DELETE /v3.0/O", @@ -869,8 +878,8 @@ "title":"Deleting Permissions of an Agency on a Project", "uri":"en-us_topic_0079467627.html", "doc_type":"api", - "p_code":"88", - "code":"97" + "p_code":"89", + "code":"98" }, { "desc":"This API is used to grant permissions to an agency on a domain.URI formatPUT /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}PUT /v3.0/OS-AGENCY/d", @@ -878,8 +887,8 @@ "title":"Granting Permissions to an Agency on a Domain", "uri":"en-us_topic_0079467624.html", "doc_type":"api", - "p_code":"88", - "code":"98" + "p_code":"89", + "code":"99" }, { "desc":"This API is used to check whether an agency has the specified permissions on a domain.URI formatHEAD /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_", @@ -887,8 +896,8 @@ "title":"Checking Whether an Agency Has the Specified Permissions on a Domain", "uri":"en-us_topic_0079578165.html", "doc_type":"api", - "p_code":"88", - "code":"99" + "p_code":"89", + "code":"100" }, { "desc":"This API is used to query the list of permissions of an agency on a domain.URI formatGET /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/rolesGET /v3.0/OS-AGENCY", @@ -896,8 +905,8 @@ "title":"Querying the List of Permissions of an Agency on a Domain", "uri":"en-us_topic_0079578166.html", "doc_type":"api", - "p_code":"88", - "code":"100" + "p_code":"89", + "code":"101" }, { "desc":"This API is used to delete permissions of an agency on a domain.URI formatDELETE /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}DELETE /v3.0/OS-A", @@ -905,8 +914,8 @@ "title":"Deleting Permissions of an Agency on a Domain", "uri":"en-us_topic_0079467622.html", "doc_type":"api", - "p_code":"88", - "code":"101" + "p_code":"89", + "code":"102" }, { "desc":"This API is provided for the administrator to query all permissions that have been assigned to an agency.GET /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/rol", @@ -914,8 +923,8 @@ "title":"Querying All Permissions of an Agency", "uri":"iam_02_0040.html", "doc_type":"api", - "p_code":"88", - "code":"102" + "p_code":"89", + "code":"103" }, { "desc":"This API is provided for the administrator to grant specified permissions to an agency for all projects.PUT /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/role", @@ -923,8 +932,8 @@ "title":"Granting Specified Permissions to an Agency for All Projects", "uri":"iam_02_0041.html", "doc_type":"api", - "p_code":"88", - "code":"103" + "p_code":"89", + "code":"104" }, { "desc":"This API is provided for the administrator to check whether an agency has specified permissions.HEAD /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role", @@ -932,8 +941,8 @@ "title":"Checking Whether an Agency Has Specified Permissions", "uri":"iam_02_0042.html", "doc_type":"api", - "p_code":"88", - "code":"104" + "p_code":"89", + "code":"105" }, { "desc":"This API is provided for the administrator to remove the specified permissions of an agency in all projects.DELETE /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_i", @@ -941,8 +950,8 @@ "title":"Removing Specified Permissions of an Agency in All Projects", "uri":"iam_02_0043.html", "doc_type":"api", - "p_code":"88", - "code":"105" + "p_code":"89", + "code":"106" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -951,7 +960,7 @@ "uri":"iam_02_0020.html", "doc_type":"api", "p_code":"8", - "code":"106" + "code":"107" }, { "desc":"This API is used to query the operation protection policy.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/protect-policyStatus code: 200The request is successful.Status c", @@ -959,8 +968,8 @@ "title":"Querying the Operation Protection Policy", "uri":"iam_02_0022.html", "doc_type":"api", - "p_code":"106", - "code":"107" + "p_code":"107", + "code":"108" }, { "desc":"This API is provided for the administrator to modify the operation protection policy.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/protect-policyStatus code: 200The req", @@ -968,8 +977,8 @@ "title":"Modifying the Operation Protection Policy", "uri":"iam_02_0021.html", "doc_type":"api", - "p_code":"106", - "code":"108" + "p_code":"107", + "code":"109" }, { "desc":"This API is used to query the password policy.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/password-policyStatus code: 200The request is successful.Status code: 403Acc", @@ -977,8 +986,8 @@ "title":"Querying the Password Policy", "uri":"iam_02_0024.html", "doc_type":"api", - "p_code":"106", - "code":"109" + "p_code":"107", + "code":"110" }, { "desc":"This API is provided for the administrator to modify the password policy.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/password-policyStatus code: 200The request is suc", @@ -986,8 +995,8 @@ "title":"Modifying the Password Policy", "uri":"iam_02_0023.html", "doc_type":"api", - "p_code":"106", - "code":"110" + "p_code":"107", + "code":"111" }, { "desc":"This API is used to query the login authentication policy.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/login-policyStatus code: 200The request is successful.Status cod", @@ -995,8 +1004,8 @@ "title":"Querying the Login Authentication Policy", "uri":"iam_02_0026.html", "doc_type":"api", - "p_code":"106", - "code":"111" + "p_code":"107", + "code":"112" }, { "desc":"This API is provided for the administrator to modify the login authentication policy.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/login-policyStatus code: 200The reque", @@ -1004,8 +1013,8 @@ "title":"Modifying the Login Authentication Policy", "uri":"iam_02_0025.html", "doc_type":"api", - "p_code":"106", - "code":"112" + "p_code":"107", + "code":"113" }, { "desc":"This API is used to query the ACL for console access.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/console-acl-policyStatus code: 200The request is successful.Status co", @@ -1013,8 +1022,8 @@ "title":"Querying the ACL for Console Access", "uri":"iam_02_0028.html", "doc_type":"api", - "p_code":"106", - "code":"113" + "p_code":"107", + "code":"114" }, { "desc":"This API is provided for the administrator to modify the ACL for console access.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/console-acl-policyStatus code: 200The requ", @@ -1022,8 +1031,8 @@ "title":"Modifying the ACL for Console Access", "uri":"iam_02_0027.html", "doc_type":"api", - "p_code":"106", - "code":"114" + "p_code":"107", + "code":"115" }, { "desc":"This API is used to query the ACL for API access.GET /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/api-acl-policyStatus code: 200The request is successful.Status code: 403A", @@ -1031,8 +1040,8 @@ "title":"Querying the ACL for API Access", "uri":"iam_02_0030.html", "doc_type":"api", - "p_code":"106", - "code":"115" + "p_code":"107", + "code":"116" }, { "desc":"This API is provided for the administrator to modify the ACL for API access.PUT /v3.0/OS-SECURITYPOLICY/domains/{domain_id}/api-acl-policyStatus code: 200The request is s", @@ -1040,8 +1049,8 @@ "title":"Modifying the ACL for API Access", "uri":"iam_02_0029.html", "doc_type":"api", - "p_code":"106", - "code":"116" + "p_code":"107", + "code":"117" }, { "desc":"This API is provided for the administrator to query the MFA device information of users.GET /v3.0/OS-MFA/virtual-mfa-devicesStatus code: 200The request is successful.Stat", @@ -1049,8 +1058,8 @@ "title":"Querying MFA Device Information of Users", "uri":"iam_08_0012.html", "doc_type":"api", - "p_code":"106", - "code":"117" + "p_code":"107", + "code":"118" }, { "desc":"This API can be used by the administrator to query the MFA device information of a specified user or used by a user to query their MFA device information.GET /v3.0/OS-MFA", @@ -1058,8 +1067,8 @@ "title":"Querying the MFA Device Information of a User", "uri":"iam_08_0013.html", "doc_type":"api", - "p_code":"106", - "code":"118" + "p_code":"107", + "code":"119" }, { "desc":"This API is provided for the administrator to query the login protection configurations of users.GET /v3.0/OS-USER/login-protectsStatus code: 200The request is successful", @@ -1067,8 +1076,8 @@ "title":"Querying Login Protection Configurations of Users", "uri":"iam_08_0014.html", "doc_type":"api", - "p_code":"106", - "code":"119" + "p_code":"107", + "code":"120" }, { "desc":"This API can be used by the administrator to query the login protection configuration of a specified user or used by a user to query their login protection configuration.", @@ -1076,8 +1085,8 @@ "title":"Querying the Login Protection Configuration of a User", "uri":"iam_08_0016.html", "doc_type":"api", - "p_code":"106", - "code":"120" + "p_code":"107", + "code":"121" }, { "desc":"This API is provided for the administrator to modify the login protection configuration of a user.PUT /v3.0/OS-USER/users/{user_id}/login-protectStatus code: 200Status co", @@ -1085,8 +1094,8 @@ "title":"Modifying the Login Protection Configuration of a User", "uri":"iam_08_0021.html", "doc_type":"api", - "p_code":"106", - "code":"121" + "p_code":"107", + "code":"122" }, { "desc":"This API is provided for IAM users to bind a virtual MFA device.PUT /v3.0/OS-MFA/mfa-devices/bindNoneNone", @@ -1094,8 +1103,8 @@ "title":"Binding a Virtual MFA Device", "uri":"iam_08_0017.html", "doc_type":"api", - "p_code":"106", - "code":"122" + "p_code":"107", + "code":"123" }, { "desc":"This API is used by the administrator to unbind a virtual MFA device from an IAM user, or used by an IAM user to unbind their own virtual MFA device.PUT /v3.0/OS-MFA/mfa-", @@ -1103,8 +1112,8 @@ "title":"Unbinding a Virtual MFA Device", "uri":"iam_08_0018.html", "doc_type":"api", - "p_code":"106", - "code":"123" + "p_code":"107", + "code":"124" }, { "desc":"This API is provided for IAM users to create a virtual MFA device.POST /v3.0/OS-MFA/virtual-mfa-devicesStatus code: 201Status code: 201The request is successful.", @@ -1112,8 +1121,8 @@ "title":"Creating a Virtual MFA Device", "uri":"iam_08_0019.html", "doc_type":"api", - "p_code":"106", - "code":"124" + "p_code":"107", + "code":"125" }, { "desc":"This API is provided for the administrator to delete their own virtual MFA device.DELETE /v3.0/OS-MFA/virtual-mfa-devicesNoneNone", @@ -1121,8 +1130,35 @@ "title":"Deleting a Virtual MFA Device", "uri":"iam_08_0020.html", "doc_type":"api", - "p_code":"106", - "code":"125" + "p_code":"107", + "code":"126" + }, + { + "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", + "product_code":"iam", + "title":"Enterprise Project Management", + "uri":"iam_12_0513.html", + "doc_type":"api", + "p_code":"8", + "code":"127" + }, + { + "desc":"This API is used to grant permissions to agencies associated with specified enterprise projects.PUT /v3.0/OS-PERMISSION/subjects/agency/scopes/enterprise-project/role-ass", + "product_code":"iam", + "title":"Granting Permissions to Agencies Associated with Specified Enterprise Projects", + "uri":"iam_02_0633.html", + "doc_type":"api", + "p_code":"127", + "code":"128" + }, + { + "desc":"This API is used to remove permissions of agencies associated with specified enterprise projects.DELETE /v3.0/OS-PERMISSION/subjects/agency/scopes/enterprise-project/role", + "product_code":"iam", + "title":"Removing Permissions of Agencies Associated with Specified Enterprise Projects", + "uri":"iam_02_0634.html", + "doc_type":"api", + "p_code":"127", + "code":"129" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1131,7 +1167,7 @@ "uri":"en-us_topic_0057845573.html", "doc_type":"api", "p_code":"8", - "code":"126" + "code":"130" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1139,8 +1175,8 @@ "title":"Obtaining a Token in Federated Identity Authentication Mode", "uri":"en-us_topic_0057845646.html", "doc_type":"api", - "p_code":"126", - "code":"127" + "p_code":"130", + "code":"131" }, { "desc":"OpenStack and Shibboleth are widely used open-source federated identity authentication solutions. They provide powerful SSO capabilities and connect users to various appl", @@ -1148,8 +1184,8 @@ "title":"SP Initiated", "uri":"iam_02_0001.html", "doc_type":"api", - "p_code":"127", - "code":"128" + "p_code":"131", + "code":"132" }, { "desc":"This section uses the Client4ShibbolethIdP script as an example to describe how to obtain a federated authentication token in the IdP-initiated mode. The Client4Shibbolet", @@ -1157,8 +1193,8 @@ "title":"IdP Initiated", "uri":"iam_02_0002.html", "doc_type":"api", - "p_code":"127", - "code":"129" + "p_code":"131", + "code":"133" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1166,8 +1202,8 @@ "title":"Identity Provider", "uri":"en-us_topic_0057845605.html", "doc_type":"api", - "p_code":"126", - "code":"130" + "p_code":"130", + "code":"134" }, { "desc":"This API is used to query the identity provider list.GET /v3/OS-FEDERATION/identity_providersParameters in the request headerParameterMandatoryTypeDescriptionContent-Type", @@ -1175,8 +1211,8 @@ "title":"Querying the Identity Provider List", "uri":"en-us_topic_0057845581.html", "doc_type":"api", - "p_code":"130", - "code":"131" + "p_code":"134", + "code":"135" }, { "desc":"This API is used to query the information about an identity provider.URI formatGET /v3/OS-FEDERATION/identity_providers/{id}GET /v3/OS-FEDERATION/identity_providers/{id}U", @@ -1184,8 +1220,8 @@ "title":"Querying an Identity Provider", "uri":"en-us_topic_0057845639.html", "doc_type":"api", - "p_code":"130", - "code":"132" + "p_code":"134", + "code":"136" }, { "desc":"This API is provided for the administrator to create an identity provider.URI formatPUT /v3/OS-FEDERATION/identity_providers/{id}PUT /v3/OS-FEDERATION/identity_providers/", @@ -1193,8 +1229,8 @@ "title":"Creating an Identity Provider", "uri":"en-us_topic_0057845606.html", "doc_type":"api", - "p_code":"130", - "code":"133" + "p_code":"134", + "code":"137" }, { "desc":"This API is provided for the administrator to create an OpenID Connect identity provider.POST /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-configStatus ", @@ -1202,8 +1238,8 @@ "title":"Creating an OpenID Connect Identity Provider", "uri":"iam_13_0207.html", "doc_type":"api", - "p_code":"130", - "code":"134" + "p_code":"134", + "code":"138" }, { "desc":"This API is used to update the information about a SAML identity provider.URI formatPATCH /v3/OS-FEDERATION/identity_providers/{id}PATCH /v3/OS-FEDERATION/identity_provid", @@ -1211,8 +1247,8 @@ "title":"Updating a SAML Identity Provider", "uri":"en-us_topic_0057845612.html", "doc_type":"api", - "p_code":"130", - "code":"135" + "p_code":"134", + "code":"139" }, { "desc":"This API is provided for the administrator to modify an OpenID Connect identity provider.PUT /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-configStatus c", @@ -1220,8 +1256,8 @@ "title":"Updating an OpenID Connect Identity Provider", "uri":"iam_13_0208.html", "doc_type":"api", - "p_code":"130", - "code":"136" + "p_code":"134", + "code":"140" }, { "desc":"This API is provided for the administrator to query an OpenID Connect identity provider.GET /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-configStatus co", @@ -1229,8 +1265,8 @@ "title":"Querying an OpenID Connect Identity Provider", "uri":"iam_13_0209.html", "doc_type":"api", - "p_code":"130", - "code":"137" + "p_code":"134", + "code":"141" }, { "desc":"This API is used to delete a SAML or OpenID Connect identity provider.URI formatDELETE /v3/OS-FEDERATION/identity_providers/{id}DELETE /v3/OS-FEDERATION/identity_provider", @@ -1238,8 +1274,8 @@ "title":"Deleting an Identity Provider", "uri":"en-us_topic_0057845570.html", "doc_type":"api", - "p_code":"130", - "code":"138" + "p_code":"134", + "code":"142" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1247,8 +1283,8 @@ "title":"Mapping", "uri":"en-us_topic_0057845588.html", "doc_type":"api", - "p_code":"126", - "code":"139" + "p_code":"130", + "code":"143" }, { "desc":"This API is used to query the mapping list.GET /v3/OS-FEDERATION/mappingsParameters in the request headerParameterMandatoryTypeDescriptionContent-TypeYesStringFill applic", @@ -1256,8 +1292,8 @@ "title":"Querying the Mapping List", "uri":"en-us_topic_0057845567.html", "doc_type":"api", - "p_code":"139", - "code":"140" + "p_code":"143", + "code":"144" }, { "desc":"This API is used to query the information about a mapping.URI formatGET /v3/OS-FEDERATION/mappings/{id}GET /v3/OS-FEDERATION/mappings/{id}URI parametersParameterMandatory", @@ -1265,8 +1301,8 @@ "title":"Querying a Mapping", "uri":"en-us_topic_0057845645.html", "doc_type":"api", - "p_code":"139", - "code":"141" + "p_code":"143", + "code":"145" }, { "desc":"This API is used to create a mapping.URI formatPUT /v3/OS-FEDERATION/mappings/{id}PUT /v3/OS-FEDERATION/mappings/{id}URI parametersParameterMandatoryTypeDescriptionidYesS", @@ -1274,8 +1310,8 @@ "title":"Creating a Mapping", "uri":"en-us_topic_0057845590.html", "doc_type":"api", - "p_code":"139", - "code":"142" + "p_code":"143", + "code":"146" }, { "desc":"This API is used to update the information about a mapping.URI formatPATCH /v3/OS-FEDERATION/mappings/{id}PATCH /v3/OS-FEDERATION/mappings/{id}URI parametersParameterMand", @@ -1283,8 +1319,8 @@ "title":"Updating a Mapping", "uri":"en-us_topic_0057845568.html", "doc_type":"api", - "p_code":"139", - "code":"143" + "p_code":"143", + "code":"147" }, { "desc":"This API is used to delete the information about a mapping.URI formatDELETE /v3/OS-FEDERATION/mappings/{id}DELETE /v3/OS-FEDERATION/mappings/{id}URI parametersParameterMa", @@ -1292,8 +1328,8 @@ "title":"Deleting a Mapping", "uri":"en-us_topic_0057845648.html", "doc_type":"api", - "p_code":"139", - "code":"144" + "p_code":"143", + "code":"148" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1301,8 +1337,8 @@ "title":"Protocol", "uri":"en-us_topic_0057845619.html", "doc_type":"api", - "p_code":"126", - "code":"145" + "p_code":"130", + "code":"149" }, { "desc":"This API is used to query the protocol list.URI formatGET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocolsGET /v3/OS-FEDERATION/identity_providers/{idp_id}/protoco", @@ -1310,8 +1346,8 @@ "title":"Querying the Protocol List", "uri":"en-us_topic_0057845644.html", "doc_type":"api", - "p_code":"145", - "code":"146" + "p_code":"149", + "code":"150" }, { "desc":"This API is used to query the information about a protocol.URI formatGET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}GET /v3/OS-FEDERATION/identi", @@ -1319,8 +1355,8 @@ "title":"Querying a Protocol", "uri":"en-us_topic_0057845616.html", "doc_type":"api", - "p_code":"145", - "code":"147" + "p_code":"149", + "code":"151" }, { "desc":"This API is used to register a protocol, that is, associate a rule with an identity provider.URI formatPUT /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protoc", @@ -1328,8 +1364,8 @@ "title":"Registering a Protocol", "uri":"en-us_topic_0057845575.html", "doc_type":"api", - "p_code":"145", - "code":"148" + "p_code":"149", + "code":"152" }, { "desc":"This API is used to update the information about a protocol.URI formatPATCH /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}PATCH /v3/OS-FEDERATION/i", @@ -1337,8 +1373,8 @@ "title":"Updating a Protocol", "uri":"en-us_topic_0057845609.html", "doc_type":"api", - "p_code":"145", - "code":"149" + "p_code":"149", + "code":"153" }, { "desc":"This API is used to delete the information about a protocol.URI formatDELETE /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}DELETE /v3/OS-FEDERATION", @@ -1346,8 +1382,8 @@ "title":"Deleting a Protocol", "uri":"en-us_topic_0057845559.html", "doc_type":"api", - "p_code":"145", - "code":"150" + "p_code":"149", + "code":"154" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1355,8 +1391,8 @@ "title":"Metadata", "uri":"en-us_topic_0057845607.html", "doc_type":"api", - "p_code":"126", - "code":"151" + "p_code":"130", + "code":"155" }, { "desc":"This API is used to query the content of the metadata file imported by an identity provider to the IAM system.URI formatGET /v3-ext/OS-FEDERATION/identity_providers/{idp_", @@ -1364,8 +1400,8 @@ "title":"Querying a Metadata File", "uri":"en-us_topic_0057845553.html", "doc_type":"api", - "p_code":"151", - "code":"152" + "p_code":"155", + "code":"156" }, { "desc":"This API is used to query the metadata file of the keystone.GET /v3-ext/auth/OS-FEDERATION/SSO/metadataParameters in the request headerParameterMandatoryTypeDescriptionun", @@ -1373,8 +1409,8 @@ "title":"Querying the Metadata File of Keystone", "uri":"en-us_topic_0057845577.html", "doc_type":"api", - "p_code":"151", - "code":"153" + "p_code":"155", + "code":"157" }, { "desc":"Before using the federated identity authentication function, a metadata file must be imported to the IAM system. This API is used to import a metadata file of a domain.UR", @@ -1382,8 +1418,8 @@ "title":"Importing a Metadata File", "uri":"en-us_topic_0057845615.html", "doc_type":"api", - "p_code":"151", - "code":"154" + "p_code":"155", + "code":"158" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1391,8 +1427,8 @@ "title":"Token", "uri":"en-us_topic_0057845565.html", "doc_type":"api", - "p_code":"126", - "code":"155" + "p_code":"130", + "code":"159" }, { "desc":"This API is used to obtain an unscoped token in SP-initiated federated identity authentication mode.An unscoped token cannot be used for authentication. If a federated us", @@ -1400,8 +1436,8 @@ "title":"Obtaining an Unscoped Token (SP Initiated)", "uri":"en-us_topic_0057845629.html", "doc_type":"api", - "p_code":"155", - "code":"156" + "p_code":"159", + "code":"160" }, { "desc":"This API is used to obtain an unscoped token in IdP-initiated federated identity authentication mode.An unscoped token cannot be used for authentication. If a federated u", @@ -1409,8 +1445,8 @@ "title":"Obtaining an Unscoped Token (IdP Initiated)", "uri":"iam_02_0003.html", "doc_type":"api", - "p_code":"155", - "code":"157" + "p_code":"159", + "code":"161" }, { "desc":"This API is used to obtain a scoped token through federated identity authentication.POST /v3/auth/tokensStatus code: 201The scoped token is obtained successfully.None", @@ -1418,8 +1454,8 @@ "title":"Obtaining a Scoped Token", "uri":"iam_13_0604.html", "doc_type":"api", - "p_code":"155", - "code":"158" + "p_code":"159", + "code":"162" }, { "desc":"This API is used to obtain a federated identity authentication token using an OpenID Connect ID token.POST /v3.0/OS-AUTH/id-token/tokensStatus code: 201Request for obtain", @@ -1427,8 +1463,8 @@ "title":"Obtaining a Token with an OpenID Connect ID Token", "uri":"iam_13_0605.html", "doc_type":"api", - "p_code":"155", - "code":"159" + "p_code":"159", + "code":"163" }, { "desc":"This API is used to obtain an unscoped token using an OpenID Connect ID token.POST /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}/authStatus code: ", @@ -1436,8 +1472,8 @@ "title":"Obtaining an Unscoped Token with an OpenID Connect ID Token", "uri":"iam_13_0606.html", "doc_type":"api", - "p_code":"155", - "code":"160" + "p_code":"159", + "code":"164" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1445,8 +1481,8 @@ "title":"Domain", "uri":"en-us_topic_0057845633.html", "doc_type":"api", - "p_code":"126", - "code":"161" + "p_code":"130", + "code":"165" }, { "desc":"This API is used to query the list of domains accessible to federated users.GET /v3/OS-FEDERATION/domainsParameters in the request headerParameterMandatoryTypeDescription", @@ -1454,8 +1490,8 @@ "title":"Querying the List of Domains Accessible to Federated Users", "uri":"en-us_topic_0057845596.html", "doc_type":"api", - "p_code":"161", - "code":"162" + "p_code":"165", + "code":"166" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1463,8 +1499,8 @@ "title":"Project", "uri":"en-us_topic_0057845643.html", "doc_type":"api", - "p_code":"126", - "code":"163" + "p_code":"130", + "code":"167" }, { "desc":"This API is used to query the list of projects accessible to federated users. The project list is used to obtain the scoped token in federated identity authentication mod", @@ -1472,8 +1508,8 @@ "title":"Querying the List of Projects Accessible to Federated Users", "uri":"en-us_topic_0057845595.html", "doc_type":"api", - "p_code":"163", - "code":"164" + "p_code":"167", + "code":"168" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1482,7 +1518,7 @@ "uri":"en-us_topic_0057845631.html", "doc_type":"api", "p_code":"8", - "code":"165" + "code":"169" }, { "desc":"This API is used to obtain the keystone API version information.GET /Example requestResponse parameter descriptionParameterMandatoryTypeDescriptionversionsYesObjectKeysto", @@ -1490,8 +1526,8 @@ "title":"Querying Keystone API Version Information", "uri":"en-us_topic_0057845569.html", "doc_type":"api", - "p_code":"165", - "code":"166" + "p_code":"169", + "code":"170" }, { "desc":"This API is used to obtain the information about the keystone API version 3.0.GET /v3Example requestcurl -i -k -X GET https://sample.domain.com/v3Response parameter descr", @@ -1499,8 +1535,8 @@ "title":"Querying Information About Keystone API Version 3.0", "uri":"en-us_topic_0057845613.html", "doc_type":"api", - "p_code":"165", - "code":"167" + "p_code":"169", + "code":"171" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1509,25 +1545,25 @@ "uri":"en-us_topic_0057845604.html", "doc_type":"api", "p_code":"8", - "code":"168" + "code":"172" }, { - "desc":"This API is used to query the service list.URI formatGET /v3/services{?type}GET /v3/services{?type}URI parametersParameterMandatoryTypeDescriptiontypeNoStringService type", + "desc":"This API is used to query the service list.URI formatGET /v3/servicesGET /v3/servicesURI parametersParameterMandatoryTypeDescriptiontypeNoStringService type.The value can", "product_code":"iam", "title":"Querying Services", "uri":"en-us_topic_0057845587.html", "doc_type":"api", - "p_code":"168", - "code":"169" + "p_code":"172", + "code":"173" }, { - "desc":"This API is used to query service details.URI formatGET /v3/services/{service_id}GET /v3/services/{service_id}URI parametersParameterMandatoryTypeDescriptionservice_idYes", + "desc":"This API is used to query service details.URI formatGET /v3/services/{service_id}GET /v3/services/{service_id}Parameter descriptionParameterMandatoryTypeDescriptionservic", "product_code":"iam", "title":"Querying Service Details", "uri":"en-us_topic_0067148045.html", "doc_type":"api", - "p_code":"168", - "code":"170" + "p_code":"172", + "code":"174" }, { "desc":"This API is used to query the list of terminal addresses and provides a service access entry.URI formatGET /v3/endpoints{?interface, service_id}GET /v3/endpoints{?interfa", @@ -1535,8 +1571,8 @@ "title":"Querying Endpoints", "uri":"en-us_topic_0057845562.html", "doc_type":"api", - "p_code":"168", - "code":"171" + "p_code":"172", + "code":"175" }, { "desc":"This API is used to query endpoint details.URI formatGET /v3/endpoints/{endpoint_id}GET /v3/endpoints/{endpoint_id}URI parametersParameterMandatoryTypeDescriptionendpoint", @@ -1544,8 +1580,8 @@ "title":"Querying Endpoint Details", "uri":"en-us_topic_0067148046.html", "doc_type":"api", - "p_code":"168", - "code":"172" + "p_code":"172", + "code":"176" }, { "desc":"This API is used to query the service catalog corresponding to X-Auth-Token contained in the request.GET /v3/auth/catalogParameters in the request headerParameterMandator", @@ -1553,8 +1589,8 @@ "title":"Querying the Service Catalog", "uri":"iam_02_0004.html", "doc_type":"api", - "p_code":"168", - "code":"173" + "p_code":"172", + "code":"177" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1563,7 +1599,7 @@ "uri":"iam_19_0004.html", "doc_type":"api", "p_code":"", - "code":"174" + "code":"178" }, { "desc":"By default, new users do not have permissions assigned. You need to add a user to one or more groups, and attach permissions policies to these groups. Users inherit permi", @@ -1571,8 +1607,8 @@ "title":"Introduction", "uri":"iam_19_0003.html", "doc_type":"api", - "p_code":"174", - "code":"175" + "p_code":"178", + "code":"179" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1580,8 +1616,8 @@ "title":"Action List", "uri":"iam_02_0046.html", "doc_type":"api", - "p_code":"174", - "code":"176" + "p_code":"178", + "code":"180" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1590,7 +1626,7 @@ "uri":"iam_02_0512.html", "doc_type":"api", "p_code":"", - "code":"177" + "code":"181" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1598,8 +1634,8 @@ "title":"Status Codes", "uri":"iam_02_0005.html", "doc_type":"api", - "p_code":"177", - "code":"178" + "p_code":"181", + "code":"182" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1607,8 +1643,8 @@ "title":"Error Codes", "uri":"iam_02_0006.html", "doc_type":"api", - "p_code":"177", - "code":"179" + "p_code":"181", + "code":"183" }, { "desc":"Your username, user ID, account name, account ID, project name, and project ID need to be specified in the URI and request body for calling certain APIs. Obtain these par", @@ -1616,8 +1652,8 @@ "title":"Obtaining User, Account, User Group, Project, and Agency Information", "uri":"en-us_topic_0057845624.html", "doc_type":"api", - "p_code":"177", - "code":"180" + "p_code":"181", + "code":"184" }, { "desc":"HUAWEI CLOUD Help Center presents technical documents to help you quickly get started with HUAWEI CLOUD services. The technical documents include Service Overview, Price Details, Purchase Guide, User Guide, API Reference, Best Practices, FAQs, and Videos.", @@ -1626,6 +1662,6 @@ "uri":"en-us_topic_0057845564.html", "doc_type":"api", "p_code":"", - "code":"181" + "code":"185" } ] \ No newline at end of file diff --git a/docs/iam/api-ref/en-us_topic_0057845554.html b/docs/iam/api-ref/en-us_topic_0057845554.html index 932df401b..de25ba37a 100644 --- a/docs/iam/api-ref/en-us_topic_0057845554.html +++ b/docs/iam/api-ref/en-us_topic_0057845554.html @@ -75,7 +75,7 @@ -

groups

+

groups

Yes

@@ -84,7 +84,7 @@

List of a user group.

-

links

+

links

Yes

@@ -96,7 +96,7 @@ -
  • Description for the group format +
  • groups
    - @@ -164,6 +164,72 @@

    Parameter

    Mandatory

    @@ -143,7 +143,7 @@

    User group name.

    links

    +

    links

    Yes
    +
  • groups.links +
    + + + + + + + + + + + + + + + + + +

    Parameter

    +

    Type

    +

    Description

    +

    self

    +

    String

    +

    Resource link.

    +

    previous

    +

    String

    +

    Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

    +

    next

    +

    String

    +

    Next resource link. If the next resource link is unavailable, this parameter is set to null.

    +
    +
    +
  • links +
    + + + + + + + + + + + + + + + + + +

    Parameter

    +

    Type

    +

    Description

    +

    self

    +

    String

    +

    Resource link.

    +

    previous

    +

    String

    +

    Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

    +

    next

    +

    String

    +

    Next resource link. If the next resource link is unavailable, this parameter is set to null.

    +
    +
    • Example response
      {
     "links": {
diff --git a/docs/iam/api-ref/en-us_topic_0057845558.html b/docs/iam/api-ref/en-us_topic_0057845558.html
index dd11d7877..e71598fe5 100644
--- a/docs/iam/api-ref/en-us_topic_0057845558.html
+++ b/docs/iam/api-ref/en-us_topic_0057845558.html
@@ -42,119 +42,133 @@

    Response Parameters

    • Parameters in the response body -

      Parameter

      +
      - - - - - - - - - - -

      Parameter

      Mandatory

      +

      Type

      Type

      -

      Description

      +

      Description

      projects

      +

      projects

      Yes

      +

      JSONArray

      JSONArray

      -

      List of projects.

      +

      List of projects.

      links

      +

      links

      Yes

      +

      Object

      Object

      -

      Project resource link.

      +

      Project resource link.
      -
      • Description for the project format -

        Parameter

        +
        • projects +
          - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + +

          Parameter

          Mandatory

          +

          Type

          Type

          -

          Description

          +

          Description

          description

          +

          description

          Yes

          +

          String

          String

          -

          Project description.

          +

          Project description.

          id

          +

          id

          Yes

          +

          String

          String

          -

          ID of a project.

          +

          ID of a project.

          domain_id

          +

          domain_id

          Yes

          +

          String

          String

          -

          ID of the domain where a project is located.

          +

          ID of the domain where a project is located.

          name

          +

          name

          Yes

          +

          String

          String

          -

          Project name.

          +

          Project name.

          links

          +

          links

          Yes

          +

          Object

          Object

          -

          Project resource link.

          +

          Project resource link.

          is_domain

          +

          is_domain

          Yes

          +

          Boolean

          Boolean

          -

          Indicates whether the user calling the API is a tenant.

          +

          Indicates whether the user calling the API is a tenant.

          enabled

          +

          enabled

          Yes

          +

          Boolean

          Boolean

          -

          Whether a project is available.

          +

          Whether a project is available.

          parent_id

          +

          parent_id

          Yes

          +

          String

          String

          +

          Parent ID of the project.

          Parent ID of the project.

          +
          +
          +
        • links +
          + + + + + + + + + +

          Parameter

          +

          Type

          +

          Description

          +

          self

          +

          String

          +

          Resource link.

          +
          +
          +
        • projects.links +
          + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845561.html b/docs/iam/api-ref/en-us_topic_0057845561.html index a19155ea7..7cf996529 100644 --- a/docs/iam/api-ref/en-us_topic_0057845561.html +++ b/docs/iam/api-ref/en-us_topic_0057845561.html @@ -28,7 +28,7 @@

          Parameter

          +

          Type

          +

          Description

          +

          self

          +

          String

          +

          Resource link.
        • Query parameters -

          Parameter

          +
          @@ -74,7 +74,7 @@ @@ -129,7 +129,7 @@ - @@ -138,7 +138,7 @@ - @@ -150,12 +150,12 @@

          Parameter

          Mandatory

          Password expiration time. The format is password_expires_at=operator:timestamp.

          Example:

          password_expires_at=lt:2016-12-08T22:02:00Z
          -
          • The value of operator can be lt, lte, gt, gte, eq, or neq.
            • lt: The expiration time is earlier than timestamp.
            • lte: The expiration time is earlier than or equal to timestamp.
            • gt: The expiration time is later than timestamp.
            • gte: The expiration time is equal to or later than timestamp.
            • eq: The expiration time is equal to timestamp.
            • neq: The expiration time is not equal to timestamp.
            +
            • The value of operator can be lt, lte, gt, gte, eq, or neq.
              • lt: The expiration time is earlier than timestamp.
              • lte: The expiration time is earlier than or equal to timestamp.
              • gt: The expiration time is later than timestamp.
              • gte: The expiration time is equal to or later than timestamp.
              • eq: The expiration time is equal to timestamp.
              • neq: The expiration time is not equal to timestamp.
            • The timestamp format is YYYY-MM-DDTHH:mm:ssZ.

          links

          +

          links

          Yes

          User resource link of a user group.

          users

          +

          users

          Yes
          -
        • Description for the user format -

          Parameter

          +
        • users +
          - - @@ -176,7 +176,7 @@ - - - - - - - - - - - - -

          Parameter

          Mandatory

          +

          Mandatory

          Type

          +

          Type

          Description

          String

          ID of the tenant that the user belongs to.

          +

          ID of the domain that the user belongs to.

          enabled

          @@ -185,7 +185,7 @@

          Boolean

          Indicates whether the user is enabled. The value can be true or false. The default value is true.

          +

          Whether the user is enabled. The value can be true or false. The default value is true.

          id

          @@ -194,16 +194,16 @@

          String

          User ID.

          +

          ID of a user.

          links

          +

          links

          Yes

          JSON object

          +

          JSONObject

          User resource link.

          +

          Links of a user resource.

          name

          @@ -221,7 +221,7 @@

          String

          UTC time when the password will expire. null indicates that the password has unlimited validity.

          +

          UTC when the password will expire. null indicates that the password will not expire.

          pwd_status

          @@ -230,16 +230,16 @@

          Boolean

          Password status. true means that the password needs to be changed, and false means that the password is normal.

          +

          Password status. true means that the password needs to be changed, and false means that the password is normal.

          default_project_id

          +

          pwd_strength

          No

          +

          No

          String

          +

          String

          ID of the project that is displayed by default when the user logs in to the console.

          +

          Password strength. The value can be high, mid, or low.

          last_project_id

          @@ -251,13 +251,70 @@

          ID of the project that the user lastly accessed before exiting the system.

          email

          + +
          +
          +
        • links +
          + + + + + - - - + + + + + + + + + +

          Parameter

          +

          Type

          +

          Description

          +

          self

          No

          +

          String

          String

          +

          Resource link.

          User email address.

          +

          previous

          +

          String

          +

          Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

          +

          next

          +

          String

          +

          Next resource link. If the next resource link is unavailable, this parameter is set to null.

          +
          +
          +
        • users.links +
          + + + + + + + + + + + + + + + @@ -287,6 +344,7 @@ } } +

          Status Codes

          Parameter

          +

          Type

          +

          Description

          +

          self

          +

          String

          +

          Resource link.

          +

          previous

          +

          String

          +

          Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

          +

          next

          +

          String

          +

          Next resource link. If the next resource link is unavailable, this parameter is set to null.

          Status Code

          diff --git a/docs/iam/api-ref/en-us_topic_0057845562.html b/docs/iam/api-ref/en-us_topic_0057845562.html index 2c41d7bb0..e9f6ad905 100644 --- a/docs/iam/api-ref/en-us_topic_0057845562.html +++ b/docs/iam/api-ref/en-us_topic_0057845562.html @@ -24,7 +24,7 @@

          Plane to which an endpoint belongs.

          The value can be public, internal, or admin.

          -
          • public: Users can view it on the public network interface.
          • internal: Users can view it on the internal network interface.
          • admin: The administrator can view it on the secure network interface.
          +
          • public: Users can view it on the public network interface.
          • internal: Users can view it on the internal network interface.
          • admin: The administrator can view it on the secure network interface.

          service_id

          @@ -42,13 +42,13 @@

          Request Parameters

          • Parameters in the request header -

            Parameter

            +
            - - - @@ -77,17 +77,17 @@

            Response Parameters

            • Parameters in the response body -

            Parameter

            Mandatory

            +

            Mandatory

            Type

            +

            Type

            Description

            +

            Description

            Parameter

            +
            - - - - @@ -96,7 +96,7 @@ - @@ -108,14 +108,14 @@

            Parameter

            Mandatory

            +

            Mandatory

            Type

            +

            Type

            Description

            +

            Description

            links

            +

            links

            Yes

            Endpoint resource link.

            endpoints

            +

            endpoints

            Yes
            -
          • Description for the endpoints format -
            - + + + + + + + + + - @@ -61,7 +61,7 @@ - @@ -73,12 +73,12 @@

            Parameter

            +
          • endpoints +
            - - - @@ -134,7 +134,7 @@ - - @@ -194,6 +194,72 @@

            Parameter

            Mandatory

            +

            Mandatory

            Type

            +

            Type

            Description

            +

            Description

            String

            Terminal endpoint URL.

            +

            Endpoint URL.

            region

            @@ -182,7 +182,7 @@

            ID of the service to which an endpoint belongs.

            links

            +

            links

            Yes
            +
          • links +
            + + + + + + + + + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            self

            +

            String

            +

            Resource link.

            +

            previous

            +

            String

            +

            Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

            +

            next

            +

            String

            +

            Next resource link. If the next resource link is unavailable, this parameter is set to null.

            +
            +
            +
          • endpoints.links +
            + + + + + + + + + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            self

            +

            String

            +

            Resource link.

            +

            next

            +

            String

            +

            Next resource link. If the next resource link is unavailable, this parameter is set to null.

            +

            previous

            +

            String

            +

            Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

            +
            +
          • Example response (successful request)
            {
     "endpoints": [
         {
diff --git a/docs/iam/api-ref/en-us_topic_0057845564.html b/docs/iam/api-ref/en-us_topic_0057845564.html
index 6f42cfd72..b11ed67b6 100644
--- a/docs/iam/api-ref/en-us_topic_0057845564.html
+++ b/docs/iam/api-ref/en-us_topic_0057845564.html
@@ -8,7 +8,23 @@

            • 2024-12-17

            +

            2026-01-07

            +

            Updated content in Modifying the ACL for Console Access.

            +

            2025-10-21

            +            		 +

            2025-03-31

            +

            This release incorporates the following change:

            + +

            2024-12-17

            This release incorporates the following change:

            Deleted the constraints on the number of policies, actions, condition keys, and resources in Custom Policy Management.

            @@ -47,7 +63,7 @@

            2024-07-09

            This release incorporates the following changes:

            - +

            2024-01-04

            @@ -150,7 +166,7 @@

            2019-01-09

            This release incorporates the following changes:

            - +

            2018-10-08

            @@ -259,7 +275,7 @@

            2016-12-30

            This release incorporates the following changes:

            -
            • Description for the page field in the response of the GET /v3/projects API (page indicates the page to be queried.)
            • Description for the per_page field in the response of the GET /v3/projects API (per_page indicates the number of data records on each page.)
            +
            • Description for the page field in the response of the GET /v3/projects API (page indicates the page to be queried.)
            • Description for the per_page field in the response of the GET /v3/projects API (per_page indicates the number of data records on each page.)

            2016-10-29

            diff --git a/docs/iam/api-ref/en-us_topic_0057845567.html b/docs/iam/api-ref/en-us_topic_0057845567.html index b029b9ab3..9a41b07ec 100644 --- a/docs/iam/api-ref/en-us_topic_0057845567.html +++ b/docs/iam/api-ref/en-us_topic_0057845567.html @@ -52,7 +52,7 @@

            mappings

            +

            mappings

            Yes

            List of mappings.

            links

            +

            links

            Yes
            -
          • mappings parameter description +
          • mappings
            - - @@ -93,11 +93,11 @@ - - - @@ -148,6 +148,195 @@

            Parameter

            Mandatory

            +

            Mandatory

            Type

            +

            Type

            Description

            Mapping ID.

            rules

            +

            rules

            Yes

            Object

            +

            Array

            Rule used to map federated users to local users

            Example rule for SAML:

            @@ -131,12 +131,12 @@ } ]

            local: indicates the information about a federated user in the cloud system.

            -
            • user: indicates the name of a federated user in the cloud system. {0} indicates the first attribute of the user information in remote.
            • group: indicates the user group to which a federated user belongs in the cloud system.
            +
            • user: indicates the name of a federated user in the cloud system. {0} indicates the first attribute of the user information in remote.
            • group: indicates the user group to which a federated user belongs in the cloud system.

            remote: indicates the information about a federated user in the IdP. This expression is a combination of assertion attributes and operators. The value of remote is determined based on the assertion.

            • "type": "UserName" indicates an attribute in an IdP assertion.
            • "type": "orgPersonType" indicates an attribute in an IdP assertion.
            • not_any_of: The rule is not matched if any of the specified strings appear in the attribute type. The condition result is Boolean, not the argument that is passed as input.

            links

            +

            links

            Yes
            +

          • links

            + +
            + + + + + + + + + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            self

            +

            String

            +

            Resource link.

            +

            previous

            +

            String

            +

            Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

            +

            next

            +

            String

            +

            Next resource link. If the next resource link is unavailable, this parameter is set to null.

            +
            +
            +

          • mappings.links

            + +
            + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            self

            +

            String

            +

            Resource link.

            +
            +
            +

          • mappings.rules

            + +
            + + + + + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            local

            +

            Array of RulesLocal objects

            +

            Federated user information on the cloud platform. user indicates the name of a federated user, and group indicates the group to which the federated user belongs.

            +

            remote

            +

            Array of objects

            +

            Federated user information in the IdP system. This field is an expression consisting of assertion attributes and operators. The value of this parameter is determined by the assertion.

            +
            +
            +
          • mappings.rules.local +
            + + + + + + + + + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            user

            +

            user object

            +

            Name of a federated user on the cloud platform.

            +

            group

            +

            group object

            +

            User group to which a federated user belongs on the cloud platform.

            +

            groups

            +

            String

            +

            The user group list to which a federated user belongs on the cloud platform.

            +
            +
            +
            +

          • mappings.rules.local.user

            + +
            + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            name

            +

            String

            +

            Name of a federated user on the cloud platform.

            +
            +
            +

          • mappings.rules.local.group

            + +
            + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            name

            +

            String

            +

            User group to which a federated user belongs on the cloud platform.

            +
            +
            +

          • mappings.rules.remote

            + +
            + + + + + + + + + + + + + + + + + +

            Parameter

            +

            Type

            +

            Description

            +

            type

            +

            String

            +

            IdP assertion (SAML) or ID token (OIDC).

            +

            any_one_of

            +

            Array of strings

            +

            The rule is matched only if the specified strings appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. In a remote array, any_one_of and not_any_of are mutually exclusive and cannot be used at the same time.

            +

            not_any_of

            +

            Array of strings

            +

            The rule is matched only if the specified strings do not appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. any_one_of and not_any_of are mutually exclusive and cannot be used at the same time.

            +
            +
          • Example response
            {
     "links": {
         "next": null,
diff --git a/docs/iam/api-ref/en-us_topic_0057845568.html b/docs/iam/api-ref/en-us_topic_0057845568.html
index 5467f8fa9..a89cba638 100644
--- a/docs/iam/api-ref/en-us_topic_0057845568.html
+++ b/docs/iam/api-ref/en-us_topic_0057845568.html
@@ -62,24 +62,47 @@
            • -
          • Parameters in the request body -

            Parameter

            +
          • Parameters in the request body +
            - - - - - - - + + +

            Parameter

            Mandatory

            +

            Mandatory

            Type

            +

            Type

            Description

            +

            Description

            rules

            +

            mapping

            Yes

            +

            Yes

            Object

            +

            Object

            Rule used to map federated users to local users.

            +

            List of mappings.

            +
            +
            +
          • mapping +
            + + + + + + + + +

            Parameter

            +

            Mandatory

            +

            Type

            +

            Description

            +

            rules

            +

            Yes

            +

            Array

            +

            Rule used to map federated users to local users.

            Example rule for SAML:

             "rules": [
             {
@@ -119,37 +142,212 @@
            +
          • mapping.rules +
            + + + + + + + + + + + + + + + + +

            Parameter

            +

            Mandatory

            +

            Type

            +

            Description

            +

            local

            +

            Yes

            +

            Array of RulesLocal objects

            +

            Federated user information on the cloud platform. user indicates the name of a federated user, and group indicates the group which the federated user belongs to.

            +

            remote

            +

            Yes

            +

            Array of objects

            +

            Federated user information in the IdP system. If SAML is used, this parameter is an expression consisting of assertion attributes and operators, and the value of this parameter is determined by the assertion. If OIDC protocol is used, the value of this parameter is determined by the ID token.

            +
            +
            +
          • mapping.rules.local +
            + + + + + + + + + + + + + + + + +

            Parameter

            +

            Mandatory

            +

            Type

            +

            Description

            +

            user

            +

            No

            +

            user object

            +

            Name of a federated user on the cloud platform.

            +

            group

            +

            No

            +

            group object

            +

            User group to which a federated user belongs on the cloud platform.

            +
            +
            +
          • mapping.rules.local.user +
            + + + + + + + + + + + +

            Parameter

            +

            Mandatory

            +

            Type

            +

            Description

            +

            name

            +

            Yes

            +

            String

            +

            Name of a federated user on the cloud platform.

            +
            +
            +
          • mapping.rules.local.group +
            + + + + + + + + + + + +

            Parameter

            +

            Mandatory

            +

            Type

            +

            Description

            +

            name

            +

            Yes

            +

            String

            +

            User group to which a federated user belongs on the cloud platform.

            +
            +
            +
          • mapping.rules.remote +
            + + + + + + + + + + + + + + + + + + + + + +

            Parameter

            +

            Mandatory

            +

            Type

            +

            Description

            +

            type

            +

            Yes

            +

            String

            +

            Attribute in the IdP assertion.

            +

            any_one_of

            +

            No

            +

            Array of strings

            +

            The rule is matched only if the specified strings appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. In a remote array, any_one_of and not_any_of are mutually exclusive and cannot be set at the same time.

            +

            not_any_of

            +

            No

            +

            Array of strings

            +

            The rule is matched only if the specified strings do not appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. any_one_of and not_any_of are mutually exclusive and cannot be used at the same time.

            +
            +
            • Example request
              curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X PATCH -d'{"mapping":{"rules":[{"local":[{"user":{"name":"{0}"}},{"group":{"name":"0cd5e9"}}],"remote":[{"type":"UserName"},{"type":"orgPersonType","any_one_of":["Contractor","SubContractor"]}]}]}}' https://sample.domain.com/v3/OS-FEDERATION/mappings/ACME
            -

            Response Parameters

            • Parameters in the response body -
              - @@ -40,9 +40,9 @@

              Request Parameters

              • Parameters in the request header -

              Parameter

              +

              Response Parameters

              • Parameters in the response body +
                - - - - - - - - +

                Parameter

                Mandatory

                +

                Mandatory

                Type

                +

                Type

                Description

                +

                Description

                id

                +

                mapping

                Yes

                +

                Yes

                String

                +

                Object

                Mapping ID.

                +

                List of mappings.

                rules

                +
                +
                +
              +
              • mapping +
                + + + + + + - - - + + + + + - - - - + + +

                Parameter

                +

                Mandatory

                +

                Type

                +

                Description

                +

                id

                Yes

                +

                Yes

                Object

                +

                String

                Rule used to map federated users to local users.

                +

                Mapping ID.

                +

                rules

                +

                Yes

                +

                Array

                +

                Rule used to map federated users to local users.

                Example rule for SAML:

                 "rules": [
             {
@@ -186,13 +384,159 @@
 
                • "type": "UserName" indicates an attribute in an IdP assertion.
                • "type": "orgPersonType" indicates an attribute in an IdP assertion.
                • not_any_of: The rule is not matched if any of the specified strings appear in the attribute type. The condition result is Boolean, not the argument that is passed as input.

                links

                +

                links

                Yes

                +

                Yes

                Object

                +

                Object

                Mapping resource link.

                +

                Mapping resource link.

                +
                +
                +
              • mapping.links +
                + + + + + + + + + +

                Parameter

                +

                Type

                +

                Description

                +

                self

                +

                String

                +

                Resource link.

                +
                +
                +

              • mapping.rules

                + +
                + + + + + + + + + + + + + +

                Parameter

                +

                Type

                +

                Description

                +

                local

                +

                Array of objects

                +

                Federated user information on the cloud platform. user indicates the name of a federated user, and group indicates the user group to which a federated user belongs in the cloud system.

                +

                remote

                +

                Array of objects

                +

                Federated user information in the IdP system. If SAML is used, this parameter is an expression consisting of assertion attributes and operators, and the value of this parameter is determined by the assertion. If OIDC protocol is used, the value of this parameter is determined by the ID token.

                +
                +
                +
              • mapping.rules.local +
                + + + + + + + + + + + + + +

                Parameter

                +

                Type

                +

                Description

                +

                user

                +

                user object

                +

                Name of a federated user on the cloud platform.

                +

                group

                +

                group object

                +

                User group to which a federated user belongs on the cloud platform.

                +
                +
                +

              • mapping.rules.local.user

                + +
                + + + + + + + + + +

                Parameter

                +

                Type

                +

                Description

                +

                name

                +

                String

                +

                Name of a federated user on the cloud platform.

                +
                +
                +

              • mapping.rules.local.group

                + +
                + + + + + + + + + +

                Parameter

                +

                Type

                +

                Description

                +

                name

                +

                String

                +

                User group to which a federated user belongs on the cloud platform.

                +
                +
                +

              • mapping.rules.remote

                + +
                + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845571.html b/docs/iam/api-ref/en-us_topic_0057845571.html index 41671ac9a..1c9de7d15 100644 --- a/docs/iam/api-ref/en-us_topic_0057845571.html +++ b/docs/iam/api-ref/en-us_topic_0057845571.html @@ -76,16 +76,16 @@ - - - @@ -98,105 +98,295 @@

                Parameter

                +

                Type

                +

                Description

                +

                type

                +

                String

                +

                IdP assertion (SAML) or ID token (OIDC)

                +

                any_one_of

                +

                Array of strings

                +

                The rule is matched only if the specified strings appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. In a remote array, any_one_of and not_any_of are mutually exclusive and cannot be set at the same time.

                +

                not_any_of

                +

                Array of strings

                +

                The rule is matched only if the specified strings do not appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. any_one_of and not_any_of are mutually exclusive and cannot be used at the same time.

                links

                +

                links

                Yes

                Dict

                +

                Object

                Role resource link of a specified user group under a domain.

                roles

                +

                roles

                Yes

              -
              • Role parameter description -
                - @@ -52,7 +52,7 @@ - @@ -65,7 +65,7 @@

                Parameter

                +
                • links +
                  - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

                  Parameter

                  Mandatory

                  +

                  Type

                  Type

                  -

                  Description

                  +

                  Description

                  id

                  +

                  self

                  Yes

                  +

                  String

                  String

                  -

                  ID of a role of a specified user group under a domain.

                  +

                  Resource link.

                  links

                  +

                  previous

                  Yes

                  +

                  String

                  Dict

                  -

                  Role resource link.

                  +

                  Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                  name

                  +

                  next

                  Yes

                  +

                  String

                  String

                  -

                  Name of a role.

                  -

                  domain_id

                  -

                  Yes

                  -

                  String

                  -

                  ID of the domain to which a role belongs.

                  -

                  type

                  -

                  Yes

                  -

                  String

                  -

                  Display mode of a role.

                  -
                  • AX: A role is displayed at the domain layer.
                  • XA: A role is displayed at the project layer.
                  • AA: A role is displayed at both the domain and project layers.
                  • XX: A role is not displayed at the domain or project layer.
                  -

                  display_name

                  -

                  No

                  -

                  String

                  -

                  Displayed name of a role.

                  -

                  catalog

                  -

                  No

                  -

                  String

                  -

                  Directory where a role locates.

                  -

                  policy

                  -

                  No

                  -

                  Dict

                  -

                  Policy of a role.

                  -

                  description

                  -

                  No

                  -

                  String

                  -

                  Description of a role.

                  +

                  Next resource link. If the next resource link is unavailable, this parameter is set to null.
                  -
                • Example response
                  {
+
                +
                • roles +
                  + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  id

                  +

                  String

                  +

                  ID of a role of a specified user group under a domain.

                  +

                  links

                  +

                  Object

                  +

                  Role resource link.

                  +

                  name

                  +

                  String

                  +

                  Name of a role.

                  +

                  domain_id

                  +

                  String

                  +

                  ID of the domain to which a role belongs.

                  +

                  type

                  +

                  String

                  +

                  Display mode of a role.

                  +
                  • AX: A role is displayed at the domain layer.
                  • XA: A role is displayed at the project layer.
                  • AA: A role is displayed at both the domain and project layers.
                  • XX: A role is not displayed at the domain or project layer.
                  +

                  display_name

                  +

                  String

                  +

                  Displayed name of a role.

                  +

                  catalog

                  +

                  String

                  +

                  Directory where a role locates.

                  +

                  policy

                  +

                  Object

                  +

                  Policy of a role.

                  +

                  description

                  +

                  String

                  +

                  Description of a role.

                  +

                  flag

                  +

                  String

                  +

                  The return value fine_grained indicates that the permission is a system-defined policy.

                  +

                  updated_time

                  +

                  String

                  +

                  Time when the permission was last updated.

                  +

                  created_time

                  +

                  String

                  +

                  Time when the permission was created.

                  +
                  +
                  +
                +
                • roles.links +
                  + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  self

                  +

                  String

                  +

                  Resource link.

                  +

                  previous

                  +

                  String

                  +

                  Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                  +

                  next

                  +

                  String

                  +

                  Next resource link. If the next resource link is unavailable, this parameter is set to null.

                  +
                  +
                  +

                • roles.policy

                  + +
                  + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  Depends

                  +

                  Array of objects

                  +

                  Dependency permissions.

                  +

                  Statement

                  +

                  Array of objects

                  +

                  Statement of the permission.

                  +

                  Version

                  +

                  String

                  +

                  Policy version.

                  +
                  • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                  • 1.1: Policy. A policy defines the permissions required to perform actions on a specific cloud resource under certain conditions.
                  +
                  +
                  +
                +

                • roles.policy.Depends

                  + +
                  + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  catalog

                  +

                  String

                  +

                  Service catalog of the permission.

                  +

                  display_name

                  +

                  String

                  +

                  Display name of the permission.

                  +
                  +
                  +
                +
                • roles.policy.Statement +
                  + + + + + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  Action

                  +

                  Array of strings

                  +

                  Specific operation permissions on a resource. For details about supported actions, see "Permissions and Supported Actions" in the API Reference of cloud services.

                  +
                  NOTE:
                  • Format: Service name:Resource type:Action, for example, vpc:ports:create
                  • Service name: indicates the service name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and actions are not case-sensitive. You can use an asterisk (*) to represent all actions.
                  • In the case of a custom policy for agencies, this parameter value should be "Action": ["iam:tokens:assume"].
                  +
                  +

                  Effect

                  +

                  String

                  +

                  Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.

                  +

                  The options are as follows:

                  +
                  • Allow
                  • Deny
                  +

                  Condition

                  +

                  Object

                  +

                  Conditions for the permission to take effect. If this parameter is not specified during policy creation, it will not be returned in the response.

                  +
                  NOTE:

                  Take the condition in the sample request as an example, the values of the condition key (obs:prefix) and string (public) must be equal (StringEquals).

                  +
                   "Condition": {
+              "StringEquals": {
+                "obs:prefix": [
+                  "public"
+                ]
+              }
+            }
                  +
                  +

                  Resource

                  +

                  Object

                  +

                  Cloud resource. If this parameter is not specified during policy creation, it will not be returned in the response.

                  +
                  NOTE:
                  • Five-segment format that can contain asterisks (*): ::::, for example, obs:::bucket:*.
                  • The region segment can be * or a region accessible to the user. The service must exist and the specified resource must belong to the service.
                  • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be "Resource": {"uri": ["/iam/agencies/agencyTest"]}.
                  +
                  +
                  +
                  +
                  +
                +
                • Example response
                  {
   "links": {
-    "self": "https://sample.domain.com/v3/domains/d54061ebcb5145dd814f8eb3fe9b7ac0/groups/47d79cabc2cf4c35b13493d919a5bb3d/roles",
+    "self": "https://sample.domain.com/v3/domains/d54061ebcb5145dd814f8eb3fe9b7ac0/groups/47d79cabc2cf4c35b13493d919a5bb3d/roles",
     "previous": null,
     "next": null
   },
@@ -205,7 +395,7 @@
       "display_name": "Security Administrator",
       "description": "Security Administrator",
       "links": {
-        "self": "https://sample.domain.com/v3/roles/005cf92cfd364105afaa5df2eec25012"
+        "self": "https://sample.domain.com/v3/roles/005cf92cfd364105afaa5df2eec25012"
       },
       "domain_id": null,
       "name": "secu_admin",
@@ -228,7 +418,7 @@
       "display_name": "Agent Operator",
       "description": "Agent Operator",
       "links": {
-        "self": "https://sample.domain.com/v3/roles/d160d30477c642a486ad10e3b4d9820f"
+        "self": "https://sample.domain.com/v3/roles/d160d30477c642a486ad10e3b4d9820f"
       },
       "domain_id": null,
       "name": "te_agency",
diff --git a/docs/iam/api-ref/en-us_topic_0057845574.html b/docs/iam/api-ref/en-us_topic_0057845574.html
index 8cb47cd64..5235f4931 100644
--- a/docs/iam/api-ref/en-us_topic_0057845574.html
+++ b/docs/iam/api-ref/en-us_topic_0057845574.html
@@ -43,7 +43,7 @@

                domains

                +

                domains

                Yes

                List of domains.

                links

                +

                links

                Yes

              -
              • Description for the domain format +
                • domains
                  - @@ -124,6 +124,44 @@

                  Parameter

                  Mandatory

                  @@ -103,7 +103,7 @@

                  Domain name.

                  links

                  +

                  links

                  Yes
                  +
                • domains.links +
                  + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  self

                  +

                  String

                  +

                  Resource link.

                  +
                  +
                  +
                • links +
                  + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  self

                  +

                  String

                  +

                  Resource link.

                  +
                  +
                • Example response
                  {
     "domains": [{
diff --git a/docs/iam/api-ref/en-us_topic_0057845575.html b/docs/iam/api-ref/en-us_topic_0057845575.html
index 214c1da7d..aaf7af491 100644
--- a/docs/iam/api-ref/en-us_topic_0057845575.html
+++ b/docs/iam/api-ref/en-us_topic_0057845575.html
@@ -25,7 +25,7 @@

              ID of an identity provider.

              protocol _id

              +

              protocol_id

              Yes

              Parameter

              +
              - @@ -71,24 +71,47 @@

              Parameter

              Mandatory

              +

              Mandatory

              Type
              -
            • Parameters in the request body -

              Parameter

              +
            • Parameters in the request body +
              - - - - - - - + + +

              Parameter

              Mandatory

              +

              Mandatory

              Type

              +

              Type

              Description

              +

              Description

              mapping_id

              +

              protocol

              Yes

              +

              Yes

              String

              +

              Object

              Mapping ID.

              +

              Protocol information.

              +
              +
              +
            • protocol +
              + + + + + + + + + @@ -99,9 +122,9 @@

              Response Parameters

              • Parameters in the response body -

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              mapping_id

              +

              No

              +

              String

              +

              Mapping ID.

              Parameter

              +
              - @@ -109,31 +132,73 @@ - - - - - +

              Parameter

              Mandatory

              +

              Mandatory

              Type

              id

              +

              protocol

              Yes

              +

              Yes

              String

              +

              Object

              ID of a protocol.

              +

              Protocol information.

              mapping_id

              +
              +
              +
            • protocol +
              + + + + + - - - - - - - + + + + + +

              Parameter

              +

              Type

              +

              Description

              +

              id

              Yes

              +

              String

              String

              -

              Mapping ID.

              +

              Protocol ID.

              links

              +

              mapping_id

              Yes

              +

              String

              Object

              +

              Mapping ID.

              Protocol resource link.

              +

              links

              +

              Object

              +

              Protocol resource link information.

              +
              +
              +
              +
            • protocol.links +
              + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845581.html b/docs/iam/api-ref/en-us_topic_0057845581.html index 888596295..0bbf4eb74 100644 --- a/docs/iam/api-ref/en-us_topic_0057845581.html +++ b/docs/iam/api-ref/en-us_topic_0057845581.html @@ -52,7 +52,7 @@ - @@ -61,7 +61,7 @@ - @@ -73,7 +73,7 @@

              Parameter

              +

              Type

              +

              Description

              +

              identity_provider

              +

              String

              +

              Identity provider resource link.

              +

              self

              +

              String

              +

              Resource link.

              identity_providers

              +

              identity_providers

              Yes

              List of identity providers.

              links

              +

              links

              Yes
              -
            • links parameter description +
            • links

              Parameter

              Type

              @@ -106,7 +106,7 @@
              -
            • Description for the identity_providers format +
            • identity_providers
              - @@ -176,8 +176,8 @@

              Parameter

              Mandatory

              @@ -164,7 +164,7 @@

              Federated user ID list of an identity provider.

              links

              +

              links

              Yes
              -
            • identity_providers.links parameter description -

              Parameter

              +
            • identity_providers.links +
              diff --git a/docs/iam/api-ref/en-us_topic_0057845583.html b/docs/iam/api-ref/en-us_topic_0057845583.html index 11e4d6a53..4a82027a1 100644 --- a/docs/iam/api-ref/en-us_topic_0057845583.html +++ b/docs/iam/api-ref/en-us_topic_0057845583.html @@ -1,9 +1,10 @@ -

              Obtaining a User Token

              +

              Obtaining a User Token Through Password Authentication

              Function

              This API is used to obtain a token through username/password authentication. A token is a system object encapsulating the identity and permissions of a user. When calling the APIs of IAM or other cloud services, you can use this API to obtain a token for authentication.

              -
              Tokens are valid for 24 hours and you can cache them to reduce the number of API calls needed. Ensure that the token is valid while you use it. Using a token that will soon expire may cause API calling failures. Obtaining a new token does not affect the validity of the existing token. The following operations will invalidate the existing token. After these operations are performed, obtain a new token.
              • Changing the password or access key of your account or an IAM user: The token of your account or the user is invalidated.
              • Deleting or disabling an IAM user: The token of the user is invalidated.
              • Changing the permissions of an IAM user: The token of the user is invalidated. For example, when the user is added to or removed from a user group, or when permissions of the group which the user belongs to are modified.
              -
              +
              • The validity period of a token is 24 hours. Cache your token to prevent frequent API calling. Ensure that the token is valid while you use it. Using a token that will soon expire may cause API calling failures. Obtaining a new token does not affect the validity of the existing token.
              • The token or the tokens of the account will become invalid within 30 minutes if any of the following occurs:
                • An IAM user is deleted or disabled.
                • An IAM user's password or access key is changed.
                • An IAM user's permissions are changed (due to outstanding payments, OBT application approval, or permission modification). Your account is in arrears, you apply for or exit the OBT, or the permissions of any user group under your account are changed.
                +
              +
              • If "The token must be updated" is returned when a token is used to call a cloud service API, the token has expired or is invalid. You need to obtain a new token.
              • A token will fail to pass the signature verification if it has been tampered with.

              URI

              POST /v3/auth/tokens

              @@ -31,94 +32,284 @@

              Parameter

              Type
              -
            • Parameters in the request body -
              + + + + +

              Parameter

              +
            • Parameters in the request body +
              - - - - - - - - +

              Parameter

              Mandatory

              +

              Mandatory

              Type

              +

              Type

              Description

              +

              Description

              identity

              +

              auth

              Yes

              +

              Yes

              JSON object

              +

              Object

              Authentication parameters, including: methods and password.

              -
              "identity": {
-      "methods": ["password"],
-      "password": {
              +

              Authentication information.

              methods

              +
              +
              +
            • auth +
              + + + + + + - - - - - - - + + +

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              identity

              Yes

              +

              Yes

              String Array

              +

              Object

              Authentication method. The value of this field is password. If virtual MFA–based login authentication is enabled, the value of this field is ["password","totp"].

              +

              Authentication parameters.

              password

              +

              scope

              Yes

              +

              Yes

              JSON object

              +

              Object

              Authentication information. Example:

              -
              "password": {
+

              Application scope of the token. Value options: project and domain.

              +
              NOTE:
              • If the scope is set to domain, the token applies to global services. If the scope is set to project, the token applies to project-level services.
              • If you set the scope to both project and domain, the project is used and you get a token for project-level services.
              • If you leave scope empty, the token applies to global services. You are advised to specify an appropriate scope as required.
              +
              +
              +
              +
            • auth.identity +
              + + + + + + + + + + + + + + - +

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              methods

              +

              Yes

              +

              Array of strings

              +

              Authentication method. Set this parameter to "password".

              +

              password

              +

              Yes

              +

              Object

              +

              IAM user password authentication information.

              +
              NOTE:

              Authentication information. Example:

              +
              "password": {
         "user": {
-          "name": "user A",
-          "password": "**********",
+          "name": "user A",
+          "password": "**********",
           "domain": {
-            "name": "domain A"
              -
              • user.name: Name of the user that wants to obtain the token. Obtain the username on the My Credentials page.
              • password: Login password of the user.
              • domain.name: Name of the domain that created the user. Obtain the domain name on the My Credentials page.
              + "name": "domain A" +
              • user.name: Name of the user that wants to obtain the token. Obtain the username on the My Credentials page.
              • password: Login password of the user.
              • domain.name: Name of the domain that created the user. Obtain the domain name on the My Credentials page.
              +

              totp

              +
              +
              +
            • auth.identity.password +
              + + + + + + - - - - +

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              user

              No

              +

              Yes

              JSON object

              +

              Object

              Authentication information. This parameter is mandatory only when virtual MFA–based login authentication is enabled.

              -

              You can specify either user.id or user.name.

              -

              Example 1:

              -
              "totp": {
-        "user": {
-          "id": "b95b78b67fa045b38104c12fb...",
-          "passcode": "******"
              -
              • user.id: User ID, which can be obtained on the My Credentials page.
              • passcode: MFA verification code, which can be obtained on the MFA App.
              -

              Example 2:

              -
              "totp": {
-        "user": {
-          "name": "user A",
-          "passcode": "******"
              -
              • user.name: Name of the user that wants to obtain the token.
              • passcode: MFA verification code, which can be obtained on the MFA App.
              +

              Information about the IAM user who is requesting to obtain a token.

              scope

              +
              +
              +
            • auth.identity.password.user +
              + + + + + + - - - + + + + + + + + + + + + +

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              domain

              No

              +

              Yes

              JSON object

              +

              Object

              Usage scope of the token. The value can be project or domain.

              -
              • Example 1: If this field is set to project, the token can be used to access only services in specific projects, such as ECS. You can specify either id or name.
                "scope": {
-      "project": {
-      "id": "0b95b78b67fa045b38104c12fb..."
-      }
-    }
                -
              • Example 2: If this field is set to domain, the token can be used to access global services, such as OBS. Global services are not subject to any projects or regions. You can specify either id or name.
                "scope": {
-      "domain": {
-      "name": " domain A"
-      }
-    }
                -
              +

              Information about the account used to create the IAM user.

              +

              name

              +

              Yes

              +

              String

              +

              IAM username

              +

              password

              +

              Yes

              +

              String

              +

              Password of the IAM user.

              +
              NOTE:
              • To obtain a token successfully, ensure that the password you provide is correct.
              • A third-party system user cannot directly obtain a token by using the username and password used for identity federation. Go to the cloud platform login page, click Forgot Password, and reset the password.
              +
              +
              +
              +
            • auth.identity.password.user.domain +
              + + + + + + + + + + + +

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              name

              +

              Yes

              +

              String

              +

              Name of the account used to create the IAM user.

              +
              +
              +
            • auth.scope +
              + + + + + + + + + + + + + + + + +

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              domain

              +

              No

              +

              Object

              +

              If this parameter is set to domain, the token can be used to access global services, such as OBS. Global services are not subject to any projects or regions. You can specify either id or name. domain.id is recommended.

              +

              project

              +

              No

              +

              Object

              +

              If this parameter is set to project, the token can be used to access only services (such as ECS) in specific projects. You can specify either id or name.

              +
              +
              +
            • auth.scope.domain +
              + + + + + + + + + + + + + + + + +

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              id

              +

              No

              +

              String

              +

              ID of the account used to create the IAM user.

              +

              name

              +

              No

              +

              String

              +

              Name of the account used to create the IAM user.

              +
              +
              +
            • auth.scope.project +
              + + + + + + + + + + + + + + @@ -146,34 +337,6 @@ } } } -

              The following is a sample request for obtaining a token when virtual MFA–based login authentication is enabled.

              -
              {
-	"auth": {
-		"identity": {
-			"methods": ["password", "totp"],
-			"password": {
-				"user": {
-					"name": "user A",
-					"password": "********",
-					"domain": {
-						"name": "domain A"
-					}
-				}
-			},
-			"totp" : {
-				"user": {
-					"name": "user A",
-					"passcode": "******"
-				}
-			}
-		},
-		"scope": {
-			"domain": {
-				"name": "domain A"
-			}
-		}
-	}
-}

              Response Parameters

              • Parameters in the response header @@ -199,95 +362,100 @@

              Parameter

              +

              Mandatory

              +

              Type

              +

              Description

              +

              id

              +

              No

              +

              String

              +

              ID of the project to which the IAM user belongs.

              +

              name

              +

              No

              +

              String

              +

              Project name of the account used to create the IAM user.
              -
            • Token format description -
              - @@ -110,7 +111,7 @@

              Parameter

              + +
              - - - - - - - - +
              Table 1 Parameters in the response body

              Parameter

              Mandatory

              +

              Type

              Type

              -

              Description

              +

              Description

              methods

              +

              token

              Yes

              +

              Object

              Json Array

              -

              Method for obtaining a token.

              +

              Token information.

              expires_at

              +
              +
              + +
              + + + + + - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + - - - - - - - - - + + + +
              Table 2 token

              Parameter

              +

              Type

              +

              Description

              +

              catalog

              Yes

              +

              Array of objects

              String

              -

              Expiration date of the token.

              +

              Catalog information.

              +

              Example:

              +
              "catalog": [{
+    "type": "identity",
+    "id": "1331e5cff2a74d76b03da1225910e...",
+    "name": "iam",
+    "endpoints": [{
+        "url": "https://sample.domain.com/v3",
+        "region": "*",
+        "region_id": "*",
+        "interface": "public",
+        "id": "089d4a381d574308a703122d3ae73..."
+    }]
+}]

              issued_at

              +

              domain

              Yes

              +

              Object

              String

              -

              Time when the token was issued.

              -

              mfa_authn_at

              -

              No

              -

              String

              -

              MFA authentication time. This field is displayed only when virtual MFA–based login authentication is enabled.

              -

              user

              -

              Yes

              -

              JSON object

              -

              Example:

              -
              "user": { 
-      "name": "user A", 
-      "id": "b95b78b67fa045b38104...", 
-      "password_expires_at":"2016-11-06T15:32:17.000000",
-      "domain": { 
-         "name": "domain A",
-         "id": "fdec73ffea524aa1b373e40..."
-       } 
-    }
              -
              • user.name: Name of the user that wants to obtain the token.
              • user.id: ID of the user.
              • domain.name: Name of the domain that created the user.
              • domain.id: ID of the domain.
              • password_expires_at: Coordinated Universal Time (UTC) that the password will expire. null indicates that the password will not expire.
              -

              domain

              -

              No

              -

              JSON object

              -

              This parameter is returned only when the scope parameter in the request body has been set to domain.

              -

              Example:

              -
              "domain": { 
+

              Account information about the IAM user who requests for the token. This parameter is returned only when the scope parameter in the request body has been set to domain.

              +

              Example:

              +
              "domain": { 
       "name" : "domain A"     
       "id" : "fdec73ffea524aa1b373e40..."
              -
              • domain.name: Name of the domain that created the user.
              • domain.id: ID of the domain.

              project

              +

              expires_at

              No

              +

              String

              JSON object

              +

              Time when the token will expire.

              This parameter is returned only when the scope parameter in the request body has been set to project.

              -

              Example:

              -
              "project": { 
+

              mfa_authn_at

              +

              String

              +

              MFA authentication time. This field is displayed only when virtual MFA–based login authentication is enabled.

              +

              issued_at

              +

              String

              +

              Time when the token was issued.

              +

              methods

              +

              Array of strings

              +

              Method for obtaining the token.

              +

              project

              +

              Object

              +

              Project information about the IAM user who requests for the token. This parameter is returned only when the scope parameter in the request body has been set to project.

              +

              Example:

              +
              "project": { 
       "name": "project A", 
       "id": "34c77f3eaf84c00aaf54...", 
       "domain": { 
@@ -295,41 +463,15 @@
          "id": "fdec73ffea524aa1b373e40..."
        } 
    }
              -
              • project.name: Name of a project.
              • project.id: ID of the project.
              • domain.name: Domain name of the project.
              • domain.id: Domain ID of the project.

              catalog

              +

              roles

              Yes

              +

              Array of objects

              Json Array

              -

              Endpoint information.

              -

              Example:

              -
              "catalog": [{
-    "type": "identity",
-    "id": "1331e5cff2a74d76b03da1225910e...",
-    "name": "iam",
-    "endpoints": [{
-        "url": "https://sample.domain.com/v3",
-        "region": "*",
-        "region_id": "*",
-        "interface": "public",
-        "id": "089d4a381d574308a703122d3ae73..."
-    }]
-}]
              -
              • type: Type of the service which the API belongs to.
              • id: ID of the service.
              • name: Name of the service.
              • endpoints: Endpoints that can be used to call the API.
              • url: URL used to call the API.
              • region: Region in which the service can be accessed.
              • region_id: ID of the region.
              • interface: Type of the API. The value public means that the API is open for access.
              • id: ID of the API.
              -

              roles

              -

              Yes

              -

              JSON object

              -

              Permissions information of the token.

              -

              Example:

              -
              "roles" : [{ 
+

              Permissions information of the token.

              +

              Example:

              +
              "roles" : [{ 
      "name" : "role1", 
      "id" : "roleid1" 
      }, { 
@@ -339,10 +481,291 @@
    ]

              user

              +

              Object

              +

              Information about the IAM user who requests for the token.

              +

              Example:

              +
              "user": { 
+      "name": "user A", 
+      "id": "b95b78b67fa045b38104...", 
+      "password_expires_at":"2016-11-06T15:32:17.000000",
+      "domain": { 
+         "name": "domain A",
+         "id": "fdec73ffea524aa1b373e40..."
+       } 
+    }
              +
              -
            • Example response
              The following is a sample request for obtaining a token for user A. The login password of the user is ********** and the domain name is domain A. The scope of the token is domain.
              Token information stored in the response header:
+
+
              
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
              Table 3 token.catalog
              Parameter
              
+
              Type
              
+
              Description
              
+
              endpoints
              
+
              Array of objects
              
+
              Endpoint information.
              
+
              id
              
+
              String
              
+
              Service ID.
              
+
              name
              
+
              String
              
+
              Service name.
              
+
              type
              
+
              String
              
+
              Type of the service to which the API belongs.
              
+
              
+
              
+
+
              
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
              Table 4 token.catalog.endpoints
              Parameter
              
+
              Type
              
+
              Description
              
+
              id
              
+
              String
              
+
              Endpoint ID.
              
+
              interface
              
+
              String
              
+
              Visibility of the API. public indicates that the API is available for public access.
              
+
              region
              
+
              String
              
+
              Region to which the endpoint belongs.
              
+
              region_id
              
+
              String
              
+
              Region ID.
              
+
              url
              
+
              String
              
+
              Endpoint URL.
              
+
              
+
              
+
+
              
+
+
+
+
+
+
+
+
+
+
+
+
+
+
              Table 5 token.domain
              Parameter
              
+
              Type
              
+
              Description
              
+
              name
              
+
              String
              
+
              Domain name.
              
+
              id
              
+
              String
              
+
              Domain ID.
              
+
              
+
              
+
+
              
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
              Table 6 token.project
              Parameter
              
+
              Type
              
+
              Description
              
+
              domain
              
+
              Object
              
+
              Domain information of the project.
              
+
              id
              
+
              String
              
+
              Project ID.
              
+
              name
              
+
              String
              
+
              Project name.
              
+
              
+
              
+
+
              
+
+
+
+
+
+
+
+
+
+
+
+
+
+
              Table 7 token.project.domain
              Parameter
              
+
              Type
              
+
              Description
              
+
              id
              
+
              String
              
+
              Domain ID.
              
+
              name
              
+
              String
              
+
              Domain name.
              
+
              
+
              
+
+
              
+
+
+
+
+
+
+
+
+
+
+
+
+
+
              Table 8 token.roles
              Parameter
              
+
              Type
              
+
              Description
              
+
              name
              
+
              String
              
+
              Permission name.
              
+
              id
              
+
              String
              
+
              Permission ID. The default value is 0, which does not correspond to any permission.
              
+
              
+
              
+
+
              
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
              Table 9 token.user
              Parameter
              
+
              Type
              
+
              Description
              
+
              name
              
+
              String
              
+
              IAM username.
              
+
              id
              
+
              String
              
+
              IAM user ID.
              
+
              password_expires_at
              
+
              String
              
+
              Password expiration time. If this parameter is set to null, the password will never expire.
              
+
              domain
              
+
              Object
              
+
              Information about the account used to create the IAM user.
              
+
              
+
              
+
+
              
+
+
+
+
+
+
+
+
+
+
+
+
+
+
              Table 10 token.user.domain
              Parameter
              
+
              Type
              
+
              Description
              
+
              name
              
+
              String
              
+
              Name of the account used to create the IAM user.
              
+
              id
              
+
              String
              
+
              ID of the account used to create the IAM user.
              
+
              
+
              
+
            • Example response
              The following is a sample request for obtaining a token for user A. The login password of the user is ********** and the domain name is domain A. The scope of the token is domain.
              Token information stored in the response header:
 X-Subject-Token:MIIDkgYJKoZIhvcNAQcCoIIDgzCCA38CAQExDTALBglghkgBZQMEAgEwgXXXXX...
 
 Token information stored in the response body:
@@ -387,61 +810,6 @@ Token information stored in the response body:
   }
 }
              -

              The following is a sample request for obtaining a token when virtual MFA–based login authentication is enabled.

              -
              Token information stored in the response header:
-X-Subject-Token:MIIDkgYJKoZIhvcNAQcCoIIDgzCCA38CAQExDTALBglghkgBZQMEAgEwgXXXXX...
-
-Token information stored in the response body:
-{
-  "token": {
-    "expires_at": "2020-09-05T06:50:44.390000Z",
-    "mfa_authn_at": "2020-09-04T06:50:44.390000Z",
-    "issued_at": "2020-09-04T06:50:44.390000Z",
-     "methods": [
-      "password",
-      "totp"
-    ],
-    "catalog": [
-      {
-        "endpoints": [
-          {
-            "id": "33e1cbdd86d34e89a63cf8ad16a5f...",
-            "interface": "public",
-            "region": "*",
-            "region_id": "*",
-            "url": "https://sample.domain.com/v3.0"
-          }
-        ],
-        "id": "100a6a3477f1495286579b819d399...",
-        "name": "iam",
-        "type": "iam"
-      },
-      ],
-    "domain": {
-      "id": "e6505630658e49649784759cdf251...",
-      "name": "domain A"
-    },
-    "roles": [
-     {
-     "name" : "role1", 
-     "id" : "roleid1" 
-      },{
-     "name" : "role1", 
-     "id" : "roleid1" 
- 
-}
-    ],
-       "user": {
-      "domain": {
-        "id": "e6505630658e49649784759cdf251...",
-        "name": "domain A"
-      },
-      "id": "092ac6365a0025b11f76c01e90100...",
-      "name": "user A",
-      "password_expires_at": ""
-    }
-  }
-}

              • Status Codes

              diff --git a/docs/iam/api-ref/en-us_topic_0057845585.html b/docs/iam/api-ref/en-us_topic_0057845585.html index 93c3f5e97..88c0dd719 100644 --- a/docs/iam/api-ref/en-us_topic_0057845585.html +++ b/docs/iam/api-ref/en-us_topic_0057845585.html @@ -4,6 +4,30 @@

              Function

              This API is used to check the validity of a specified token. If the token is valid, detailed information about the token will be returned.

              URI

              GET /v3/auth/tokens

              +
              • Query parameters +
                + + + + + + + + + + + +

                Parameter

                +

                Mandatory

                +

                Type

                +

                Description

                +

                nocatalog

                +

                No

                +

                String

                +

                If this parameter is set, no catalog information will be displayed in the response.

                +
                +
                +

              Request Parameters

              • Parameters in the request header

                Parameter

                @@ -37,29 +61,6 @@
                -
              • Query parameters -
                - - - - - - - - - - - -

                Parameter

                -

                Mandatory

                -

                Type

                -

                Description

                -

                nocatalog

                -

                No

                -

                String

                -

                If this parameter is set, no catalog information will be displayed in the response.

                -
                -
              • Example request
                curl -i -k -H "X-Auth-Token:$token" -H "X-Subject-Token:$token" -X GET https://sample.domain.com/v3/auth/tokens
              @@ -97,7 +98,7 @@

              token

              +

              token

              Yes

              • -
              • Token format description +
                • token
                  - @@ -164,10 +165,10 @@ "id": "domainid" } } -
                  • user.name: Name of the user that owns the token.
                  • user.id: ID of the user.
                  • domain.name: Name of the domain to which the user belongs.
                  • domain.id: ID of the domain.
                  • password_expires_at: Time when the password will expire. null indicates that the password will not expire. This parameter is optional.
                  +
                  • user.name: Name of the user that owns the token.
                  • user.id: ID of the user.
                  • domain.name: Name of the domain to which the user belongs.
                  • domain.id: ID of the domain.
                  • password_expires_at: UTC time when the password will expire. null indicates that the password will not expire. This parameter is optional.
                  - @@ -182,7 +183,7 @@
                  • domain.name: Domain name.
                  • domain.id: Domain ID.
                  - @@ -197,7 +198,7 @@
                  • project.name: Name of a project.
                  • project.id: ID of the project.
                  - @@ -220,7 +221,7 @@
                  • type: Type of the service to which the API belongs.
                  • id: ID of the service.
                  • name: Name of the service.
                  • endpoints: Endpoints that can be used to call the API.
                  • url: URL used to call the API.
                  • region: Region in which the service can be accessed.
                  • region_id: ID of the region.
                  • interface: Type of the API. The value public means that the API is open for access.
                  • id: ID of the API.
                  - @@ -241,6 +242,274 @@

                  Parameter

                  Mandatory

                  @@ -148,7 +149,7 @@

                  Time when the token was issued.

                  user

                  +

                  user

                  Yes

                  domain

                  +

                  domain

                  No

                  project

                  +

                  project

                  No

                  catalog

                  +

                  catalog

                  No

                  roles

                  +

                  roles

                  Yes
                  +
                • token.catalog +
                  + + + + + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  endpoints

                  +

                  Array of objects

                  +

                  Endpoint information.

                  +

                  id

                  +

                  String

                  +

                  Service ID.

                  +

                  name

                  +

                  String

                  +

                  Service name.

                  +

                  type

                  +

                  String

                  +

                  Type of the service to which the API belongs.

                  +
                  +
                  +
                • token.catalog.endpoints +
                  + + + + + + + + + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  id

                  +

                  String

                  +

                  Endpoint ID.

                  +

                  interface

                  +

                  String

                  +

                  Visibility of the API. public indicates that the API is available for public access.

                  +

                  region

                  +

                  String

                  +

                  Region to which the endpoint belongs.

                  +

                  region_id

                  +

                  String

                  +

                  Region ID.

                  +

                  url

                  +

                  String

                  +

                  Endpoint URL.

                  +
                  +
                  +

                • token.domain

                  + +
                  + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  name

                  +

                  String

                  +

                  Domain name.

                  +

                  id

                  +

                  String

                  +

                  Domain ID.

                  +
                  +
                  +
                • token.project +
                  + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  domain

                  +

                  Object

                  +

                  Domain information of the project.

                  +

                  id

                  +

                  String

                  +

                  Project ID.

                  +

                  name

                  +

                  String

                  +

                  Project name.

                  +
                  +
                  +

                • token.project.domain

                  + +
                  + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  id

                  +

                  String

                  +

                  Domain ID.

                  +

                  name

                  +

                  String

                  +

                  Domain name.

                  +
                  +
                  +
                • token.roles +
                  + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  name

                  +

                  String

                  +

                  Permission name.

                  +

                  id

                  +

                  String

                  +

                  Permission ID. The default value is 0, which does not correspond to any permission.

                  +
                  +
                  +
                • token.user +
                  + + + + + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  name

                  +

                  String

                  +

                  IAM username.

                  +

                  id

                  +

                  String

                  +

                  User ID.

                  +

                  password_expires_at

                  +

                  String

                  +

                  Password expiration time. If this parameter is not specified, the password will never expire.

                  +
                  NOTE:

                  The value is a UTC time in the YYYY-MM-DDTHH:mm:ss.ssssssZ format, for example, 2023-06-28T08:56:33.710000Z. For details about the date and timestamp formats, see ISO-8601.

                  +
                  +

                  domain

                  +

                  Object

                  +

                  Information about the account used to create the IAM user.

                  +
                  +
                  +
                • token.user.domain +
                  + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  name

                  +

                  String

                  +

                  Name of the account used to create the IAM user.

                  +

                  id

                  +

                  String

                  +

                  ID of the account used to create the IAM user.

                  +
                  +
                • Example response
                  {
   "token" : {
     "methods" : ["password"],
diff --git a/docs/iam/api-ref/en-us_topic_0057845586.html b/docs/iam/api-ref/en-us_topic_0057845586.html
index dd8bdd219..f0316c2e4 100644
--- a/docs/iam/api-ref/en-us_topic_0057845586.html
+++ b/docs/iam/api-ref/en-us_topic_0057845586.html
@@ -34,6 +34,15 @@

              Token to be verified.

              nocatalog

              +

              No

              +

              String

              +

              If this parameter is set, no catalog information will be displayed in the response. Any non-empty string for this parameter will be interpreted as true and indicates that no catalog information will be displayed.

              +
              diff --git a/docs/iam/api-ref/en-us_topic_0057845587.html b/docs/iam/api-ref/en-us_topic_0057845587.html index 3b3e15521..e54fecd9b 100644 --- a/docs/iam/api-ref/en-us_topic_0057845587.html +++ b/docs/iam/api-ref/en-us_topic_0057845587.html @@ -3,7 +3,7 @@

              Querying Services

              Function

              This API is used to query the service list.

              -

              URI

              • URI format

                GET /v3/services{?type}

                +

                URI

                • URI format

                  GET /v3/services

                • URI parameters
                  - - - - @@ -98,69 +98,123 @@

                  Parameter

                  @@ -77,20 +77,20 @@

                  links

                  +

                  links

                  Yes

                  Dict

                  +

                  Object

                  Service resource link.

                  services

                  +

                  services

                  Yes

                  List

                  +

                  Array of objects

                  A list of services.
                  -
                • Description for the services format -

                  Parameter

                  +
                • services +
                  - - - - - - - - - - - - - - - - - - - - - - - - - - - + +

                  Parameter

                  Mandatory

                  +

                  Type

                  Type

                  -

                  Description

                  +

                  Description

                  description

                  +

                  description

                  No

                  +

                  String

                  String

                  -

                  Service description.

                  +

                  Service description.

                  enabled

                  +

                  enabled

                  Yes

                  +

                  Boolean

                  Boolean

                  -

                  Whether a service is available.

                  +

                  Whether a service is available.

                  id

                  +

                  id

                  Yes

                  +

                  String

                  String

                  -

                  Service ID.

                  +

                  Service ID.

                  name

                  +

                  name

                  No

                  +

                  String

                  String

                  -

                  Service name.

                  +

                  Service name.

                  type

                  +

                  type

                  Yes

                  +

                  String

                  String

                  -

                  Service type.

                  +

                  Service type.

                  links

                  +

                  links

                  Yes

                  +

                  Object

                  Dict

                  +

                  Service resource link.

                  Service resource link.

                  +
                  +
                  +

                • services.links

                  + +
                  + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  self

                  +

                  String

                  +

                  Resource link.

                  +

                  previous

                  +

                  String

                  +

                  Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                  +

                  next

                  +

                  String

                  +

                  Next resource link. If the next resource link is unavailable, this parameter is set to null.

                  +
                  +
                  +

                • links

                  + +
                  + + + + + + + + + + + + + + + @@ -206,6 +260,7 @@ } } +

                  Status Codes

                  Parameter

                  +

                  Type

                  +

                  Description

                  +

                  self

                  +

                  String

                  +

                  Resource link.

                  +

                  previous

                  +

                  String

                  +

                  Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                  +

                  next

                  +

                  String

                  +

                  Next resource link. If the next resource link is unavailable, this parameter is set to null.

                  Status Code

                  diff --git a/docs/iam/api-ref/en-us_topic_0057845590.html b/docs/iam/api-ref/en-us_topic_0057845590.html index ea7336e07..9f5b3366e 100644 --- a/docs/iam/api-ref/en-us_topic_0057845590.html +++ b/docs/iam/api-ref/en-us_topic_0057845590.html @@ -62,24 +62,47 @@
                  -
                • Parameters in the request body -
                  - @@ -54,7 +54,7 @@ - @@ -67,6 +67,96 @@

                  Parameter

                  +
                • Parameters in the request body +
                  - - - - - - - + + +

                  Parameter

                  Mandatory

                  +

                  Mandatory

                  Type

                  +

                  Type

                  Description

                  +

                  Description

                  rules

                  +

                  mapping

                  Yes

                  +

                  Yes

                  Object

                  +

                  Object

                  Rule used to map federated users to local users.

                  +

                  Mapping information.

                  +
                  +
                  +
                • mapping +
                  + + + + + + + + + @@ -119,37 +142,212 @@

                  Parameter

                  +

                  Mandatory

                  +

                  Type

                  +

                  Description

                  +

                  rules

                  +

                  Yes

                  +

                  Array

                  +

                  Rule used to map federated users to local users.

                  Example rule for SAML:

                   "rules": [
             {
@@ -111,7 +134,7 @@
             }
         ]

                  local: indicates the information about a federated user in the cloud system.

                  -
                  • user: indicates the name of a federated user in the cloud system. {0} indicates the first attribute of the user information in remote.
                  • group: indicates the user group to which a federated user belongs in the cloud system.
                  +
                  • user: indicates the name of a federated user in the cloud system. {0} indicates the first attribute of the user information in remote.
                  • group: indicates the user group to which a federated user belongs in the cloud system.

                  remote: indicates the information about a federated user in the IdP. This expression is a combination of assertion attributes and operators. The value of remote is determined based on the assertion.

                  • "type": "UserName" indicates an attribute in an IdP assertion.
                  • "type": "orgPersonType" indicates an attribute in an IdP assertion.
                  • not_any_of: The rule is not matched if any of the specified strings appear in the attribute type. The condition result is Boolean, not the argument that is passed as input.
                  +
                • mapping.rules +
                  + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Mandatory

                  +

                  Type

                  +

                  Description

                  +

                  local

                  +

                  Yes

                  +

                  Array of RulesLocal objects

                  +

                  Federated user information on the cloud platform. user indicates the name of a federated user, and group indicates the group which the federated user belongs to.

                  +

                  remote

                  +

                  Yes

                  +

                  Array of objects

                  +

                  Federated user information in the IdP system. If SAML is used, this parameter is an expression consisting of assertion attributes and operators, and the value of this parameter is determined by the assertion. If OIDC protocol is used, the value of this parameter is determined by the ID token.

                  +
                  +
                  +
                • mapping.rules.local +
                  + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Mandatory

                  +

                  Type

                  +

                  Description

                  +

                  user

                  +

                  No

                  +

                  user object

                  +

                  Name of a federated user on the cloud platform.

                  +

                  group

                  +

                  No

                  +

                  group object

                  +

                  User group to which a federated user belongs on the cloud platform.

                  +
                  +
                  +
                • mapping.rules.local.user +
                  + + + + + + + + + + + +

                  Parameter

                  +

                  Mandatory

                  +

                  Type

                  +

                  Description

                  +

                  name

                  +

                  Yes

                  +

                  String

                  +

                  Name of a federated user on the cloud platform.

                  +
                  +
                  +
                • mapping.rules.local.group +
                  + + + + + + + + + + + +

                  Parameter

                  +

                  Mandatory

                  +

                  Type

                  +

                  Description

                  +

                  name

                  +

                  Yes

                  +

                  String

                  +

                  User group to which a federated user belongs on the cloud platform.

                  +
                  +
                  +
                • mapping.rules.remote +
                  + + + + + + + + + + + + + + + + + + + + + +

                  Parameter

                  +

                  Mandatory

                  +

                  Type

                  +

                  Description

                  +

                  type

                  +

                  Yes

                  +

                  String

                  +

                  IdP assertion (SAML) or ID token (OIDC)

                  +

                  any_one_of

                  +

                  No

                  +

                  Array of strings

                  +

                  The rule is matched only if the specified strings appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. In a remote array, any_one_of and not_any_of are mutually exclusive and cannot be used at the same time.

                  +

                  not_any_of

                  +

                  No

                  +

                  Array of strings

                  +

                  The rule is matched only if the specified strings do not appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. any_one_of and not_any_of are mutually exclusive and cannot be used at the same time.

                  +
                  +
                  • Example request
                    curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X PUT -d'{"mapping":{"rules":[{"local":[{"user":{"name":"{0}"}},{"group":{"name":"0cd5e9"}}],"remote":[{"type":"UserName"},{"type":"orgPersonType","not_any_of":["Contractor","Guest"]}]}]}}' https://sample.domain.com/v3/OS-FEDERATION/mappings/ACME
                  -

                  Response Parameters

                  • Parameters in the response body -
                    - @@ -54,7 +54,7 @@ - @@ -66,6 +66,113 @@

                    Parameter

                    +

                    Response Parameters

                    • Parameters in the response body +
                      - - - - - - - - +

                      Parameter

                      Mandatory

                      +

                      Mandatory

                      Type

                      +

                      Type

                      Description

                      +

                      Description

                      id

                      +

                      mapping

                      Yes

                      +

                      Yes

                      String

                      +

                      Object

                      Mapping ID.

                      +

                      Mapping information.

                      rules

                      +
                      +
                      +
                    +
                    • mapping +
                      + + + + + + - - - + + + + + - - - - + + +

                      Parameter

                      +

                      Mandatory

                      +

                      Type

                      +

                      Description

                      +

                      id

                      Yes

                      +

                      Yes

                      Object

                      +

                      String

                      Rule used to map federated users to local users.

                      +

                      Mapping ID.

                      +

                      rules

                      +

                      Yes

                      +

                      Array of MappingRules objects

                      +

                      Rule used to map federated users to local users.

                      Example rule for SAML:

                       "rules": [
             {
@@ -186,13 +384,156 @@
 
                      • "type": "UserName" indicates an attribute in an IdP assertion.
                      • "type": "orgPersonType" indicates an attribute in an IdP assertion.
                      • not_any_of: The rule is not matched if any of the specified strings appear in the attribute type. The condition result is Boolean, not the argument that is passed as input.

                      links

                      +

                      links

                      Yes

                      +

                      Yes

                      Object

                      +

                      Object

                      Mapping resource link.

                      +

                      Mapping resource link.

                      +
                      +
                      +
                    • mapping.links +
                      + + + + + + + + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      self

                      +

                      String

                      +

                      Resource link.

                      +
                      +
                      +
                      +
                    • mapping.rules +
                      + + + + + + + + + + + + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      local

                      +

                      Array of objects

                      +

                      Federated user information on the cloud platform. user indicates the name of a federated user, and group indicates the user group to which a federated user belongs in the cloud system.

                      +

                      remote

                      +

                      Array of objects

                      +

                      Federated user information in the IdP system. If SAML is used, this parameter is an expression consisting of assertion attributes and operators, and the value of this parameter is determined by the assertion. If OIDC protocol is used, the value of this parameter is determined by the ID token.

                      +
                      +
                      +
                    • mapping.rules.local +
                      + + + + + + + + + + + + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      user

                      +

                      user object

                      +

                      Name of a federated user on the cloud platform.

                      +

                      group

                      +

                      group object

                      +

                      User group to which a federated user belongs on the cloud platform.

                      +
                      +
                      +
                    • mapping.rules.local.user +
                      + + + + + + + + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      name

                      +

                      String

                      +

                      Name of a federated user on the cloud platform.

                      +
                      +
                      +
                    • mapping.rules.local.group +
                      + + + + + + + + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      name

                      +

                      String

                      +

                      User group to which a federated user belongs on the cloud platform.

                      +
                      +
                      +
                    • mapping.rules.remote +
                      + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845591.html b/docs/iam/api-ref/en-us_topic_0057845591.html index aba29f104..742e56043 100644 --- a/docs/iam/api-ref/en-us_topic_0057845591.html +++ b/docs/iam/api-ref/en-us_topic_0057845591.html @@ -289,7 +289,7 @@ - -

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      type

                      +

                      String

                      +

                      IdP assertion (SAML) or ID token (OIDC)

                      +

                      any_one_of

                      +

                      Array of strings

                      +

                      The rule is matched only if the specified strings appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. In a remote array, any_one_of and not_any_of are mutually exclusive and cannot be used at the same time.

                      +

                      not_any_of

                      +

                      Array of strings

                      +

                      The rule is matched only if the specified strings do not appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. any_one_of and not_any_of are mutually exclusive and cannot be set at the same time.

                      Array of objects

                      Dependence permissions.

                      +

                      Dependency permissions.

                      Statement

                      @@ -373,7 +373,7 @@

                      Resource

                      Array of strings

                      +

                      Object

                      Cloud resource.

                      NOTE:
                      • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                      • The region segment can be * or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.
                      • In the case of a custom policy for agencies, the type of this parameter is object, and the value should be set to "Resource": {"uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"]}.
                      @@ -383,26 +383,6 @@
                      - -
                      - - - - - - - - - -
                      Table 10 roles.policy.Statement.Condition.operator

                      Parameter

                      -

                      Type

                      -

                      Description

                      -

                      attribute

                      -

                      Array of strings

                      -

                      Condition key. A key is a valid attribute that corresponds to an operator.

                      -

                      The parameter type is custom character string array.

                      -
                      -

                    Example Request

                    GET https://sample.domain.com/v3/roles
                    diff --git a/docs/iam/api-ref/en-us_topic_0057845595.html b/docs/iam/api-ref/en-us_topic_0057845595.html index 31d1d324f..97dccc671 100644 --- a/docs/iam/api-ref/en-us_topic_0057845595.html +++ b/docs/iam/api-ref/en-us_topic_0057845595.html @@ -45,7 +45,7 @@

                    projects

                    +

                    projects

                    Yes

                    List of projects.

                    links

                    +

                    links

                    Yes
                    +
                  • links +
                    + + + + + + + + + +

                    Parameter

                    +

                    Type

                    +

                    Description

                    +

                    self

                    +

                    string

                    +

                    Resource link.

                    +
                    +
                    +
                  • projects +
                    + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

                    Parameter

                    +

                    Type

                    +

                    Description

                    +

                    is_domain

                    +

                    boolean

                    +

                    false.

                    +

                    description

                    +

                    string

                    +

                    Description of the project.

                    +

                    links

                    +

                    LinksSelf object

                    +

                    Project resource link.

                    +

                    enabled

                    +

                    boolean

                    +

                    Whether a project is available.

                    +

                    id

                    +

                    string

                    +

                    Project ID.

                    +

                    parent_id

                    +

                    string

                    +

                    ID of the specified project if you query a project created by you.

                    +

                    Domain ID if you query a specified system built-in project.

                    +

                    domain_id

                    +

                    string

                    +

                    Account ID of the project.

                    +

                    name

                    +

                    string

                    +

                    Project name.

                    +
                    +
                    +
                  • projects.links +
                    + + + + + + + + + +

                    Parameter

                    +

                    Type

                    +

                    Description

                    +

                    self

                    +

                    string

                    +

                    Resource link.

                    +
                    +
                  • Example response
                    {
   "links": {
     "self": "https://sample.domain.com/v3/OS-FEDERATION/projects",
diff --git a/docs/iam/api-ref/en-us_topic_0057845596.html b/docs/iam/api-ref/en-us_topic_0057845596.html
index e192e2b76..8e5898e4d 100644
--- a/docs/iam/api-ref/en-us_topic_0057845596.html
+++ b/docs/iam/api-ref/en-us_topic_0057845596.html
@@ -45,7 +45,7 @@

                  domains

                  +

                  domains

                  Yes

                  List of domains.

                  links

                  +

                  links

                  Yes

                  • +

                  • domains

                    + +
                    + + + + + + + + + + + + + + + + + + + + + + + + + +

                    Parameter

                    +

                    Type

                    +

                    Description

                    +

                    enabled

                    +

                    Boolean

                    +

                    Whether to enable the account.

                    +

                    id

                    +

                    String

                    +

                    Domain ID.

                    +

                    name

                    +

                    String

                    +

                    Domain name.

                    +

                    links

                    +

                    Object

                    +

                    Account resource link.

                    +

                    description

                    +

                    String

                    +

                    Account description.

                    +
                    +
                    +
                  +
                  • domains.links +
                    + + + + + + + + + +

                    Parameter

                    +

                    Type

                    +

                    Description

                    +

                    self

                    +

                    String

                    +

                    Resource link.

                    +
                    +
                    +
                  +

                  • links

                    + +
                    + + + + + + + + + +

                    Parameter

                    +

                    Type

                    +

                    Description

                    +

                    self

                    +

                    String

                    +

                    Resource link.

                    +
                    +
                    +
                  • Example response
                    {
   "domains": [
     {
diff --git a/docs/iam/api-ref/en-us_topic_0057845600.html b/docs/iam/api-ref/en-us_topic_0057845600.html
index 96b353cbb..c4eebbb26 100644
--- a/docs/iam/api-ref/en-us_topic_0057845600.html
+++ b/docs/iam/api-ref/en-us_topic_0057845600.html
@@ -61,9 +61,32 @@
                  +
                • Parameters in the request body +
                  + + + + + + + + + + + +

                  Parameter

                  +

                  Mandatory

                  +

                  Type

                  +

                  Description

                  +

                  group

                  +

                  Yes

                  +

                  Object

                  +

                  User group information.

                  +
                  +
                -
                • Parameters in the request body -

                  Parameter

                  +
                  • group +
                    @@ -73,16 +96,7 @@ - - - - - - @@ -116,7 +130,7 @@

                    Response Parameters

                    • Parameters in the response body -

                    Parameter

                    Mandatory

                    group

                    -

                    Yes

                    -

                    Object

                    -

                    Request body of a group.

                    -

                    description

                    +

                    description

                    No
                    - - @@ -80,97 +80,251 @@

                    Parameter

                    +
                    @@ -126,58 +140,86 @@ - - - - +

                    Parameter

                    Mandatory

                    group

                    +

                    group

                    Yes

                    Dict

                    +

                    Object

                    Response body of a user group.

                    +

                    User group information.

                    description

                    +
                    +
                    +
                  • group +
                    + + + + + - - - - - - - - - - - - - - - - - - - + + + + + +

                    Parameter

                    +

                    Type

                    +

                    Description

                    +

                    description

                    Yes

                    +

                    String

                    String

                    -

                    Description for a user group.

                    +

                    User group description.

                    domain_id

                    +

                    id

                    Yes

                    +

                    String

                    String

                    -

                    ID of the domain to which a user group belongs.

                    +

                    User group ID.

                    id

                    +

                    domain_id

                    Yes

                    +

                    String

                    String

                    -

                    ID of a user group.

                    +

                    ID of the domain to which the user group belongs.

                    links

                    +

                    name

                    Yes

                    +

                    String

                    Dict

                    -

                    User group resource link.

                    +

                    User group name.

                    name

                    +

                    links

                    Yes

                    +

                    Object

                    String

                    +

                    User group resource link.

                    Name of a user group.

                    +

                    create_time

                    +

                    Long

                    +

                    Time when the user group was created.

                    +
                    +
                    +
                  • group.links +
                    + + + + + + + @@ -191,7 +233,8 @@ "links": { "self": "https://sample.domain.com/v3/groups/aaec2abd4eba430fbf61541ffde76650" }, - "name": "jixiang1" + "name": "jixiang1", + "create_time" : "1763639302" } } diff --git a/docs/iam/api-ref/en-us_topic_0057845602.html b/docs/iam/api-ref/en-us_topic_0057845602.html index 54d940b83..efef0462c 100644 --- a/docs/iam/api-ref/en-us_topic_0057845602.html +++ b/docs/iam/api-ref/en-us_topic_0057845602.html @@ -3,7 +3,7 @@

                    Listing User Groups

                    Function

                    This API is used to query user group information.

                    -

                    URI

                    • URI format

                      GET /v3/groups{?domain_id,name}

                      +

                      URI

                      • URI format

                        GET /v3/groups

                      • Query parameters

                    Parameter

                    +

                    Type

                    +

                    Description

                    +

                    self

                    +

                    String

                    +

                    Resource link.
                    @@ -84,7 +84,7 @@ - @@ -93,7 +93,7 @@ - @@ -106,7 +106,7 @@

                    Parameter

                    links

                    +

                    links

                    Yes

                    User group resource link.

                    groups

                    +

                    groups

                    Yes

                    • -
                    • Group parameter description +
                      • groups
                        - @@ -174,6 +174,73 @@

                        Parameter

                        Mandatory

                        @@ -144,7 +144,7 @@

                        ID of a user group.

                        links

                        +

                        links

                        Yes
                        +
                      • groups.links +
                        + + + + + + + + + + + + + + + + + +

                        Parameter

                        +

                        Type

                        +

                        Description

                        +

                        self

                        +

                        String

                        +

                        Resource link.

                        +

                        previous

                        +

                        String

                        +

                        Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                        +

                        next

                        +

                        String

                        +

                        Next resource link. If the next resource link is unavailable, this parameter is set to null.

                        +
                        +
                        +

                      • links

                        + +
                        + + + + + + + + + + + + + + + + + +

                        Parameter

                        +

                        Type

                        +

                        Description

                        +

                        self

                        +

                        String

                        +

                        Resource link.

                        +

                        previous

                        +

                        String

                        +

                        Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                        +

                        next

                        +

                        String

                        +

                        Next resource link. If the next resource link is unavailable, this parameter is set to null.

                        +
                        +
                      • Example response
                        {
     "links": {
         "self": "https://sample.domain.com/v3/groups?domain_id=ac7197fd67a24dc5850972854729a762&name=group123",
diff --git a/docs/iam/api-ref/en-us_topic_0057845603.html b/docs/iam/api-ref/en-us_topic_0057845603.html
index 8d7447d5a..5fcbebc51 100644
--- a/docs/iam/api-ref/en-us_topic_0057845603.html
+++ b/docs/iam/api-ref/en-us_topic_0057845603.html
@@ -67,11 +67,11 @@

                    role

                    +

                    role

                    Yes

                    Dict

                    +

                    Object

                    Details of the role.

                  -
                  • Description for the role format -

                    Parameter

                    +
                    • role +
                      - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + +

                      Parameter

                      Mandatory

                      +

                      Type

                      Type

                      -

                      Description

                      +

                      Description

                      domain_id

                      +

                      domain_id

                      Yes

                      +

                      String

                      String

                      -

                      ID of the domain to which a role belongs.

                      +

                      ID of the account to which the permission belongs.

                      id

                      +

                      flag

                      Yes

                      +

                      String

                      String

                      -

                      ID of a role.

                      +

                      The return value fine_grained indicates that the permission is a system-defined policy.

                      links

                      +

                      catalog

                      Yes

                      +

                      String

                      Dict

                      -

                      Role resource link.

                      +

                      Service catalog of the permission.

                      name

                      +

                      name

                      Yes

                      +

                      String

                      String

                      -

                      Name of a role.

                      +

                      Permission name for internal use. For example, ccs_user is the internal name of the CCS User role for CCS.

                      +

                      This parameter is carried in the token of a user, allowing the system to determine whether the user has permissions to access a specific cloud service.

                      type

                      +

                      description

                      Yes

                      +

                      String

                      String

                      -

                      Display mode of a role.

                      -
                      • AX: A role is displayed at the domain layer.
                      • XA: A role is displayed at the project layer.
                      • AA: A role is displayed at both the domain and project layers.
                      • XX: A role is not displayed at the domain or project layer.
                      +

                      Permission description.

                      display_name

                      +

                      links

                      No

                      +

                      Object

                      String

                      -

                      Displayed name of a role.

                      +

                      Permission resource link.

                      catalog

                      +

                      id

                      No

                      +

                      String

                      String

                      -

                      Directory where a role locates.

                      +

                      Permission ID.

                      policy

                      +

                      display_name

                      No

                      +

                      String

                      Dict

                      -

                      Policy of a role.

                      +

                      Permission name.

                      description

                      +

                      type

                      No

                      +

                      String

                      String

                      +

                      Display mode of the permission.

                      +
                      • AX: Account level.
                      • XA: Project level.
                      • AA: Both the account level and project level.
                      • XX: Neither the account level nor project level.
                      • The display mode of a custom policy can only be AX or XA. A custom policy must be displayed at either of the two levels.

                      Description of a role.

                      +

                      policy

                      +

                      Object

                      +

                      Permission content.

                      +

                      updated_time

                      +

                      String

                      +

                      Time when the permission was last updated.

                      +

                      created_time

                      +

                      String

                      +

                      Time when the permission was created.

                      +
                      +
                      +
                    +
                    • role.links +
                      + + + + + + + + + + + + + + + + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      self

                      +

                      String

                      +

                      Resource link.

                      +

                      previous

                      +

                      String

                      +

                      Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                      +

                      next

                      +

                      String

                      +

                      Next resource link. If the next resource link is unavailable, this parameter is set to null.

                      +
                      +
                      +
                    +
                    • role.policy +
                      + + + + + + + + + + + + + + + + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      Depends

                      +

                      Array of objects

                      +

                      Dependency permissions.

                      +

                      Statement

                      +

                      Array of objects

                      +

                      Statement of the permission.

                      +

                      Version

                      +

                      String

                      +

                      Policy version.

                      +
                      • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                      • 1.1: Policy. A policy defines the permissions required to perform actions on a specific cloud resource under certain conditions.
                      +
                      +
                      +
                    +
                    • role.policy.Depends +
                      + + + + + + + + + + + + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      catalog

                      +

                      String

                      +

                      Service catalog of the permission.

                      +

                      display_name

                      +

                      String

                      +

                      Display name of the permission.

                      +
                      +
                      +
                    +
                    • role.policy.Statement +
                      + + + + + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845609.html b/docs/iam/api-ref/en-us_topic_0057845609.html index af001c855..3345b52b1 100644 --- a/docs/iam/api-ref/en-us_topic_0057845609.html +++ b/docs/iam/api-ref/en-us_topic_0057845609.html @@ -82,13 +82,37 @@ - - - + + +

                      Parameter

                      +

                      Type

                      +

                      Description

                      +

                      Action

                      +

                      Array of strings

                      +

                      Specific operation permissions on a resource. For details about supported actions, see "Permissions and Supported Actions" in the API Reference of cloud services.

                      +
                      NOTE:
                      • Format: Service name:Resource type:Action, for example, vpc:ports:create
                      • Service name: indicates the service name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and actions are not case-sensitive. You can use an asterisk (*) to represent all actions.
                      • In the case of a custom policy for agencies, this parameter value should be "Action": ["iam:tokens:assume"].
                      +
                      +

                      Effect

                      +

                      String

                      +

                      Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.

                      +

                      The options are as follows:

                      +
                      • Allow
                      • Deny
                      +

                      Condition

                      +

                      Object

                      +

                      Conditions for the permission to take effect. If this parameter is not specified during policy creation, it will not be returned in the response.

                      +
                      NOTE:

                      Take the condition in the sample request as an example, the values of the condition key (obs:prefix) and string (public) must be equal (StringEquals).

                      +
                       "Condition": {
+              "StringEquals": {
+                "obs:prefix": [
+                  "public"
+                ]
+              }
+            }
                      +
                      +

                      Resource

                      +

                      Object

                      +

                      Cloud resource. If this parameter is not specified during policy creation, it will not be returned in the response.

                      +
                      NOTE:
                      • Five-segment format with asterisks (*) allowed: ::::. For example, obs:::bucket:*.
                      • The region segment can be * or a region accessible to the user. The service must exist and the specified resource must belong to the service.
                      • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be "Resource": {"uri": ["/iam/agencies/agencyTest"]}.
                      +

                      mapping_id

                      +

                      protocol

                      Yes

                      String

                      +

                      Object

                      Mapping ID.

                      +

                      Protocol information.

                      +
                      +
                      +

                    • protocol

                      + +
                      + + + + + + + + + @@ -98,42 +122,87 @@
                      • Example request
                        curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X PATCH -d'{"protocol":{"mapping_id":"ACME"}}' https://sample.domain.com/v3/OS-FEDERATION/identity_providers/ACME/protocols/saml
                      -

                      Response Parameters

                      • Parameters in the response body -

                      Parameter

                      +

                      Mandatory

                      +

                      Type

                      +

                      Description

                      +

                      mapping_id

                      +

                      No

                      +

                      String

                      +

                      Mapping ID. This parameter is required only if the identity provider type is iam_user_sso.

                      Parameter

                      +

                      Response Parameters

                      • Parameters in the response body +
                        - - - - - - - - +

                        Parameter

                        Mandatory

                        +

                        Type

                        Type

                        -

                        Description

                        +

                        Description

                        id

                        +

                        protocol

                        Yes

                        +

                        Object

                        String

                        -

                        ID of a protocol.

                        +

                        Protocol information.

                        mapping_id

                        +
                        +
                        +
                      • protocol +
                        + + + + + + - - - - - - - + + + + + + + +

                        Parameter

                        +

                        Mandatory

                        +

                        Type

                        +

                        Description

                        +

                        id

                        Yes

                        +

                        Yes

                        String

                        +

                        String

                        Mapping ID.

                        +

                        ID of a protocol.

                        links

                        +

                        mapping_id

                        Yes

                        +

                        Yes

                        Object

                        +

                        String

                        Protocol resource link.

                        +

                        Mapping ID.

                        +

                        links

                        +

                        Yes

                        +

                        Object

                        +

                        Protocol resource link.

                        +
                        +
                        +
                      • protocol.links +
                        + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845611.html b/docs/iam/api-ref/en-us_topic_0057845611.html index 7b7b28fb4..06cdd1993 100644 --- a/docs/iam/api-ref/en-us_topic_0057845611.html +++ b/docs/iam/api-ref/en-us_topic_0057845611.html @@ -61,70 +61,102 @@

                        Parameter

                        +

                        Type

                        +

                        Description

                        +

                        identity_provider

                        +

                        String

                        +

                        Identity provider resource link.

                        +

                        self

                        +

                        String

                        +

                        Resource link.
                        -
                      • Parameters in the request body -

                        Parameter

                        +
                      • Parameters in the request body +
                        - - - - - - - - +

                        Parameter

                        Mandatory

                        +

                        Mandatory

                        Type

                        +

                        Type

                        Description

                        +

                        Description

                        name

                        +

                        user

                        No

                        +

                        Yes

                        String

                        +

                        Object

                        A username with 5 to 32 characters. The username can contain special characters, but only hyphens (-), underscores (_), and periods (.) are allowed. It cannot start with a digit.

                        +

                        IAM user information.

                        domain_id

                        +
                        +
                        +
                      • user +
                        + + + + + + - - - - - - - - - - - + + + + + - - - - - - - - + + + + + @@ -133,8 +165,7 @@
                      • Example request
                        1. Create the temporary file ${filename}.json based on the following template. ${filename} indicates the temporary file name, which is user-defined.
 {
     "user": {
-        "name": "james1234",
-        "default_project_id": "88b16b6440684467b8825d7d96e154d8",
+        "name": "james1234","default_project_id": "88b16b6440684467b8825d7d96e154d8",
         "enabled": false,
         "password": "********"
     }
@@ -156,7 +187,7 @@
 
 
 
-
                        • @@ -168,7 +199,7 @@

                        Parameter

                        +

                        Mandatory

                        +

                        Type

                        +

                        Description

                        +

                        name

                        No

                        +

                        No

                        String

                        +

                        String

                        ID of the domain where a user is located.

                        +

                        A username with 5 to 32 characters. The username can contain special characters, but only hyphens (-), underscores (_), and periods (.) are allowed. It cannot start with a digit.

                        enabled

                        +

                        domain_id

                        No

                        +

                        No

                        Boolean

                        +

                        String

                        Enabling status of the user. true indicates that the user is enabled. false indicates that the user is disabled. The default value is true.

                        +

                        ID of the domain where a user is located.

                        password

                        +

                        enabled

                        No

                        +

                        No

                        String

                        +

                        Boolean

                        User password after the change. The password must meet the following requirements:
                        • Can contain 6 to 32 characters. The system default minimum password length is 6 characters, and you can change the minimum password length.
                        • Must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
                        • Cannot be the username or the username spelled backwards.
                        • Cannot contain the user's mobile phone number or email address.
                        • Must comply with the password policies under Account Settings.
                        +

                        Whether a user is enabled. true indicates that the user is enabled. false indicates that the user is disabled. The default value is true.

                        +

                        password

                        +

                        No

                        +

                        String

                        +
                        User password after the change. The password must meet the following requirements:
                        • Can contain 6 to 32 characters. The default minimum password length is 6 characters.
                        • Must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
                        • Cannot be the username or the username spelled backwards.
                        • Cannot contain the user's mobile phone number or email address.
                        • Must comply with the password policies under Account Settings.

                        default_project_id

                        +

                        default_project_id

                        No

                        +

                        No

                        String

                        +

                        String

                        Default project ID of a user.

                        +

                        Default project ID of a user.

                        description

                        +

                        description

                        No

                        +

                        No

                        String

                        +

                        String

                        Description of the user.

                        +

                        Description of the user.

                        +

                        pwd_status

                        +

                        No

                        +

                        boolean

                        +

                        Password status of the IAM user. true indicates that the password needs to be changed, and false indicates that the password is normal.

                        user

                        +

                        user

                        Yes
                        -
                      • Description for the user format +
                      • user
                        - @@ -226,22 +257,13 @@ - - - - - - + + + + + + +

                        Parameter

                        Mandatory

                        @@ -215,7 +246,7 @@

                        Username.

                        links

                        +

                        links

                        Yes

                        description

                        Yes

                        +

                        No

                        String

                        Description of the user.

                        default_project_id

                        -

                        No

                        -

                        String

                        -

                        Default project ID of a user.

                        -

                        password_expires_at

                        Yes

                        @@ -251,6 +273,34 @@

                        UTC when the password will expire. null indicates that the password will not expire.

                        last_project_id

                        +

                        No

                        +

                        String

                        +

                        ID of the project that the IAM user last accessed before logging out. If the user has not accessed any project, this parameter may not be returned.

                        +
                        +
                        +
                      • user.links +
                        + + + + + + + +

                        Parameter

                        +

                        Type

                        +

                        Description

                        +

                        self

                        +

                        String

                        +

                        Resource link.

                        +
                        @@ -268,6 +318,7 @@ "id": "6d8b04e3bf99445b8f76300903e5bf32", "default_project_id": "88b16b6440684467b8825d7d96e154d8", "password_expires_at": "2016-12-07T00:00:00.000000Z" + } }
                        • diff --git a/docs/iam/api-ref/en-us_topic_0057845612.html b/docs/iam/api-ref/en-us_topic_0057845612.html index e066352be..6e2f7fbef 100644 --- a/docs/iam/api-ref/en-us_topic_0057845612.html +++ b/docs/iam/api-ref/en-us_topic_0057845612.html @@ -63,9 +63,9 @@
                      • Parameters in the request body -
                        Table 1 Parameters in the request body

                        Parameter

                        +
                        - @@ -86,9 +86,9 @@
                        Table 1 Parameters in the request body

                        Parameter

                        Mandatory

                        +

                        Mandatory

                        Type

                        -
                        Table 2 identity_provider

                        Parameter

                        +
                        - @@ -122,7 +122,7 @@

                        Response Parameters

                        • Parameters in the response body -
                        Table 2 identity_provider

                        Parameter

                        Mandatory

                        +

                        Mandatory

                        Type
                        Table 3 Parameters in the response body

                        Parameter

                        +
                        @@ -141,7 +141,7 @@
                        Table 3 Parameters in the response body

                        Parameter

                        Type

                        -
                        Table 4 identity_provider

                        Parameter

                        +
                        @@ -195,7 +195,7 @@
                        Table 4 identity_provider

                        Parameter

                        Type

                        -
                        Table 5 identity_provider.links

                        Parameter

                        +
                        diff --git a/docs/iam/api-ref/en-us_topic_0057845613.html b/docs/iam/api-ref/en-us_topic_0057845613.html index 8cfcc8404..6a27701e3 100644 --- a/docs/iam/api-ref/en-us_topic_0057845613.html +++ b/docs/iam/api-ref/en-us_topic_0057845613.html @@ -19,7 +19,7 @@ - @@ -31,7 +31,7 @@
                        Table 5 identity_provider.links

                        Parameter

                        Type

                        version

                        +

                        version

                        Yes
                        -
                      • Description for the version format +
                      • version
                        - @@ -78,7 +78,7 @@ - @@ -90,6 +90,58 @@

                        Parameter

                        Mandatory

                        @@ -60,7 +60,7 @@

                        Last version update time.

                        media-types

                        +

                        media-types

                        Yes

                        Version, for example, v3.0.

                        links

                        +

                        links

                        Yes
                        +
                      • version.links +
                        + + + + + + + + + + + + + +

                        Parameter

                        +

                        Type

                        +

                        Description

                        +

                        rel

                        +

                        String

                        +

                        Link type. self: A self link contains the versioned link to the resource. bookmark: A bookmark link provides a permanent link to a permanent resource. alternate: An alternate link contains an alternate representation of the resource.

                        +

                        href

                        +

                        String

                        +

                        Resource link.

                        +
                        +
                        +
                      • version.media-types +
                        + + + + + + + + + + + + + +

                        Parameter

                        +

                        Type

                        +

                        Description

                        +

                        type

                        +

                        String

                        +

                        Media type.

                        +

                        base

                        +

                        String

                        +

                        Base type.

                        +
                        +
                      • Example response (successful response)
                        {
     "version": {
         "status": "stable",
diff --git a/docs/iam/api-ref/en-us_topic_0057845615.html b/docs/iam/api-ref/en-us_topic_0057845615.html
index 088bd80b2..591a98efa 100644
--- a/docs/iam/api-ref/en-us_topic_0057845615.html
+++ b/docs/iam/api-ref/en-us_topic_0057845615.html
@@ -40,13 +40,13 @@

                        • Request Parameters

                        • Parameters in the request header -

                          Parameter

                          +
                          - - - @@ -73,13 +73,13 @@
                          • Parameters in the request body -

                          Parameter

                          Mandatory

                          +

                          Mandatory

                          Type

                          +

                          Type

                          Description

                          +

                          Description

                          Parameter

                          +
                          - - - @@ -117,13 +117,33 @@
                          • Example request
                            curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X POST -d '{"xaccount_type":"","domain_id":"ed7a77d365304f458f7d0a7909c6d889","metadata":"$metadataContent"}' https://sample.domain.com/v3-ext/OS-FEDERATION/identity_providers/ACME/protocols/saml/metadata
                          -

                          Response Parameters

                          Example response

                          +

                          Response Parameters

                          • Parameters in the response body +

                          Parameter

                          Mandatory

                          +

                          Mandatory

                          Type

                          +

                          Type

                          Description

                          +

                          Description
                          + + + + + + + + + +

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          message

                          +

                          String

                          +

                          Import result.

                          +
                          +
                          + +

                          Example response

                          { "message": "Import metadata successful"}

                          Status Codes

                          - diff --git a/docs/iam/api-ref/en-us_topic_0057845616.html b/docs/iam/api-ref/en-us_topic_0057845616.html index d779cb6d7..e1f39f3ea 100644 --- a/docs/iam/api-ref/en-us_topic_0057845616.html +++ b/docs/iam/api-ref/en-us_topic_0057845616.html @@ -85,31 +85,73 @@ - - - - - +

                          Status Code

                          Description

                          +

                          Description

                          id

                          +

                          protocol

                          Yes

                          +

                          Yes

                          String

                          +

                          Object

                          ID of a protocol.

                          +

                          Protocol information.

                          mapping_id

                          +
                          +
                          +

                        • protocol

                          + +
                          + + + + + - - - - - - - + + + + + +

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          id

                          Yes

                          +

                          String

                          String

                          -

                          Mapping ID.

                          +

                          Protocol ID.

                          links

                          +

                          mapping_id

                          Yes

                          +

                          String

                          Object

                          +

                          Mapping ID.

                          Protocol resource link.

                          +

                          links

                          +

                          Object

                          +

                          Protocol resource link information.

                          +
                          +
                          +
                        • protocol.links +
                          + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845618.html b/docs/iam/api-ref/en-us_topic_0057845618.html index e703572c2..105e554b9 100644 --- a/docs/iam/api-ref/en-us_topic_0057845618.html +++ b/docs/iam/api-ref/en-us_topic_0057845618.html @@ -66,77 +66,107 @@

                          Response Parameters

                          • Parameters in the response body -

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          identity_provider

                          +

                          String

                          +

                          Identity provider resource link.

                          +

                          self

                          +

                          String

                          +

                          Resource link.

                          Parameter

                          +
                          - - - - - - - - +

                          Parameter

                          Mandatory

                          +

                          Type

                          Type

                          -

                          Description

                          +

                          Description

                          group

                          +

                          group

                          Yes

                          +

                          JSON object

                          JSON object

                          -

                          Response body of a user group.

                          +

                          Response body of a user group.

                          description

                          +
                          +
                          +
                        • group +
                          + + + + + - - - - - - - - - - - - - - - - - - - - - - - + +

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          description

                          Yes

                          +

                          String

                          String

                          -

                          Description for a user group.

                          +

                          User group description.

                          domain_id

                          +

                          domain_id

                          Yes

                          +

                          String

                          String

                          -

                          ID of the domain to which a user group belongs.

                          +

                          ID of the domain to which a user group belongs.

                          id

                          +

                          id

                          Yes

                          +

                          String

                          String

                          -

                          ID of a user group.

                          +

                          User group ID.

                          links

                          +

                          links

                          Yes

                          +

                          JSONObject

                          JSON object

                          -

                          Links to a user group.

                          +

                          Links to a user group.

                          name

                          +

                          name

                          Yes

                          +

                          String

                          String

                          -

                          Name of a user group.

                          +

                          User group name.

                          create_time

                          +

                          create_time

                          Yes

                          +

                          Long

                          Long

                          +

                          Time when the user group was created.

                          Time when a user group is created.

                          +
                          +
                          +

                        • group.links

                          + +
                          + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845622.html b/docs/iam/api-ref/en-us_topic_0057845622.html index 27c51a68a..288d85578 100644 --- a/docs/iam/api-ref/en-us_topic_0057845622.html +++ b/docs/iam/api-ref/en-us_topic_0057845622.html @@ -76,7 +76,7 @@ - @@ -85,7 +85,7 @@ - @@ -97,87 +97,135 @@

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          self

                          +

                          String

                          +

                          Resource link.

                          +

                          previous

                          +

                          String

                          +

                          Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                          +

                          next

                          +

                          String

                          +

                          Next resource link. If the next resource link is unavailable, this parameter is set to null.

                          projects

                          +

                          projects

                          Yes

                          List of projects.

                          links

                          +

                          links

                          Yes
                          -
                        • Description for the project format -
                          - @@ -79,33 +79,475 @@
                        • Example request
                          GET /v3/OS-FEDERATION/identity_providers/idptest/protocols/saml/auth
                          • -

                          Response Parameters

                          • Parameters in the response body -

                          Parameter

                          +
                        • projects +
                          - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + +

                          Parameter

                          Mandatory

                          +

                          Type

                          Type

                          -

                          Description

                          +

                          Description

                          description

                          +

                          description

                          Yes

                          +

                          String

                          String

                          -

                          Project description.

                          +

                          Project description.

                          id

                          +

                          id

                          Yes

                          +

                          String

                          String

                          -

                          Project ID.

                          +

                          Project ID.

                          domain_id

                          +

                          domain_id

                          Yes

                          +

                          String

                          String

                          -

                          ID of the domain where a project is located.

                          +

                          ID of the domain where a project is located.

                          name

                          +

                          name

                          Yes

                          +

                          String

                          String

                          -

                          Project name.

                          +

                          Project name.

                          links

                          +

                          links

                          Yes

                          +

                          Object

                          Object

                          -

                          Project resource link.

                          +

                          Project resource link.

                          is_domain

                          +

                          is_domain

                          Yes

                          +

                          Boolean

                          Boolean

                          -

                          Indicates whether the user calling the API is a tenant.

                          +

                          Indicates whether the user calling the API is a tenant.

                          enabled

                          +

                          enabled

                          Yes

                          +

                          Boolean

                          Boolean

                          -

                          Whether a project is available.

                          +

                          Whether a project is available.

                          parent_id

                          +

                          parent_id

                          Yes

                          +

                          String

                          String

                          +

                          Parent ID of the project.

                          Parent ID of the project.

                          +
                          +
                          +
                        • links +
                          + + + + + + + + + + + + + + + + + +

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          self

                          +

                          String

                          +

                          Resource link.

                          +

                          previous

                          +

                          String

                          +

                          Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                          +

                          next

                          +

                          String

                          +

                          Next resource link. If the next resource link is unavailable, this parameter is set to null.

                          +
                          +
                          +
                        • projects.links +
                          + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845625.html b/docs/iam/api-ref/en-us_topic_0057845625.html index b25d42e4b..93444821f 100644 --- a/docs/iam/api-ref/en-us_topic_0057845625.html +++ b/docs/iam/api-ref/en-us_topic_0057845625.html @@ -3,7 +3,7 @@

                          Querying Project Information Based on the Specified Criteria

                          Function

                          This API is used to query project information based on the specified criteria.

                          -

                          URI

                          • URI format

                            GET /v3/projects{?domain_id,name,enabled,parent_id,is_domain,page,per_page}

                            +

                            URI

                            • URI format

                              GET /v3/projects

                            • URI parameters

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          self

                          +

                          String

                          +

                          Resource link.

                          +

                          previous

                          +

                          String

                          +

                          Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                          +

                          next

                          +

                          String

                          +

                          Next resource link. If the next resource link is unavailable, this parameter is set to null.
                          - @@ -142,7 +142,7 @@ - @@ -154,7 +154,7 @@

                          Parameter

                          @@ -133,7 +133,7 @@

                          projects

                          +

                          projects

                          Yes

                          List of projects.

                          links

                          +

                          links

                          Yes
                          -
                        • Description for the project format +
                        • projects
                          - @@ -240,6 +240,72 @@

                          Parameter

                          Mandatory

                          @@ -183,7 +183,7 @@

                          Project description.

                          links

                          +

                          links

                          Yes
                          +
                        • links +
                          + + + + + + + + + + + + + + + + + +

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          self

                          +

                          String

                          +

                          Resource link.

                          +

                          previous

                          +

                          String

                          +

                          Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                          +

                          next

                          +

                          String

                          +

                          Next resource link. If the next resource link is unavailable, this parameter is set to null.

                          +
                          +
                          +
                        • projects.links +
                          + + + + + + + + + + + + + + + + + +

                          Parameter

                          +

                          Type

                          +

                          Description

                          +

                          self

                          +

                          String

                          +

                          Resource link.

                          +

                          previous

                          +

                          String

                          +

                          Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                          +

                          next

                          +

                          String

                          +

                          Next resource link. If the next resource link is unavailable, this parameter is set to null.

                          +
                          +

                          • ID of an identity provider.

                          protocol _id

                          +

                          protocol_id

                          Yes

                          Response Item

                          +

                          Response Parameters

                          • Parameters in the response header +
                            - - - - - - - - +

                            Response Item

                            Parameter

                            +

                            Type

                            Type

                            -

                            Description

                            +

                            Description

                            X-Subject-Token

                            +

                            X-Subject-Token

                            header

                            +

                            String

                            String

                            -

                            Signed unscoped token.

                            +

                            Signed unscoped token.

                            token

                            +
                            +
                            +
                          • Parameters in the response body +
                            + + + + + - - - + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            token

                            body

                            +

                            object

                            Object

                            +

                            Federated authentication token information.

                            Information of the unscoped token obtained in federated identity authentication mode, including methods and user information.

                            +
                            +
                            +
                          • token +
                            + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            methods

                            +

                            Array of strings

                            +

                            Method for obtaining the token.

                            +

                            expires_at

                            +

                            string

                            +

                            Time when the token will expire.

                            +

                            catalog

                            +

                            Array of objects

                            +

                            Catalog information.

                            +

                            domain

                            +

                            object

                            +

                            Domain information of the IAM user who requests for the token. This parameter is returned only when the scope parameter in the request body has been set to domain.

                            +

                            project

                            +

                            object

                            +

                            Project information of the user who requests for the token. This parameter is returned only when the scope parameter in the request body has been set to project.

                            +

                            roles

                            +

                            Array of objects

                            +

                            Permissions information of the token.

                            +

                            user

                            +

                            object

                            +

                            Information about the user who requests for the token.

                            +

                            issued_at

                            +

                            string

                            +

                            Time when the token was issued.

                            +
                            +
                            +
                          • token.catalog +
                            + + + + + + + + + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            type

                            +

                            string

                            +

                            Type of the service to which the API belongs.

                            +

                            id

                            +

                            string

                            +

                            Service ID.

                            +

                            name

                            +

                            string

                            +

                            Service name.

                            +

                            endpoints

                            +

                            Array of objects

                            +

                            Endpoint information.

                            +
                            +
                            +
                          • token.catalog.endpoints +
                            + + + + + + + + + + + + + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            url

                            +

                            string

                            +

                            Endpoint URL.

                            +

                            region

                            +

                            string

                            +

                            Region to which the endpoint belongs.

                            +

                            region_id

                            +

                            string

                            +

                            Region ID.

                            +

                            interface

                            +

                            string

                            +

                            Visibility of the API. public indicates that the API is available for public access.

                            +

                            id

                            +

                            string

                            +

                            Endpoint ID.

                            +
                            +
                            +
                          • token.domain +
                            + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            name

                            +

                            string

                            +

                            Domain name.

                            +

                            id

                            +

                            string

                            +

                            Domain ID.

                            +
                            +
                            +
                          • token.project +
                            + + + + + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            name

                            +

                            string

                            +

                            Project name.

                            +

                            id

                            +

                            string

                            +

                            Project ID.

                            +

                            domain

                            +

                            object

                            +

                            Domain information of the project.

                            +
                            +
                            +
                          • token.project.domain +
                            + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            name

                            +

                            string

                            +

                            Domain name.

                            +

                            id

                            +

                            string

                            +

                            Domain ID.

                            +
                            +
                            +
                          • token.roles +
                            + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            name

                            +

                            string

                            +

                            Permission name.

                            +

                            id

                            +

                            string

                            +

                            Permission ID. The default value is 0, which does not correspond to any permission.

                            +
                            +
                            +
                          • token.user +
                            + + + + + + + + + + + + + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            domain

                            +

                            object

                            +

                            Information about the domain to which the user belongs.

                            +

                            OS-FEDERATION

                            +

                            object

                            +

                            Federated identity authentication information.

                            +

                            id

                            +

                            string

                            +

                            User ID.

                            +

                            name

                            +

                            string

                            +

                            Username.

                            +

                            password_expires_at

                            +

                            string

                            +

                            UTC time when the password will expire. If this parameter is empty (""), the password never expires.

                            +
                            +
                            +
                          • token.user.domain +
                            + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            name

                            +

                            string

                            +

                            Domain name.

                            +

                            id

                            +

                            string

                            +

                            Domain ID.

                            +
                            +
                            +
                          • token.user.OS-FEDERATION +
                            + + + + + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            groups

                            +

                            Array of objects

                            +

                            User group information.

                            +

                            identity_provider

                            +

                            object

                            +

                            Identity provider information.

                            +

                            protocol

                            +

                            object

                            +

                            Protocol information.

                            +
                            +
                            +
                          • token.user.OS-FEDERATION.groups +
                            + + + + + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            id

                            +

                            string

                            +

                            User group ID.

                            +

                            name

                            +

                            string

                            +

                            User group name.

                            +
                            +
                            +
                          • token.user.OS-FEDERATION.identity_provider +
                            + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            id

                            +

                            string

                            +

                            Identity provider ID.

                            +
                            +
                            +
                          • token.user.OS-FEDERATION.protocol +
                            + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845637.html b/docs/iam/api-ref/en-us_topic_0057845637.html index 67a7915ba..f3679b89a 100644 --- a/docs/iam/api-ref/en-us_topic_0057845637.html +++ b/docs/iam/api-ref/en-us_topic_0057845637.html @@ -63,9 +63,9 @@

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            id

                            +

                            string

                            +

                            Protocol ID.
                            - - @@ -109,15 +109,6 @@ - - - - - - @@ -178,8 +169,8 @@ POST https://sample.domain.com/v3/users
                            Table 2 user

                            Parameter

                            Mandatory

                            +

                            Mandatory

                            Type

                            +

                            Type

                            Description

                            default_project_id

                            -

                            No

                            -

                            String

                            -

                            Default project ID of a user.

                            -

                            description

                            No

                            @@ -166,7 +157,7 @@ POST https://sample.domain.com/v3/users

                            user

                            +

                            user

                            Yes
                            -
                          • Description for the user format -
                            @@ -106,7 +106,7 @@ - @@ -115,7 +115,7 @@ - @@ -127,12 +127,12 @@

                            Parameter

                            +
                          • user +
                            @@ -226,7 +217,7 @@ POST https://sample.domain.com/v3/users - @@ -256,6 +247,25 @@ POST https://sample.domain.com/v3/users

                            Parameter

                            Mandatory

                            Username.

                            links

                            +

                            links

                            Yes
                            +
                          • user.links +
                            + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            self

                            +

                            String

                            +

                            Resource link.

                            +
                            +
                            • Example response
                              {
     "user": {
diff --git a/docs/iam/api-ref/en-us_topic_0057845638.html b/docs/iam/api-ref/en-us_topic_0057845638.html
index 6a298c8d1..e4e29c101 100644
--- a/docs/iam/api-ref/en-us_topic_0057845638.html
+++ b/docs/iam/api-ref/en-us_topic_0057845638.html
@@ -51,7 +51,7 @@

                            Password expiration time. The format is password_expires_at=operator:timestamp.

                            Example:

                            password_expires_at=lt:2016-12-08T22:02:00Z
                            -
                            • The value of operator can be lt, lte, gt, gte, eq, or neq.
                              • lt: The expiration time is earlier than timestamp.
                              • lte: The expiration time is earlier than or equal to timestamp.
                              • gt: The expiration time is later than timestamp.
                              • gte: The expiration time is equal to or later than timestamp.
                              • eq: The expiration time is equal to timestamp.
                              • neq: The expiration time is not equal to timestamp.
                              +
                              • The value of operator can be lt, lte, gt, gte, eq, or neq.
                                • lt: The expiration time is earlier than timestamp.
                                • lte: The expiration time is earlier than or equal to timestamp.
                                • gt: The expiration time is later than timestamp.
                                • gte: The expiration time is equal to or later than timestamp.
                                • eq: The expiration time is equal to timestamp.
                                • neq: The expiration time is not equal to timestamp.
                              • The timestamp format is YYYY-MM-DDTHH:mm:ssZ.

                            users

                            +

                            users

                            Yes

                            User list.

                            links

                            +

                            links

                            Yes
                            -
                          • Description for the user format +
                          • users
                            - - @@ -174,7 +174,7 @@ - @@ -210,13 +210,13 @@ - - - - -

                            Parameter

                            Mandatory

                            +

                            Mandatory

                            Type

                            +

                            Type

                            Description

                            User ID.

                            links

                            +

                            links

                            Yes

                            Password status. true means that the password needs to be changed, and false means that the password is normal.

                            default_project_id

                            +

                            pwd_strength

                            No

                            +

                            No

                            String

                            +

                            String

                            ID of the project that is displayed by default when the user logs in to the console.

                            +

                            Password strength. The value can be high, mid, or low.

                            last_project_id

                            @@ -228,13 +228,70 @@

                            ID of the project that the user lastly accessed before exiting the system.

                            email

                            + +
                            +
                            +
                          • links +
                            + + + + + - - - + + + + + + + + + +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            self

                            No

                            +

                            String

                            String

                            +

                            Resource link.

                            User email address.

                            +

                            previous

                            +

                            String

                            +

                            Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                            +

                            next

                            +

                            String

                            +

                            Next resource link. If the next resource link is unavailable, this parameter is set to null.

                            +
                            +
                            +
                          • users.links +
                            + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845639.html b/docs/iam/api-ref/en-us_topic_0057845639.html index 94e901d69..6cc92adba 100644 --- a/docs/iam/api-ref/en-us_topic_0057845639.html +++ b/docs/iam/api-ref/en-us_topic_0057845639.html @@ -76,62 +76,109 @@ - - - - - +

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            self

                            +

                            String

                            +

                            Resource link.

                            +

                            previous

                            +

                            String

                            +

                            Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                            +

                            next

                            +

                            String

                            +

                            Next resource link. If the next resource link is unavailable, this parameter is set to null.

                            sso_type

                            +

                            identity_provider

                            Yes

                            +

                            Yes

                            string

                            +

                            Object

                            Identity provider type. The following two types are supported:

                            -
                            • virtual_user_sso: The federated user is mapped to a virtual user after the login is redirected.
                            • iam_user_sso: The federated user is mapped to an IAM user after the login is redirected.
                            -

                            The default value is virtual_user_sso.

                            +

                            Identity provider information.

                            id

                            +
                            +
                            +
                          • identity_provider +
                            + + + + + + - - - - - - - - - - - - - - - - - - - + + + + + + + +

                            Parameter

                            +

                            Mandatory

                            +

                            Type

                            +

                            Description

                            +

                            sso_type

                            Yes

                            +

                            Yes

                            String

                            +

                            string

                            ID of an identity provider.

                            +

                            Identity provider type. The following two types are supported:

                            +
                            • virtual_user_sso: The federated user is mapped to a virtual user after the login is redirected.
                            • iam_user_sso: The federated user is mapped to an IAM user after the login is redirected.
                            +

                            The default type is virtual_user_sso.

                            description

                            +

                            id

                            Yes

                            +

                            Yes

                            String

                            +

                            String

                            Identity provider description.

                            +

                            Identity provider ID.

                            enabled

                            +

                            description

                            Yes

                            +

                            Yes

                            Boolean

                            +

                            String

                            Whether an identity provider is enabled.

                            -
                            • true indicates that the identity provider is enabled.
                            • false indicates that the identity provider is disabled.
                            -

                            The default value is false.

                            +

                            Identity provider description.

                            remote_ids

                            +

                            enabled

                            Yes

                            +

                            Yes

                            Array

                            +

                            Boolean

                            Federated user ID list of an identity provider.

                            +

                            Whether an identity provider is enabled. true indicates that the identity provider is enabled. false indicates that the identity provider is disabled. The default value is false.

                            links

                            +

                            remote_ids

                            Yes

                            +

                            Yes

                            Object

                            +

                            Array

                            Identity provider resource link.

                            +

                            Federated user ID list of an identity provider.

                            +

                            links

                            +

                            Yes

                            +

                            Object

                            +

                            Identity provider resource link.

                            +
                            +
                            +
                          • identity_provider.links +
                            + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845640.html b/docs/iam/api-ref/en-us_topic_0057845640.html index ef869db1a..7db697845 100644 --- a/docs/iam/api-ref/en-us_topic_0057845640.html +++ b/docs/iam/api-ref/en-us_topic_0057845640.html @@ -76,16 +76,16 @@ - - - @@ -98,97 +98,261 @@

                            Parameter

                            +

                            Type

                            +

                            Description

                            +

                            self

                            +

                            String

                            +

                            Identity provider resource link.

                            +

                            protocols

                            +

                            String

                            +

                            Protocol resource link.

                            links

                            +

                            links

                            Yes

                            Dict

                            +

                            Object

                            Role resource link.

                            roles

                            +

                            roles

                            Yes

                          -
                          • Role parameter description -

                            Parameter

                            +
                            • links +
                              - - - - - - - - - - - - - - - - +

                              Parameter

                              Mandatory

                              +

                              Type

                              Type

                              -

                              Description

                              +

                              Description

                              id

                              +

                              self

                              Yes

                              +

                              String

                              String

                              -

                              ID of a role.

                              +

                              Resource link.

                              links

                              +

                              previous

                              Yes

                              +

                              String

                              Dict

                              -

                              Role resource link.

                              +

                              Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                              name

                              +

                              next

                              Yes

                              +

                              String

                              String

                              -

                              Name of a role.

                              +

                              Next resource link. If the next resource link is unavailable, this parameter is set to null.

                              domain_id

                              +
                              +
                              +
                            +
                            • roles +
                              + + + + + - - - - - - - + + + + + + + + + + + - - - - - - - - - - - - - - - - + +

                              Parameter

                              +

                              Type

                              +

                              Description

                              +

                              id

                              Yes

                              +

                              String

                              String

                              -

                              ID of the domain to which a role belongs.

                              +

                              ID of a role.

                              type

                              +

                              links

                              Yes

                              +

                              Object

                              String

                              +

                              Role resource link.

                              Display mode of a role.

                              +

                              name

                              +

                              String

                              +

                              Name of a role.

                              +

                              domain_id

                              +

                              String

                              +

                              ID of the domain to which a role belongs.

                              +

                              type

                              +

                              String

                              +

                              Display mode of a role.

                              • AX: A role is displayed at the domain layer.
                              • XA: A role is displayed at the project layer.
                              • AA: A role is displayed at both the domain and project layers.
                              • XX: A role is not displayed at the domain or project layer.

                              display_name

                              +

                              display_name

                              No

                              +

                              String

                              String

                              -

                              Displayed name of a role.

                              +

                              Displayed name of a role.

                              catalog

                              +

                              catalog

                              No

                              +

                              String

                              String

                              -

                              Directory where a role locates.

                              +

                              Directory where a role locates.

                              policy

                              +

                              policy

                              No

                              +

                              Object

                              Dict

                              -

                              Policy of a role.

                              +

                              Policy of a role.

                              description

                              +

                              description

                              No

                              +

                              String

                              String

                              +

                              Description of a role.

                              Description of a role.

                              +
                              +
                              +
                            • roles.links +
                              + + + + + + + + + + + + + + + + + +

                              Parameter

                              +

                              Type

                              +

                              Description

                              +

                              self

                              +

                              String

                              +

                              Resource link.

                              +

                              previous

                              +

                              String

                              +

                              Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                              +

                              next

                              +

                              String

                              +

                              Next resource link. If the next resource link is unavailable, this parameter is set to null.

                              +
                              +
                              +

                            • roles.policy

                              + +
                              + + + + + + + + + + + + + + + + + +

                              Parameter

                              +

                              Type

                              +

                              Description

                              +

                              Depends

                              +

                              Array of objects

                              +

                              Dependency permissions.

                              +

                              Statement

                              +

                              Array of objects

                              +

                              Statement of the permission.

                              +

                              Version

                              +

                              String

                              +

                              Policy version.

                              +
                              • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                              • 1.1: Policy. A policy defines the permissions required to perform actions on a specific cloud resource under certain conditions.
                              +
                              +
                              +

                            • roles.policy.Depends

                              + +
                              + + + + + + + + + + + + + +

                              Parameter

                              +

                              Type

                              +

                              Description

                              +

                              catalog

                              +

                              String

                              +

                              Service catalog of the permission.

                              +

                              display_name

                              +

                              String

                              +

                              Permission name.

                              +
                              +
                              +
                            • roles.policy.Statement +
                              + + + + + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845644.html b/docs/iam/api-ref/en-us_topic_0057845644.html index 39261873d..6ee8cb4f0 100644 --- a/docs/iam/api-ref/en-us_topic_0057845644.html +++ b/docs/iam/api-ref/en-us_topic_0057845644.html @@ -77,7 +77,7 @@ - @@ -86,7 +86,7 @@ - @@ -98,42 +98,94 @@

                              Parameter

                              +

                              Type

                              +

                              Description

                              +

                              Action

                              +

                              Array of strings

                              +

                              Specific operation permissions on a resource. For details about supported actions, see "Permissions and Supported Actions" in the API Reference of cloud services.

                              +
                              NOTE:
                              • Format: Service name:Resource type:Action, for example, vpc:ports:create
                              • Service name: indicates the service name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and actions are not case-sensitive. You can use an asterisk (*) to represent all actions.
                              • In the case of a custom policy for agencies, this parameter value should be "Action": ["iam:tokens:assume"].
                              +
                              +

                              Effect

                              +

                              String

                              +

                              Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.

                              +

                              The options are as follows:

                              +
                              • Allow
                              • Deny
                              +

                              Condition

                              +

                              Object

                              +

                              Conditions for the permission to take effect. If this parameter is not specified during policy creation, it will not be returned in the response.

                              +
                              NOTE:

                              Take the condition in the sample request as an example, the values of the condition key (obs:prefix) and string (public) must be equal (StringEquals).

                              +
                               "Condition": {
+              "StringEquals": {
+                "obs:prefix": [
+                  "public"
+                ]
+              }
+            }
                              +
                              +

                              Resource

                              +

                              Object

                              +

                              Cloud resource. If this parameter is not specified during policy creation, it will not be returned in the response.

                              +
                              NOTE:
                              • Five-segment format that can contain asterisks (*): ::::, for example, obs:::bucket:*.
                              • The region segment can be * or a region accessible to the user. The service must exist and the specified resource must belong to the service.
                              • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be "Resource": {"uri": ["/iam/agencies/agencyTest"]}.
                              +

                              protocols

                              +

                              protocols

                              Yes

                              List of protocols.

                              links

                              +

                              links

                              Yes
                              -
                            • protocols parameter description -

                              Parameter

                              +
                            • protocols +
                              - - - - - - - - - - - - - - - + +

                              Parameter

                              Mandatory

                              +

                              Type

                              Type

                              -

                              Description

                              +

                              Description

                              id

                              +

                              id

                              Yes

                              +

                              String

                              String

                              -

                              ID of a protocol.

                              +

                              ID of a protocol.

                              mapping_id

                              +

                              mapping_id

                              Yes

                              +

                              String

                              String

                              -

                              Mapping ID.

                              +

                              Mapping ID.

                              links

                              +

                              links

                              Yes

                              +

                              Object

                              Object

                              +

                              Protocol resource link.

                              Protocol resource link.

                              +
                              +
                              +
                            • links +
                              + + + + + + + + + + + + + + + + + +

                              Parameter

                              +

                              Type

                              +

                              Description

                              +

                              self

                              +

                              String

                              +

                              Resource link.

                              +

                              previous

                              +

                              String

                              +

                              Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                              +

                              next

                              +

                              String

                              +

                              Next resource link. If the next resource link is unavailable, this parameter is set to null.

                              +
                              +
                              +
                              +
                            • protocols.links +
                              + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845645.html b/docs/iam/api-ref/en-us_topic_0057845645.html index db0ba78cf..34eb85b85 100644 --- a/docs/iam/api-ref/en-us_topic_0057845645.html +++ b/docs/iam/api-ref/en-us_topic_0057845645.html @@ -66,33 +66,53 @@
                              • Example request
                                curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X GET https://sample.domain.com/v3/OS-FEDERATION/mappings/ACME
                              -

                              Response Parameters

                              • Parameters in the response body -

                              Parameter

                              +

                              Type

                              +

                              Description

                              +

                              identity_provider

                              +

                              String

                              +

                              Identity provider resource link.

                              +

                              self

                              +

                              String

                              +

                              Resource link.

                              Parameter

                              +

                              Response Parameters

                              • Parameters in the response body +
                                - - - - - - - - +

                                Parameter

                                Mandatory

                                +

                                Type

                                Type

                                -

                                Description

                                +

                                Description

                                id

                                +

                                mapping

                                Yes

                                +

                                Object

                                String

                                -

                                Mapping ID.

                                +

                                Mapping information.

                                rules

                                +
                                +
                                +
                              +
                              • mapping +
                                + + + + + + - - - + + + + + - - - - + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                id

                                Yes

                                +

                                Yes

                                Object

                                +

                                String

                                Rule used to map federated users to local users

                                +

                                Mapping ID.

                                +

                                rules

                                +

                                Yes

                                +

                                Array

                                +

                                Rule used to map federated users to local users

                                Example rule for SAML:

                                 "rules": [
             {
@@ -124,18 +144,161 @@
             }
         ]

                                local: indicates the information about a federated user in the cloud system.

                                -
                                • user: indicates the name of a federated user in the cloud system. {0} indicates the first attribute of the user information in remote.
                                • group: indicates the user group to which a federated user belongs in the cloud system.
                                +
                                • user: indicates the name of a federated user in the cloud system. {0} indicates the first attribute of the user information in remote.
                                • group: indicates the user group to which a federated user belongs in the cloud system.

                                remote: indicates the information about a federated user in the IdP. This expression is a combination of assertion attributes and operators. The value of remote is determined based on the assertion.

                                • "type": "UserName" indicates an attribute in an IdP assertion.
                                • "type": "orgPersonType" indicates an attribute in an IdP assertion.
                                • not_any_of: The rule is not matched if any of the specified strings appear in the attribute type. The condition result is Boolean, not the argument that is passed as input.

                                links

                                +

                                links

                                Yes

                                +

                                Yes

                                Object

                                +

                                Object

                                Mapping resource link.

                                +

                                Mapping resource link.

                                +
                                +
                                +

                              • mapping.links

                                + +
                                + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                self

                                +

                                String

                                +

                                Resource link.

                                +
                                +
                                +
                              • mapping.rules +
                                + + + + + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                local

                                +

                                Array of RulesLocal objects

                                +

                                Federated user information on the cloud platform. user indicates the name of a federated user, and group indicates the group to which the federated user belongs.

                                +

                                remote

                                +

                                Array<Object>

                                +

                                Federated user information in the IdP system. This field is an expression consisting of assertion attributes and operators. The value of this parameter is determined by the assertion.

                                +
                                +
                                +
                              • mapping.rules.local +
                                + + + + + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                user

                                +

                                user object

                                +

                                Name of a federated user on the cloud platform.

                                +

                                group

                                +

                                group object

                                +

                                User group to which a federated user belongs on the cloud platform.

                                +
                                +
                                +
                              • mapping.rules.local.user +
                                + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                Name of a federated user on the cloud platform.

                                +
                                +
                                +
                              • mapping.rules.local.group +
                                + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                User group to which a federated user belongs on the cloud platform.

                                +
                                +
                                +
                              • mapping.rules.remote +
                                + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0057845650.html b/docs/iam/api-ref/en-us_topic_0057845650.html index 7ee69f4b9..756b2067c 100644 --- a/docs/iam/api-ref/en-us_topic_0057845650.html +++ b/docs/iam/api-ref/en-us_topic_0057845650.html @@ -37,9 +37,32 @@

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                type

                                +

                                String

                                +

                                IdP assertion (SAML) or ID token (OIDC)

                                +

                                any_one_of

                                +

                                Array of strings

                                +

                                The rule is matched only if the specified strings appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. In a remote array, any_one_of and not_any_of are mutually exclusive and cannot be set at the same time.

                                +

                                not_any_of

                                +

                                Array of strings

                                +

                                The rule is matched only if the specified strings do not appear in the attribute type. A Boolean value will be returned and cannot be used as a placeholder in the local block. any_one_of and not_any_of are mutually exclusive and cannot be set at the same time.
                                +
                              • Parameters in the request body +
                                + + + + + + + + + + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                group

                                +

                                Yes

                                +

                                Object

                                +

                                User group information.

                                +
                                +
                              -
                              • Parameters in the request body -

                                Parameter

                                +
                                • group +
                                  @@ -93,49 +116,87 @@ - - - - +

                                  Parameter

                                  Mandatory

                                  description

                                  +

                                  group

                                  Yes

                                  String

                                  +

                                  Object

                                  Description for a user group.

                                  +

                                  User group information.

                                  domain_id

                                  +
                                  +
                                  +
                                • group +
                                  + + + + + - - - - - - - - - - - - - - - + + + + + + + + + +

                                  Parameter

                                  +

                                  Type

                                  +

                                  Description

                                  +

                                  description

                                  Yes

                                  +

                                  String

                                  String

                                  -

                                  ID of the domain to which a user group belongs.

                                  +

                                  User group description.

                                  id

                                  +

                                  id

                                  Yes

                                  +

                                  String

                                  String

                                  -

                                  ID of a user group.

                                  +

                                  User group ID.

                                  links

                                  +

                                  domain_id

                                  Yes

                                  +

                                  String

                                  JSON object

                                  -

                                  Links to a user group.

                                  +

                                  ID of the domain to which the user group belongs.

                                  name

                                  +

                                  name

                                  Yes

                                  +

                                  String

                                  String

                                  +

                                  User group name.

                                  Name of a user group.

                                  +

                                  links

                                  +

                                  Object

                                  +

                                  User group resource link.

                                  +

                                  create_time

                                  +

                                  Long

                                  +

                                  Time when the user group was created.

                                  +
                                  +
                                  +

                                • group.links

                                  + +
                                  + + + + + + + @@ -149,7 +210,8 @@ "links":{ "self":"https://sample.domain.com/v3/groups/ab9f261180d746ef8624beb5ae39b5aa" }, - "name":"abcdef" + "name":"abcdef", + "create_time" : "1763639302" } } diff --git a/docs/iam/api-ref/en-us_topic_0057845652.html b/docs/iam/api-ref/en-us_topic_0057845652.html index b90d90949..6bf01e084 100644 --- a/docs/iam/api-ref/en-us_topic_0057845652.html +++ b/docs/iam/api-ref/en-us_topic_0057845652.html @@ -75,7 +75,7 @@ - @@ -87,12 +87,12 @@

                                  Parameter

                                  +

                                  Type

                                  +

                                  Description

                                  +

                                  self

                                  +

                                  String

                                  +

                                  Resource link.

                                  user

                                  +

                                  user

                                  Yes
                                  -
                                • Description for the user format +
                                • user
                                  - - @@ -134,7 +134,7 @@ - @@ -200,6 +200,39 @@

                                  Parameter

                                  Mandatory

                                  +

                                  Mandatory

                                  Type

                                  +

                                  Type

                                  Description

                                  ID of a user.

                                  links

                                  +

                                  links

                                  Yes
                                  +
                                • user.links +
                                  + + + + + + + + + + + + + + + + + +

                                  Parameter

                                  +

                                  Type

                                  +

                                  Description

                                  +

                                  self

                                  +

                                  string

                                  +

                                  Resource link.

                                  +

                                  previous

                                  +

                                  string

                                  +

                                  Previous resource link.

                                  +

                                  next

                                  +

                                  string

                                  +

                                  Next resource link.

                                  +
                                  +
                                • Example response
                                  {
     "users": [{
diff --git a/docs/iam/api-ref/en-us_topic_0057845653.html b/docs/iam/api-ref/en-us_topic_0057845653.html
index 076842c1f..949b50a08 100644
--- a/docs/iam/api-ref/en-us_topic_0057845653.html
+++ b/docs/iam/api-ref/en-us_topic_0057845653.html
@@ -61,33 +61,56 @@
                                -
                              • Parameters in the request body -

                                Parameter

                                +
                              • Parameters in the request body +
                                - - - - - - - - +

                                Parameter

                                Mandatory

                                +

                                Mandatory

                                Type

                                +

                                Type

                                Description

                                +

                                Description

                                original_password

                                +

                                user

                                Yes

                                +

                                Yes

                                String

                                +

                                Object

                                Original password of a user.

                                +

                                IAM user information.

                                password

                                +
                                +
                                +
                              • user +
                                + + + + + + - - - + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0064274720.html b/docs/iam/api-ref/en-us_topic_0064274720.html index ed00d95ee..949294d83 100644 --- a/docs/iam/api-ref/en-us_topic_0064274720.html +++ b/docs/iam/api-ref/en-us_topic_0064274720.html @@ -1,7 +1,7 @@

                                Obtaining an Agency Token

                                -

                                Function

                                This API is used to obtain an agency token. For example, after a trust relationship is established between account A (delegating party) and account B (delegated party), the delegated party B can use this API to obtain an agency token to manage A's resources that B is delegated to manage. However, B cannot use this agency token to manage its own resources. To do so, B needs to obtain a token by referring to Obtaining a User Token.

                                +

                                Function

                                This API is used to obtain an agency token. For example, after a trust relationship is established between account A (delegating party) and account B (delegated party), the delegated party B can use this API to obtain an agency token to manage A's resources that B is delegated to manage. However, B cannot use this agency token to manage its own resources. To do so, B needs to obtain a token by referring to Obtaining a User Token Through Password Authentication.

                                The validity period of a token is 24 hours. Cache the token to prevent frequent API calling. Ensure that the token is valid while you use it. Using a token that will soon expire may cause API calling failures. Obtaining a new token does not affect the validity of the existing token.

                                @@ -39,69 +39,65 @@

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                original_password

                                Yes

                                +

                                Yes

                                String

                                +

                                String

                                User password after the change. The password must meet the following requirements:
                                • Can contain 6 to 32 characters. The default minimum password length is 6 characters.
                                • Must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
                                • Cannot be the username or the username spelled backwards.
                                • Cannot contain the user's mobile phone number or email address.
                                • Must meet the requirements of the password policy configured on the account settings page.
                                +

                                Original password of a user.

                                +

                                password

                                +

                                Yes

                                +

                                String

                                +
                                User password after the change. The password must meet the following requirements:
                                • Can contain 6 to 32 characters. The default minimum password length is 6 characters.
                                • Must contain at least two of the following character types: uppercase letters, lowercase letters, digits, and special characters.
                                • Cannot be the username or the username spelled backwards.
                                • Cannot contain the user's mobile phone number or email address.
                                • Must meet the requirements of the password policy configured on the account settings page.
                                • Must be different from the old password.
                                -
                              • Parameters in the request body -

                                Parameter

                                +
                              • Parameters in the request body +
                                - - - - - - - + + +

                                Parameter

                                Mandatory

                                +

                                Mandatory

                                Type

                                +

                                Type

                                Description

                                +

                                Description

                                identity

                                +

                                auth

                                Yes

                                +

                                Yes

                                JSON object

                                +

                                Object

                                Authentication parameters, including: methods and assume_role.

                                -
                                "identity": {
+

                                Authentication information.

                                +
                                +
                                +
                              • auth +
                                + + + + + + + + + - - - - - - - - - - - - - - - - - - -

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                identity

                                +

                                Yes

                                +

                                Object

                                +

                                Authentication parameters, including: methods and assume_role.

                                +
                                "identity": {
       "methods": ["assume_role"],
       "assume_role": {

                                methods

                                +

                                scope

                                Yes

                                +

                                Yes

                                String Array

                                +

                                Object

                                Method for obtaining the token. Set this field to assume_role.

                                -

                                domain_name or domain_id

                                -

                                Yes

                                -

                                String

                                -

                                Domain name or domain ID of the delegating party A. Specify either domain_name or domain_id.

                                -

                                xrole_name

                                -

                                Yes

                                -

                                String

                                -

                                Name of the agency created by A.

                                -

                                scope

                                -

                                No

                                -

                                JSON object

                                -

                                Usage scope of the token. The value can be project or domain.

                                -
                                • If this field is set to project, the token can only be used to access resources in the project of a specified ID or name.
                                  "scope": {
+

                                Application scope of the token. The value can be project or domain.

                                +
                                • If this field is set to project, the token can only be used to access resources in the project of a specified ID or name.
                                  "scope": {
       "project": {
       "id": "0b95b78b67fa045b38104c12fb..."
       }
     }
                                  -
                                • If this field is set to domain, the token can be used to access all resources under the domain of a specified ID or name.
                                  "scope": {
+
                                • If this field is set to domain, the token can be used to access all resources under the domain of a specified ID or name.
                                  "scope": {
       "domain": {
       "id": "6b8eb224c76842e3ac2..."
       }
@@ -112,6 +108,175 @@
                                +
                              • auth.identity +
                                + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                methods

                                +

                                Yes

                                +

                                Array of strings

                                +

                                Method for obtaining the token. Set this field to assume_role.

                                +

                                assume_role

                                +

                                Yes

                                +

                                Object

                                +

                                Details about the agency and delegating party.

                                +
                                +
                                +
                              • auth.identity.assume_role +
                                + + + + + + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                domain_id

                                +

                                No

                                +

                                String

                                +

                                Domain ID of the delegating party A. Either domain_id or domain_name must be specified.

                                +

                                domain_name

                                +

                                No

                                +

                                String

                                +

                                Domain name of the delegating party A. Either domain_id or domain_name must be specified.

                                +

                                agency_name

                                +

                                Yes

                                +

                                String

                                +

                                Name of the agency created by the delegating party A.

                                +
                                +
                                +
                              • auth.scope +
                                + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                domain

                                +

                                No

                                +

                                Object

                                +

                                If this parameter is set to project, the token can only be used to access resources in the project of a specified ID or name.

                                +

                                project

                                +

                                No

                                +

                                Object

                                +

                                If this parameter is set to domain, the token can be used to access all resources under the domain of a specified ID or name.

                                +
                                +
                                +
                              • auth.scope.domain +
                                + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                id

                                +

                                No

                                +

                                String

                                +

                                Domain ID of the delegating party A. Either id or name must be specified.

                                +

                                name

                                +

                                No

                                +

                                String

                                +

                                Domain name of the delegating party A. Either id or name must be specified.

                                +
                                +
                                +
                              • auth.scope.project +
                                + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                id

                                +

                                No

                                +

                                String

                                +

                                Project ID of the delegating party A. Either id or name must be specified.

                                +

                                name

                                +

                                No

                                +

                                String

                                +

                                Project name of the delegating party A. Either id or name must be specified.

                                +
                                +
                                • Example request
                                  The following is a sample request for obtaining an agency token for domain A. The name of the agency is agencytest.
                                  {
@@ -157,142 +322,62 @@
                                -
                              • Token format description -
                                - - - - @@ -72,69 +72,147 @@

                                Parameter

                                +
                              • Parameters in the response body +
                                - - - - - - - - +

                                Parameter

                                Mandatory

                                +

                                Type

                                Type

                                -

                                Description

                                +

                                Description

                                methods

                                +

                                token

                                Yes

                                +

                                Object

                                Json Array

                                -

                                Method for obtaining the token.

                                +

                                Token information list.

                                expires_at

                                +
                                +
                                +
                              • token +
                                + + + + + - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - + + + + + + + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                methods

                                Yes

                                +

                                Array of strings

                                String

                                -

                                Expiration date of the token.

                                +

                                Method for obtaining the token.

                                issued_at

                                +

                                expires_at

                                Yes

                                +

                                String

                                String

                                -

                                Time when the token was issued.

                                +

                                Time when the token will expire.

                                user

                                +

                                issued_at

                                Yes

                                +

                                String

                                JSON object

                                -

                                Detailed information about the delegating party. Example:

                                -
                                "user": { 
-      "name": "user A", 
-      "id": "userid", 
-      "password_expires_at":"2016-11-06T15:32:17.000000",
-      "domain": { 
-         "name": "domain A",
-         "id": "domainid"
-       } 
-    }
                                -
                                • user.name: Username of the delegating party.
                                • user.id: User ID of the delegating party.
                                • domain.name: Name of the domain which the delegating party belongs to.
                                • domain.id: ID of the domain which the delegating party belongs to.
                                • password_expires_at: Time when the password will expire. null indicates that the password will not expire. This parameter is optional.
                                +

                                Time when the token was issued.

                                domain

                                +

                                assumed_by

                                No

                                +

                                Object

                                JSON object

                                -

                                This parameter is returned only when the scope parameter in the request body has been set to domain.

                                -

                                Example:

                                -
                                "domain": { 
-      "name" : "domain A",     
-      "id" : "domainid"
-}
                                -
                                • domain.name: Name of the domain which the delegating party belongs to.
                                • domain.id: ID of the domain which the delegating party belongs to.
                                -

                                project

                                -

                                No

                                -

                                JSON object

                                -

                                This parameter is returned only when the scope parameter in the request body has been set to project.

                                -

                                Example:

                                -
                                "project": { 
-      "name": "projectname", 
-      "id": "projectid"
-}
                                -
                                • project.name: Name of a project.
                                • project.id: ID of the project.
                                -

                                catalog

                                -

                                No

                                -

                                Json Array

                                -

                                Endpoint information.

                                -

                                Example:

                                -
                                "catalog": [{
-    "type": "identity",
-    "id": "1331e5cff2a74d76b03da1225910e31d",
-    "name": "iam",
-    "endpoints": [{
-        "url": "https://sample.domain.com/v3",
-        "region": "*",
-        "region_id": "*",
-        "interface": "public",
-        "id": "089d4a381d574308a703122d3ae738e9"
-    }]
-}]
                                -

                                roles

                                -

                                Yes

                                -

                                JSON object

                                -

                                Permissions information of the token.

                                -

                                Example:

                                -
                                "roles" : [{ 
-     "name" : "role1", 
-     "id" : "roleid1" 
-     }, { 
-     "name" : "role2", 
-     "id" : "roleid2" 
-     } 
-   ]
                                -

                                assumed_by

                                -

                                Yes

                                -

                                JSON object

                                -

                                Detailed information about the delegated party. Example:

                                -

                                Example:

                                -
                                "assumed_by": {
+

                                Detailed information about the delegated party.

                                +

                                Example:

                                +
                                "assumed_by": {
       "user": {
         "domain": {
           "name": "domain B",
@@ -302,7 +387,428 @@
         "id": "ff5ea657f1dd45c4b8f398cab..."
       }
     }
                                -
                                • domain.name: Name of the domain which the delegated party belongs to.
                                • user.name: Username of the delegated party.
                                +
                                • domain.name: Name of the domain to which the delegated party belongs.
                                • user.name: Username of the delegated party.
                                +

                                catalog

                                +

                                Array of objects

                                +

                                Endpoint information.

                                +

                                Example:

                                +
                                "catalog": [{
+    "type": "identity",
+    "id": "1331e5cff2a74d76b03da1225910e31d",
+    "name": "iam",
+    "endpoints": [{
+        "url": "https://sample.domain.com/v3",
+        "region": "*",
+        "region_id": "*",
+        "interface": "public",
+        "id": "089d4a381d574308a703122d3ae738e9"
+    }]
+}]
                                +

                                domain

                                +

                                Object

                                +

                                This parameter is returned only when the scope parameter in the request body has been set to domain.

                                +

                                Example:

                                +
                                "domain": { 
+      "name" : "domain A",     
+      "id" : "domainid"
+}
                                +
                                • domain.name: Name of the domain to which the delegating party belongs.
                                • domain.id: ID of the domain to which the delegating party belongs.
                                +

                                project

                                +

                                Object

                                +

                                This parameter is returned only when the scope parameter in the request body has been set to project.

                                +

                                Example:

                                +
                                "project": { 
+      "name": "projectname", 
+      "id": "projectid"
+}
                                +
                                • project.name: project name.
                                • project.id: project ID.
                                +

                                roles

                                +

                                Array of objects

                                +

                                Permissions information of the token.

                                +

                                Example:

                                +
                                "roles" : [{ 
+     "name" : "role1", 
+     "id" : "roleid1" 
+     }, { 
+     "name" : "role2", 
+     "id" : "roleid2" 
+     } 
+   ]
                                +

                                user

                                +

                                Object

                                +

                                Detailed information about the delegating party.

                                +
                                "user": { 
+      "name": "user A", 
+      "id": "userid", 
+      "password_expires_at":"2016-11-06T15:32:17.000000",
+      "domain": { 
+         "name": "domain A",
+         "id": "domainid"
+       } 
+    }
                                +
                                • user.name: Username of the delegating party.
                                • user.id: User ID of the delegating party.
                                • domain.name: Name of the domain to which the delegating party belongs.
                                • domain.id: ID of the domain to which the delegating party belongs.
                                • (Optional) password_expires_at: UTC time when the password will expire. null indicates that the password will not expire.
                                +
                                +
                                + +
                                + + + + + + + + + +
                                Table 1 token.assumed_by

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                user

                                +

                                Object

                                +

                                Information about an IAM user of delegated party B.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + + + + + + + + + +
                                Table 2 token.assumed_by.user

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                IAM username.

                                +

                                id

                                +

                                String

                                +

                                IAM user ID.

                                +

                                domain

                                +

                                Object

                                +

                                Domain information about delegated party B.

                                +

                                password_expires_at

                                +

                                String

                                +

                                UTC time when the password of the IAM user will expire. If this parameter is null, the password will never expire.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + +
                                Table 3 token.assumed_by.user.domain

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                Domain name of delegated party B.

                                +

                                id

                                +

                                String

                                +

                                Domain ID of delegated party B.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + + + + + + + + + +
                                Table 4 token.catalog

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                endpoints

                                +

                                Array of objects

                                +

                                Endpoint information.

                                +

                                id

                                +

                                String

                                +

                                Service ID.

                                +

                                name

                                +

                                String

                                +

                                Service name.

                                +

                                type

                                +

                                String

                                +

                                Type of the service to which the API belongs.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + + + + + + + + + + + + + +
                                Table 5 token.catalog.endpoints

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                id

                                +

                                String

                                +

                                Endpoint ID.

                                +

                                interface

                                +

                                String

                                +

                                Visibility of the API. public indicates that the API is available for public access.

                                +

                                region

                                +

                                String

                                +

                                Region to which the endpoint belongs.

                                +

                                region_id

                                +

                                String

                                +

                                Region ID.

                                +

                                url

                                +

                                String

                                +

                                Endpoint URL.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + +
                                Table 6 token.domain

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                Domain name of the delegating party A.

                                +

                                id

                                +

                                String

                                +

                                Domain ID of the delegating party A.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + + + + + +
                                Table 7 token.project

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                Project name of delegating party A.

                                +

                                id

                                +

                                String

                                +

                                Project ID of delegating party A.

                                +

                                domain

                                +

                                Object

                                +

                                Domain information about delegating party A.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + +
                                Table 8 token.project.domain

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                Domain name of the delegating party A.

                                +

                                id

                                +

                                String

                                +

                                Domain ID of the delegating party A.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + +
                                Table 9 token.roles

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                Permission name.

                                +

                                id

                                +

                                String

                                +

                                Permission ID. The default value is 0, which does not correspond to any permission.

                                +
                                +
                                + +
                                + + + + + + + + + + + + + + + + + +
                                Table 10 token.user

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                name

                                +

                                String

                                +

                                Domain name or agency name of delegating party A.

                                +

                                id

                                +

                                String

                                +

                                Agency ID.

                                +

                                domain

                                +

                                Object

                                +

                                Domain information about delegating party A.

                                +
                                +
                                + +
                                + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0066154565.html b/docs/iam/api-ref/en-us_topic_0066154565.html index ccb3b2a45..635d82c62 100644 --- a/docs/iam/api-ref/en-us_topic_0066154565.html +++ b/docs/iam/api-ref/en-us_topic_0066154565.html @@ -37,8 +37,31 @@
                                Table 11 token.user.domain

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                id

                                +

                                String

                                +

                                Domain ID of the delegating party A.

                                +

                                name

                                +

                                String

                                +

                                Domain name of the delegating party A.
                                +
                              • Parameters in the request body +
                                + + + + + + + + + + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                project

                                +

                                Yes

                                +

                                Object

                                +

                                Project information.

                                +
                                +
                                • -
                                • Parameters in the request body +
                                  • project

                                    Parameter

                                    Mandatory

                                    @@ -93,7 +116,114 @@
                                    • Example request
                                      curl -i -k -H "X-Auth-Token:$token" -H 'Content-Type:application/json;charset=utf8' -X POST -d '{"project":{"domain_id":"acf2ffabba974fae8f30378ffde2c...","name":"region_test1"}}' https://sample.domain.com/v3/projects
                                    -

                                    Response Parameters

                                    Example response

                                    +

                                    Response Parameters

                                    • Parameters in the response body +
                                      + + + + + + + + + +

                                      Parameter

                                      +

                                      Type

                                      +

                                      Description

                                      +

                                      project

                                      +

                                      Object

                                      +

                                      Project information.

                                      +
                                      +
                                      +
                                    • project +
                                      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

                                      Parameter

                                      +

                                      Type

                                      +

                                      Description

                                      +

                                      is_domain

                                      +

                                      Boolean

                                      +

                                      false.

                                      +

                                      description

                                      +

                                      String

                                      +

                                      Description of the project.

                                      +

                                      links

                                      +

                                      Object

                                      +

                                      Project resource link.

                                      +

                                      enabled

                                      +

                                      Boolean

                                      +

                                      Whether a project is available.

                                      +

                                      id

                                      +

                                      String

                                      +

                                      Project ID.

                                      +

                                      parent_id

                                      +

                                      String

                                      +

                                      Project ID corresponding to the region.

                                      +

                                      domain_id

                                      +

                                      String

                                      +

                                      Account ID of the project.

                                      +

                                      name

                                      +

                                      String

                                      +

                                      Project name.

                                      +
                                      +
                                      +
                                    • project.links +
                                      + + + + + + + + + +

                                      Parameter

                                      +

                                      Type

                                      +

                                      Description

                                      +

                                      self

                                      +

                                      String

                                      +

                                      Resource link.

                                      +
                                      +
                                      +
                                    +

                                    Example response

                                    {
     "project": {
         "is_domain": false,
diff --git a/docs/iam/api-ref/en-us_topic_0066154566.html b/docs/iam/api-ref/en-us_topic_0066154566.html
index a34f2c806..b3c567877 100644
--- a/docs/iam/api-ref/en-us_topic_0066154566.html
+++ b/docs/iam/api-ref/en-us_topic_0066154566.html
@@ -63,8 +63,31 @@
                                    +
                                  • Parameters in the request body +
                                    + + + + + + + + + + + +

                                    Parameter

                                    +

                                    Mandatory

                                    +

                                    Type

                                    +

                                    Description

                                    +

                                    project

                                    +

                                    Yes

                                    +

                                    Object

                                    +

                                    Project information.

                                    +
                                    +
                                  -
                                  • Parameters in the request body +
                                    • project
                                      - @@ -101,7 +125,124 @@
                                      • Example Request
                                        curl -i -k -H "X-Auth-Token:$token" -H 'Content-Type:application/json;charset=utf8' -X PATCH -d '{"project":{"name":"region_test2","description":"test_project_desc"}}' https://sample.domain.com/v3/projects/23da5961c8214f5caf701c27d9703959
                                      -

                                      Response Parameters

                                      Example Response

                                      +

                                      Response Parameters

                                      • Parameters in the response body +

                                      Parameter

                                      Mandatory

                                      @@ -82,7 +105,8 @@

                                      String

                                      Project name, which must start with the ID of an existing region and be less than or equal to 64 characters.

                                      -

                                      Example: {region}_test2

                                      +

                                      Example: {region}_test2

                                      +

                                      Either name or description must be specified.

                                      description

                                      @@ -91,7 +115,7 @@

                                      String

                                      Project description, which can contain a maximum of 255 characters.

                                      +

                                      Project description, which can contain a maximum of 255 characters. Either name or description must be specified.
                                      + + + + + + + + + +

                                      Parameter

                                      +

                                      Type

                                      +

                                      Description

                                      +

                                      project

                                      +

                                      Object

                                      +

                                      Project information.

                                      +
                                      +
                                      +
                                    +
                                    • project +
                                      + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

                                      Parameter

                                      +

                                      Type

                                      +

                                      Description

                                      +

                                      is_domain

                                      +

                                      Boolean

                                      +

                                      false.

                                      +

                                      description

                                      +

                                      String

                                      +

                                      Description of the project.

                                      +

                                      extra

                                      +

                                      Object

                                      +

                                      Additional information about the project.

                                      +

                                      links

                                      +

                                      Object

                                      +

                                      Project resource link.

                                      +

                                      enabled

                                      +

                                      Boolean

                                      +

                                      Whether a project is available.

                                      +

                                      id

                                      +

                                      String

                                      +

                                      Project ID.

                                      +

                                      parent_id

                                      +

                                      String

                                      +

                                      Project ID corresponding to the region.

                                      +

                                      domain_id

                                      +

                                      String

                                      +

                                      Account ID of the project.

                                      +

                                      name

                                      +

                                      String

                                      +

                                      Project name.

                                      +
                                      +
                                      +
                                    +

                                    • project.links

                                      + +
                                      + + + + + + + + + +

                                      Parameter

                                      +

                                      Type

                                      +

                                      Description

                                      +

                                      self

                                      +

                                      String

                                      +

                                      Resource link.

                                      +
                                      +
                                      +
                                    +

                                    Example Response

                                    {
     "project": {
         "is_domain": false,
diff --git a/docs/iam/api-ref/en-us_topic_0066154567.html b/docs/iam/api-ref/en-us_topic_0066154567.html
index e9dcc3b93..69a86e40e 100644
--- a/docs/iam/api-ref/en-us_topic_0066154567.html
+++ b/docs/iam/api-ref/en-us_topic_0066154567.html
@@ -66,7 +66,129 @@
 
                                    • Example request
                                      Obtaining information about the project whose ID is project_id=619d3e78f61b4be68bc5aa0b59edcf7b
                                      
 
                                      curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X GET https://sample.domain.com/v3/projects/619d3e78f61b4be68bc5aa0b59edcf7b
                                      
 
                                    
-
                                    Response Parameters
                                    • Example response
                                    
+
                                    Response Parameters
                                    • Parameters in the response body
+
                                      
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      project
                                      
+
                                      Object
                                      
+
                                      Project information.
                                      
+
                                      
+
                                      
+
                                    • project
+
                                      
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      is_domain
                                      
+
                                      Boolean
                                      
+
                                      false.
                                      
+
                                      description
                                      
+
                                      String
                                      
+
                                      Description of the project.
                                      
+
                                      links
                                      
+
                                      Object
                                      
+
                                      Project resource link.
                                      
+
                                      enabled
                                      
+
                                      Boolean
                                      
+
                                      Whether a project is available.
                                      
+
                                      id
                                      
+
                                      String
                                      
+
                                      Project ID.
                                      
+
                                      parent_id
                                      
+
                                      String
                                      
+
                                      ID of the specified project if you query a project created by you.
                                      
+
                                      Account ID if you query a specified system project.
                                      
+
                                      domain_id
                                      
+
                                      String
                                      
+
                                      Account ID of the project.
                                      
+
                                      name
                                      
+
                                      String
                                      
+
                                      Project name.
                                      
+
                                      
+
                                      
+
                                    • project.links
+
                                      
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      self
                                      
+
                                      String
                                      
+
                                      Resource link.
                                      
+
                                      previous
                                      
+
                                      String
                                      
+
                                      Previous resource link. If the previous resource link is unavailable, this parameter is set to null.
                                      
+
                                      next
                                      
+
                                      String
                                      
+
                                      Next resource link. If the next resource link is unavailable, this parameter is set to null.
                                      
+
                                      
+
                                      
+
                                    
+
                                    • Example response
                                    
 
                                    {
   "project": {
     "is_domain": false,
diff --git a/docs/iam/api-ref/en-us_topic_0067148043.html b/docs/iam/api-ref/en-us_topic_0067148043.html
index 8a3e30c2c..bf65425e0 100644
--- a/docs/iam/api-ref/en-us_topic_0067148043.html
+++ b/docs/iam/api-ref/en-us_topic_0067148043.html
@@ -51,20 +51,20 @@

                                links

                                +

                                links

                                Yes

                                Dict

                                +

                                Object

                                Region resource link.

                                regions

                                +

                                regions

                                Yes

                                List

                                +

                                Array of objects

                                Region list.
                                -
                              • Description for the regions format -

                                Parameter

                                +
                              • regions +
                                - - - - - - - - - - - - - - - - - - - - - - - - - - - + +

                                Parameter

                                Mandatory

                                +

                                Type

                                Type

                                -

                                Description

                                +

                                Description

                                description

                                +

                                description

                                Yes

                                +

                                String

                                String

                                -

                                Region description.

                                +

                                Region description.

                                parent_region_id

                                +

                                parent_region_id

                                Yes

                                +

                                String

                                String

                                -

                                Parent region ID of a region.

                                +

                                Parent region ID of a region.

                                id

                                +

                                id

                                Yes

                                +

                                String

                                String

                                -

                                Region ID.

                                +

                                Region ID.

                                locales

                                +

                                locales

                                Yes

                                +

                                Object

                                Dict

                                -

                                Region name.

                                +

                                Region name.

                                type

                                +

                                type

                                No

                                +

                                String

                                String

                                -

                                Region type.

                                +

                                Region type.

                                links

                                +

                                links

                                Yes

                                +

                                Object

                                Dict

                                +

                                Region resource link.

                                Region resource link.

                                +
                                +
                                +
                              • links +
                                + + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                self

                                +

                                String

                                +

                                Resource link.

                                +

                                previous

                                +

                                String

                                +

                                Previous resource link. If the previous resource link is unavailable, this parameter is set to null.

                                +

                                next

                                +

                                String

                                +

                                Next resource link. If the next resource link is unavailable, this parameter is set to null.

                                +
                                +
                                +
                              • regions.links +
                                + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                self

                                +

                                String

                                +

                                Resource link.

                                +
                                +
                                +
                              • regions.locales +
                                + + + + + + + + + + + + + + + + + + + diff --git a/docs/iam/api-ref/en-us_topic_0067148044.html b/docs/iam/api-ref/en-us_topic_0067148044.html index 78d2b4123..ab07bd598 100644 --- a/docs/iam/api-ref/en-us_topic_0067148044.html +++ b/docs/iam/api-ref/en-us_topic_0067148044.html @@ -33,7 +33,7 @@

                                Request Parameters

                                • Parameters in the request header

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                en-us

                                +

                                String

                                +

                                Region name in English.

                                +

                                pt-br

                                +

                                String

                                +

                                Region name in Portuguese.

                                +

                                es-us

                                +

                                String

                                +

                                Region name in Spanish (Latin American).

                                +

                                es-es

                                +

                                String

                                +

                                Region name in Spanish (Spain).
                                - @@ -65,7 +65,145 @@
                              • Example request
                                curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X GET https://sample.domain.com/v3/regions/test-pusb999999991
                                • -

                                Response Parameters

                                Example response
                                {
+
                                Response Parameters
                                • Response body parameters
+

                                Parameter

                                Mandatory

                                +

                                Mandatory

                                Type
                                + + + + + + + + + + + +

                                Parameter

                                +

                                Mandatory

                                +

                                Type

                                +

                                Description

                                +

                                region

                                +

                                Yes

                                +

                                Object

                                +

                                Region information.

                                +
                                +
                                +
                              • region +
                                + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                description

                                +

                                String

                                +

                                Description of the region.

                                +

                                parent_region_id

                                +

                                String

                                +

                                An embedded field, which has no specific meanings. The value null is returned.

                                +

                                links

                                +

                                Object

                                +

                                Region resource link.

                                +

                                locales

                                +

                                Object

                                +

                                Region name. Not all fields in the object are returned, which is determined by the registered region.

                                +

                                id

                                +

                                String

                                +

                                Region ID.

                                +

                                type

                                +

                                String

                                +

                                Region type.

                                +
                                +
                                +
                              • region.links +
                                + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                self

                                +

                                String

                                +

                                Resource link.

                                +
                                +
                                +
                              • region.locales +
                                + + + + + + + + + + + + + + + + + + + + + +

                                Parameter

                                +

                                Type

                                +

                                Description

                                +

                                en-us

                                +

                                String

                                +

                                Region name in English.

                                +

                                pt-br

                                +

                                String

                                +

                                Region name in Portuguese.

                                +

                                es-us

                                +

                                String

                                +

                                Region name in Spanish (Latin American).

                                +

                                es-es

                                +

                                String

                                +

                                Region name in Spanish (Spain).

                                +
                                +
                                +
                                +
                                • +
                                Example response
                                {
     "region": {
         "parent_region_id": null,
         "description": "",
diff --git a/docs/iam/api-ref/en-us_topic_0067148045.html b/docs/iam/api-ref/en-us_topic_0067148045.html
index 180c8dbeb..153c1e79c 100644
--- a/docs/iam/api-ref/en-us_topic_0067148045.html
+++ b/docs/iam/api-ref/en-us_topic_0067148045.html
@@ -5,7 +5,7 @@

                                URI

                                • URI format

                                  GET /v3/services/{service_id}

                                -
                                • URI parameters +
                                  • Parameter description

                                    Parameter

                                    Mandatory

                                    @@ -65,7 +65,114 @@
                                  • Example request
                                    curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X GET https://sample.domain.com/v3/services/5a4ed456d228428c800ed2b67b4363a7
                                    • -

                                    Response Parameters

                                    Example response (successful response)
                                    {
+
                                    Response Parameters
                                    • Parameters in the response body
+
                                      
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      service
                                      
+
                                      Object
                                      
+
                                      Service information.
                                      
+
                                      
+
                                      
+
                                    • service
+
                                      
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      name
                                      
+
                                      String
                                      
+
                                      Service name.
                                      
+
                                      description
                                      
+
                                      String
                                      
+
                                      Description of the service. This parameter is not returned when no service description is registered.
                                      
+
                                      links
                                      
+
                                      Object
                                      
+
                                      Service resource link.
                                      
+
                                      id
                                      
+
                                      String
                                      
+
                                      Service ID.
                                      
+
                                      type
                                      
+
                                      String
                                      
+
                                      Service type.
                                      
+
                                      enabled
                                      
+
                                      Boolean
                                      
+
                                      Whether a service is available.
                                      
+
                                      
+
                                      
+
                                    • service.links
+
                                      
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      self
                                      
+
                                      String
                                      
+
                                      Resource link.
                                      
+
                                      previous
                                      
+
                                      String
                                      
+
                                      Previous resource link. If the previous resource link is unavailable, this parameter is set to null.
                                      
+
                                      next
                                      
+
                                      String
                                      
+
                                      Next resource link. If the next resource link is unavailable, this parameter is set to null.
                                      
+
                                      
+
                                      
+
                                    
+
                                    Example response (successful response)
                                    {
     "service": {
         "enabled": true,
         "type": "compute",
diff --git a/docs/iam/api-ref/en-us_topic_0067148046.html b/docs/iam/api-ref/en-us_topic_0067148046.html
index 2369fc041..78dc37e6b 100644
--- a/docs/iam/api-ref/en-us_topic_0067148046.html
+++ b/docs/iam/api-ref/en-us_topic_0067148046.html
@@ -33,7 +33,7 @@
 
                                    Request Parameters
                                    • Parameters in the request header
 
                                      
-
@@ -65,7 +65,132 @@
 
                                    • Example request
                                      curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X GET https://sample.domain.com/v3/endpoints/62ea3602f8ee42b1825956473f5295a8
                                      
 
                                      • 
-
                                      Response Parameters
                                      	 Example response (successful request)
                                      {
+
                                      Response Parameters
                                      • Parameters in the response body
+
                                      Parameter
                                      
 
                                      Mandatory
                                      
+
                                      Mandatory
                                      
                                       		
 
                                      Type
                                      
                                       		
 
                                      
+
+
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Mandatory
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      endpoint
                                      
+
                                      Yes
                                      
+
                                      Object
                                      
+
                                      List of endpoints.
                                      
+
                                      
+
                                      
+
                                    • endpoint
+
                                      
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      service_id
                                      
+
                                      String
                                      
+
                                      ID of the service to which an endpoint belongs.
                                      
+
                                      region_id
                                      
+
                                      String
                                      
+
                                      ID of the region to which the endpoint belongs.
                                      
+
                                      links
                                      
+
                                      Object
                                      
+
                                      Endpoint resource link information.
                                      
+
                                      id
                                      
+
                                      String
                                      
+
                                      Endpoint ID.
                                      
+
                                      interface
                                      
+
                                      String
                                      
+
                                      Plane to which an endpoint belongs.
                                      
+
                                      region
                                      
+
                                      String
                                      
+
                                      Region to which the endpoint belongs.
                                      
+
                                      url
                                      
+
                                      String
                                      
+
                                      Endpoint URL.
                                      
+
                                      enabled
                                      
+
                                      Boolean
                                      
+
                                      Whether an endpoint is available.
                                      
+
                                      
+
                                      
+
                                    • endpoints.links
+
                                      
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                      Parameter
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      self
                                      
+
                                      String
                                      
+
                                      Resource link.
                                      
+
                                      next
                                      
+
                                      String
                                      
+
                                      Next resource link. If the next resource link is unavailable, this parameter is set to null.
                                      
+
                                      previous
                                      
+
                                      String
                                      
+
                                      Previous resource link. If the previous resource link is unavailable, this parameter is set to null.
                                      
+
                                      
+
                                      
+
                                    
+
                                    	 Example response (successful request)
                                    {
     "endpoint": {
         "region_id": "region_id",
         "links": {
diff --git a/docs/iam/api-ref/en-us_topic_0074171149.html b/docs/iam/api-ref/en-us_topic_0074171149.html
index 789d0092f..94a12b10a 100644
--- a/docs/iam/api-ref/en-us_topic_0074171149.html
+++ b/docs/iam/api-ref/en-us_topic_0074171149.html
@@ -31,9 +31,9 @@
 
 
                                    
 
                                    Request Parameters
                                    • Parameters in the request header
-
                                      Parameter
                                      
+
                                      
-
@@ -62,24 +62,47 @@
 
                                      Parameter
                                      
 
                                      Mandatory
                                      
+
                                      Mandatory
                                      
                                       		
 
                                      Type
                                      
                                       		
 
                                      
 
                                      
-
                                    • Parameters in the request body
-
                                      Parameter
                                      
+
                                    • Parameters in the request body
+
                                      
-
-
-
-
-
-
-
+
+
+
                                      Parameter
                                      
 
                                      Mandatory
                                      
+
                                      Mandatory
                                      
 
                                      Type
                                      
+
                                      Type
                                      
 
                                      Description
                                      
+
                                      Description
                                      
                                       		
 
                                      
 
                                      status
                                      
+
                                      project
                                      
 
                                      Yes
                                      
+
                                      Yes
                                      
 
                                      String
                                      
+
                                      Object
                                      
 
                                      Project status. The value can be suspended or normal.
                                      
+
                                      Project information.
                                      
+
                                      
+
                                      
+
                                    • project
+
                                      
+
+
+
+
+
+
+
+
+
diff --git a/docs/iam/api-ref/en-us_topic_0079466135.html b/docs/iam/api-ref/en-us_topic_0079466135.html
index baa676da8..e0ea43c3c 100644
--- a/docs/iam/api-ref/en-us_topic_0079466135.html
+++ b/docs/iam/api-ref/en-us_topic_0079466135.html
@@ -31,9 +31,9 @@
 
                                      Request Parameters
                                      • Parameters in the request header
-
                                      Parameter
                                      
+
                                      Mandatory
                                      
+
                                      Type
                                      
+
                                      Description
                                      
+
                                      status
                                      
+
                                      Yes
                                      
+
                                      String
                                      
+
                                      Project status. The value can be suspended or normal.
                                      
                                       		
 
                                      
                                       
 
 
                                      Parameter
                                      
+
                                      
-
@@ -66,9 +66,9 @@
 
                                      Response Parameters
                                      • Parameters in the response body
-
                                      Parameter
                                      
 
                                      Mandatory
                                      
+
                                      Mandatory
                                      
                                       		
 
                                      Type
                                      
                                       		
 
 
                                      Parameter
                                      
+
                                      
-
@@ -76,7 +76,7 @@
 
-
@@ -89,10 +89,10 @@
 
                                      Parameter
                                      
 
                                      Mandatory
                                      
+
                                      Mandatory
                                      
                                       		
 
                                      Type
                                      
                                       		
 
                                      
 
                                      project
                                      
+
                                      project
                                      
                                       		
 
                                      Yes
                                      
 
                                      
 
                                      
 
-
                                      • Description for the project format
-
                                        Parameter
                                        
+
                                        • project
+
                                          
-
@@ -194,12 +194,12 @@
     "domain_id": "398998b5392f4150ad48fe456d6de4f1", 
     "name": "{region_id}_test1", 
     "status": "suspended", 
-    "suspended_time": "2017-08-17T02:50:23.000000" 
+    
   } 
 }
-
                                          Status Codes
                                          
+
                                          Status Codes
                                          
 
                                          Parameter
                                          
 
                                          Mandatory
                                          
+
                                          Mandatory
                                          
                                           		
 
                                          Type
                                          
                                           		
 
 
                                          Status Code
                                          
                                           		
 
                                          Description
                                          
diff --git a/docs/iam/api-ref/en-us_topic_0079467614.html b/docs/iam/api-ref/en-us_topic_0079467614.html
index ffa509d11..496fe69ad 100644
--- a/docs/iam/api-ref/en-us_topic_0079467614.html
+++ b/docs/iam/api-ref/en-us_topic_0079467614.html
@@ -3,7 +3,7 @@
 
                                          Querying an Agency List Based on the Specified Conditions
                                          
 
                                          Function
                                          This API is used to query an agency list based on the specified conditions.
                                          
 
                                          
-
                                          URI
                                          • URI format
                                            GET /v3.0/OS-AGENCY/agencies{?domain_id,name,trust_domain_id}
                                            
+
                                            URI
                                            • URI format
                                              GET /v3.0/OS-AGENCY/agencies
                                              
 
                                            
 
                                            • Query parameters
 
                                              Parameter
                                              
@@ -49,7 +49,7 @@
 
 
 
                                              Request Parameters
                                              • Parameters in the request header
-
                                                Parameter
                                                
+
                                                
@@ -85,7 +85,7 @@
 
                                                Response Parameters
                                                • Parameters in the response body
-
                                                Parameter
                                                
                                                 		
 
                                                Mandatory
                                                
                                                 		
 
 
                                                Parameter
                                                
+
                                                
@@ -95,7 +95,7 @@
 
-
@@ -107,8 +107,8 @@
 
                                                Parameter
                                                
                                                 		
 
                                                Mandatory
                                                
                                                 		
 
                                                
 
                                                agencies
                                                
+
                                                agencies
                                                
                                                 		
 
                                                Yes
                                                
 
                                                
 
                                                
 
                                                
-
                                              • Description for the agency format
-
                                                Parameter
                                                
+
                                              • agencies
+
                                                
diff --git a/docs/iam/api-ref/en-us_topic_0079467615.html b/docs/iam/api-ref/en-us_topic_0079467615.html
index 6f71c3ce0..8ce5f40c3 100644
--- a/docs/iam/api-ref/en-us_topic_0079467615.html
+++ b/docs/iam/api-ref/en-us_topic_0079467615.html
@@ -31,7 +31,7 @@
 
                                                Request Parameters
                                                • Parameters in the request header
-
                                                Parameter
                                                
                                                 		
 
                                                Mandatory
                                                
                                                 		
 
 
                                                Parameter
                                                
+
                                                
@@ -67,7 +67,7 @@
 
                                                Response Parameters
                                                • Parameters in the response body
-
                                                Parameter
                                                
                                                 		
 
                                                Mandatory
                                                
                                                 		
 
 
                                                Parameter
                                                
+
                                                
@@ -77,7 +77,7 @@
 
-
@@ -89,8 +89,8 @@
 
                                                Parameter
                                                
                                                 		
 
                                                Mandatory
                                                
                                                 		
 
                                                
 
                                                agency
                                                
+
                                                agency
                                                
                                                 		
 
                                                Yes
                                                
 
                                                
 
                                                
 
                                                
-
                                              • Description for the agency format
-
                                                Parameter
                                                
+
                                              • agency
+
                                                
diff --git a/docs/iam/api-ref/en-us_topic_0079467617.html b/docs/iam/api-ref/en-us_topic_0079467617.html
index 65a9dd4e5..cdfd3d188 100644
--- a/docs/iam/api-ref/en-us_topic_0079467617.html
+++ b/docs/iam/api-ref/en-us_topic_0079467617.html
@@ -49,62 +49,87 @@
 
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
                                                Parameter
                                                
                                                 		
 
                                                Mandatory
                                                
                                                 		
 
                                                
 
                                                name
                                                
+
                                                agency
                                                
                                                 		
 
                                                Yes
                                                
 
                                                String
                                                
+
                                                Object
                                                
 
                                                Name of an agency. The length is less than or equal to 64 characters.
                                                
-
                                                domain_id
                                                
-
                                                Yes
                                                
-
                                                String
                                                
-
                                                ID of the current domain.
                                                
-
                                                trust_domain_id
                                                
-
                                                At least one
                                                
-
                                                String
                                                
-
                                                ID of the delegated domain.
                                                
-
                                                trust_domain_name
                                                
-
                                                String
                                                
-
                                                Name of the delegated domain.
                                                
-
                                                description
                                                
-
                                                No
                                                
-
                                                String
                                                
-
                                                Description of an agency. The length is less than or equal to 255 characters.
                                                
-
                                                duration
                                                
-
                                                No
                                                
-
                                                String
                                                
-
                                                Validity period of the agency. The default value is null, which means that the agency will never expire. If this parameter is set to FOREVER, the validity of the agency is unlimited. If it is set to ONEDAY, the agency is valid only for one day.
                                                
+
                                                Agency information.
                                                
                                                 		
 
                                                
                                                 
 
                                                
 
                                                
-
                                                 
                                                At least one of trust_domain_id and trust_domain_name must exist in the request body. If both of them exist, trust_domain_name takes precedence.
                                                
+
                                              • agency
+
                                                
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                Parameter
                                                
+
                                                Mandatory
                                                
+
                                                Type
                                                
+
                                                Description
                                                
+
                                                name
                                                
+
                                                Yes
                                                
+
                                                String
                                                
+
                                                Name of an agency. The length is less than or equal to 64 characters.
                                                
+
                                                domain_id
                                                
+
                                                Yes
                                                
+
                                                String
                                                
+
                                                ID of the current domain.
                                                
+
                                                trust_domain_id
                                                
+
                                                No
                                                
+
                                                String
                                                
+
                                                ID of the delegated domain. Either trust_domain_id or trust_domain_name must be specified. If both of them are specified, trust_domain_name takes precedence.
                                                
+
                                                trust_domain_name
                                                
+
                                                No
                                                
+
                                                String
                                                
+
                                                Name of the delegated domain. Either trust_domain_id or trust_domain_name must be specified. If both of them are specified, trust_domain_name takes precedence.
                                                
+
                                                description
                                                
+
                                                No
                                                
+
                                                String
                                                
+
                                                Description of an agency, which can contain up to 255 characters.
                                                
+
                                                duration
                                                
+
                                                No
                                                
+
                                                String
                                                
+
                                                Validity period of the agency. The default value is null, which means that the agency will never expire. If this parameter is set to FOREVER, the validity of the agency is unlimited. If it is set to ONEDAY, the agency is valid only for one day.
                                                
+
                                                
+
                                                
+
                                                 
                                                At least one of trust_domain_id and trust_domain_name is specified in the request body. If both are specified, trust_domain_name will be used.
                                                
 
                                                
 
                                                • 
 
                                                • Example request
                                                  curl -i -k -H "X-Auth-Token:$token" -H 'Content-Type:application/json;charset=utf8' -X POST -d'{"agency" : {"name" : "exampleagency","domain_id" : "0ae9c6993a2e47bb8c4c7a9bb8278d61","trust_domain_id" : "35d7706cedbc49a18df0783d00269c20","trust_domain_name" : "exampledomain","description" : "testsfdas"}}' https://sample.domain.com/v3.0/OS-AGENCY/agencies
                                                  
@@ -113,15 +138,15 @@
 
                                                  Response Parameters
                                                  • Parameters in the response body
 
                                                    
-
-
-
-
@@ -133,14 +158,14 @@
 
                                                    Parameter
                                                    
 
                                                    Mandatory
                                                    
+
                                                    Mandatory
                                                    
 
                                                    Type
                                                    
+
                                                    Type
                                                    
 
                                                    Description
                                                    
+
                                                    Description
                                                    
                                                     		
 
                                                    
 
                                                    agency
                                                    
+
                                                    agency
                                                    
                                                     		
 
                                                    Yes
                                                    
 
                                                    
 
                                                    
 
                                                    
-
                                                  • Description for the agency format
+
                                                  • agency
 
                                                    
-
-
-
@@ -244,7 +269,7 @@
 
                                                    Status Codes
                                                    
 
                                                    Parameter
                                                    
 
                                                    Mandatory
                                                    
+
                                                    Mandatory
                                                    
 
                                                    Type
                                                    
+
                                                    Type
                                                    
 
                                                    Description
                                                    
+
                                                    Description
                                                    
                                                     		
 
                                                    
 
                                                    
-
diff --git a/docs/iam/api-ref/en-us_topic_0079467622.html b/docs/iam/api-ref/en-us_topic_0079467622.html
index 86b55e94d..49799849c 100644
--- a/docs/iam/api-ref/en-us_topic_0079467622.html
+++ b/docs/iam/api-ref/en-us_topic_0079467622.html
@@ -51,11 +51,11 @@
 
                                                    Request Parameters
                                                    • Parameters in the request header
 
                                                    Status Code
                                                    
 
                                                    Description
                                                    
+
                                                    Description
                                                    
                                                     		
 
                                                    
 
                                                    
-
-
-
@@ -96,7 +96,7 @@
 
                                                    Status Codes
                                                    
 
                                                    Parameter
                                                    
 
                                                    Mandatory
                                                    
+
                                                    Mandatory
                                                    
 
                                                    Type
                                                    
+
                                                    Type
                                                    
 
                                                    Description
                                                    
+
                                                    Description
                                                    
                                                     		
 
                                                    
 
                                                    
-
diff --git a/docs/iam/api-ref/en-us_topic_0079467623.html b/docs/iam/api-ref/en-us_topic_0079467623.html
index 7f0d25508..a4dd6b24a 100644
--- a/docs/iam/api-ref/en-us_topic_0079467623.html
+++ b/docs/iam/api-ref/en-us_topic_0079467623.html
@@ -31,7 +31,7 @@
 
                                                    Request Parameters
                                                    • Parameters in the request header
-
                                                    Status Code
                                                    
 
                                                    Description
                                                    
+
                                                    Description
                                                    
                                                     		
 
                                                    
                                                     
 
 
                                                    Parameter
                                                    
+
                                                    
@@ -62,8 +62,31 @@
 
                                                    Parameter
                                                    
                                                     		
 
                                                    Mandatory
                                                    
                                                     		
 
                                                    
 
                                                    
+
                                                  • Parameters in the request body
+
                                                    
+
+
+
+
+
+
+
+
+
+
+
+
                                                    Parameter
                                                    
+
                                                    Mandatory
                                                    
+
                                                    Type
                                                    
+
                                                    Description
                                                    
+
                                                    agency
                                                    
+
                                                    Yes
                                                    
+
                                                    Object
                                                    
+
                                                    Agency information.
                                                    
+
                                                    
+
                                                    
 
                                                    • 
-
                                                    • Parameters in the request body
+
                                                      • agency
 
                                                        
-
-
-
+
+
+
+
+
@@ -111,7 +145,7 @@
 
                                                        Response Parameters
                                                        • Parameters in the response body
-
                                                        Parameter
                                                        
                                                         		
 
                                                        Mandatory
                                                        
@@ -80,7 +103,7 @@
 
 
                                                        String
                                                        
 
                                                        ID of the delegated domain. The delegated domain must exist.
                                                        
+
                                                        Account ID of the delegated party. If both trust_domain_id and trust_domain_name are specified, trust_domain_name is preferentially verified. At least one of the four parameters in this table must be specified.
                                                        
                                                         		
 
                                                        
 
                                                        trust_domain_name
                                                        
@@ -89,7 +112,7 @@
                                                         		
 
                                                        String
                                                        
 
                                                        Name of the delegated domain. The delegated domain must exist.
                                                        
+
                                                        Account name of the delegated party. If both trust_domain_id and trust_domain_name are specified, trust_domain_name is preferentially verified. At least one of the four parameters in this table must be specified.
                                                        
                                                         		
 
                                                        
 
                                                        description
                                                        
@@ -98,7 +121,18 @@
                                                         		
 
                                                        String
                                                        
 
                                                        Description of an agency.
                                                        
+
                                                        Agency description, which can contain a maximum of 255 characters. At least one of the four parameters in this table must be specified.
                                                        
+
                                                        duration
                                                        
+
                                                        No
                                                        
+
                                                        String
                                                        
+
                                                        Validity period (days) of the agency. At least one of these four parameters in this table must be specified.
                                                        
+
                                                        The options are as follows:
                                                        
+
                                                        • FOREVER: The agency has unlimited validity.
                                                        • ONEDAY: The agency is valid for one day.
                                                        • Custom: The agency is valid for a specified number of days, for example, 20.
                                                        
                                                         		
 
                                                        
 
 
 
                                                        Parameter
                                                        
+
                                                        
@@ -121,7 +155,7 @@
 
-
@@ -133,87 +167,76 @@
 
                                                        Parameter
                                                        
                                                         		
 
                                                        Mandatory
                                                        
                                                         		
 
                                                        
 
                                                        agency
                                                        
+
                                                        agency
                                                        
                                                         		
 
                                                        Yes
                                                        
 
                                                        
 
                                                        
 
                                                        
-
                                                      • Description for the agency format
-
                                                        Parameter
                                                        
+
                                                      • agency
+
                                                        
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
diff --git a/docs/iam/api-ref/en-us_topic_0079467625.html b/docs/iam/api-ref/en-us_topic_0079467625.html
index be81ff9a3..95e686d24 100644
--- a/docs/iam/api-ref/en-us_topic_0079467625.html
+++ b/docs/iam/api-ref/en-us_topic_0079467625.html
@@ -33,13 +33,13 @@
 
                                                        Request Parameters
                                                        • Parameters in the request header
-
                                                        Parameter
                                                        
 
                                                        Mandatory
                                                        
+
                                                        Type
                                                        
 
                                                        Type
                                                        
-
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
 
                                                        id
                                                        
+
                                                        id
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        ID of an agency.
                                                        
+
                                                        ID of an agency.
                                                        
                                                         		
 
                                                        name
                                                        
+
                                                        name
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Name of an agency.
                                                        
+
                                                        Name of an agency.
                                                        
                                                         		
 
                                                        domain_id
                                                        
+
                                                        domain_id
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        ID of the current domain.
                                                        
+
                                                        ID of the current domain.
                                                        
                                                         		
 
                                                        trust_domain_id
                                                        
+
                                                        trust_domain_id
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        ID of the delegated domain.
                                                        
+
                                                        ID of the delegated domain.
                                                        
                                                         		
 
                                                        description
                                                        
+
                                                        description
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Description of an agency.
                                                        
+
                                                        Description of an agency.
                                                        
                                                         		
 
                                                        duration
                                                        
+
                                                        duration
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
                                                        
+
                                                        Validity period of an agency. The default value is null, indicating that the agency is permanently valid.
                                                        
                                                         		
 
                                                        expire_time
                                                        
+
                                                        expire_time
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Expiration time of an agency.
                                                        
+
                                                        Expiration time of an agency.
                                                        
                                                         		
 
                                                        create_time
                                                        
+
                                                        create_time
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
+
                                                        Time when an agency is created.
                                                        
 
                                                        Time when an agency is created.
                                                        
+
                                                        trust_domain_name
                                                        
+
                                                        String
                                                        
+
                                                        Agency name.
                                                        
                                                         		
 
                                                        
                                                         
 
 
                                                        Parameter
                                                        
+
                                                        
-
-
@@ -78,9 +78,9 @@
 
                                                        Status Codes
                                                        
-
                                                        Parameter
                                                        
                                                         		
 
                                                        Mandatory
                                                        
 
                                                        Type
                                                        
+
                                                        Type
                                                        
 
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
                                                         
 
 
                                                        Status Code
                                                        
+
                                                        
-
diff --git a/docs/iam/api-ref/en-us_topic_0079467627.html b/docs/iam/api-ref/en-us_topic_0079467627.html
index 040f02ca2..373d6727c 100644
--- a/docs/iam/api-ref/en-us_topic_0079467627.html
+++ b/docs/iam/api-ref/en-us_topic_0079467627.html
@@ -51,11 +51,11 @@
 
                                                        Request Parameters
                                                        • Parameters in the request header
 
                                                        Status Code
                                                        
 
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
 
                                                        
-
-
-
@@ -96,7 +96,7 @@
 
                                                        Status Codes
                                                        
 
                                                        Parameter
                                                        
 
                                                        Mandatory
                                                        
+
                                                        Mandatory
                                                        
 
                                                        Type
                                                        
+
                                                        Type
                                                        
 
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
 
                                                        
-
diff --git a/docs/iam/api-ref/en-us_topic_0079578164.html b/docs/iam/api-ref/en-us_topic_0079578164.html
index 1861681fc..a99e34480 100644
--- a/docs/iam/api-ref/en-us_topic_0079578164.html
+++ b/docs/iam/api-ref/en-us_topic_0079578164.html
@@ -86,7 +86,7 @@
 
-
@@ -98,88 +98,246 @@
 
                                                        Status Code
                                                        
 
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
                                                         
 
 
                                                        roles
                                                        
+
                                                        roles
                                                        
                                                         		
 
                                                        Yes
                                                        
 
                                                        
 
                                                        
 
                                                        
-
                                                      • Description for the role format
-
                                                        Parameter
                                                        
+
                                                      • roles
+
                                                        
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                        Parameter
                                                        
 
                                                        Mandatory
                                                        
+
                                                        Type
                                                        
 
                                                        Type
                                                        
-
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
 
                                                        id
                                                        
+
                                                        domain_id
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        ID of a role.
                                                        
+
                                                        ID of the account to which the permission belongs.
                                                        
                                                         		
 
                                                        name
                                                        
+
                                                        flag
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Name of a role.
                                                        
+
                                                        The return value fine_grained indicates that the permission is a system-defined policy.
                                                        
                                                         		
 
                                                        domain_id
                                                        
+
                                                        catalog
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        ID of the domain to which a role belongs.
                                                        
+
                                                        Service catalog of the permission.
                                                        
                                                         		
 
                                                        type
                                                        
+
                                                        name
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Display mode of a role.
                                                        
-
                                                        • AX: A role is displayed at the domain layer.
                                                        • XA: A role is displayed at the project layer.
                                                        • AA: A role is displayed at both the domain and project layers.
                                                        • XX: A role is not displayed at the domain or project layer.
                                                        
+
                                                        Permission name. This parameter is carried in the token of a user, allowing the system to determine whether the user has permissions to access a specific cloud service.
                                                        
                                                         		
 
                                                        display_name
                                                        
+
                                                        description
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Displayed name of a role.
                                                        
+
                                                        Permission description.
                                                        
                                                         		
 
                                                        catalog
                                                        
+
                                                        links
                                                        
 
                                                        Yes
                                                        
+
                                                        Object
                                                        
 
                                                        String
                                                        
-
                                                        Directory where a role locates.
                                                        
+
                                                        Permission resource link.
                                                        
                                                         		
 
                                                        policy
                                                        
+
                                                        id
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        Dict
                                                        
-
                                                        Policy of a role.
                                                        
+
                                                        Permission ID.
                                                        
                                                         		
 
                                                        description
                                                        
+
                                                        display_name
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
+
                                                        Display name of the permission.
                                                        
 
                                                        Description of a role.
                                                        
+
                                                        type
                                                        
+
                                                        String
                                                        
+
                                                        Display mode of the permission.
                                                        
+
                                                        • AX: Account level.
                                                        • XA: Project level.
                                                        • AA: Both the account level and project level.
                                                        • XX: Neither the account level nor project level.
                                                        • The display mode of a custom policy can only be AX or XA. A custom policy must be displayed at either of the two levels.
                                                        
+
                                                        policy
                                                        
+
                                                        Object
                                                        
+
                                                        Content of the permission.
                                                        
+
                                                        updated_time
                                                        
+
                                                        String
                                                        
+
                                                        Time when the permission was last updated.
                                                        
+
                                                        created_time
                                                        
+
                                                        String
                                                        
+
                                                        Time when the permission was created.
                                                        
+
                                                        
+
                                                        
+
                                                      • roles.links
+
                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                        Parameter
                                                        
+
                                                        Type
                                                        
+
                                                        Description
                                                        
+
                                                        self
                                                        
+
                                                        String
                                                        
+
                                                        Resource link.
                                                        
+
                                                        previous
                                                        
+
                                                        String
                                                        
+
                                                        Previous resource link. If the previous resource link is unavailable, this parameter is set to null.
                                                        
+
                                                        next
                                                        
+
                                                        String
                                                        
+
                                                        Next resource link. If the next resource link is unavailable, this parameter is set to null.
                                                        
+
                                                        
+
                                                        
+
                                                      • roles.policy
+
                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                        Parameter
                                                        
+
                                                        Type
                                                        
+
                                                        Description
                                                        
+
                                                        Depends
                                                        
+
                                                        Array of objects
                                                        
+
                                                        Dependency permissions.
                                                        
+
                                                        Statement
                                                        
+
                                                        Array of objects
                                                        
+
                                                        Statement of the permission.
                                                        
+
                                                        Version
                                                        
+
                                                        String
                                                        
+
                                                        Policy version.
                                                        
+
                                                        • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                                                        • 1.1: Policy. A policy defines the permissions required to perform actions on a specific cloud resource under certain conditions.
                                                        
+
                                                        
+
                                                        
+
                                                      • roles.policy.Depends
+
                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                        Parameter
                                                        
+
                                                        Type
                                                        
+
                                                        Description
                                                        
+
                                                        catalog
                                                        
+
                                                        String
                                                        
+
                                                        Service catalog of the permission.
                                                        
+
                                                        display_name
                                                        
+
                                                        String
                                                        
+
                                                        Display name of the permission.
                                                        
+
                                                        
+
                                                        
+
                                                      • roles.policy.Statement
+
                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/docs/iam/api-ref/en-us_topic_0079578165.html b/docs/iam/api-ref/en-us_topic_0079578165.html
index 389b40f58..b5ca55dcd 100644
--- a/docs/iam/api-ref/en-us_topic_0079578165.html
+++ b/docs/iam/api-ref/en-us_topic_0079578165.html
@@ -51,11 +51,11 @@
 
                                                        Request Parameters
                                                        • Parameters in the request header
 
                                                        Parameter
                                                        
+
                                                        Type
                                                        
+
                                                        Description
                                                        
+
                                                        Action
                                                        
+
                                                        Array of strings
                                                        
+
                                                        Specific operation permissions on a resource.
                                                        
+
                                                         NOTE: 
                                                        • Format: Service name:Resource type:Action, for example, vpc:ports:create
                                                        • Service name: indicates the service name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and actions are not case-sensitive. You can use an asterisk (*) to represent all actions.
                                                        • In the case of a custom policy for agencies, this parameter value should be "Action": ["iam:tokens:assume"].
                                                        
+
                                                        
+
                                                        Effect
                                                        
+
                                                        String
                                                        
+
                                                        Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.
                                                        
+
                                                        The options are as follows:
                                                        
+
                                                        • Allow
                                                        • Deny
                                                        
+
                                                        Condition
                                                        
+
                                                        Object
                                                        
+
                                                        Conditions for the permission to take effect. 
                                                        
+
                                                         NOTE: 
                                                        Take the condition in the sample request as an example, the values of the condition key (obs:prefix) and string (public) must be equal (StringEquals).
                                                        
+
                                                         "Condition": {
+              "StringEquals": {
+                "obs:prefix": [
+                  "public"
+                ]
+              }
+            }
                                                        
+
                                                        
+
                                                        Resource
                                                        
+
                                                        Object
                                                        
+
                                                        Cloud resource. 
                                                        
+
                                                         NOTE: 
                                                        • Five-segment format that can contain asterisks (*): ::::, for example, obs:::bucket:*.
                                                        • The region segment can be * or a region accessible to the user. The service must exist and the specified resource must belong to the service.
                                                        • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be "Resource": {"uri": ["/iam/agencies/agencyTest"]}.
                                                        
+
                                                        
                                                         		
 
                                                        
 
                                                        
-
-
-
@@ -96,7 +96,7 @@
 
                                                        Status Codes
                                                        
 
                                                        Parameter
                                                        
 
                                                        Mandatory
                                                        
+
                                                        Mandatory
                                                        
 
                                                        Type
                                                        
+
                                                        Type
                                                        
 
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
 
                                                        
-
diff --git a/docs/iam/api-ref/en-us_topic_0079578166.html b/docs/iam/api-ref/en-us_topic_0079578166.html
index 5afa06553..1a8924385 100644
--- a/docs/iam/api-ref/en-us_topic_0079578166.html
+++ b/docs/iam/api-ref/en-us_topic_0079578166.html
@@ -86,7 +86,7 @@
 
-
@@ -98,88 +98,220 @@
 
                                                        Status Code
                                                        
 
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
                                                         
 
 
                                                        roles
                                                        
+
                                                        roles
                                                        
                                                         		
 
                                                        Yes
                                                        
 
                                                        
 
                                                        
 
                                                        
-
                                                      • Description for the role format
-
                                                        Parameter
                                                        
+
                                                      • roles
+
                                                        
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
+
+
                                                        Parameter
                                                        
 
                                                        Mandatory
                                                        
+
                                                        Type
                                                        
 
                                                        Type
                                                        
-
                                                        Description
                                                        
+
                                                        Description
                                                        
                                                         		
 
                                                        
 
                                                        catalog
                                                        
+
                                                        catalog
                                                        
 
                                                        No
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Directory where a role locates.
                                                        
+
                                                        Directory where a role locates.
                                                        
                                                         		
 
                                                        display_name
                                                        
+
                                                        display_name
                                                        
 
                                                        No
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Displayed name of a role.
                                                        
+
                                                        Displayed name of a role.
                                                        
                                                         		
 
                                                        name
                                                        
+
                                                        name
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Name of a role.
                                                        
+
                                                        Name of a role.
                                                        
                                                         		
 
                                                        policy
                                                        
+
                                                        policy
                                                        
 
                                                        No
                                                        
+
                                                        Dict
                                                        
 
                                                        Dict
                                                        
-
                                                        Policy of a role.
                                                        
+
                                                        Policy of a role.
                                                        
                                                         		
 
                                                        domain_id
                                                        
+
                                                        domain_id
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        ID of the domain to which a role belongs.
                                                        
+
                                                        ID of the domain to which a role belongs.
                                                        
                                                         		
 
                                                        type
                                                        
+
                                                        type
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        Display mode of a role.
                                                        
+
                                                        Display mode of a role.
                                                        
 
                                                        • AX: A role is displayed at the domain layer.
                                                        • XA: A role is displayed at the project layer.
                                                        • AA: A role is displayed at both the domain and project layers.
                                                        • XX: A role is not displayed at the domain or project layer.
                                                        
                                                         		
 
                                                        id
                                                        
+
                                                        id
                                                        
 
                                                        Yes
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
-
                                                        ID of a role.
                                                        
+
                                                        ID of a role.
                                                        
                                                         		
 
                                                        description
                                                        
+
                                                        description
                                                        
 
                                                        No
                                                        
+
                                                        String
                                                        
 
                                                        String
                                                        
+
                                                        Description of a role.
                                                        
 
                                                        Description of a role.
                                                        
+
                                                        
+
                                                        
+
                                                      • roles.links
                                                        
+
+
                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                        Parameter
                                                        
+
                                                        Type
                                                        
+
                                                        Description
                                                        
+
                                                        self
                                                        
+
                                                        String
                                                        
+
                                                        Resource link.
                                                        
+
                                                        previous
                                                        
+
                                                        String
                                                        
+
                                                        Previous resource link. If the previous resource link is unavailable, this parameter is set to null.
                                                        
+
                                                        next
                                                        
+
                                                        String
                                                        
+
                                                        Next resource link. If the next resource link is unavailable, this parameter is set to null.
                                                        
+
                                                        
+
                                                        
+
                                                      • roles.policy
                                                        
+
+
                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                        Parameter
                                                        
+
                                                        Type
                                                        
+
                                                        Description
                                                        
+
                                                        Depends
                                                        
+
                                                        Array of PolicyDepends objects
                                                        
+
                                                        Dependency permissions.
                                                        
+
                                                        Statement
                                                        
+
                                                        Array of PolicyStatement objects
                                                        
+
                                                        Statement of the permission.
                                                        
+
                                                        Version
                                                        
+
                                                        String
                                                        
+
                                                        Policy version.
                                                        
+
                                                        • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                                                        • 1.1: Policy. A policy defines the permissions required to perform actions on a specific cloud resource under certain conditions.
                                                        
+
                                                        
+
                                                        
+
                                                      • roles.policy.Depends
+
                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                        Parameter
                                                        
+
                                                        Type
                                                        
+
                                                        Description
                                                        
+
                                                        catalog
                                                        
+
                                                        String
                                                        
+
                                                        Service catalog of the permission.
                                                        
+
                                                        display_name
                                                        
+
                                                        String
                                                        
+
                                                        Display name of the permission.
                                                        
+
                                                        
+
                                                        
+
                                                      • roles.policy.Statement
+
                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/docs/iam/api-ref/en-us_topic_0097949518.html b/docs/iam/api-ref/en-us_topic_0097949518.html
index 524db0c35..49def85ad 100644
--- a/docs/iam/api-ref/en-us_topic_0097949518.html
+++ b/docs/iam/api-ref/en-us_topic_0097949518.html
@@ -4,127 +4,342 @@
 
                                                        Function
                                                        You can obtain a temporary AK/SK and security token (offline AK/SK) by using a user token, agency token, and federated token. A temporary AK/SK is a token with temporary permissions issued to users. It conforms to the principle of least privilege and can be used to temporarily access OBS.
                                                        
 
                                                        
 
                                                        URI
                                                        POST /v3.0/OS-CREDENTIAL/securitytokens
                                                        
-
                                                        
-
                                                        Request Parameters
                                                        • Parameters in the request header
                                                          • Obtaining a temporary AK/SK with an agency token (methods is set to assume_role)
-
                                                        Parameter
                                                        
+
                                                        Type
                                                        
+
                                                        Description
                                                        
+
                                                        Action
                                                        
+
                                                        Array of strings
                                                        
+
                                                        Specific operation permissions on a resource. For details about supported actions, see "Permissions and Supported Actions" in the API Reference of cloud services.
                                                        
+
                                                         NOTE: 
                                                        • Format: Service name:Resource type:Action, for example, vpc:ports:create
                                                        • Service name: indicates the service name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and actions are not case-sensitive. You can use an asterisk (*) to represent all actions.
                                                        • In the case of a custom policy for agencies, this parameter value should be "Action": ["iam:tokens:assume"].
                                                        
+
                                                        
+
                                                        Effect
                                                        
+
                                                        String
                                                        
+
                                                        Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.
                                                        
+
                                                        The options are as follows:
                                                        
+
                                                        • Allow
                                                        • Deny
                                                        
+
                                                        Condition
                                                        
+
                                                        Object
                                                        
+
                                                        Conditions for the permission to take effect. 
                                                        
+
                                                         NOTE: 
                                                        Take the condition in the sample request as an example, the values of the condition key (obs:prefix) and string (public) must be equal (StringEquals).
                                                        
+
                                                         "Condition": {
+              "StringEquals": {
+                "obs:prefix": [
+                  "public"
+                ]
+              }
+            }
                                                        
+
                                                        
+
                                                        Resource
                                                        
+
                                                        Object
                                                        
+
                                                        Cloud resource. 
                                                        
+
                                                         NOTE: 
                                                        • Five-segment format that can contain asterisks (*): ::::, for example, obs:::bucket:*.
                                                        • The region segment can be * or a region accessible to the user. The service must exist and the specified resource must belong to the service.
                                                        • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be "Resource": {"uri": ["/iam/agencies/agencyTest"]}.
                                                        
+
                                                        
                                                         		
 
                                                        
 
                                                        Parameter
                                                        
+
                                                        • Parameters in the request header
                                                          • Obtaining a temporary AK/SK with an agency token (methods is set to assume_role)
+
                                                            
-
-
-
-
-
-
-
-
-
-
-
                                                            Parameter
                                                            
 
                                                            Mandatory
                                                            
+
                                                            Mandatory
                                                            
 
                                                            Type
                                                            
+
                                                            Type
                                                            
 
                                                            Description
                                                            
+
                                                            Description
                                                            
                                                             		
 
                                                            
 
                                                            X-Auth-Token
                                                            
+
                                                            X-Auth-Token
                                                            
 
                                                            Yes
                                                            
+
                                                            Yes
                                                            
 
                                                            String
                                                            
+
                                                            String
                                                            
 
                                                            Token with permissions of the Agent Operator policy.
                                                            
+
                                                            Token with permissions of the Agent Operator policy.
                                                            
                                                             		
 
                                                            Content-Type
                                                            
+
                                                            Content-Type
                                                            
 
                                                            Yes
                                                            
+
                                                            Yes
                                                            
 
                                                            String
                                                            
+
                                                            String
                                                            
 
                                                            Fill application/json;charset=utf8 in this field.
                                                            
+
                                                            Fill application/json;charset=utf8 in this field.
                                                            
                                                             		
 
                                                            
                                                             
 
                                                            
 
                                                            
 
                                                          
-
                                                          • Obtaining a temporary AK/SK with a user token or a federated token (methods is set to token)
-
                                                            Parameter
                                                            
+
                                                            • Obtaining a temporary AK/SK with a user token or a federated token (methods is set to token)
+
                                                              
-
-
-
-
-
-
-
-
-
-
-
                                                              Parameter
                                                              
 
                                                              Mandatory
                                                              
+
                                                              Mandatory
                                                              
 
                                                              Type
                                                              
+
                                                              Type
                                                              
 
                                                              Description
                                                              
+
                                                              Description
                                                              
                                                               		
 
                                                              
 
                                                              Content-Type
                                                              
+
                                                              Content-Type
                                                              
 
                                                              Yes
                                                              
+
                                                              Yes
                                                              
 
                                                              String
                                                              
+
                                                              String
                                                              
 
                                                              Fill application/json;charset=utf8 in this field.
                                                              
+
                                                              Fill application/json;charset=utf8 in this field.
                                                              
                                                               		
 
                                                              X-Auth-Token
                                                              
+
                                                              X-Auth-Token
                                                              
 
                                                              No
                                                              
+
                                                              No
                                                              
 
                                                              String
                                                              
+
                                                              String
                                                              
 
                                                              User token or federated token required for obtaining a temporary AK/SK. You need to specify either this parameter or the token ID in the request body. This parameter takes the precedence.
                                                              
+
                                                              User token or federated token required for obtaining a temporary AK/SK. You need to specify either this parameter or the token ID in the request body. This parameter takes the precedence.
                                                              
                                                               		
 
                                                              
                                                               
 
                                                              
 
                                                              
 
                                                            
-
                                                          • Parameters in the request body
                                                            • Obtaining a temporary AK/SK with an agency token (methods is set to assume_role)
-
                                                              Parameter
                                                              
+
+
+
                                                              Request Parameters
                                                              • Parameters in the request body
+
                                                                
-
-
-
-
-
-
-
-
+
                                                                Name
                                                                
 
                                                                Mandatory
                                                                
+
                                                                Type
                                                                
 
                                                                Type
                                                                
+
                                                                Mandatory
                                                                
 
                                                                Description
                                                                
+
                                                                Description
                                                                
                                                                 		
 
                                                                
 
                                                                methods
                                                                
+
                                                                auth
                                                                
 
                                                                Yes
                                                                
+
                                                                TokenAuth object
                                                                
 
                                                                String Array
                                                                
+
                                                                Yes
                                                                
 
                                                                Fill assume_role in this field.
                                                                
+
                                                                Authentication information.
                                                                
                                                                 		
 
                                                                agency_name
                                                                
+
                                                                
+
                                                                
+
                                                                • auth
+
                                                                  
+
+
+
+
+
+
-
-
-
-
+
                                                                  Name
                                                                  
+
                                                                  Type
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  Description
                                                                  
+
                                                                  identity
                                                                  
 
                                                                  Yes
                                                                  
+
                                                                  TokenAuthIdentity object
                                                                  
 
                                                                  String
                                                                  
+
                                                                  Yes
                                                                  
 
                                                                  Name of the agency created by a delegating party.
                                                                  
+
                                                                  Authentication parameters.
                                                                  
                                                                   		
 
                                                                  domain_name or domain_id
                                                                  
+
                                                                  
+
                                                                  
+
                                                                • auth.identity
+
                                                                  
+
+
+
+
+
+
-
-
-
-
-
-
-
-
-
-
-
+
+
+
                                                                  Name
                                                                  
+
                                                                  Type
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  Description
                                                                  
+
                                                                  methods
                                                                  
 
                                                                  Yes
                                                                  
+
                                                                  Array of strings
                                                                  
 
                                                                  String
                                                                  
+
                                                                  Yes
                                                                  
 
                                                                  domain.name: Name of the domain which the delegating party belongs to.
                                                                  
+
                                                                  Authentication method. The value of this parameter is ["token"].
                                                                  
                                                                   		
 
                                                                  duration_seconds
                                                                  
+
                                                                  token
                                                                  
 
                                                                  No
                                                                  
+
                                                                  IdentityToken object
                                                                  
 
                                                                  Int
                                                                  
+
                                                                  No
                                                                  
 
                                                                  Validity period (in seconds) of an AK/SK and security token. The value ranges from 15 minutes to 24 hours. The default value is 15 minutes.
                                                                  
+
                                                                  IAM user token, federated user token, or agency token. The id in this parameter is the same as that of X-Auth-Token in the request header. This parameter is to be discarded.
                                                                  
                                                                   		
 
                                                                  scope
                                                                  
+
                                                                  policy
                                                                  
 
                                                                  No
                                                                  
+
                                                                  ServicePolicy object
                                                                  
 
                                                                  Object
                                                                  
+
                                                                  No
                                                                  
 
                                                                  AK/SK and security token. If this parameter is left blank, the generated security token does not contain the scope information. You are advised to leave this parameter blank. To set the scope of the temporary AK/SK and security token, specify a project or domain.
                                                                  
+
                                                                  Content of the custom policy.
                                                                  
+
                                                                  
+
                                                                  
+
                                                                • auth.identity.token
+
                                                                  
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                  Name
                                                                  
+
                                                                  Type
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  Description
                                                                  
+
                                                                  id
                                                                  
+
                                                                  string
                                                                  
+
                                                                  No
                                                                  
+
                                                                  Token ID. Same as the X-Auth-Token in the request header. This parameter is to be discarded.
                                                                  
+
                                                                  duration_seconds
                                                                  
+
                                                                  integer
                                                                  
+
                                                                  No
                                                                  
+
                                                                  Validity period (in seconds) of an AK/SK and security token. The value ranges from 15 minutes to 24 hours. The default value is 15min.
                                                                  
+
                                                                  
+
                                                                  
+
                                                                • auth.identity.policy
+
                                                                  
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                  Name
                                                                  
+
                                                                  Type
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  Description
                                                                  
+
                                                                  Version
                                                                  
+
                                                                  string
                                                                  
+
                                                                  Yes
                                                                  
+
                                                                  Policy version. When creating a custom policy, set this parameter to 1.1.
                                                                  
+
                                                                  • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                                                                  • 1.1: Policy. A policy defines the permissions required to perform actions on a specific cloud resource under certain conditions.
                                                                  
+
                                                                  Statement
                                                                  
+
                                                                  Array of ServiceStatement objects
                                                                  
+
                                                                  Yes
                                                                  
+
                                                                  Statement of the policy, which describes details of a custom policy.
                                                                  
+
                                                                  
+
                                                                  
+
                                                                • auth.identity.policy.Statement
+
                                                                  
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                  Name
                                                                  
+
                                                                  Type
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  Description
                                                                  
+
                                                                  Action
                                                                  
+
                                                                  Array of strings
                                                                  
+
                                                                  Yes
                                                                  
+
                                                                  Specific operation permissions on a resource.
                                                                  
+
                                                                  • Format: Service name:Resource type:Action, for example, vpc:ports:create
                                                                  • Service name: indicates the service name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and actions are not case-sensitive. You can use an asterisk (*) to represent all actions.
                                                                  
+
                                                                  Effect
                                                                  
+
                                                                  string
                                                                  
+
                                                                  Yes
                                                                  
+
                                                                  Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.
                                                                  
+
                                                                  Condition
                                                                  
+
                                                                  Map<String,Map<String,Array<String>>>
                                                                  
+
                                                                  No
                                                                  
+
                                                                  Conditions for the permission to take effect.
                                                                  
+
                                                                   NOTE: 
                                                                  Take the condition in the sample request as an example, the values of the condition key (obs:prefix) and string (public) must be equal (StringEquals).
                                                                  
+
                                                                   "Condition": {
+              "StringEquals": {
+                "obs:prefix": [
+                  "public"
+                ]
+              }
+            }
                                                                  
+
                                                                  
+
                                                                  Resource
                                                                  
+
                                                                  Object
                                                                  
+
                                                                  No
                                                                  
+
                                                                  Cloud resource. The rules are as follows:
                                                                  
+
                                                                  • The five-segment format can contain an asterisk (*): <service-name>:<region>:<account-id>:<resource-type>:<resource-path>, for example, obs:::bucket:*.
                                                                  • The region segment can be * or a region accessible to the user. The service must exist and the specified resource must belong to the service.
                                                                  
+
                                                                  
+
                                                                  
+
                                                                
+
                                                                • Obtaining a temporary AK/SK with an agency token (methods is set to assume_role)
+
                                                                  
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                  Parameter
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  Type
                                                                  
+
                                                                  Description
                                                                  
+
                                                                  methods
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  String Array
                                                                  
+
                                                                  Fill assume_role in this field.
                                                                  
+
                                                                  agency_name
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  String
                                                                  
+
                                                                  Name of the agency created by a delegating party.
                                                                  
+
                                                                  domain_name or domain_id
                                                                  
+
                                                                  Mandatory
                                                                  
+
                                                                  String
                                                                  
+
                                                                  domain.name: Name of the domain which the delegating party belongs to.
                                                                  
+
                                                                  duration_seconds
                                                                  
+
                                                                  No
                                                                  
+
                                                                  Int
                                                                  
+
                                                                  Validity period (in seconds) of an AK/SK and security token. The value ranges from 15 minutes to 24 hours. The default value is 15 minutes.
                                                                  
+
                                                                  scope
                                                                  
+
                                                                  No
                                                                  
+
                                                                  Object
                                                                  
+
                                                                  AK/SK and security token. If this parameter is left blank, the generated security token does not contain the scope information. You are advised to leave this parameter blank. To set the scope of the temporary AK/SK and security token, specify a project or domain.
                                                                  
 
                                                                  • If this field is set to project, the temporary AK/SK and security token can only be used to access resources in the project of a specified ID or name.
                                                                    "scope": {
       "project": {
       "id": "0b95b78b67fa045b38104c12fb..."
@@ -142,47 +357,48 @@
 
                                                                  
 
                                                                  
 
                                                                • Obtaining a temporary AK/SK with a user token or a federated token (methods is set to token)
-
                                                                  
-
-
@@ -238,7 +454,7 @@
 
                                                                  Parameter
                                                                  
+
                                                                  
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
                                                                  Parameter
                                                                  
 
                                                                  Mandatory
                                                                  
+
                                                                  Mandatory
                                                                  
 
                                                                  Type
                                                                  
+
                                                                  Type
                                                                  
 
                                                                  Description
                                                                  
+
                                                                  Description
                                                                  
                                                                   		
 
                                                                  
 
                                                                  methods
                                                                  
+
                                                                  methods
                                                                  
 
                                                                  Yes
                                                                  
+
                                                                  Mandatory
                                                                  
 
                                                                  String Array
                                                                  
+
                                                                  String Array
                                                                  
 
                                                                  Fill token in this field.
                                                                  
+
                                                                  Fill token in this field.
                                                                  
                                                                   		
 
                                                                  token
                                                                  
+
                                                                  token
                                                                  
 
                                                                  No
                                                                  
+
                                                                  No
                                                                  
 
                                                                  JSON object
                                                                  
+
                                                                  JSON object
                                                                  
 
                                                                  Common token or federated token required for obtaining a temporary AK/SK. You need to choose either the ID in this object or X-Auth-Token in the request header. X-Auth-Token takes priority over the ID in this object.
                                                                  
+
                                                                  Common token or federated token required for obtaining a temporary AK/SK. You need to choose either the ID in this object or X-Auth-Token in the request header. X-Auth-Token takes priority over the ID in this object.
                                                                  
                                                                   		
 
                                                                  duration_seconds
                                                                  
+
                                                                  duration_seconds
                                                                  
 
                                                                  No
                                                                  
+
                                                                  No
                                                                  
 
                                                                  Int
                                                                  
+
                                                                  Int
                                                                  
 
                                                                  Validity period (in seconds) of an AK/SK and security token. The value ranges from 15 minutes to 24 hours. The default value is 15 minutes.
                                                                  
+
                                                                  Validity period (in seconds) of an AK/SK and security token. The value ranges from 15 minutes to 24 hours. The default value is 15 minutes.
                                                                  
                                                                   		
 
                                                                  
                                                                   
 
                                                                  
 
                                                                  
 
+
 
 
                                                                  • Example request
                                                                    • When the methods parameter is set to assume_role
                                                                      {
     "auth": {
@@ -226,9 +442,9 @@
 
                                                                  		
 
                                                                  
 
                                                                  credential
                                                                  
+
                                                                  credential
                                                                  
 
                                                                  Yes
                                                                  
+
                                                                  Mandatory
                                                                  
                                                                   		
 
                                                                  Object
                                                                  
 
                                                                  
 
                                                                  
 
                                                                  
-
                                                                • Description about the credential content.
+
                                                                • credential
 
                                                                  
-
@@ -260,7 +476,7 @@
 
-
@@ -269,7 +485,7 @@
 
-
@@ -278,7 +494,7 @@
 
-
diff --git a/docs/iam/api-ref/iam_01_0008.html b/docs/iam/api-ref/iam_01_0008.html
index 41d3e8cde..bcd6a0910 100644
--- a/docs/iam/api-ref/iam_01_0008.html
+++ b/docs/iam/api-ref/iam_01_0008.html
@@ -8,7 +8,7 @@
 
-
diff --git a/docs/iam/api-ref/iam_02_0003.html b/docs/iam/api-ref/iam_02_0003.html
index fb6733e2c..1e35f32d4 100644
--- a/docs/iam/api-ref/iam_02_0003.html
+++ b/docs/iam/api-ref/iam_02_0003.html
@@ -67,38 +67,253 @@
 
                                                                • Example request
                                                                  curl -i -k -H 'Accept:application/json' -H 'x-Idp-Id:test_local_idp' -H 'Content-Type:application/x-www-form-urlencoded' -X POST -d 'SAMLResponse=PD94bWwgdmVyc2lvbj0iMS4wIiBl4WXZ1OGNmYmRzWk1ZeWlLKy96anpEbm1rT2FrVVBrUmlSWEpLYUt5NzJtUmtoRFBCNjgwVQpzalU3R2hKNHE4ZG48L3hlbmM6Q2lwaGVyVmFsdWU%2BPC94ZW5jOkNpcGhlckRhdGE%2BPC94ZW5jOkVuY3J5cHRlZERhdGE%2BPC9zYW1sMjpFbmNyeXB0ZWRBc3NlcnRpb24%2BPC9zYW1sMnA6UmVzcG9uc2U%2B' https://sample.domain.com/v3.0/OS-FEDERATION/tokens
                                                                  
 
                                                                  • 
-
                                                                  Response Parameters
                                                                  • Parameters in the response body
-
                                                                  Parameter
                                                                  
                                                                   		
 
                                                                  Mandatory
                                                                  
@@ -251,7 +467,7 @@
 
                                                                  
 
                                                                  expires_at
                                                                  
 
                                                                  Yes
                                                                  
+
                                                                  Mandatory
                                                                  
                                                                   		
 
                                                                  String
                                                                  
 
                                                                  
 
                                                                  access
                                                                  
 
                                                                  Yes
                                                                  
+
                                                                  Mandatory
                                                                  
                                                                   		
 
                                                                  String
                                                                  
 
                                                                  
 
                                                                  secret
                                                                  
 
                                                                  Yes
                                                                  
+
                                                                  Mandatory
                                                                  
                                                                   		
 
                                                                  String
                                                                  
 
                                                                  
 
                                                                  securitytoken
                                                                  
 
                                                                  Yes
                                                                  
+
                                                                  Mandatory
                                                                  
                                                                   		
 
                                                                  String
                                                                  
                                                                   		
 
                                                                  
 
                                                                  Obtaining a User Token
                                                                  
+
                                                                  Obtaining a User Token Through Password Authentication
                                                                  
                                                                   		
 
                                                                  Obtain a user token through username/password-based authentication.
                                                                  
                                                                   		
 
                                                                  
+
+
+
+
+
+
-
@@ -1023,7 +1034,7 @@
 
-
                                                                  Response Item
                                                                  
+
                                                                  Response Parameters
                                                                  • Parameters in the response header
+
                                                                    
-
-
-
-
-
-
-
-
-
-
-
-
                                                                    Response Item
                                                                    
 
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Type
                                                                    
-
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    X-Subject-Token
                                                                    
+
                                                                    X-Subject-Token
                                                                    
 
                                                                    header
                                                                    
+
                                                                    String
                                                                    
 
                                                                    String
                                                                    
-
                                                                    Signed unscoped token.
                                                                    
-
                                                                    token
                                                                    
-
                                                                    body
                                                                    
-
                                                                    Object
                                                                    
-
                                                                    Information of the unscoped token obtained in federated identity authentication mode, including methods and user information.
                                                                    
+
                                                                    Signed unscoped token.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
+
                                                                  • Parameters in the response body
+
                                                                    
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    token
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Unscoped token for federated authentication, which contains the methods and user information.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • token
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    issued_at
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Time when the token was issued.
                                                                    
+
                                                                     NOTE: 
                                                                    The value is a UTC time in the YYYY-MM-DDTHH:mm:ss.ssssssZ format, for example, 2023-06-28T08:56:33.710000Z. For details about the date and timestamp formats, see ISO-8601.
                                                                    
+
                                                                    
+
                                                                    expires_at
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Expiration date of the token.
                                                                    
+
                                                                     NOTE: 
                                                                    The value is a UTC time in the YYYY-MM-DDTHH:mm:ss.ssssssZ format, for example, 2023-06-28T08:56:33.710000Z. For details about the date and timestamp formats, see ISO-8601.
                                                                    
+
                                                                    
+
                                                                    methods
                                                                    
+
                                                                    Array of strings
                                                                    
+
                                                                    Method for obtaining the token.
                                                                    
+
                                                                    user
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Information about the user who requests for the token.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • token.user
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    domain
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Information about the domain to which the user belongs.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    User ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Username.
                                                                    
+
                                                                    OS-FEDERATION
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Federated identity authentication information.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • token.user.domain
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain name.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain ID.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • token.user.OS-FEDERATION
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    groups
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    User group information.
                                                                    
+
                                                                    identity_provider
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Identity provider information.
                                                                    
+
                                                                    protocol
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Protocol information.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • token.user.OS-FEDERATION.groups
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    User group ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    User group name.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • token.user.OS-FEDERATION.identity_provider
+
                                                                    
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Identity provider ID.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • token.user.OS-FEDERATION.protocol
+
                                                                    
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Protocol ID.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
 
                                                                  • Example response
                                                                    {
     "token": {
         "expires_at": "2018-03-13T03:00:01.168000Z",
diff --git a/docs/iam/api-ref/iam_02_0004.html b/docs/iam/api-ref/iam_02_0004.html
index 6303d7aef..a8de19f33 100644
--- a/docs/iam/api-ref/iam_02_0004.html
+++ b/docs/iam/api-ref/iam_02_0004.html
@@ -31,7 +31,141 @@
 
                                                                  • Example request
                                                                    curl -i -k -H 'Accept:application/json' -H 'X-Auth-Token:$token' -H 'Content-Type:application/json;charset=utf8' -X GET https://sample.domain.com/v3/auth/catalog
                                                                    
 
                                                                  
 
                                                                  
-
                                                                  Response Parameters
                                                                  Example response (successful request)
                                                                  {
+
                                                                  Response Parameters
                                                                  • Parameters in the response body
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    catalog
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    Service catalog information.
                                                                    
+
                                                                    links
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Resource link information.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • catalog
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    endpoints
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    Endpoint information.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Service ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Service name.
                                                                    
+
                                                                    type
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Service type.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • catalog.endpoints
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Endpoint ID.
                                                                    
+
                                                                    interface
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Plane to which the endpoint belongs. The value is public.
                                                                    
+
                                                                    region
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Region to which the endpoint belongs.
                                                                    
+
                                                                    region_id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    ID of the region to which the endpoint belongs.
                                                                    
+
                                                                    url
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Endpoint URL.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  • links
+
                                                                    
+
+
+
+
+
+
+
+
+
+
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    self
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Resource link.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                  
+
                                                                  Example response (successful request)
                                                                  {
   "catalog": [
     {
       "endpoints": [
diff --git a/docs/iam/api-ref/iam_02_0006.html b/docs/iam/api-ref/iam_02_0006.html
index d2591f464..5a2ef5355 100644
--- a/docs/iam/api-ref/iam_02_0006.html
+++ b/docs/iam/api-ref/iam_02_0006.html
@@ -190,6 +190,17 @@
 
                                                                  Enter another password.
                                                                  
                                                                   		
 
                                                                  400
                                                                  
+
                                                                  1120
                                                                  
+
                                                                  Invalid access_mode.
                                                                  
+
                                                                  Invalid access_mode.
                                                                  
+
                                                                  Check the access_mode parameter.
                                                                  
+
                                                                  
 
                                                                  400
                                                                  
                                                                   		
 
                                                                  IAM.0007
                                                                  
@@ -821,7 +832,7 @@
                                                                   		
 
                                                                  IAM.1049
                                                                  
 
                                                                  The Resource must be a JSONObject or JSONArray.
                                                                  
+
                                                                  The Resource must be a JSON object or JSON array.
                                                                  
                                                                   		
 
                                                                  The resource object is missing.
                                                                  
                                                                   		
 
                                                                  The AK in the request has expired.
                                                                  
 
                                                                  Create a new access key.
                                                                  
+
                                                                  Create an access key.
                                                                  
                                                                   		
 
                                                                  
 
                                                                  400
                                                                  
diff --git a/docs/iam/api-ref/iam_02_0007.html b/docs/iam/api-ref/iam_02_0007.html
index fbfb44422..f5f2d4fb3 100644
--- a/docs/iam/api-ref/iam_02_0007.html
+++ b/docs/iam/api-ref/iam_02_0007.html
@@ -30,13 +30,13 @@
 
 
 
                                                                  Request Parameters
                                                                  • Parameters in the request header
-
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
@@ -64,42 +64,65 @@
 
                                                                  • Example request
                                                                    curl -i -k -H 'Accept:application/json' -H 'Content-Type:application/json;charset=utf8' -H "X-Auth-Token:$token" -X GET https://sample.domain.com/v3/domains/{domain_id}/config/security_compliance
                                                                    
 
                                                                    • 
-
                                                                    Response Parameters
                                                                    • Parameters in the response body
-
                                                                    Parameter
                                                                    
 
                                                                    Mandatory
                                                                    
+
                                                                    Mandatory
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
-
-
-
                                                                    Parameter
                                                                    
+
                                                                    Response Parameters
                                                                    • Parameters in the response body
+
                                                                      
-
-
-
-
-
-
-
-
+
                                                                      Parameter
                                                                      
 
                                                                      Mandatory
                                                                      
+
                                                                      Type
                                                                      
 
                                                                      Type
                                                                      
-
                                                                      Description
                                                                      
+
                                                                      Description
                                                                      
                                                                       		
 
                                                                      
 
                                                                      security_compliance
                                                                      
+
                                                                      config
                                                                      
 
                                                                      Yes
                                                                      
+
                                                                      Object
                                                                      
 
                                                                      JSON
                                                                      
-
                                                                      Password strength policy.
                                                                      
+
                                                                      Configuration information.
                                                                      
                                                                       		
 
                                                                      password_regex
                                                                      
+
                                                                      
+
                                                                      
+
                                                                    • config
+
                                                                      
+
+
+
+
+
-
-
-
-
+
                                                                      Parameter
                                                                      
+
                                                                      Type
                                                                      
+
                                                                      Description
                                                                      
+
                                                                      security_compliance
                                                                      
 
                                                                      Yes
                                                                      
+
                                                                      Object
                                                                      
 
                                                                      String
                                                                      
-
                                                                      Regular expression of the password strength policy.
                                                                      
+
                                                                      Password strength policy information.
                                                                      
                                                                       		
 
                                                                      password_regex_description
                                                                      
+
                                                                      
+
                                                                      
+
                                                                    • config.security_compliance
+
                                                                      
+
+
+
+
+
-
-
-
+
+
+
@@ -119,7 +142,7 @@
 
                                                                      Status Codes
                                                                      
 
                                                                      Parameter
                                                                      
+
                                                                      Type
                                                                      
+
                                                                      Description
                                                                      
+
                                                                      password_regex
                                                                      
 
                                                                      Yes
                                                                      
+
                                                                      String
                                                                      
 
                                                                      String
                                                                      
+
                                                                      Regular expression of the password strength policy.
                                                                      
 
                                                                      Description of the password strength policy.
                                                                      
+
                                                                      password_regex_description
                                                                      
+
                                                                      String
                                                                      
+
                                                                      Description of the password strength policy.
                                                                      
                                                                       		
 
                                                                      
 
                                                                      
-
diff --git a/docs/iam/api-ref/iam_02_0008.html b/docs/iam/api-ref/iam_02_0008.html
index 6e840abda..42e01b33f 100644
--- a/docs/iam/api-ref/iam_02_0008.html
+++ b/docs/iam/api-ref/iam_02_0008.html
@@ -1,7 +1,7 @@
 
                                                                      Making an API Request
                                                                      
-
                                                                      This section describes the structure of a REST API request, and uses the IAM API for obtaining a user token (see Obtaining a User Token) as an example to demonstrate how to call an API. The obtained token can then be used to authenticate the calling of other APIs.
                                                                      
+
                                                                      This section describes the structure of a REST API request, and uses the IAM API for obtaining a user token (see Obtaining a User Token Through Password Authentication) as an example to demonstrate how to call an API. The obtained token can then be used to authenticate the calling of other APIs.
                                                                      
 
                                                                      Request URI
                                                                      A request URI is in the following format:
                                                                      
 
                                                                      {URI-scheme} :// {Endpoint} / {resource-path} ? {query-string}
                                                                      
 
@@ -42,18 +42,18 @@ https://www.example.com/v3/auth/tokens
 
                                                                      
 
                                                                      Request Methods
                                                                      The HTTP protocol defines the following request methods that can be used to send a request to the server:
                                                                      
 
                                                                      • GET: requests a server to return specified resources.
                                                                      • PUT: requests the server to update specified resources.
                                                                      • POST: requests the server to add resources or perform special operations.
                                                                      • DELETE: requests the server to delete specified resources, for example, an object.
                                                                      • HEAD: same as GET except that the server must return only the response header.
                                                                      • PATCH: requests the server to update partial content of a specified resource. If the resource does not exist, a new resource will be created.
                                                                      
-
                                                                      For example, in the case of the API used to obtain a user token (Obtaining a User Token), the request method is POST. The request is as follows:
                                                                      
+
                                                                      For example, in the case of the API used to obtain a user token (Obtaining a User Token Through Password Authentication), the request method is POST. The request is as follows:
                                                                      
 
                                                                       
 POST https://www.example.com/v3/auth/tokens
                                                                      
 
                                                                      
 
                                                                      Request Header
                                                                      You can also add additional header fields to a request, such as the fields required by a specified URI or HTTP method. For example, to request for the authentication information, add Content-Type, which specifies the request body type.
                                                                      
 
                                                                      Common request header fields are as follows:
                                                                      
-
                                                                      • Content-Type: specifies the request body type or format. This field is mandatory and its default value is application/json.
                                                                      • X-Auth-Token: specifies a user token only for token-based API authentication. X-Auth-Token is a response to the API used to obtain a user token (Obtaining a User Token). This API is the only one that does not require authentication.
                                                                         
                                                                        In addition to supporting token-based authentication, APIs also support authentication using access key ID/secret access key (AK/SK). During AK/SK-based authentication, an SDK is used to sign the request, and the Authorization (signature information) and X-Sdk-Date (time when the request is sent) header fields are automatically added to the request.
                                                                        
+
                                                                        • Content-Type: specifies the request body type or format. This field is mandatory and its default value is application/json.
                                                                        • X-Auth-Token: specifies a user token only for token-based API authentication. X-Auth-Token is a response to the API used to obtain a user token (Obtaining a User Token Through Password Authentication). This API is the only one that does not require authentication.
                                                                           
                                                                          In addition to supporting token-based authentication, APIs also support authentication using access key ID/secret access key (AK/SK). During AK/SK-based authentication, an SDK is used to sign the request, and the Authorization (signature information) and X-Sdk-Date (time when the request is sent) header fields are automatically added to the request.
                                                                          
 
                                                                          For details, see "AK/SK-based Authentication" in Authentication.
                                                                          
 
                                                                          
 
                                                                        
-
                                                                        The API used to obtain a user token (Obtaining a User Token) does not require authentication. Only the Content-Type field needs to be added to requests for calling the API. An example of such requests is as follows:
                                                                        
+
                                                                        The API used to obtain a user token (Obtaining a User Token Through Password Authentication) does not require authentication. Only the Content-Type field needs to be added to requests for calling the API. An example of such requests is as follows:
                                                                        
 
                                                                         
 POST https://www.example.com/v3/auth/tokens
@@ -61,8 +61,8 @@ Content-Type: application/json
                                                                        
 
                                                                        
 
                                                                        (Optional) Request Body
                                                                        The body of a request is often sent in a structured format as specified in the Content-Type header field. The request body transfers content except the request header.
                                                                        
 
                                                                        The request body varies between APIs. Some APIs do not require the request body, such as the APIs requested using the GET and DELETE methods.
                                                                        
-
                                                                        In the case of the API used to obtain a user token (Obtaining a User Token), the request parameters and parameter description can be obtained from the API request. The following provides an example request with a body included. Replace username, domainname, ******** (login password), and xxxxxxxxxxxxxxxxxx (project ID) with the actual values. If you obtain a token using an account, ensure that you set username and domainname to the same value.
                                                                        
-
                                                                         
                                                                        The scope parameter specifies where a token takes effect. You can set scope to an account or a project under the account. In the following example, the token takes effect only for the resources in a specified project. For more information about this API, see Obtaining a User Token.
                                                                        
+
                                                                        In the case of the API used to obtain a user token (Obtaining a User Token Through Password Authentication), the request parameters and parameter description can be obtained from the API request. The following provides an example request with a body included. Replace username, domainname, ******** (login password), and xxxxxxxxxxxxxxxxxx (project ID) with the actual values. If you obtain a token using an account, ensure that you set username and domainname to the same value.
                                                                        
+
                                                                         
                                                                        The scope parameter specifies where a token takes effect. You can set scope to an account or a project under the account. In the following example, the token takes effect only for the resources in a specified project. For more information about this API, see Obtaining a User Token Through Password Authentication.
                                                                        
 
                                                                        
 
                                                                         
@@ -93,7 +93,7 @@ Content-Type: application/json
     }
 }
 
                                                                        
-
                                                                        If all data required for the API request is available, you can send the request to call the API through curl, Postman, or coding. In the response to the API used to obtain a user token (Obtaining a User Token), x-subject-token is the desired user token. This token can then be used to authenticate the calling of other APIs.
                                                                        
+
                                                                        If all data required for the API request is available, you can send the request to call the API through curl, Postman, or coding. In the response to the API used to obtain a user token (Obtaining a User Token Through Password Authentication), x-subject-token is the desired user token. This token can then be used to authenticate the calling of other APIs.
                                                                        
 
                                                                        
 
                                                                        
 
                                                                        
diff --git a/docs/iam/api-ref/iam_02_0011.html b/docs/iam/api-ref/iam_02_0011.html
index df8ad26d0..8d6b5a921 100644
--- a/docs/iam/api-ref/iam_02_0011.html
+++ b/docs/iam/api-ref/iam_02_0011.html
@@ -314,7 +314,7 @@
 
                                                                      
-
@@ -323,7 +323,7 @@
 
-
                                                                      Status Code
                                                                      
 
                                                                      Description
                                                                      
+
                                                                      Description
                                                                      
                                                                       		
 
                                                                      
                                                                       
 
 
                                                                      Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.
                                                                      
                                                                       		
 
                                                                      Condition
                                                                      
+
                                                                      Condition
                                                                      
                                                                       		
 
                                                                      Object
                                                                      
 
                                                                      
 
                                                                      Resource
                                                                      
 
                                                                      Array of strings
                                                                      
+
                                                                      Object
                                                                      
                                                                       		
 
                                                                      Cloud resource. 
                                                                      
 
                                                                       NOTE: 
                                                                      • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                                                                      • The region segment can be * or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.
                                                                      • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be set to "Resource": {"uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"]}.
                                                                      
@@ -333,46 +333,6 @@
 
                                                                      
 
                                                                      
 
                                                                      
-
-
                                                                      
-
-
-
-
-
-
-
-
-
-
                                                                      Table 9 roles.policy.Statement.Condition
                                                                      Parameter
                                                                      
-
                                                                      Type
                                                                      
-
                                                                      Description
                                                                      
-
                                                                      operator
                                                                      
-
                                                                      Object
                                                                      
-
                                                                      Operator, for example, Bool and StringEquals.
                                                                      
-
                                                                      The parameter type is custom object.
                                                                      
-
                                                                      
-
                                                                      
-
-
                                                                      
-
-
-
-
-
-
-
-
-
-
                                                                      Table 10 roles.policy.Statement.Condition.operator
                                                                      Parameter
                                                                      
-
                                                                      Type
                                                                      
-
                                                                      Description
                                                                      
-
                                                                      attribute
                                                                      
-
                                                                      Array of strings
                                                                      
-
                                                                      Condition key. A key is a valid attribute that corresponds to an operator.
                                                                      
-
                                                                      The parameter type is custom character string array.
                                                                      
-
                                                                      
-
                                                                      
 
                                                                    
 
                                                                    Example Request
                                                                    GET https://sample.domain.com/v3.0/OS-ROLE/roles
                                                                    
 
                                                                    
diff --git a/docs/iam/api-ref/iam_02_0012.html b/docs/iam/api-ref/iam_02_0012.html
index 0ce94fc79..8021d9897 100644
--- a/docs/iam/api-ref/iam_02_0012.html
+++ b/docs/iam/api-ref/iam_02_0012.html
@@ -260,16 +260,16 @@
 
                                                                    • Allow
                                                                    • Deny
                                                                    
 
 
                                                                    Condition
                                                                    
+
                                                                    Condition
                                                                    
 
                                                                    Object
                                                                    
+
                                                                    Map<String,Map<String,Array<String>>>
                                                                    
                                                                     		
 
                                                                    Conditions for the permission to take effect. 
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Resource
                                                                    
 
                                                                    Array of strings
                                                                    
+
                                                                    Object
                                                                    
                                                                     		
 
                                                                    Cloud resource. 
                                                                    
 
                                                                     NOTE: 
                                                                    • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                                                                    • The region segment can be * or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.
                                                                    • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be set to "Resource": {"uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"]}.
                                                                    
@@ -280,7 +280,7 @@
 
                                                                    
 
                                                                    
 
-
                                                                    Table 8 role.policy.Statement.Condition
                                                                    Parameter
                                                                    
+
                                                                    
diff --git a/docs/iam/api-ref/iam_02_0013.html b/docs/iam/api-ref/iam_02_0013.html
index 2da4ed989..da3a0c790 100644
--- a/docs/iam/api-ref/iam_02_0013.html
+++ b/docs/iam/api-ref/iam_02_0013.html
@@ -211,7 +211,7 @@
 
-
-
-
@@ -226,7 +226,7 @@
 
-
                                                                    Table 8 role.policy.Statement.Condition
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
                                                                     		
 
                                                                    No
                                                                    
 
                                                                    Array of strings
                                                                    
+
                                                                    Object
                                                                    
                                                                     		
 
                                                                    Cloud resource. 
                                                                    
 
                                                                     NOTE: 
                                                                    • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                                                                    • The region segment can be * or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.
                                                                    
@@ -438,7 +438,7 @@
 
                                                                    
 
                                                                    Resource
                                                                    
 
                                                                    Array of strings
                                                                    
+
                                                                    Object
                                                                    
                                                                     		
 
                                                                    Cloud resource. 
                                                                    
 
                                                                     NOTE: 
                                                                    • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                                                                    • The region segment can be * or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.
                                                                    
diff --git a/docs/iam/api-ref/iam_02_0014.html b/docs/iam/api-ref/iam_02_0014.html
index 6e043fcf7..7ba4e2367 100644
--- a/docs/iam/api-ref/iam_02_0014.html
+++ b/docs/iam/api-ref/iam_02_0014.html
@@ -213,7 +213,7 @@
 
                                                                    • Allow
                                                                    • Deny
                                                                    
 
                                                                    		
 
                                                                    Condition
                                                                    
+
                                                                    Condition
                                                                    
                                                                     		
 
                                                                    No
                                                                    
                                                                     		
 
                                                                    No
                                                                    
 
                                                                    Array of strings
                                                                    
+
                                                                    Object
                                                                    
                                                                     		
 
                                                                    Cloud resource. 
                                                                    
 
                                                                     NOTE: 
                                                                    • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                                                                    • The region segment can be * or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.
                                                                    
@@ -236,264 +236,216 @@
 
 
                                                                    
 
                                                                    
-
-
                                                                    
-
-
-
-
-
-
-
-
-
-
-
-
                                                                    Table 7 role.policy.Statement.Condition
                                                                    Parameter
                                                                    
-
                                                                    Mandatory
                                                                    
-
                                                                    Type
                                                                    
-
                                                                    Description
                                                                    
-
                                                                    <operator>
                                                                    
-
                                                                    No
                                                                    
-
                                                                    Object
                                                                    
-
                                                                    Operator, for example, Bool and StringEquals.
                                                                    
-
                                                                    • The parameter type is custom object.
                                                                    
-
                                                                    
-
                                                                    
-
-
                                                                    
-
-
-
-
-
-
-
-
-
-
-
-
                                                                    Table 8 role.policy.Statement.Condition.<operator>
                                                                    Parameter
                                                                    
-
                                                                    Mandatory
                                                                    
-
                                                                    Type
                                                                    
-
                                                                    Description
                                                                    
-
                                                                    <attribute>
                                                                    
-
                                                                    No
                                                                    
-
                                                                    Array of strings
                                                                    
-
                                                                    Condition key. A key is a valid attribute that corresponds to an operator.
                                                                    
-
                                                                    • The parameter type is custom character string array.
                                                                    
-
                                                                    
-
                                                                    
 
                                                                    Response Parameters
                                                                    
-
                                                                    Table 9 Parameters in the response body
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
                                                                    Table 7 Parameters in the response body
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    role
                                                                    
+
                                                                    role
                                                                    
 
                                                                    Object
                                                                    
+
                                                                    Object
                                                                    
 
                                                                    Custom policy information.
                                                                    
+
                                                                    Custom policy information.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 10 role
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
-
                                                                    Table 8 role
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    catalog
                                                                    
+
                                                                    catalog
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Service catalog.
                                                                    
+
                                                                    Service catalog.
                                                                    
                                                                     		
 
                                                                    display_name
                                                                    
+
                                                                    display_name
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Display name of the custom policy.
                                                                    
+
                                                                    Display name of the custom policy.
                                                                    
                                                                     		
 
                                                                    description
                                                                    
+
                                                                    description
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Description of the custom policy.
                                                                    
+
                                                                    Description of the custom policy.
                                                                    
                                                                     		
 
                                                                    links
                                                                    
+
                                                                    links
                                                                    
 
                                                                    Object
                                                                    
+
                                                                    Object
                                                                    
 
                                                                    Resource link of the custom policy.
                                                                    
+
                                                                    Resource link of the custom policy.
                                                                    
                                                                     		
 
                                                                    policy
                                                                    
+
                                                                    policy
                                                                    
 
                                                                    Object
                                                                    
+
                                                                    Object
                                                                    
 
                                                                    Content of custom policy.
                                                                    
+
                                                                    Content of custom policy.
                                                                    
                                                                     		
 
                                                                    description_cn
                                                                    
+
                                                                    description_cn
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Description of the custom policy.
                                                                    
+
                                                                    Description of the custom policy.
                                                                    
                                                                     		
 
                                                                    domain_id
                                                                    
+
                                                                    domain_id
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Domain ID.
                                                                    
+
                                                                    Domain ID.
                                                                    
                                                                     		
 
                                                                    type
                                                                    
+
                                                                    type
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Display mode.
                                                                    
+
                                                                    Display mode.
                                                                    
 
                                                                     NOTE: 
                                                                    • AX: Account level.
                                                                    • XA: Project level.
                                                                    • The display mode of a custom policy can only be AX or XA. A custom policy must be displayed at either of the two levels.
                                                                    
 
                                                                    
                                                                     		
 
                                                                    id
                                                                    
+
                                                                    id
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Policy ID.
                                                                    
+
                                                                    Policy ID.
                                                                    
                                                                     		
 
                                                                    name
                                                                    
+
                                                                    name
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Name of the custom policy.
                                                                    
+
                                                                    Name of the custom policy.
                                                                    
                                                                     		
 
                                                                    updated_time
                                                                    
+
                                                                    updated_time
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Time when the custom policy was last updated.
                                                                    
+
                                                                    Time when the custom policy was last updated.
                                                                    
                                                                     		
 
                                                                    created_time
                                                                    
+
                                                                    created_time
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Time when the custom policy was created.
                                                                    
+
                                                                    Time when the custom policy was created.
                                                                    
                                                                     		
 
                                                                    references
                                                                    
+
                                                                    references
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Number of references.
                                                                    
+
                                                                    Number of references.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 11 role.links
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
                                                                    Table 9 role.links
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    self
                                                                    
+
                                                                    self
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Resource link.
                                                                    
+
                                                                    Resource link.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 12 role.policy
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
                                                                    Table 10 role.policy
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Version
                                                                    
+
                                                                    Version
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Policy version.
                                                                    
+
                                                                    Policy version.
                                                                    
 
                                                                     NOTE: 
                                                                    • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                                                                    • 1.1: Policy. A policy defines the permissions required to perform operations on a specific cloud resource under certain conditions.
                                                                    
 
                                                                    
                                                                     		
 
                                                                    Statement
                                                                    
+
                                                                    Statement
                                                                    
 
                                                                    Array of objects
                                                                    
+
                                                                    Array of objects
                                                                    
 
                                                                    Statement of the policy.
                                                                    
+
                                                                    Statement of the policy.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 13 role.policy.Statement
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
-
-
-
-
-
-
@@ -501,46 +453,6 @@
 
                                                                    Table 11 role.policy.Statement
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
 
                                                                    Array of strings
                                                                    
+
                                                                    Array of strings
                                                                    
 
                                                                    Specific operation permission on a resource.
                                                                    
+
                                                                    Specific operation permission on a resource.
                                                                    
 
                                                                     NOTE: 
                                                                    • The value format is Service name:Resource type:Operation, for example, vpc:ports:create.
                                                                    • Service name: indicates the product name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and operations are not case-sensitive. You can use an asterisk (*) to represent all operations.
                                                                    
 
                                                                    
                                                                     		
 
                                                                    Effect
                                                                    
+
                                                                    Effect
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.
                                                                    
+
                                                                    Effect of the permission. The value can be Allow or Deny. If both Allow and Deny statements are found in a policy, the authentication starts from the Deny statements.
                                                                    
 
                                                                    Options:
                                                                    
 
                                                                    • Allow
                                                                    • Deny
                                                                    
                                                                     		
 
                                                                    Condition
                                                                    
+
                                                                    Condition
                                                                    
 
                                                                    Object
                                                                    
+
                                                                    Object
                                                                    
 
                                                                    Conditions for the permission to take effect. 
                                                                    
+
                                                                    Conditions for the permission to take effect. 
                                                                    
                                                                     		
 
                                                                    Resource
                                                                    
+
                                                                    Resource
                                                                    
 
                                                                    Array of strings
                                                                    
+
                                                                    Object
                                                                    
 
                                                                    Cloud resource. 
                                                                    
+
                                                                    Cloud resource. 
                                                                    
 
                                                                     NOTE: 
                                                                    • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                                                                    • The region segment can be * or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.
                                                                    
 
                                                                    
 
                                                                    
 
                                                                    
 
                                                                    
-
-
                                                                    
-
-
-
-
-
-
-
-
-
-
                                                                    Table 14 role.policy.Statement.Condition
                                                                    Parameter
                                                                    
-
                                                                    Type
                                                                    
-
                                                                    Description
                                                                    
-
                                                                    operator
                                                                    
-
                                                                    Object
                                                                    
-
                                                                    Operator, for example, Bool and StringEquals.
                                                                    
-
                                                                    • The parameter type is custom object.
                                                                    
-
                                                                    
-
                                                                    
-
-
                                                                    
-
-
-
-
-
-
-
-
-
-
                                                                    Table 15 role.policy.Statement.Condition.operator
                                                                    Parameter
                                                                    
-
                                                                    Type
                                                                    
-
                                                                    Description
                                                                    
-
                                                                    attribute
                                                                    
-
                                                                    Array of strings
                                                                    
-
                                                                    Condition key. A key is a valid attribute that corresponds to an operator.
                                                                    
-
                                                                    • The parameter type is custom character string array.
                                                                    
-
                                                                    
-
                                                                    
 
 
                                                                    Example Request
                                                                    PATCH https://iam.eu-de.otc.t-systems.com/v3.0/OS-ROLE/roles/{role_id}
                                                                    
 
                                                                    {
@@ -613,40 +525,40 @@
 }
                                                                    
 
                                                                    
 
                                                                    Status Codes
                                                                    
-
                                                                    Status Code
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
-
-
-
-
-
diff --git a/docs/iam/api-ref/iam_02_0022.html b/docs/iam/api-ref/iam_02_0022.html
index 120649fcb..338a205c8 100644
--- a/docs/iam/api-ref/iam_02_0022.html
+++ b/docs/iam/api-ref/iam_02_0022.html
@@ -63,7 +63,7 @@
 
-
@@ -80,11 +80,86 @@
 
-
+
+
+
+
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Status Code
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    200
                                                                    
+
                                                                    200
                                                                    
 
                                                                    The request is successful.
                                                                    
+
                                                                    The request is successful.
                                                                    
                                                                     		
 
                                                                    400
                                                                    
+
                                                                    400
                                                                    
 
                                                                    The server failed to process the request.
                                                                    
+
                                                                    The server failed to process the request.
                                                                    
                                                                     		
 
                                                                    401
                                                                    
+
                                                                    401
                                                                    
 
                                                                    Authentication failed.
                                                                    
+
                                                                    Authentication failed.
                                                                    
                                                                     		
 
                                                                    403
                                                                    
+
                                                                    403
                                                                    
 
                                                                    Access denied.
                                                                    
+
                                                                    Access denied.
                                                                    
                                                                     		
 
                                                                    404
                                                                    
+
                                                                    404
                                                                    
 
                                                                    The requested resource cannot be found.
                                                                    
+
                                                                    The requested resource cannot be found.
                                                                    
                                                                     		
 
                                                                    500
                                                                    
+
                                                                    500
                                                                    
 
                                                                    Internal server error.
                                                                    
+
                                                                    Internal server error.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    protect_policy
                                                                    
 
                                                                    object
                                                                    
+
                                                                    Object
                                                                    
                                                                     		
 
                                                                    Operation protection policy.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    operation_protection
                                                                    
+
                                                                    allow_user
                                                                    
+
                                                                    AllowUserBody object
                                                                    
+
                                                                    Attributes that IAM users can modify.
                                                                    
+
                                                                    operation_protection
                                                                    
                                                                     		
 
                                                                    Boolean
                                                                    
 
                                                                    Indicates whether operation protection has been enabled. The value can be true or false.
                                                                    
+
                                                                    Whether operation protection has been enabled. The value can be true or false.
                                                                    
+
                                                                    mobile
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Mobile number used for verification.
                                                                    
+
                                                                    admin_check
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Whether to designate a person for verification. The value on indicates that a specific person is designated for verification, and the value off indicates that the operator is designated for verification.
                                                                    
+
                                                                    email
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Email address used for verification.
                                                                    
+
                                                                    scene
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Verification method. The options are mobile and email.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -97,7 +172,17 @@
 
                                                                    The request is successful.
                                                                    { 
   "protect_policy" : { 
-    "operation_protection" : false 
+    "allow_user": {      
+    "manage_mobile": false,      
+    "manage_accesskey": false,      
+    "manage_email": false,      
+    "manage_password": false    
+    },
+    "operation_protection" : false, 
+    "mobile": "",    
+    "admin_check": "off",    
+    "email": "",    
+    "scene": ""
   } 
 }
                                                                    
diff --git a/docs/iam/api-ref/iam_02_0023.html b/docs/iam/api-ref/iam_02_0023.html
index a704c9c6c..f617f6a97 100644
--- a/docs/iam/api-ref/iam_02_0023.html
+++ b/docs/iam/api-ref/iam_02_0023.html
@@ -260,7 +260,7 @@
   "password_policy" : { 
     "password_requirements" : "A password must contain at least two of the following: uppercase letters, lowercase letters, digits, and special characters.", 
     "minimum_password_age" : 20, 
-    "minimum_password_length" : 8, 
+    "minimum_password_length" : 6, 
     "maximum_password_length" : 32, 
     "number_of_recent_passwords_disallowed" : 2, 
     "password_validity_period" : 60, 
diff --git a/docs/iam/api-ref/iam_02_0024.html b/docs/iam/api-ref/iam_02_0024.html
index a8fa76f81..d7aaa8dd9 100644
--- a/docs/iam/api-ref/iam_02_0024.html
+++ b/docs/iam/api-ref/iam_02_0024.html
@@ -119,7 +119,7 @@
 
-
-
-
-
-
+
+
+
+
+
+
+
+
+
+
@@ -164,7 +182,71 @@
 
-
+
+
+
                                                                    Table 5 protect_policy.allow_user
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    manage_accesskey
                                                                    
+
                                                                    boolean
                                                                    
+
                                                                    Whether IAM users are allowed to manage AKs by themselves. The value can be true or false.
                                                                    
+
                                                                    manage_email
                                                                    
+
                                                                    boolean
                                                                    
+
                                                                    Whether IAM users are allowed to change their email addresses. The value can be true or false.
                                                                    
+
                                                                    manage_mobile
                                                                    
+
                                                                    boolean
                                                                    
+
                                                                    Whether IAM users are allowed to change their mobile numbers. The value can be true or false.
                                                                    
+
                                                                    manage_password
                                                                    
+
                                                                    boolean
                                                                    
+
                                                                    Whether IAM users are allowed to change their passwords. The value can be true or false.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
 
                                                                    Boolean
                                                                    
 
                                                                    Indicates whether the password can be the username or the username spelled backwards.
                                                                    
+
                                                                    Whether the password can be the username or the username spelled backwards.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    password_requirements
                                                                    
@@ -148,12 +148,13 @@
   "password_policy" : { 
     "password_requirements" : "A password must contain at least two of the following: uppercase letters, lowercase letters, digits, and special characters.", 
     "minimum_password_age" : 20, 
-    "minimum_password_length" : 8, 
+    "minimum_password_length" : 6, 
     "maximum_password_length" : 32, 
     "number_of_recent_passwords_disallowed" : 2, 
     "password_validity_period" : 60, 
     "maximum_consecutive_identical_chars" : 3, 
-    "password_not_username_or_invert" : true 
+    "password_not_username_or_invert" : true ,
+    
   } 
 }
 
diff --git a/docs/iam/api-ref/iam_02_0027.html b/docs/iam/api-ref/iam_02_0027.html
index ad39ccf3f..60725b6f5 100644
--- a/docs/iam/api-ref/iam_02_0027.html
+++ b/docs/iam/api-ref/iam_02_0027.html
@@ -87,20 +87,38 @@
 
 
                                                                    allow_address_netmasks
                                                                    
 
                                                                    Yes
                                                                    
+
                                                                    No
                                                                    
                                                                     		
 
                                                                    Array of objects
                                                                    
 
                                                                    IPv4 CIDR blocks from which console access is allowed.
                                                                    
+
                                                                    IPv4 address or CIDR block from which access is allowed. Specify either allow_address_netmasks or allow_ip_ranges.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    allow_ip_ranges
                                                                    
 
                                                                    Yes
                                                                    
+
                                                                    No
                                                                    
                                                                     		
 
                                                                    Array of objects
                                                                    
 
                                                                    IP address ranges from which console access is allowed.
                                                                    
+
                                                                    IPv4 address or CIDR block from which access is allowed. Specify either allow_address_netmasks or allow_ip_ranges.
                                                                    
+
                                                                    allow_address_netmasks_ipv6
                                                                    
+
                                                                    No
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    IPv6 address or CIDR block from which access is allowed. Specify either allow_address_netmasks_ipv6 or allow_ip_ranges_ipv6.
                                                                    
+
                                                                    allow_ip_ranges_ipv6
                                                                    
+
                                                                    No
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    IPv6 address or CIDR block from which access is allowed. Specify either allow_address_netmasks_ipv6 or allow_ip_ranges_ipv6.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    String
                                                                    
 
                                                                    IP address range, for example, 0.0.0.0-255.255.255.255.
                                                                    
+
                                                                    IPv4 address range, for example, 0.0.0.0-255.255.255.255.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 7 allow_address_netmasks_ipv6
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    address_netmask
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IPv6 address or CIDR block, for example, 0000:0000:0000:0000:0000:0000:0000:0000/100.
                                                                    
+
                                                                    description
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the IPv6 address or CIDR block.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -172,7 +254,7 @@
 
                                                                    Response Parameters
                                                                    
-
                                                                    Table 8 allow_ip_ranges_ipv6
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    description
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the IP address range.
                                                                    
+
                                                                    ip_range
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IPv6 address range, for example, 0000:0000:0000:0000:0000:0000:0000:0000-FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Table 7 Parameters in the response body
                                                                    Parameter
                                                                    
+
                                                                    
@@ -191,7 +273,7 @@
 
                                                                    Table 9 Parameters in the response body
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 8 console_acl_policy
                                                                    Parameter
                                                                    
+
                                                                    
@@ -213,11 +295,25 @@
 
+
+
+
+
+
+
+
+
                                                                    Table 10 console_acl_policy
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    IP address ranges from which console access is allowed.
                                                                    
                                                                     		
 
                                                                    allow_address_netmasks_ipv6
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    IPv6 address or CIDR block from which access is allowed. This parameter is only returned when an IPv6 address range or CIDR block from which access is allowed is specified.
                                                                    
+
                                                                    allow_ip_ranges_ipv6
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    IPv6 address range from which access is allowed. This parameter is only returned when an IPv6 address range from which access is allowed is specified.
                                                                    
+
                                                                    
 
 
                                                                    
 
                                                                    
 
-
                                                                    Table 9 allow_address_netmasks
                                                                    Parameter
                                                                    
+
                                                                    
@@ -229,7 +325,7 @@
 
-
                                                                    Table 11 allow_address_netmasks
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
                                                                     		
 
                                                                    String
                                                                    
 
                                                                    IPv4 CIDR block, for example, 192.168.0.1/24.
                                                                    
+
                                                                    IPv4 CIDR block, for example, 192.168.0.1/24.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    description
                                                                    
@@ -243,7 +339,7 @@
 
                                                                    
 
                                                                    
 
-
                                                                    Table 10 allow_ip_ranges
                                                                    Parameter
                                                                    
+
                                                                    
@@ -262,7 +358,59 @@
 
-
+
+
+
                                                                    Table 12 allow_ip_ranges
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
                                                                     		
 
                                                                    String
                                                                    
 
                                                                    IP address range, for example, 0.0.0.0-255.255.255.255.
                                                                    
+
                                                                    IPv4 address range, for example, 0.0.0.0-255.255.255.255.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 13 allow_address_netmasks_ipv6
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    address_netmask
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IPv6 address or CIDR block, for example, 0000:0000:0000:0000:0000:0000:0000:0000/100.
                                                                    
+
                                                                    description
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the IPv6 address or CIDR block.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
@@ -286,9 +434,19 @@
     }, { 
       "address_netmask" : "192.168.0.2/23", 
       "description" : "4" 
-    } ] 
-  } 
-}
+    } ] ,
+    "allow_ip_ranges_ipv6": [{	
+      "ip_range": "0000:0000:0000:0000:0000:0000:0000:0000-FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF",
+      "description": "IPv6 address range"
+    } ],
+
+    "allow_address_netmasks_ipv6": [{
+       "address_netmask": "0000:0000:0000:0000:0000:0000:0000:0000/100",
+       "description": "IPv6 address or CIDR block"
+    }]
+  }
+}
+
                                                                    Example Response
                                                                    Status code: 200
                                                                    
 
                                                                    The request is successful.
                                                                    
@@ -308,6 +466,16 @@
       "address_netmask" : "192.168.0.1/24", 
       "description" : "" 
     } ] 
+,
+    "allow_ip_ranges_ipv6": [{	
+      "ip_range": "0000:0000:0000:0000:0000:0000:0000:0000-FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF",
+      "description": "IPv6 address range"
+    } ],
+
+    "allow_address_netmasks_ipv6": [{
+       "address_netmask": "0000:0000:0000:0000:0000:0000:0000:0000/100",
+       "description": "IPv6 address or CIDR block"
+    }]
   } 
 }
 
                                                                    
diff --git a/docs/iam/api-ref/iam_02_0028.html b/docs/iam/api-ref/iam_02_0028.html
index 74960d5bf..7d2e97962 100644
--- a/docs/iam/api-ref/iam_02_0028.html
+++ b/docs/iam/api-ref/iam_02_0028.html
@@ -84,14 +84,28 @@
 
-
-
+
+
+
+
+
+
+
+
@@ -143,7 +157,59 @@
 
-
+
+
+
                                                                    Table 14 allow_ip_ranges_ipv6
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    description
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the IP address range.
                                                                    
+
                                                                    ip_range
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IPv6 address range, for example, 0000:0000:0000:0000:0000:0000:0000:0000-FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
 
                                                                    Array of objects
                                                                    
 
                                                                    IPv4 CIDR blocks from which console access is allowed.
                                                                    
+
                                                                    IPv4 address or CIDR block from which access is allowed. This parameter is returned only when an IPv4 address or CIDR block from which console access is allowed is specified.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    allow_ip_ranges
                                                                    
                                                                     		
 
                                                                    Array of objects
                                                                    
 
                                                                    IP address ranges from which console access is allowed.
                                                                    
+
                                                                    IPv4 address range from which access is allowed. This parameter is returned only when an IP address range from which access is allowed is specified.
                                                                    
+
                                                                    allow_address_netmasks_ipv6
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    IPv6 address or CIDR block from which access is allowed. This parameter is only returned when an IPv6 address range or CIDR block from which access is allowed is specified.
                                                                    
+
                                                                    allow_ip_ranges_ipv6
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    IPv6 address range from which access is allowed. This parameter is only returned when an IPv6 address range from which access is allowed is specified.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    String
                                                                    
 
                                                                    IP address range, for example, 0.0.0.0-255.255.255.255.
                                                                    
+
                                                                    IPv4 address range, for example, 0.0.0.0-255.255.255.255.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 7 allow_address_netmasks_ipv6
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    address_netmask
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IPv6 address or CIDR block, for example, 0000:0000:0000:0000:0000:0000:0000:0000/100.
                                                                    
+
                                                                    description
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the IPv6 address or CIDR block.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
@@ -169,7 +235,16 @@
     }, { 
       "address_netmask" : "192.168.0.1/24", 
       "description" : "" 
-    } ] 
+    } ] ,
+    "allow_ip_ranges_ipv6": [{	
+      "ip_range": "0000:0000:0000:0000:0000:0000:0000:0000-FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF",
+      "description": "IPv6 address range"
+    } ],
+
+    "allow_address_netmasks_ipv6": [{
+       "address_netmask": "0000:0000:0000:0000:0000:0000:0000:0000/100",
+       "description": "IPv6 address or CIDR block"
+    }]
   } 
 }
diff --git a/docs/iam/api-ref/iam_02_0029.html b/docs/iam/api-ref/iam_02_0029.html
index 703c5642b..f7f6a7236 100644
--- a/docs/iam/api-ref/iam_02_0029.html
+++ b/docs/iam/api-ref/iam_02_0029.html
@@ -66,7 +66,7 @@
 
-
@@ -87,20 +87,29 @@
 
-
-
-
-
+
+
+
+
+
@@ -170,9 +179,41 @@
 
                                                                    Table 8 allow_ip_ranges_ipv6
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    description
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the IPv6 address range.
                                                                    
+
                                                                    ip_range
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IPv6 address range, for example, 0000:0000:0000:0000:0000:0000:0000:0000-FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF:FFFF.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Yes
                                                                    
 
                                                                    object
                                                                    
+
                                                                    Object
                                                                    
                                                                     		
 
                                                                    ACL for API access.
                                                                    
                                                                     		
 
                                                                    allow_address_netmasks
                                                                    
 
                                                                    Yes
                                                                    
+
                                                                    No
                                                                    
                                                                     		
 
                                                                    Array of objects
                                                                    
 
                                                                    IPv4 CIDR blocks from which API access is allowed.
                                                                    
+
                                                                    IPv4 CIDR blocks from which API access is allowed. Specify either allow_address_netmasks or allow_ip_ranges.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    allow_ip_ranges
                                                                    
 
                                                                    Yes
                                                                    
+
                                                                    No
                                                                    
                                                                     		
 
                                                                    Array of objects
                                                                    
 
                                                                    IP address ranges from which API access is allowed.
                                                                    
+
                                                                    IP address ranges from which API access is allowed. Specify either allow_address_netmasks or allow_ip_ranges.
                                                                    
+
                                                                    allow_vpc_endpoints
                                                                    
+
                                                                    No
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    VPC address from which API access is allowed.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 7 allow_vpc_endpoints
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    description
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the VPC address.
                                                                    
+
                                                                    vpc_endpoint_id
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    VPC address, for example, 8di3jdu-38d7-jhfa-7df6-8adyfiadfia6d.
                                                                    
+
                                                                    
+
                                                                    
 
 
                                                                    Response Parameters
                                                                    
-
                                                                    Table 7 Parameters in the response body
                                                                    Parameter
                                                                    
+
                                                                    
@@ -182,7 +223,7 @@
 
-
@@ -191,7 +232,7 @@
 
                                                                    Table 8 Parameters in the response body
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    api_acl_policy
                                                                    
 
                                                                    object
                                                                    
+
                                                                    Object
                                                                    
                                                                     		
 
                                                                    ACL for API access.
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 8 api_acl_policy
                                                                    Parameter
                                                                    
+
                                                                    
@@ -201,23 +242,30 @@
 
-
-
-
+
+
+
+
                                                                    Table 9 api_acl_policy
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    allow_address_netmasks
                                                                    
 
                                                                    objects
                                                                    
+
                                                                    Array of objects
                                                                    
                                                                     		
 
                                                                    IPv4 CIDR blocks from which API access is allowed.
                                                                    
                                                                     		
 
                                                                    allow_ip_ranges
                                                                    
+
                                                                    allow_ip_ranges
                                                                    
 
                                                                    objects
                                                                    
+
                                                                    Array of objects
                                                                    
                                                                     		
 
                                                                    IP address ranges from which API access is allowed.
                                                                    
                                                                     		
 
                                                                    allow_vpc_endpoints
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    VPC address from which access is allowed. This parameter is only returned when a VPC address from which API access is allowed is specified.
                                                                    
+
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 9 allow_address_netmasks
                                                                    Parameter
                                                                    
+
                                                                    
@@ -243,7 +291,7 @@
 
                                                                    Table 10 api_acl_policy.allow_address_netmasks
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    
+
+
+
+
                                                                    Table 10 allow_ip_ranges
                                                                    Parameter
                                                                    
+
                                                                    
@@ -268,6 +316,32 @@
 
                                                                    Table 11 api_acl_policy.allow_ip_ranges
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
                                                                     		
 
                                                                    
 
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 12 api_acl_policy.allow_vpc_endpoints
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    description
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the VPC address.
                                                                    
+
                                                                    vpc_endpoint_id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    VPC address, for example, 8di3jdu-38d7-jhfa-7df6-8adyfiadfia6d.
                                                                    
+
                                                                    
+
                                                                    
 
 
                                                                    Example Request
                                                                    PUT https://sample.domain.com/v3.0/OS-SECURITYPOLICY/domains/{domain_id}/api-acl-policy 
  
@@ -275,17 +349,7 @@
   "api_acl_policy" : { 
     "allow_ip_ranges" : [ { 
       "ip_range" : "0.0.0.0-255.255.255.255", 
-      "description" : "1" 
-    }, { 
-      "ip_range" : "0.0.0.0-255.255.255.253", 
-      "description" : "12" 
-    } ], 
-    "allow_address_netmasks" : [ { 
-      "address_netmask" : "192.168.0.1/24", 
-      "description" : "3" 
-    }, { 
-      "address_netmask" : "192.168.0.2/23", 
-      "description" : "4" 
+      "description" : "1"     
     } ] 
   } 
 }
                                                                    
@@ -296,17 +360,7 @@
   "api_acl_policy" : { 
     "allow_ip_ranges" : [ { 
       "ip_range" : "0.0.0.0-255.255.255.255", 
-      "description" : "" 
-    }, { 
-      "ip_range" : "0.0.0.0-255.255.255.255", 
-      "description" : "" 
-    } ], 
-    "allow_address_netmasks" : [ { 
-      "address_netmask" : "192.168.0.1/24", 
-      "description" : "" 
-    }, { 
-      "address_netmask" : "192.168.0.1/24", 
-      "description" : "" 
+      "description" : "1" 
     } ] 
   } 
 }
diff --git a/docs/iam/api-ref/iam_02_0030.html b/docs/iam/api-ref/iam_02_0030.html
index f66933863..0b336c874 100644
--- a/docs/iam/api-ref/iam_02_0030.html
+++ b/docs/iam/api-ref/iam_02_0030.html
@@ -94,6 +94,13 @@
 
                                                                    IP address ranges from which API access is allowed.
                                                                    
                                                                     		
 
                                                                    allow_vpc_endpoints
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    VPC endpoints from which API access is allowed.
                                                                    
+
                                                                    
 
 
                                                                    
 
                                                                    
@@ -149,6 +156,32 @@
 
 
                                                                    
 
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 7 allow_vpc_endpoints
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    vpc_endpoint_id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    VPC endpoint ID, for example, 8di3jdu38d7jhfa7df68adyfiadfia6d.
                                                                    
+
                                                                    description
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Description about the VPC endpoint.
                                                                    
+
                                                                    
+
                                                                    
 
 
                                                                    Example Request
                                                                    GET https://sample.domain.com/v3.0/OS-SECURITYPOLICY/domains/{domain_id}/api-acl-policy
                                                                    
 
                                                                    
@@ -169,7 +202,17 @@
     }, { 
       "address_netmask" : "192.168.0.1/24", 
       "description" : "" 
-    } ] 
+    } ] ,
+     "allow_vpc_endpoints": [
+       {
+       "vpc_endpoint_id": "8di3jdu38d7jhfa7df68adyfiadfia6d",
+       "description": ""
+        },
+        {
+         "vpc_endpoint_id": "23i3jdu38d7jhfa7df68adyfiadfia8j",
+         "description": ""
+          }
+        ]
   } 
 }
 
diff --git a/docs/iam/api-ref/iam_02_0046.html b/docs/iam/api-ref/iam_02_0046.html
index 1b27c19e8..cf729b227 100644
--- a/docs/iam/api-ref/iam_02_0046.html
+++ b/docs/iam/api-ref/iam_02_0046.html
@@ -2,19 +2,24 @@
 
 
                                                                    Action List
                                                                    
 
                                                                    Token Management
                                                                    
-
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
@@ -22,47 +27,60 @@
 
                                                                    Access Key Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Obtaining an Agency Token
                                                                    
+
                                                                    Obtaining an Agency Token
                                                                    
 
                                                                    POST /v3/auth/tokens
                                                                    
+
                                                                    POST /v3/auth/tokens
                                                                    
 
                                                                    iam:tokens:assume
                                                                    
+
                                                                    iam:tokens:assume
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
@@ -70,40 +88,51 @@
 
                                                                    Virtual MFA Device Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Listing Permanent Access Keys
                                                                    
+
                                                                    Listing Permanent Access Keys
                                                                    
 
                                                                    GET /v3.0/OS-CREDENTIAL/credentials
                                                                    
+
                                                                    GET /v3.0/OS-CREDENTIAL/credentials
                                                                    
 
                                                                    iam:credentials:listCredentials
                                                                    
+
                                                                    iam:credentials:listCredentials
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying a Permanent Access Key
                                                                    
+
                                                                    Querying a Permanent Access Key
                                                                    
 
                                                                    GET /v3.0/OS-CREDENTIAL/credentials/{access_key}
                                                                    
+
                                                                    GET /v3.0/OS-CREDENTIAL/credentials/{access_key}
                                                                    
 
                                                                    iam:credentials:getCredential
                                                                    
+
                                                                    iam:credentials:getCredential
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating a Permanent Access Key
                                                                    
+
                                                                    Creating a Permanent Access Key
                                                                    
 
                                                                    POST /v3.0/OS-CREDENTIAL/credentials
                                                                    
+
                                                                    POST /v3.0/OS-CREDENTIAL/credentials
                                                                    
 
                                                                    iam:credentials:createCredential
                                                                    
+
                                                                    iam:credentials:createCredential
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Modifying a Permanent Access Key
                                                                    
+
                                                                    Modifying a Permanent Access Key
                                                                    
 
                                                                    PUT /v3.0/OS-CREDENTIAL/credentials/{access_key}
                                                                    
+
                                                                    PUT /v3.0/OS-CREDENTIAL/credentials/{access_key}
                                                                    
 
                                                                    iam:credentials:updateCredential
                                                                    
+
                                                                    iam:credentials:updateCredential
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a Permanent Access Key
                                                                    
+
                                                                    Deleting a Permanent Access Key
                                                                    
 
                                                                    DELETE /v3.0/OS-CREDENTIAL/credentials/{access_key}
                                                                    
+
                                                                    DELETE /v3.0/OS-CREDENTIAL/credentials/{access_key}
                                                                    
 
                                                                    iam:credentials:deleteCredential
                                                                    
+
                                                                    iam:credentials:deleteCredential
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
@@ -111,54 +140,69 @@
 
                                                                    Project Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Unbinding a Virtual MFA Device
                                                                    
+
                                                                    Unbinding a Virtual MFA Device
                                                                    
 
                                                                    PUT /v3.0/OS-MFA/mfa-devices/unbind
                                                                    
+
                                                                    PUT /v3.0/OS-MFA/mfa-devices/unbind
                                                                    
 
                                                                    iam:mfa:unbindMFADevice
                                                                    
+
                                                                    iam:mfa:unbindMFADevice
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Binding a Virtual MFA Device
                                                                    
+
                                                                    Binding a Virtual MFA Device
                                                                    
 
                                                                    PUT /v3.0/OS-MFA/mfa-devices/bind
                                                                    
+
                                                                    PUT /v3.0/OS-MFA/mfa-devices/bind
                                                                    
 
                                                                    iam:mfa:bindMFADevice
                                                                    
+
                                                                    iam:mfa:bindMFADevice
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating a Virtual MFA Device
                                                                    
+
                                                                    Creating a Virtual MFA Device
                                                                    
 
                                                                    POST /v3.0/OS-MFA/virtual-mfa-devices
                                                                    
+
                                                                    POST /v3.0/OS-MFA/virtual-mfa-devices
                                                                    
 
                                                                    iam:mfa:createVirtualMFADevice
                                                                    
+
                                                                    iam:mfa:createVirtualMFADevice
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a Virtual MFA Device
                                                                    
+
                                                                    Deleting a Virtual MFA Device
                                                                    
 
                                                                    DELETE /v3.0/OS-MFA/virtual-mfa-devices
                                                                    
+
                                                                    DELETE /v3.0/OS-MFA/virtual-mfa-devices
                                                                    
 
                                                                    iam:mfa:deleteVirtualMFADevice
                                                                    
+
                                                                    iam:mfa:deleteVirtualMFADevice
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
@@ -166,19 +210,24 @@
 
                                                                    Tenant Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Creating a Project
                                                                    
+
                                                                    Creating a Project
                                                                    
 
                                                                    POST /v3/projects
                                                                    
+
                                                                    POST /v3/projects
                                                                    
 
                                                                    iam:projects:createProject
                                                                    
+
                                                                    iam:projects:createProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Modifying Project Data
                                                                    
+
                                                                    Modifying Project Data
                                                                    
 
                                                                    PATCH /v3/projects/{project_id}
                                                                    
+
                                                                    PATCH /v3/projects/{project_id}
                                                                    
 
                                                                    iam:projects:updateProject
                                                                    
+
                                                                    iam:projects:updateProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Changing Project Status
                                                                    
+
                                                                    Setting the Status of a Specified Project
                                                                    
 
                                                                    PUT /v3-ext/projects/{project_id}
                                                                    
+
                                                                    PUT /v3-ext/projects/{project_id}
                                                                    
 
                                                                    iam:projects:updateProject
                                                                    
+
                                                                    iam:projects:updateProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the List of Projects Accessible to Users
                                                                    
+
                                                                    Querying the List of Projects Accessible to Users
                                                                    
 
                                                                    GET /v3/users/{user_id}/projects
                                                                    
+
                                                                    GET /v3/users/{user_id}/projects
                                                                    
 
                                                                    iam:projects:listProjectsForUser
                                                                    
+
                                                                    iam:projects:listProjectsForUser
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a Project
                                                                    
+
                                                                    Deleting a Project
                                                                    
 
                                                                    DELETE /v3/projects/{project_id}
                                                                    
+
                                                                    DELETE /v3/projects/{project_id}
                                                                    
 
                                                                    iam:projects:deleteProject
                                                                    
+
                                                                    iam:projects:deleteProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the Quotas of a Project
                                                                    
+
                                                                    Querying the Quotas of a Project
                                                                    
 
                                                                    GET /v3.0/OS-QUOTA/projects/{project_id}
                                                                    
+
                                                                    GET /v3.0/OS-QUOTA/projects/{project_id}
                                                                    
 
                                                                    iam:quotas:listQuotasForProject
                                                                    
+
                                                                    iam:quotas:listQuotasForProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
@@ -186,138 +235,177 @@
 
                                                                    User Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    (Project)
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Querying Tenant Quotas
                                                                    
+
                                                                    Querying Tenant Quotas
                                                                    
 
                                                                    GET /v3.0/OS-QUOTA/domains/{domain_id}
                                                                    
+
                                                                    GET /v3.0/OS-QUOTA/domains/{domain_id}
                                                                    
 
                                                                    iam:quotas:listQuotas
                                                                    
+
                                                                    iam:quotas:listQuotas
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
@@ -325,68 +413,87 @@
 
                                                                    User Group Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Listing Users
                                                                    
+
                                                                    Listing Users
                                                                    
 
                                                                    GET /v3/users
                                                                    
+
                                                                    GET /v3/users
                                                                    
 
                                                                    iam:users:listUsers
                                                                    
+
                                                                    iam:users:listUsers
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying User Details
                                                                    
+
                                                                    Querying User Details
                                                                    
 
                                                                    GET /v3/users/{user_id}
                                                                    
+
                                                                    GET /v3/users/{user_id}
                                                                    
 
                                                                    iam:users:getUser
                                                                    
+
                                                                    iam:users:getUser
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying User Details (Recommended)
                                                                    
+
                                                                    Querying User Details (Recommended)
                                                                    
 
                                                                    GET /v3.0/OS-USER/users/{user_id}
                                                                    
+
                                                                    GET /v3.0/OS-USER/users/{user_id}
                                                                    
 
                                                                    iam:users:getUser
                                                                    
+
                                                                    iam:users:getUser
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the User Group Which a User Belongs to
                                                                    
+
                                                                    Querying the User Group Which a User Belongs to
                                                                    
 
                                                                    GET /v3/users/{user_id}/groups
                                                                    
+
                                                                    GET /v3/users/{user_id}/groups
                                                                    
 
                                                                    iam:groups:listGroupsForUser
                                                                    
+
                                                                    iam:groups:listGroupsForUser
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Users in a User Group
                                                                    
+
                                                                    Querying Users in a User Group
                                                                    
 
                                                                    GET /v3/groups/{group_id}/users
                                                                    
+
                                                                    GET /v3/groups/{group_id}/users
                                                                    
 
                                                                    iam:users:listUsersForGroup
                                                                    
+
                                                                    iam:users:listUsersForGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating a User
                                                                    
+
                                                                    Creating a User
                                                                    
 
                                                                    POST /v3/users
                                                                    
+
                                                                    POST /v3/users
                                                                    
 
                                                                    iam:users:createUser
                                                                    
+
                                                                    iam:users:createUser
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Changing the Password of a User
                                                                    
+
                                                                    Changing the Password of a User
                                                                    
 
                                                                    POST /v3/users/{user_id}/password
                                                                    
+
                                                                    POST /v3/users/{user_id}/password
                                                                    
 
                                                                    iam:users:updateUserPassword
                                                                    
+
                                                                    iam:users:updateUserPassword
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Modifying User Information
                                                                    
+
                                                                    Modifying User Information
                                                                    
 
                                                                    PATCH /v3/users/{user_id}
                                                                    
+
                                                                    PATCH /v3/users/{user_id}
                                                                    
 
                                                                    iam:users:updateUser
                                                                    
+
                                                                    iam:users:updateUser
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a User
                                                                    
+
                                                                    Deleting a User
                                                                    
 
                                                                    DELETE /v3/users/{user_id}
                                                                    
+
                                                                    DELETE /v3/users/{user_id}
                                                                    
 
                                                                    iam:users:deleteUser
                                                                    
+
                                                                    iam:users:deleteUser
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating a User (Recommended)
                                                                    
+
                                                                    Creating a User (Recommended)
                                                                    
 
                                                                    POST /v3.0/OS-USER/users
                                                                    
+
                                                                    POST /v3.0/OS-USER/users
                                                                    
 
                                                                    iam:users:createUser
                                                                    
+
                                                                    iam:users:createUser
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Resetting a User's Password
                                                                    
+
                                                                    Resetting a User's Password
                                                                    
 
                                                                    ×
                                                                    
+
                                                                    ×
                                                                    
 
                                                                    iam:users:resetUserPassword
                                                                    
+
                                                                    iam:users:resetUserPassword
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Configuring Login Protection
                                                                    
+
                                                                    Configuring Login Protection
                                                                    
 
                                                                    ×
                                                                    
+
                                                                    ×
                                                                    
 
                                                                    iam:users:setUserLoginProtect
                                                                    
+
                                                                    iam:users:setUserLoginProtect
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Listing Users Who Have Access to a Specified Project
                                                                    
+
                                                                    Listing Users Who Have Access to a Specified Project
                                                                    
 
                                                                    ×
                                                                    
+
                                                                    ×
                                                                    
 
                                                                    iam:users:listUsersForProject
                                                                    
+
                                                                    iam:users:listUsersForProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a User from a User Group
                                                                    
+
                                                                    Deleting a User from a User Group
                                                                    
 
                                                                    DELETE /v3/groups/{group_id}/users/{user_id}
                                                                    
+
                                                                    DELETE /v3/groups/{group_id}/users/{user_id}
                                                                    
 
                                                                    iam:permissions:removeUserFromGroup
                                                                    
+
                                                                    iam:permissions:removeUserFromGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying MFA Device Information of Users
                                                                    
+
                                                                    Querying MFA Device Information of Users
                                                                    
 
                                                                    GET /v3.0/OS-MFA/virtual-mfa-devices
                                                                    
+
                                                                    GET /v3.0/OS-MFA/virtual-mfa-devices
                                                                    
 
                                                                    iam:mfa:listVirtualMFADevices
                                                                    
+
                                                                    iam:mfa:listVirtualMFADevices
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the MFA Device Information of a User
                                                                    
+
                                                                    Querying the MFA Device Information of a User
                                                                    
 
                                                                    GET /v3.0/OS-MFA/users/{user_id}/virtual-mfa-device
                                                                    
+
                                                                    GET /v3.0/OS-MFA/users/{user_id}/virtual-mfa-device
                                                                    
 
                                                                    iam:mfa:getVirtualMFADevice
                                                                    
+
                                                                    iam:mfa:getVirtualMFADevice
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Login Protection Configurations of Users
                                                                    
+
                                                                    Querying Login Protection Configurations of Users
                                                                    
 
                                                                    GET  /v3.0/OS-USER/login-protects
                                                                    
+
                                                                    GET  /v3.0/OS-USER/login-protects
                                                                    
 
                                                                    iam:users:listUserLoginProtects
                                                                    
+
                                                                    iam:users:listUserLoginProtects
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the Login Protection Configuration of a User
                                                                    
+
                                                                    Querying the Login Protection Configuration of a User
                                                                    
 
                                                                    GET  /v3.0/OS-USER/users/{user_id}/login-protect
                                                                    
+
                                                                    GET  /v3.0/OS-USER/users/{user_id}/login-protect
                                                                    
 
                                                                    iam:users:getUserLoginProtect
                                                                    
+
                                                                    iam:users:getUserLoginProtect
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
@@ -394,125 +501,160 @@
 
                                                                    Permissions Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Querying Users in a User Group
                                                                    
+
                                                                    Querying Users in a User Group
                                                                    
 
                                                                    GET /v3/groups/{group_id}/users
                                                                    
+
                                                                    GET /v3/groups/{group_id}/users
                                                                    
 
                                                                    iam:users:listUsersForGroup
                                                                    
+
                                                                    iam:users:listUsersForGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Listing User Groups
                                                                    
+
                                                                    Listing User Groups
                                                                    
 
                                                                    GET /v3/groups{?domain_id,name}
                                                                    
+
                                                                    GET /v3/groups{?domain_id,name}
                                                                    
 
                                                                    iam:groups:listGroups
                                                                    
+
                                                                    iam:groups:listGroups
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying User Group Details
                                                                    
+
                                                                    Querying User Group Details
                                                                    
 
                                                                    GET /v3/groups/{group_id}
                                                                    
+
                                                                    GET /v3/groups/{group_id}
                                                                    
 
                                                                    iam:groups:getGroup
                                                                    
+
                                                                    iam:groups:getGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating a User Group
                                                                    
+
                                                                    Creating a User Group
                                                                    
 
                                                                    POST /v3/groups
                                                                    
+
                                                                    POST /v3/groups
                                                                    
 
                                                                    iam:groups:createGroup
                                                                    
+
                                                                    iam:groups:createGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Adding a User to a User Group
                                                                    
+
                                                                    Adding a User to a User Group
                                                                    
 
                                                                    PUT /v3/groups/{group_id}/users/{user_id}
                                                                    
+
                                                                    PUT /v3/groups/{group_id}/users/{user_id}
                                                                    
 
                                                                    iam:permissions:addUserToGroup
                                                                    
+
                                                                    iam:permissions:addUserToGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Updating User Group Information
                                                                    
+
                                                                    Updating a User Group
                                                                    
 
                                                                    PATCH /v3/groups/{group_id}
                                                                    
+
                                                                    PATCH /v3/groups/{group_id}
                                                                    
 
                                                                    iam:groups:updateGroup
                                                                    
+
                                                                    iam:groups:updateGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a User Group
                                                                    
+
                                                                    Deleting a User Group
                                                                    
 
                                                                    DELETE /v3/groups/{group_id}
                                                                    
+
                                                                    DELETE /v3/groups/{group_id}
                                                                    
 
                                                                    • iam:groups:deleteGroup
                                                                    • iam:permissions:removeUserFromGroup
                                                                    • iam:permissions:revokeRoleFromGroup
                                                                    • iam:permissions:revokeRoleFromGroupOnProject
                                                                    • iam:permissions:revokeRoleFromGroupOnDomain
                                                                    
+
                                                                    • iam:groups:deleteGroup
                                                                    • iam:permissions:removeUserFromGroup
                                                                    • iam:permissions:revokeRoleFromGroup
                                                                    • iam:permissions:revokeRoleFromGroupOnProject
                                                                    • iam:permissions:revokeRoleFromGroupOnDomain
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Checking Whether a User Belongs to a Specified User Group
                                                                    
+
                                                                    Checking Whether a User Belongs to a Specified User Group
                                                                    
 
                                                                    HEAD /v3/groups/{group_id}/users/{user_id}
                                                                    
+
                                                                    HEAD /v3/groups/{group_id}/users/{user_id}
                                                                    
 
                                                                    iam:permissions:checkUserInGroup
                                                                    
+
                                                                    iam:permissions:checkUserInGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
@@ -520,47 +662,60 @@
 
                                                                    Custom Policy Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Querying a Role List
                                                                    
+
                                                                    Querying a Role List
                                                                    
 
                                                                    GET /v3/roles
                                                                    
+
                                                                    GET /v3/roles
                                                                    
 
                                                                    iam:roles:listRoles
                                                                    
+
                                                                    iam:roles:listRoles
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Role Details
                                                                    
+
                                                                    Querying Role Details
                                                                    
 
                                                                    GET /v3/roles/{role_id}
                                                                    
+
                                                                    GET /v3/roles/{role_id}
                                                                    
 
                                                                    iam:roles:getRole
                                                                    
+
                                                                    iam:roles:getRole
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Permissions of a User Group Under a Domain
                                                                    
+
                                                                    Querying Permissions of a User Group Under a Domain
                                                                    
 
                                                                    GET /v3/domains/{domain_id}/groups/{group_id}/roles
                                                                    
+
                                                                    GET /v3/domains/{domain_id}/groups/{group_id}/roles
                                                                    
 
                                                                    iam:permissions:listRolesForGroupOnDomain
                                                                    
+
                                                                    iam:permissions:listRolesForGroupOnDomain
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Permissions of a User Group Corresponding to a Project
                                                                    
+
                                                                    Querying Permissions of a User Group Corresponding to a Project
                                                                    
 
                                                                    GET /v3/projects/{project_id}/groups/{group_id}/roles
                                                                    
+
                                                                    GET /v3/projects/{project_id}/groups/{group_id}/roles
                                                                    
 
                                                                    iam:permissions:listRolesForGroupOnProject
                                                                    
+
                                                                    iam:permissions:listRolesForGroupOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Granting Permissions to a User Group of a Domain
                                                                    
+
                                                                    Granting Permissions to a User Group of a Domain
                                                                    
 
                                                                    PUT /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}
                                                                    
+
                                                                    PUT /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:grantRoleToGroupOnDomain
                                                                    
+
                                                                    iam:permissions:grantRoleToGroupOnDomain
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Granting Permissions to a User Group Corresponding to a Project
                                                                    
+
                                                                    Granting Permissions to a User Group Corresponding to a Project
                                                                    
 
                                                                    PUT /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}
                                                                    
+
                                                                    PUT /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:grantRoleToGroupOnProject
                                                                    
+
                                                                    iam:permissions:grantRoleToGroupOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Removing Permissions of a User Group Corresponding to a Project
                                                                    
+
                                                                    Removing Permissions of a User Group Corresponding to a Project
                                                                    
 
                                                                    DELETE /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}
                                                                    
+
                                                                    DELETE /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:revokeRoleFromGroupOnProject
                                                                    
+
                                                                    iam:permissions:revokeRoleFromGroupOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Removing Permissions of a User Group of a Domain
                                                                    
+
                                                                    Removing Permissions of a User Group of a Domain
                                                                    
 
                                                                    DELETE /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}
                                                                    
+
                                                                    DELETE /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:revokeRoleFromGroupOnDomain
                                                                    
+
                                                                    iam:permissions:revokeRoleFromGroupOnDomain
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Whether a User Group Under a Domain Has Specific Permissions
                                                                    
+
                                                                    Querying Whether a User Group Under a Domain Has Specific Permissions
                                                                    
 
                                                                    HEAD /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}
                                                                    
+
                                                                    HEAD /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:checkRoleForGroupOnDomain
                                                                    
+
                                                                    iam:permissions:checkRoleForGroupOnDomain
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Whether a User Group Corresponding to a Project Has Specific Permissions
                                                                    
+
                                                                    Querying Whether a User Group Corresponding to a Project Has Specific Permissions
                                                                    
 
                                                                    HEAD /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}
                                                                    
+
                                                                    HEAD /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:checkRoleForGroupOnProject
                                                                    
+
                                                                    iam:permissions:checkRoleForGroupOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Granting Permissions to a User Group
                                                                    
+
                                                                    Granting Permissions to a User Group
                                                                    
 
                                                                    PUT /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}
                                                                    
+
                                                                    PUT /v3/domains/{domain_id}/groups/{group_id}/roles/{role_id}
                                                                    
 
                                                                    PUT /v3/projects/{project_id}/groups/{group_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:grantRoleToGroup
                                                                    
+
                                                                    iam:permissions:grantRoleToGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the Permissions Granted to a User for a Specified Project
                                                                    
+
                                                                    Querying the Permissions Granted to a User for a Specified Project
                                                                    
 
                                                                    ×
                                                                    
+
                                                                    ×
                                                                    
 
                                                                    iam:permissions:listRolesForUserOnProject
                                                                    
+
                                                                    iam:permissions:listRolesForUserOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying All Permissions of a User Group
                                                                    
+
                                                                    Querying All Permissions of a User Group
                                                                    
 
                                                                    ×
                                                                    
+
                                                                    ×
                                                                    
 
                                                                    iam:permissions:listRolesForGroup
                                                                    
+
                                                                    iam:permissions:listRolesForGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Checking Whether a User Group Has Specified Permissions
                                                                    
+
                                                                    Checking Whether a User Group Has Specified Permissions
                                                                    
                                                                     		
+
 
                                                                    iam:permissions:checkRoleForGroup
                                                                    
+
                                                                    iam:permissions:checkRoleForGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Removing Permissions of a User Group
                                                                    
+
                                                                    Removing Permissions of a User Group
                                                                    
                                                                     		
+
 
                                                                    iam:permissions:revokeRoleFromGroup
                                                                    
+
                                                                    iam:permissions:revokeRoleFromGroup
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying a Resource Quota
                                                                    
+
                                                                    Querying a Resource Quota
                                                                    
 
                                                                    GET /v3.0/OS-QUOTA/domains/{domain_id}?type={user, group, idp, agency, policy}
                                                                    
+
                                                                    GET /v3.0/OS-QUOTA/domains/{domain_id}?type={user, group, idp, agency, policy}
                                                                    
 
                                                                    iam:quotas:listQuotas
                                                                    
+
                                                                    iam:quotas:listQuotas
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
@@ -568,103 +723,168 @@
 
                                                                    Agency Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Listing Custom Policies
                                                                    
+
                                                                    Listing Custom Policies
                                                                    
 
                                                                    GET /v3.0/OS-ROLE/roles
                                                                    
+
                                                                    GET /v3.0/OS-ROLE/roles
                                                                    
 
                                                                    iam:roles:listRoles
                                                                    
+
                                                                    iam:roles:listRoles
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Custom Policy Details
                                                                    
+
                                                                    Querying Custom Policy Details
                                                                    
 
                                                                    GET /v3.0/OS-ROLE/roles/{role_id}
                                                                    
+
                                                                    GET /v3.0/OS-ROLE/roles/{role_id}
                                                                    
 
                                                                    iam:roles:getRole
                                                                    
+
                                                                    iam:roles:getRole
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating a Custom Policy
                                                                    
+
                                                                    Creating a Custom Policy
                                                                    
 
                                                                    POST /v3.0/OS-ROLE/roles
                                                                    
+
                                                                    POST /v3.0/OS-ROLE/roles
                                                                    
 
                                                                    iam:roles:createRole
                                                                    
+
                                                                    iam:roles:createRole
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Modifying a Custom Policy
                                                                    
+
                                                                    Modifying a Custom Policy
                                                                    
 
                                                                    PATCH /v3.0/OS-ROLE/roles/{role_id}
                                                                    
+
                                                                    PATCH /v3.0/OS-ROLE/roles/{role_id}
                                                                    
 
                                                                    iam:roles:updateRole
                                                                    
+
                                                                    iam:roles:updateRole
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a Custom Policy
                                                                    
+
                                                                    Deleting a Custom Policy
                                                                    
 
                                                                    DELETE /v3.0/OS-ROLE/roles/{role_id}
                                                                    
+
                                                                    DELETE /v3.0/OS-ROLE/roles/{role_id}
                                                                    
 
                                                                    iam:roles:deleteRole
                                                                    
+
                                                                    iam:roles:deleteRole
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
@@ -672,33 +892,42 @@
 
                                                                    Security Settings
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Creating an Agency
                                                                    
+
                                                                    Creating an Agency
                                                                    
 
                                                                    POST /v3.0/OS-AGENCY/agencies
                                                                    
+
                                                                    POST /v3.0/OS-AGENCY/agencies
                                                                    
 
                                                                    iam:agencies:createAgency
                                                                    
+
                                                                    iam:agencies:createAgency
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Listing Agencies
                                                                    
+
                                                                    Listing Agencies
                                                                    
 
                                                                    GET /v3.0/OS-AGENCY/agencies
                                                                    
+
                                                                    GET /v3.0/OS-AGENCY/agencies
                                                                    
 
                                                                    iam:agencies:listAgencies
                                                                    
+
                                                                    iam:agencies:listAgencies
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Agency Details
                                                                    
+
                                                                    Obtaining Details of a Specified Agency
                                                                    
 
                                                                    GET /v3.0/OS-AGENCY/agencies/{agency_id}
                                                                    
+
                                                                    GET /v3.0/OS-AGENCY/agencies/{agency_id}
                                                                    
 
                                                                    iam:agencies:getAgency
                                                                    
+
                                                                    iam:agencies:getAgency
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Modifying an Agency
                                                                    
+
                                                                    Modifying an Agency
                                                                    
 
                                                                    PUT /v3.0/OS-AGENCY/agencies/{agency_id}
                                                                    
+
                                                                    PUT /v3.0/OS-AGENCY/agencies/{agency_id}
                                                                    
 
                                                                    iam:agencies:updateAgency
                                                                    
+
                                                                    iam:agencies:updateAgency
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting an Agency
                                                                    
+
                                                                    Deleting an Agency
                                                                    
 
                                                                    DELETE /v3.0/OS-AGENCY/agencies/{agency_id}
                                                                    
+
                                                                    DELETE /v3.0/OS-AGENCY/agencies/{agency_id}
                                                                    
 
                                                                    iam:agencies:deleteAgency
                                                                    
+
                                                                    iam:agencies:deleteAgency
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Granting Permissions to an Agency for a Project
                                                                    
+
                                                                    Granting Permissions to an Agency for a Project
                                                                    
 
                                                                    PUT /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
+
                                                                    PUT /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:grantRoleToAgencyOnProject
                                                                    
+
                                                                    iam:permissions:grantRoleToAgencyOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Checking Whether an Agency Has the Specified Permissions on a Project
                                                                    
+
                                                                    Checking Whether an Agency Has the Specified Permissions on a Project
                                                                    
 
                                                                    HEAD /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
+
                                                                    HEAD /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:checkRoleForAgencyOnProject
                                                                    
+
                                                                    iam:permissions:checkRoleForAgencyOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Permissions of an Agency for a Project
                                                                    
+
                                                                    Querying the List of Permissions of an Agency on a Project
                                                                    
 
                                                                    GET /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles
                                                                    
+
                                                                    GET /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles
                                                                    
 
                                                                    iam:permissions:listRolesForAgencyOnProject
                                                                    
+
                                                                    iam:permissions:listRolesForAgencyOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Removing Permissions of an Agency on a Project
                                                                    
+
                                                                    Removing Permissions of an Agency on a Project
                                                                    
 
                                                                    DELETE /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
+
                                                                    DELETE /v3.0/OS-AGENCY/projects/{project_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:revokeRoleFromAgencyOnProject
                                                                    
+
                                                                    iam:permissions:revokeRoleFromAgencyOnProject
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Granting Permissions to an Agency on a Domain
                                                                    
+
                                                                    Granting Permissions to an Agency on a Domain
                                                                    
 
                                                                    PUT /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
+
                                                                    PUT /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:grantRoleToAgencyOnDomain
                                                                    
+
                                                                    iam:permissions:grantRoleToAgencyOnDomain
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Checking Whether an Agency Has the Specified Permissions on a Domain
                                                                    
+
                                                                    Checking Whether an Agency Has the Specified Permissions on a Domain
                                                                    
 
                                                                    HEAD /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
+
                                                                    HEAD /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:checkRoleForAgencyOnDomain
                                                                    
+
                                                                    iam:permissions:checkRoleForAgencyOnDomain
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the List of Permissions of an Agency on a Domain
                                                                    
+
                                                                    Querying the List of Permissions of an Agency on a Domain
                                                                    
 
                                                                    GET /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles
                                                                    
+
                                                                    GET /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles
                                                                    
 
                                                                    iam:permissions:listRolesForAgencyOnDomain
                                                                    
+
                                                                    iam:permissions:listRolesForAgencyOnDomain
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Removing Permissions of an Agency on a Domain
                                                                    
+
                                                                    Removing Permissions of an Agency on a Domain
                                                                    
 
                                                                    DELETE /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
+
                                                                    DELETE /v3.0/OS-AGENCY/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}
                                                                    
 
                                                                    iam:permissions:revokeRoleFromAgencyOnDomain
                                                                    
+
                                                                    iam:permissions:revokeRoleFromAgencyOnDomain
                                                                    
+
                                                                    -
                                                                    
+
                                                                    Querying All Permissions of an Agency
                                                                    
+
                                                                    GET /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/inherited_to_projects
                                                                    
+
                                                                    iam:permissions:listRolesForAgency
                                                                    
+
                                                                    -
                                                                    
+
                                                                    Granting Specified Permissions to an Agency for All Projects
                                                                    
+
                                                                    PUT /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects
                                                                    
+
                                                                    iam:permissions:grantRoleToAgency
                                                                    
+
                                                                    -
                                                                    
+
                                                                    Checking Whether an Agency Has Specified Permissions
                                                                    
+
                                                                    HEAD /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects
                                                                    
+
                                                                    iam:permissions:checkRoleForAgency
                                                                    
+
                                                                    -
                                                                    
+
                                                                    Removing Specified Permissions of an Agency in All Projects
                                                                    
+
                                                                    DELETE /v3.0/OS-INHERIT/domains/{domain_id}/agencies/{agency_id}/roles/{role_id}/inherited_to_projects
                                                                    
+
                                                                    iam:permissions:revokeRoleFromAgency
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
@@ -706,152 +935,195 @@
 
                                                                    Federated Identity Authentication Management
                                                                    
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    (Project)
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Querying the Operation Protection Policy
                                                                    
+
                                                                    Querying the Operation Protection Policy
                                                                    
 
                                                                    GET v3.0/OS-SECURITYPOLICY/domains/{domain_id}/protect-policy
                                                                    
+
                                                                    GET v3.0/OS-SECURITYPOLICY/domains/{domain_id}/protect-policy
                                                                    
 
                                                                    iam:securitypolicies:getProtectPolicy
                                                                    
+
                                                                    iam:securitypolicies:getProtectPolicy
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the Password Policy
                                                                    
+
                                                                    Querying the Password Policy
                                                                    
 
                                                                    GET  v3.0/OS-SECURITYPOLICY/domains/{domain_id}/password-policy
                                                                    
+
                                                                    GET  v3.0/OS-SECURITYPOLICY/domains/{domain_id}/password-policy
                                                                    
 
                                                                    iam:securitypolicies:getPasswordPolicy
                                                                    
+
                                                                    iam:securitypolicies:getPasswordPolicy
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the Login Authentication Policy
                                                                    
+
                                                                    Querying the Login Authentication Policy
                                                                    
 
                                                                    GET v3.0/OS-SECURITYPOLICY/domains/{domain_id}/login-policy
                                                                    
+
                                                                    GET v3.0/OS-SECURITYPOLICY/domains/{domain_id}/login-policy
                                                                    
 
                                                                    iam:securitypolicies:getLoginPolicy
                                                                    
+
                                                                    iam:securitypolicies:getLoginPolicy
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Permission
                                                                    
+
                                                                    
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
-
-
-
+
diff --git a/docs/iam/api-ref/iam_02_0113.html b/docs/iam/api-ref/iam_02_0113.html
index 2e29addb6..8197150af 100644
--- a/docs/iam/api-ref/iam_02_0113.html
+++ b/docs/iam/api-ref/iam_02_0113.html
@@ -39,13 +39,13 @@
 
                                                                    Request Parameters
                                                                    • Parameters in the request header
-
                                                                    Permission
                                                                    
 
                                                                    API
                                                                    
+
                                                                    API
                                                                    
 
                                                                    Action
                                                                    
+
                                                                    Action
                                                                    
+
                                                                    IAM Project
                                                                    
+
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Querying the Identity Provider List
                                                                    
+
                                                                    Querying the Identity Provider List
                                                                    
 
                                                                    GET /v3/OS-FEDERATION/identity_providers
                                                                    
+
                                                                    GET /v3/OS-FEDERATION/identity_providers
                                                                    
 
                                                                    iam:identityProviders:listIdentityProviders
                                                                    
+
                                                                    iam:identityProviders:listIdentityProviders
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying an Identity Provider
                                                                    
+
                                                                    Querying an Identity Provider
                                                                    
 
                                                                    GET /v3/OS-FEDERATION/identity_providers/{id}
                                                                    
+
                                                                    GET /v3/OS-FEDERATION/identity_providers/{id}
                                                                    
 
                                                                    iam:identityProviders:getIdentityProvider
                                                                    
+
                                                                    iam:identityProviders:getIdentityProvider
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating an Identity Provider
                                                                    
+
                                                                    Creating an Identity Provider
                                                                    
 
                                                                    PUT /v3/OS-FEDERATION/identity_providers/{id}
                                                                    
+
                                                                    PUT /v3/OS-FEDERATION/identity_providers/{id}
                                                                    
 
                                                                    iam:identityProviders:createIdentityProvider
                                                                    
+
                                                                    iam:identityProviders:createIdentityProvider
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Updating an Identity Provider
                                                                    
+
                                                                    Updating an Identity Provider
                                                                    
 
                                                                    PATCH /v3/OS-FEDERATION/identity_providers/{id}
                                                                    
+
                                                                    PATCH /v3/OS-FEDERATION/identity_providers/{id}
                                                                    
 
                                                                    iam:identityProviders:updateIdentityProvider
                                                                    
+
                                                                    iam:identityProviders:updateIdentityProvider
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting an Identity Provider
                                                                    
+
                                                                    Deleting an Identity Provider
                                                                    
 
                                                                    DELETE /v3/OS-FEDERATION/identity_providers/{id}
                                                                    
+
                                                                    DELETE /v3/OS-FEDERATION/identity_providers/{id}
                                                                    
 
                                                                    iam:identityProviders:deleteIdentityProvider
                                                                    
+
                                                                    iam:identityProviders:deleteIdentityProvider
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating an OpenID Connect Identity Provider
                                                                    
+
                                                                    Creating an OpenID Connect Identity Provider
                                                                    
 
                                                                    POST /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config
                                                                    
+
                                                                    POST /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config
                                                                    
 
                                                                    iam:identityProviders:createOpenIDConnectConfig
                                                                    
+
                                                                    iam:identityProviders:createOpenIDConnectConfig
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Modifying an OpenID Connect Identity Provider
                                                                    
+
                                                                    Modifying an OpenID Connect Identity Provider
                                                                    
 
                                                                    PUT /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config
                                                                    
+
                                                                    PUT /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config
                                                                    
 
                                                                    iam:identityProviders:updateOpenIDConnectConfig
                                                                    
+
                                                                    iam:identityProviders:updateOpenIDConnectConfig
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying an OpenID Connect Identity Provider
                                                                    
+
                                                                    Querying an OpenID Connect Identity Provider
                                                                    
 
                                                                    GET /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config
                                                                    
+
                                                                    GET /v3.0/OS-FEDERATION/identity-providers/{idp_id}/openid-connect-config
                                                                    
 
                                                                    iam:identityProviders:getOpenIDConnectConfig
                                                                    
+
                                                                    iam:identityProviders:getOpenIDConnectConfig
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the Mapping List
                                                                    
+
                                                                    Querying the Mapping List
                                                                    
 
                                                                    GET /v3/OS-FEDERATION/mappings
                                                                    
+
                                                                    GET /v3/OS-FEDERATION/mappings
                                                                    
 
                                                                    iam:identityProviders:listMappings
                                                                    
+
                                                                    iam:identityProviders:listMappings
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying Mapping Details
                                                                    
+
                                                                    Querying Mapping Details
                                                                    
 
                                                                    GET /v3/OS-FEDERATION/mappings/{id}
                                                                    
+
                                                                    GET /v3/OS-FEDERATION/mappings/{id}
                                                                    
 
                                                                    iam:identityProviders:getMapping
                                                                    
+
                                                                    iam:identityProviders:getMapping
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Creating a Mapping
                                                                    
+
                                                                    Creating a Mapping
                                                                    
 
                                                                    PUT /v3/OS-FEDERATION/mappings/{id}
                                                                    
+
                                                                    PUT /v3/OS-FEDERATION/mappings/{id}
                                                                    
 
                                                                    iam:identityProviders:createMapping
                                                                    
+
                                                                    iam:identityProviders:createMapping
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Updating a Mapping
                                                                    
+
                                                                    Updating a Mapping
                                                                    
 
                                                                    PATCH /v3/OS-FEDERATION/mappings/{id}
                                                                    
+
                                                                    PATCH /v3/OS-FEDERATION/mappings/{id}
                                                                    
 
                                                                    iam:identityProviders:updateMapping
                                                                    
+
                                                                    iam:identityProviders:updateMapping
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a Mapping
                                                                    
+
                                                                    Deleting a Mapping
                                                                    
 
                                                                    DELETE /v3/OS-FEDERATION/mappings/{id}
                                                                    
+
                                                                    DELETE /v3/OS-FEDERATION/mappings/{id}
                                                                    
 
                                                                    iam:identityProviders:deleteMapping
                                                                    
+
                                                                    iam:identityProviders:deleteMapping
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying the Protocol List
                                                                    
+
                                                                    Querying the Protocol List
                                                                    
 
                                                                    GET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols
                                                                    
+
                                                                    GET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols
                                                                    
 
                                                                    iam:identityProviders:listProtocols
                                                                    
+
                                                                    iam:identityProviders:listProtocols
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying a Protocol
                                                                    
+
                                                                    Querying a Protocol
                                                                    
 
                                                                    GET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}
                                                                    
+
                                                                    GET /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}
                                                                    
 
                                                                    iam:identityProviders:getProtocol
                                                                    
+
                                                                    iam:identityProviders:getProtocol
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Registering a Protocol
                                                                    
+
                                                                    Registering a Protocol
                                                                    
 
                                                                    PUT /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}
                                                                    
+
                                                                    PUT /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}
                                                                    
 
                                                                    iam:identityProviders:createProtocol
                                                                    
+
                                                                    iam:identityProviders:createProtocol
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Updating a Protocol
                                                                    
+
                                                                    Updating a Protocol
                                                                    
 
                                                                    PATCH /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}
                                                                    
+
                                                                    PATCH /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}
                                                                    
 
                                                                    iam:identityProviders:updateProtocol
                                                                    
+
                                                                    iam:identityProviders:updateProtocol
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Deleting a Protocol
                                                                    
+
                                                                    Deleting a Protocol
                                                                    
 
                                                                    DELETE /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}
                                                                    
+
                                                                    DELETE /v3/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}
                                                                    
 
                                                                    iam:identityProviders:deleteProtocol
                                                                    
+
                                                                    iam:identityProviders:deleteProtocol
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Querying a Metadata File
                                                                    
+
                                                                    Querying a Metadata File
                                                                    
 
                                                                    GET /v3-ext/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}/metadata
                                                                    
+
                                                                    GET /v3-ext/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}/metadata
                                                                    
 
                                                                    iam:identityProviders:getIDPMetadata
                                                                    
+
                                                                    iam:identityProviders:getIDPMetadata
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    Importing a Metadata File
                                                                    
+
                                                                    Importing a Metadata File
                                                                    
 
                                                                    POST /v3-ext/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}/metadata
                                                                    
+
                                                                    POST /v3-ext/OS-FEDERATION/identity_providers/{idp_id}/protocols/{protocol_id}/metadata
                                                                    
 
                                                                    iam:identityProviders:createIDPMetadata
                                                                    
+
                                                                    iam:identityProviders:createIDPMetadata
                                                                    
+
                                                                    -
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
@@ -74,21 +74,21 @@
 
                                                                    Response Parameters
                                                                    • Parameters in the response body
-
                                                                    Parameter
                                                                    
 
                                                                    Mandatory
                                                                    
+
                                                                    Mandatory
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
 
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
@@ -96,14 +96,14 @@
 
                                                                    Parameter
                                                                    
 
                                                                    Mandatory
                                                                    
+
                                                                    Mandatory
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    config
                                                                    
+
                                                                    config
                                                                    
                                                                     		
 
                                                                    Yes
                                                                    
 
                                                                    JSON
                                                                    
+
                                                                    Object
                                                                    
                                                                     		
 
                                                                    Password strength policy of a domain.
                                                                    
 
                                                                    
 
                                                                    
 
                                                                    
-
                                                                  • Description for the config format
-
                                                                    
-
-
-
+
+
+
+
-
-
-
@@ -105,7 +105,7 @@
             "user_id" : "56b26081f43d4c628c4bb88cf32e9...", 
             "enabled" : true, 
             "verification_method" : "sms" 
-            }
+            },
           { 
             "user_id" : "08c16cb6c58010691f81c0028dd94...", 
             "enabled" : false, 
diff --git a/docs/iam/api-ref/iam_08_0015.html b/docs/iam/api-ref/iam_08_0015.html
index ea14dac56..04616714d 100644
--- a/docs/iam/api-ref/iam_08_0015.html
+++ b/docs/iam/api-ref/iam_08_0015.html
@@ -141,7 +141,15 @@
 
-
@@ -218,7 +226,12 @@
 
-
@@ -235,7 +248,7 @@
 
diff --git a/docs/iam/api-ref/iam_08_0016.html b/docs/iam/api-ref/iam_08_0016.html
index 4cc4a403c..8bddcc219 100644
--- a/docs/iam/api-ref/iam_08_0016.html
+++ b/docs/iam/api-ref/iam_08_0016.html
@@ -86,7 +86,7 @@
 
-
-
diff --git a/docs/iam/api-ref/iam_08_0021.html b/docs/iam/api-ref/iam_08_0021.html
index dbb86bb18..7c4f57a44 100644
--- a/docs/iam/api-ref/iam_08_0021.html
+++ b/docs/iam/api-ref/iam_08_0021.html
@@ -91,7 +91,7 @@
 
-
-
@@ -147,73 +147,73 @@
 
-
-
                                                                    Parameter
                                                                    
+
                                                                  • config
+
                                                                    
-
-
-
@@ -122,20 +122,20 @@
 
-
                                                                    Parameter
                                                                    
 
                                                                    Mandatory
                                                                    
+
                                                                    Mandatory
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    String
                                                                    
 
                                                                    Description of the password strength policy (When option is set to password_regex_description).
                                                                    
+
                                                                    Description of the password strength policy (When option is set to password_regex_description).
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
                                                                    • 
-
                                                                    • Example response
                                                                      When option is set to password_regex:
+
                                                                      • Example response
                                                                        When option is set to password_regex:
 {
   "config": {
     "password_regex": "^(?=.*\\d)(?=.*[a-zA-Z]).{7,}$"
   }
 }
-When option is set to password_regex_description:
+When option is set to password_regex_description:
 {
   "config": {
     "password_regex_description": "Passwords must contain at least 1 letter, 1 digit, and be a minimum length of 7 characters."
@@ -146,7 +146,7 @@ When option is set to 
                                                                        Status Codes
                                                                        
 
                                                                        
-
diff --git a/docs/iam/api-ref/iam_02_0510.html b/docs/iam/api-ref/iam_02_0510.html
index 90192ceea..acf918934 100644
--- a/docs/iam/api-ref/iam_02_0510.html
+++ b/docs/iam/api-ref/iam_02_0510.html
@@ -6,8 +6,8 @@
 
                                                                        Token-based Authentication
                                                                         
                                                                        The validity period of a token is 24 hours. When using a token for authentication, cache it to prevent frequently calling the IAM API used to obtain a user token.
                                                                        
 
                                                                        
 
                                                                        A token specifies temporary permissions in a computer system. During API authentication using a token, the token is added to request headers to get permissions for calling the API.
                                                                        
-
                                                                        You can obtain a token by calling the API described in Obtaining a User Token. IAM APIs can be called only by using a global service token. To call the API described in Obtaining a User Token, set auth.scope to domain in the request body as follows:
                                                                        
-
                                                                        {
+
                                                                        You can obtain a token by calling the API described in Obtaining a User Token Through Password Authentication. IAM APIs can be called only by using a global service token. To call the API described in Obtaining a User Token Through Password Authentication, set auth.scope to domain in the request body. In the following example, DomainName indicates the account name:
                                                                        
+
                                                                        {
     "auth": {
         "identity": {
             "methods": [
@@ -16,16 +16,16 @@
             "password": {
                 "user": {
                     "domain": {
-                        "name": "IAMDomain"
+                        "name": "DomainName"
                     },
-                    "name": "IAMUser",
-                    "password": "IAMPassword"
+                    "name": "IAMUserName",
+                    "password": "IAMUserPassWord"
                 }
             }
         },
         "scope": {
             "domain": {
-                "name": "IAMDomain"
+                "name": "DomainName"
             }
         }
     }
diff --git a/docs/iam/api-ref/iam_02_0511.html b/docs/iam/api-ref/iam_02_0511.html
index f5c5fa94d..eb93f5e97 100644
--- a/docs/iam/api-ref/iam_02_0511.html
+++ b/docs/iam/api-ref/iam_02_0511.html
@@ -3,14 +3,14 @@
 
                                                                        Response
                                                                        
 
                                                                        Status Code
                                                                        After sending a request, you will receive a response, including the status code, response header, and response body.
                                                                        
 
                                                                        A status code is a group of digits, ranging from 1xx to 5xx. It indicates the status of a request. For more information, see Status Codes.
                                                                        
-
                                                                        For example, if status code 201 is returned for calling the API used to obtain a user token (Obtaining a User Token), the request is successful.
                                                                        
+
                                                                        For example, if status code 201 is returned for calling the API used to obtain a user token (Obtaining a User Token Through Password Authentication), the request is successful.
                                                                        
 
                                                                        
 
                                                                        Response Header
                                                                        Similar to a request, a response also has a header, for example, Content-Type.
                                                                        
-
                                                                        Obtaining a User Token shows the response header fields for the API used to obtain a user token (Figure 1). The x-subject-token header field is the desired user token. This token can then be used to authenticate the calling of other APIs.
                                                                        
+
                                                                        Obtaining a User Token Through Password Authentication shows the response header fields for the API used to obtain a user token (Figure 1). The x-subject-token header field is the desired user token. This token can then be used to authenticate the calling of other APIs.
                                                                        
 
                                                                        Figure 1 Header fields of the response to the request for obtaining a user token
                                                                        
 
                                                                        
 
                                                                        Response Body
                                                                        The body of a response is often returned in structured format as specified in the Content-Type header field. The response body transfers content except the response header.
                                                                        
-
                                                                        The following is part of the response body for the API used to obtain a user token (Obtaining a User Token).
                                                                        
+
                                                                        The following is part of the response body for the API used to obtain a user token (Obtaining a User Token Through Password Authentication).
                                                                        
 
                                                                        {
     "token": {
         "expires_at": "2019-02-13T06:52:13.855000Z",
diff --git a/docs/iam/api-ref/iam_02_0633.html b/docs/iam/api-ref/iam_02_0633.html
new file mode 100644
index 000000000..4742ba456
--- /dev/null
+++ b/docs/iam/api-ref/iam_02_0633.html
@@ -0,0 +1,192 @@
+
+
+
                                                                        Granting Permissions to Agencies Associated with Specified Enterprise Projects
                                                                        
+
                                                                        Function
                                                                        This API is used to grant permissions to agencies associated with specified enterprise projects.
                                                                        
+
                                                                        
+
                                                                        URI
                                                                        PUT /v3.0/OS-PERMISSION/subjects/agency/scopes/enterprise-project/role-assignments
                                                                        
+
                                                                        
+
                                                                        Request Parameters
                                                                        
+
                                                                        Status Code
                                                                        
 
                                                                        Description
                                                                        
+
                                                                        Description
                                                                        
                                                                         		
 
                                                                        
 
                                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                        Table 1 Parameters in the request header
                                                                        Parameter
                                                                        
+
                                                                        Mandatory
                                                                        
+
                                                                        Type
                                                                        
+
                                                                        Description
                                                                        
+
                                                                        Content-Type
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Fill application/json;charset=utf8 in this field.
                                                                        
+
                                                                        X-Auth-Token
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Authenticated token with iam:permissions:grantRoleToAgencyOnEnterpriseProject or Security Administrator permissions.
                                                                        
+
                                                                        
+
                                                                        
+
+
                                                                        
+
+
+
+
+
+
+
+
+
+
+
+
                                                                        Table 2 Parameters in the request body
                                                                        Parameter
                                                                        
+
                                                                        Mandatory
                                                                        
+
                                                                        Type
                                                                        
+
                                                                        Description
                                                                        
+
                                                                        role_assignments
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        Array of objects
                                                                        
+
                                                                        Association between agencies and enterprise projects. A maximum of 250 association records are supported.
                                                                        
+
                                                                        
+
                                                                        
+
+
                                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                        Table 3 role_assignments
                                                                        Parameter
                                                                        
+
                                                                        Mandatory
                                                                        
+
                                                                        Type
                                                                        
+
                                                                        Description
                                                                        
+
                                                                        agency_id
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Agency ID.
                                                                        
+
                                                                        enterprise_project_id
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Enterprise project ID.
                                                                        
+
                                                                        role_id
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Policy ID.
                                                                        
+
                                                                        
+
                                                                        
+
+
                                                                        Response Parameters
                                                                        None
                                                                        
+
                                                                        
+
                                                                        Example Request
                                                                        Request for granting permissions to agencies associated with a specified enterprise project
                                                                        
+
                                                                        PUT /v3.0/OS-PERMISSION/subjects/agency/scopes/enterprise-project/role-assignments
+{
+  "role_assignments": [
+    {
+      "agency_id": "as0d9f8asdfasdfa09sd8f9aaa",
+      "enterprise_project_id": "3asdfs0d9f8asdfasdfa09sd8f9aaa",
+      "role_id": "5s0d9f8dafsdfasdfa09sd8f9aaa"
+    }
+  ]
+}
                                                                        
+
                                                                        
+
                                                                        Example Response
                                                                        Status code: 200
                                                                        
+
                                                                        The request is successful.
                                                                        
+
                                                                        
+
                                                                        Status code: 400
                                                                        
+
                                                                        Parameter error.
                                                                        
+
                                                                        {
+  "error" : {
+    "message" : "Illegal request",
+    "code" : 400,
+    "title" : "Bad Request"
+  }
+}
                                                                        
+
                                                                        Status code: 401
                                                                        
+
                                                                        Authentication failed.
                                                                        
+
                                                                        {
+  "error" : {
+    "message" : "Authentication failed",
+    "code" : 401,
+    "title" : "Unauthorized"
+  }
+}
                                                                        
+
                                                                        Status code: 403
                                                                        
+
                                                                        Operation denied.
                                                                        
+
                                                                        {
+  "error" : {
+    "message" : "Forbidden operation",
+    "code" : 403,
+    "title" : "Forbidden"
+  }
+}
                                                                        
+
                                                                        
+
                                                                        Status Codes
                                                                        
+
                                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                        Status Code
                                                                        
+
                                                                        Description
                                                                        
+
                                                                        200
                                                                        
+
                                                                        The request is successful.
                                                                        
+
                                                                        400
                                                                        
+
                                                                        Parameter error.
                                                                        
+
                                                                        401
                                                                        
+
                                                                        Authentication failed.
                                                                        
+
                                                                        403
                                                                        
+
                                                                        Unauthorized operation.
                                                                        
+
                                                                        500
                                                                        
+
                                                                        Internal server error.
                                                                        
+
                                                                        
+
                                                                        
+
                                                                        
+
+
                                                                        
+
                                                                        
+
                                                                        Parent topic: Enterprise Project Management
                                                                        
+
                                                                        
+
                                                                        
+
diff --git a/docs/iam/api-ref/iam_02_0634.html b/docs/iam/api-ref/iam_02_0634.html
new file mode 100644
index 000000000..264cf2f1e
--- /dev/null
+++ b/docs/iam/api-ref/iam_02_0634.html
@@ -0,0 +1,183 @@
+
+
+
                                                                        Removing Permissions of Agencies Associated with Specified Enterprise Projects
                                                                        
+
                                                                        Function
                                                                        This API is used to remove permissions of agencies associated with specified enterprise projects.
                                                                        
+
                                                                        
+
                                                                        URI
                                                                        DELETE /v3.0/OS-PERMISSION/subjects/agency/scopes/enterprise-project/role-assignments
                                                                        
+
                                                                        
+
                                                                        Request Parameters
                                                                        
+
                                                                        
+
+
+
+
+
+
+
+
+
+
+
+
                                                                        Table 1 Parameters in the request header
                                                                        Parameter
                                                                        
+
                                                                        Mandatory
                                                                        
+
                                                                        Type
                                                                        
+
                                                                        Description
                                                                        
+
                                                                        X-Auth-Token
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Authenticated token with the iam:permissions:revokeRoleFromAgencyOnEnterpriseProject fine-grained permissions or the Security Administrator permissions.
                                                                        
+
                                                                        
+
                                                                        
+
+
                                                                        
+
+
+
+
+
+
+
+
+
+
+
+
                                                                        Table 2 Parameters in the request body
                                                                        Parameter
                                                                        
+
                                                                        Mandatory
                                                                        
+
                                                                        Type
                                                                        
+
                                                                        Description
                                                                        
+
                                                                        role_assignments
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        Array of objects
                                                                        
+
                                                                        Association between agencies and enterprise projects. A maximum of 250 association records are supported.
                                                                        
+
                                                                        
+
                                                                        
+
+
                                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                        Table 3 role_assignments
                                                                        Parameter
                                                                        
+
                                                                        Mandatory
                                                                        
+
                                                                        Type
                                                                        
+
                                                                        Description
                                                                        
+
                                                                        agency_id
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Agency ID.
                                                                        
+
                                                                        enterprise_project_id
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Enterprise project ID.
                                                                        
+
                                                                        role_id
                                                                        
+
                                                                        Yes
                                                                        
+
                                                                        String
                                                                        
+
                                                                        Policy ID.
                                                                        
+
                                                                        
+
                                                                        
+
                                                                        
+
                                                                        Response Parameters
                                                                        None
                                                                        
+
                                                                        
+
                                                                        Example Request
                                                                        Request for removing permissions of agencies associated with a specified enterprise project
                                                                        
+
                                                                        DELETE /v3.0/OS-PERMISSION/subjects/agency/scopes/enterprise-project/role-assignments
+{
+  "role_assignments": [
+    {
+      "agency_id": "as0d9f8asdfasdfa09sd8f9aaa",
+      "enterprise_project_id": "3asdfs0d9f8asdfasdfa09sd8f9aaa",
+      "role_id": "5s0d9f8dafsdfasdfa09sd8f9aaa"
+    }
+  ]
+}
                                                                        
+
                                                                        
+
                                                                        Example Response
                                                                        Status code: 204
                                                                        
+
                                                                        The request is successful.
                                                                        
+
                                                                        
+
                                                                        Status code: 400
                                                                        
+
                                                                        Parameter error.
                                                                        
+
                                                                        {
+  "error" : {
+    "message" : "Illegal request",
+    "code" : 400,
+    "title" : "Bad Request"
+  }
+}
                                                                        
+
                                                                        Status code: 401
                                                                        
+
                                                                        Authentication failed.
                                                                        
+
                                                                        {
+  "error" : {
+    "message" : "Authentication failed",
+    "code" : 401,
+    "title" : "Unauthorized"
+  }
+}
                                                                        
+
                                                                        Status code: 403
                                                                        
+
                                                                        Operation denied.
                                                                        
+
                                                                        {
+  "error" : {
+    "message" : "Forbidden operation",
+    "code" : 403,
+    "title" : "Forbidden"
+  }
+}
                                                                        
+
                                                                        
+
                                                                        Status Codes
                                                                        
+
                                                                        
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                        Status Code
                                                                        
+
                                                                        Description
                                                                        
+
                                                                        204
                                                                        
+
                                                                        The request is successful.
                                                                        
+
                                                                        400
                                                                        
+
                                                                        Parameter error.
                                                                        
+
                                                                        401
                                                                        
+
                                                                        Authentication failed.
                                                                        
+
                                                                        403
                                                                        
+
                                                                        Unauthorized operation.
                                                                        
+
                                                                        500
                                                                        
+
                                                                        Internal server error.
                                                                        
+
                                                                        
+
                                                                        
+
                                                                        
+
                                                                        
+
                                                                        
+
                                                                        
+
                                                                        Parent topic: Enterprise Project Management
                                                                        
+
                                                                        
+
                                                                        
+
diff --git a/docs/iam/api-ref/iam_03_0002.html b/docs/iam/api-ref/iam_03_0002.html
index 56fb7341b..eff493cff 100644
--- a/docs/iam/api-ref/iam_03_0002.html
+++ b/docs/iam/api-ref/iam_03_0002.html
@@ -123,7 +123,7 @@
 
 
                                                                    String
                                                                    
 
                                                                    Time when the access key was last used.
                                                                    
+
                                                                    The last time the access key was used. If the access key has never been used, the creation time of the access key is returned.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    description
                                                                    
diff --git a/docs/iam/api-ref/iam_03_0006.html b/docs/iam/api-ref/iam_03_0006.html
new file mode 100644
index 000000000..5340f84eb
--- /dev/null
+++ b/docs/iam/api-ref/iam_03_0006.html
@@ -0,0 +1,1006 @@
+
+
+
                                                                    Obtaining a User Token Through Password Authentication and Virtual MFA
                                                                    
+
                                                                    Function
                                                                    This API is used to obtain an IAM user token using the username, password, and virtual MFA device. To use this API, ensure that virtual MFA-based login protection has been enabled for the IAM user. A token is an access credential issued to a user to bear its identity and permissions. The token obtained using this API can be used to authenticate API calls to IAM and other cloud services.
                                                                    
+
                                                                    
+
                                                                    URI
                                                                    POST /v3/auth/tokens
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 1 Query parameters
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    nocatalog
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    If this parameter is set, no catalog information will be displayed in the response. Any non-empty string for this parameter will be interpreted as true and indicates that no catalog information will be displayed.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    Request
                                                                    
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 2 Parameters in the request header
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    Content-Type
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Set this field to application/json;charset=utf8.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 3 Parameters in the request body
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    auth
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Authentication information.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 4 auth
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    identity
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Authentication parameters.
                                                                    
+
                                                                    scope
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Application scope of the token. Value options: project and domain.
                                                                    
+
                                                                     NOTE: 
                                                                    • If the scope is set to domain, the token applies to global services. If the scope is set to project, the token applies to project-level services.
                                                                    • If the scope is set to both project and domain, the project is used and you get a token for project-level services.
                                                                    • If the scope is left blank, you get a token for global services. You are advised to specify this parameter.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 5 auth.identity
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    methods
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Array of strings
                                                                    
+
                                                                    Authentication method. 
                                                                    
+
                                                                    The options are as follows:
                                                                    
+
                                                                    • password
                                                                    • totp
                                                                    
+
                                                                    password
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    IAM user password authentication information.
                                                                    
+
                                                                     NOTE: 
                                                                    Authentication information. Example:
                                                                    
+
                                                                    "password": {
+        "user": {
+          "name": "user A",
+          "password": "**********",
+          "domain": {
+            "name": "domain A"
                                                                    
+
                                                                    • user.name: Name of the user that wants to obtain the token. Obtain the username on the My Credentials page.
                                                                    • password: Login password of the user.
                                                                    • domain.name: Name of the domain that created the user. Obtain the domain name on the My Credentials page.
                                                                    
+
                                                                    
+
                                                                    totp
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    
+
                                                                    Authentication information. This parameter is mandatory only if you have enabled virtual MFA-based login protection.
                                                                    
+
                                                                    You can specify either user.id or user.name.
                                                                    
+
                                                                     CAUTION: 
                                                                    
+
                                                                    
+
                                                                    Example 1:
                                                                    
+
                                                                    "totp": {
+        "user": {
+          "id": "b95b78b67fa045b38104c12fb...",
+          "passcode": "******"
                                                                    
+
                                                                    • user.id: User ID, which can be obtained on the My Credentials page.
                                                                    • passcode: MFA verification code, which can be obtained on the MFA App.
                                                                    
+
                                                                    Example 2:
                                                                    
+
                                                                    "totp": {
+        "user": {
+          "name": "user A",
+          "passcode": "******"
                                                                    
+
                                                                    • user.name: Name of the user that wants to obtain the token.
                                                                    • passcode: MFA verification code, which can be obtained on the MFA App.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 6 auth.identity.password
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    user
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Information about the IAM user who is requesting to obtain a token.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 7 auth.identity.password.user
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    domain
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Information about the account used to create the IAM user.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IAM username.
                                                                    
+
                                                                    password
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Password of the IAM user.
                                                                    
+
                                                                     NOTE: 
                                                                    • To obtain a token successfully, ensure that the password you provide is correct.
                                                                    • A third-party system user cannot directly obtain a token by using the username and password used for identity federation. Go to the cloud platform login page, click Forgot Password, and reset the password.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 8 auth.identity.password.user.domain
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    name
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Name of the account used to create the IAM user.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 9 auth.identity.totp
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    user
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    IAM user information. Login protection has been enabled for the IAM user, and a virtual MFA device is used for identity authentication.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 10 auth.identity.totp.user
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    ID of the IAM user for whom virtual MFA-based login protection has been enabled.
                                                                    
+
                                                                    passcode
                                                                    
+
                                                                    Yes
                                                                    
+
                                                                    String
                                                                    
+
                                                                    MFA verification code, which can be obtained on the MFA App.
                                                                    
+
                                                                     NOTE: 
                                                                    To obtain a token successfully, ensure that the verification code you provide is correct.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 11 auth.scope
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    domain
                                                                    
+
                                                                    No
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    If this parameter is set to domain, the token can be used to access global services, such as OBS. Global services are not subject to any projects or regions. You can specify either id or name. domain.id is recommended.
                                                                    
+
                                                                    project
                                                                    
+
                                                                    No
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    If this parameter is set to project, the token can be used to access only services (such as ECS) in specific projects. You can specify either id or name.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 12 auth.scope.domain
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    ID of the account used to create the IAM user.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Name of the account used to create the IAM user.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 13 auth.scope.project
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    ID of the project to which the IAM user belongs.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Project name of the account used to create the IAM user.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    Example Request
                                                                    • Sample request
                                                                      The following is a sample request for obtaining a token for user A. The login password of the user is ********** and the domain name is domain A. The scope of the token is domain.
                                                                      
+
                                                                      {
+  "auth": {
+    "identity": {
+      "methods": ["password"],
+      "password": {
+        "user": {
+          "name": "user A",
+          "password": "**********",
+          "domain": {
+            "name": "domain A"
+          }
+        }
+      }
+    },
+    "scope": {
+      "domain": {
+        "name": "domain A"
+      }
+    }
+  }
+}
                                                                      
+
                                                                      The following is a sample request for obtaining a token when virtual MFA–based login authentication is enabled.
                                                                      
+
                                                                      {
+	"auth": {
+		"identity": {
+			"methods": ["password", "totp"],
+			"password": {
+				"user": {
+					"name": "user A",
+					"password": "********",
+					"domain": {
+						"name": "domain A"
+					}
+				}
+			},
+			"totp" : {
+				"user": {
+					"name": "user A",
+					"passcode": "******"
+				}
+			}
+		},
+		"scope": {
+			"domain": {
+				"name": "domain A"
+			}
+		}
+	}
+}
                                                                      
+
                                                                    
+
                                                                    
+
                                                                    Response
                                                                    
+
                                                                    
+
+
+
+
+
+
+
+
+
+
                                                                    Table 14 Parameters in the response header
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    X-Subject-Token
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Signed token.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
                                                                    Table 15 Parameters in the response body
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    token
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Token information.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 16 token
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    catalog
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    Endpoint information.
                                                                    
+
                                                                    domain
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Account information about the IAM user who requests for the token. This parameter is returned only when the scope parameter in the request body has been set to domain.
                                                                    
+
                                                                    expires_at
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Expiration date of the token.
                                                                    
+
                                                                    issued_at
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Time when the token was issued.
                                                                    
+
                                                                    mfa_authn_at
                                                                    
+
                                                                    String
                                                                    
+
                                                                    MFA authentication time. This field is displayed only when virtual MFA–based login authentication is enabled.
                                                                    
+
                                                                    methods
                                                                    
+
                                                                    Array of strings
                                                                    
+
                                                                    Method for obtaining the token.
                                                                    
+
                                                                    project
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Project information about the IAM user who requests for the token. This parameter is returned only when the scope parameter in the request body has been set to project.
                                                                    
+
                                                                    roles
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    Permissions information of the token.
                                                                    
+
                                                                    user
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Information about the IAM user who requests for the token.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 17 token.catalog
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    endpoints
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    Endpoint information.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Service ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Service name.
                                                                    
+
                                                                    type
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Type of the service to which the API belongs.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 18 token.catalog.endpoints
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Endpoint ID.
                                                                    
+
                                                                    interface
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Visibility of the API. public indicates that the API is available for public access.
                                                                    
+
                                                                    region
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Region to which the endpoint belongs.
                                                                    
+
                                                                    region_id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Region ID.
                                                                    
+
                                                                    url
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Endpoint URL.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 19 token.domain
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain name.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain ID.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 20 token.project
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    domain
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Domain information of the project.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Project ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Project name.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 21 token.project.domain
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain name.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 22 token.roles
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Permission name.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Permission ID. The default value is 0, which does not correspond to any permission.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 23 token.user
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IAM username.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    IAM user ID.
                                                                    
+
                                                                    password_expires_at
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Password expiration time. If this parameter is not specified, the password will never expire.
                                                                    
+
                                                                    domain
                                                                    
+
                                                                    Object
                                                                    
+
                                                                    Information about the account used to create the IAM user.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 24 token.user.domain
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Name of the account used to create the IAM user.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    ID of the account used to create the IAM user.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    Example Response
                                                                    • Example response
                                                                      The following is a sample request for obtaining a token for user A. The login password of the user is ********** and the domain name is domain A. The scope of the token is domain.
                                                                      Token information stored in the response header:
+X-Subject-Token:MIIDkgYJKoZIhvcNAQcCoIIDgzCCA38CAQExDTALBglghkgBZQMEAgEwgXXXXX...
+
+Token information stored in the response body:
+{
+  "token" : {
+    "methods" : ["password"],
+    "expires_at" : "2015-11-09T01:42:57.527363Z",
+    "issued_at" : "2015-11-09T00:42:57.527404Z",
+    "user" : {
+      "domain" : {
+      "id" : "ded485def148s4e7d2se41d5se...",
+      "name" : "domain A"
+      },
+      "id" : "ee4dfb6e5540447cb37419051...",
+      "name" : "user A",
+      "password_expires_at":"2016-11-06T15:32:17.000000",
+    },
+    "domain" : {
+       "name" : "domain A",
+       "id" : "dod4ed5e8d4e8d2e8e8d5d2d..."
+    },
+    "catalog": [{
+        "type": "identity",
+        "id": "1331e5cff2a74d76b03da12259...",
+        "name": "iam",
+        "endpoints": [{
+            "url": "https://sample.domain.com/v3",
+            "region": "*",
+            "region_id": "*",
+           "interface": "public",
+             "id": "089d4a381d574308a703122d3a..."
+       }]
+    }], 
+    "roles" : [{
+       "name" : "role1",
+       "id" : "roleid1"
+       }, {
+       "name" : "role2",
+       "id" : "roleid2"
+       }
+  ]
+  }
+}
                                                                      
+
                                                                      
+
                                                                      The following is a sample request for obtaining a token when virtual MFA–based login authentication is enabled.
                                                                      
+
                                                                      Token information stored in the response header:
+X-Subject-Token:MIIDkgYJKoZIhvcNAQcCoIIDgzCCA38CAQExDTALBglghkgBZQMEAgEwgXXXXX...
+
+Token information stored in the response body:
+{
+  "token": {
+    "expires_at": "2020-09-05T06:50:44.390000Z",
+    "mfa_authn_at": "2020-09-04T06:50:44.390000Z",
+    "issued_at": "2020-09-04T06:50:44.390000Z",
+     "methods": [
+      "password",
+      "totp"
+    ],
+    "catalog": [
+      {
+        "endpoints": [
+          {
+            "id": "33e1cbdd86d34e89a63cf8ad16a5f...",
+            "interface": "public",
+            "region": "*",
+            "region_id": "*",
+            "url": "https://sample.domain.com/v3.0"
+          }
+        ],
+        "id": "100a6a3477f1495286579b819d399...",
+        "name": "iam",
+        "type": "iam"
+      },
+      ],
+    "domain": {
+      "id": "e6505630658e49649784759cdf251...",
+      "name": "domain A"
+    },
+    "roles": [
+     {
+     "name" : "role1", 
+     "id" : "roleid1" 
+      },{
+     "name" : "role1", 
+     "id" : "roleid1" 
+ 
+}
+    ],
+       "user": {
+      "domain": {
+        "id": "e6505630658e49649784759cdf251...",
+        "name": "domain A"
+      },
+      "id": "092ac6365a0025b11f76c01e90100...",
+      "name": "user A",
+      "password_expires_at": ""
+    }
+  }
+}
                                                                      
+
                                                                    
+
                                                                    
+
                                                                    Status Codes
                                                                    
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Status Code
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    201
                                                                    
+
                                                                    Creation succeeded.
                                                                    
+
                                                                    400
                                                                    
+
                                                                    Invalid parameters.
                                                                    
+
                                                                    401
                                                                    
+
                                                                    Authentication failed.
                                                                    
+
                                                                    403
                                                                    
+
                                                                    Access denied.
                                                                    
+
                                                                    404
                                                                    
+
                                                                    Requested resource cannot found.
                                                                    
+
                                                                    500
                                                                    
+
                                                                    Internal server error.
                                                                    
+
                                                                    503
                                                                    
+
                                                                    Service unavailable.
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    
+
                                                                    Parent topic: Token Management
                                                                    
+
                                                                    
+
                                                                    
+
diff --git a/docs/iam/api-ref/iam_08_0004.html b/docs/iam/api-ref/iam_08_0004.html
index 456e23834..7a8e2d257 100644
--- a/docs/iam/api-ref/iam_08_0004.html
+++ b/docs/iam/api-ref/iam_08_0004.html
@@ -85,7 +85,7 @@
                                                                     		
 
                                                                    Boolean
                                                                    
 
                                                                    Enabling status of the user. true (default value) indicates that the user is enabled. false indicates that the user is disabled.
                                                                    
+
                                                                    Whether the IAM user is enabled. true (default value) indicates that the user is enabled. false indicates that the user is disabled.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    id
                                                                    
@@ -176,14 +176,21 @@
                                                                     		
 
                                                                    String
                                                                    
 
                                                                    Last login time of the user.
                                                                    
+
                                                                    Last login or access authentication time of the IAM user.
                                                                    
+
                                                                    last_pwd_auth_time
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Last time when the IAM user used password authentication.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    pwd_strength
                                                                    
                                                                     		
 
                                                                    String
                                                                    
 
                                                                    Password strength. The value can be Low, Middle, High, or None.
                                                                    
+
                                                                    Password strength. The value can be Low, Middle, Strong, or None.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    is_domain_owner
                                                                    
@@ -246,6 +253,7 @@
     "pwd_strength" : "Strong",
     "create_time" : "2020-07-08 02:19:03.0",
     "last_login_time" : null,
+    "last_pwd_auth_time" : null,
     "areacode" : "",
     "enabled" : true,
     "domain_id" : "086ba757f90089cf0fe5c000dbe7f...",
@@ -262,6 +270,8 @@
     "id" : "093f75808b8089ba1f6dc000c7cac...",
     "xuser_type" : "",
     "email" : "",
+,
+    
   }
 }
 
diff --git a/docs/iam/api-ref/iam_08_0014.html b/docs/iam/api-ref/iam_08_0014.html
index 0c3dbbf13..b585726d2 100644
--- a/docs/iam/api-ref/iam_08_0014.html
+++ b/docs/iam/api-ref/iam_08_0014.html
@@ -63,7 +63,7 @@
                                                                     		
 
                                                                    Boolean
                                                                    
 
                                                                    Indicates whether login protection has been enabled for a user. The value can be true or false.
                                                                    
+
                                                                    Whether login protection has been enabled. The value can be true or false.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    user_id
                                                                    
@@ -77,7 +77,7 @@
                                                                     		
 
                                                                    String
                                                                    
 
                                                                    Login authentication method of the user.
                                                                    
+
                                                                    Login authentication method of the user. 
                                                                    
 
                                                                    • email: email verification code
                                                                    • vmfa: virtual MFA verification code
                                                                    • SMS: SMS verification code
                                                                    
                                                                     		
 
                                                                    
 
                                                                    Boolean
                                                                    
 
                                                                    Indicates whether password reset is required at the first login. By default, password reset is required.
                                                                    
+
                                                                    Definition
                                                                    
+
                                                                    Whether password reset is required at the first login. This parameter is valid only when password is not empty.
                                                                    
+
                                                                    Constraints
                                                                    
+
                                                                    N/A
                                                                    
+
                                                                    Range
                                                                    
+
                                                                    • true: The IAM user needs to reset password upon first login.
                                                                    • false: The IAM user does not need to reset password upon first login.
                                                                    
+
                                                                    Default Value
                                                                    
+
                                                                    If password is empty, this parameter defaults to false.
                                                                    
+
                                                                    If password is not empty, this parameter defaults to true.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    xuser_type
                                                                    
@@ -162,7 +170,7 @@
 
                                                                    String
                                                                    
                                                                     		
 
                                                                    ID of the IAM user in the external system. The user ID can contain a maximum of 128 characters, and must be used together with xuser_type. Due to the latency, the IAM console may not be able to display the external identity ID you have set in real time. Refresh the page later.
                                                                    
-
                                                                     NOTE: 
                                                                    An external system refers to an enterprise management system connected to the cloud platform. Parameters xaccount_type, xaccount_id, xdomain_type, xdomain_id, xuser_type, and xuser_id cannot be obtained from the cloud platform. Please contact your enterprise administrator.
                                                                    
+
                                                                     NOTE: 
                                                                    An external system refers to an enterprise management system connected to the cloud platform. Parameters xaccount_type, xaccount_id, xdomain_type, xdomain_id, xuser_type, and xuser_id cannot be obtained from the cloud platform. Please contact your enterprise administrator.
                                                                    
 
                                                                    
 
                                                                    		
 
                                                                    
 
                                                                    Boolean
                                                                    
 
                                                                    Indicates whether password reset is required at the first login.
                                                                    
+
                                                                    Definition
                                                                    
+
                                                                    Whether password reset is required at the first login.
                                                                    
+
                                                                    Constraints
                                                                    
+
                                                                    N/A
                                                                    
+
                                                                    Range
                                                                    
+
                                                                    • true: The IAM user needs to reset password upon first login.
                                                                    • false: The IAM user does not need to reset password upon first login.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    xuser_id
                                                                    
@@ -226,7 +239,7 @@
 
                                                                    String
                                                                    
                                                                     		
 
                                                                    ID of the IAM user in the external system.
                                                                    
-
                                                                     NOTE: 
                                                                    An external system refers to an enterprise management system connected to the cloud platform. Parameters xaccount_type, xaccount_id, xdomain_type, xdomain_id, xuser_type, and xuser_id cannot be obtained from the cloud platform. Please contact your enterprise administrator.
                                                                    
+
                                                                     NOTE: 
                                                                    An external system refers to an enterprise management system connected to the cloud platform. Parameters xaccount_type, xaccount_id, xdomain_type, xdomain_id, xuser_type, and xuser_id cannot be obtained from the cloud platform. Please contact your enterprise administrator.
                                                                    
 
                                                                    
 
                                                                    		
 
                                                                    String
                                                                    
                                                                     		
 
                                                                    Type of the IAM user in the external system.
                                                                    
-
                                                                     NOTE: 
                                                                    An external system refers to an enterprise management system connected to the cloud platform. Parameters xaccount_type, xaccount_id, xdomain_type, xdomain_id, xuser_type, and xuser_id cannot be obtained from the cloud platform. Please contact your enterprise administrator.
                                                                    
+
                                                                     NOTE: 
                                                                    An external system refers to an enterprise management system connected to the cloud platform. Parameters xaccount_type, xaccount_id, xdomain_type, xdomain_id, xuser_type, and xuser_id cannot be obtained from the cloud platform. Please contact your enterprise administrator.
                                                                    
 
                                                                    
 
                                                                    		
 
                                                                    
 
                                                                    Boolean
                                                                    
 
                                                                    Indicates whether login protection has been enabled for a user. The value can be true or false.
                                                                    
+
                                                                    Whether login protection has been enabled. The value can be true or false.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    user_id
                                                                    
@@ -100,7 +100,7 @@
                                                                     		
 
                                                                    String
                                                                    
 
                                                                    Login authentication method of the user.
                                                                    
+
                                                                    Login authentication method of the user. 
                                                                    
                                                                     		
 
                                                                    
 
 
                                                                    Boolean
                                                                    
 
                                                                    Indicates whether login protection has been enabled for the user. The value can be true or false.
                                                                    
+
                                                                    Whether login protection has been enabled. The value can be true or false.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    verification_method
                                                                    
@@ -100,7 +100,7 @@
                                                                     		
 
                                                                    String
                                                                    
 
                                                                    Login authentication method of the user. Options: sms, email, and vmfa.
                                                                    
+
                                                                    Login authentication method of the user. The options include sms, email, and vmfa.
                                                                    
                                                                     		
 
                                                                    
 
 
                                                                    Boolean
                                                                    
 
                                                                    Indicates whether login protection has been enabled for the user. The value can be true or false.
                                                                    
+
                                                                    Whether login protection has been enabled. The value can be true or false.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    verification_method
                                                                    
                                                                     		
 
                                                                    String
                                                                    
 
                                                                    Login authentication method of the user. Options: sms, email, and vmfa.
                                                                    
+
                                                                    Login authentication method of the user. The value can be sms, email, or vmfa (MFA authentication).
                                                                    
                                                                     		
 
                                                                    
 
 
                                                                    
 
                                                                    
 
-
                                                                    Example Request
                                                                    PUT https://sample.domain.com/v3.0/OS-USER/users/{user_id}/login-protect
+
                                                                    Example Request
                                                                    
+
                                                                    PUT https://sample.domain.com/v3.0/OS-USER/users/{user_id}/login-protect
 { 
   "login_protect" : { 
     "enabled" : true, 
     "verification_method" : "vmfa" 
   } 
 }
                                                                    
-
                                                                    
 
                                                                    Example Response
                                                                    Status code: 200
                                                                    
 
                                                                    The request is successful.
                                                                    
-
                                                                    { 
+
                                                                    
+
                                                                    { 
   "login_protect" : { 
     "user_id": "16b26081f43d4c628c4bb88cf32e9...", 
     "enabled" : true, 
     "verification_method" : "vmfa" 
   } 
 }
                                                                    
-
 
                                                                    Status Codes
                                                                    
-
                                                                    Status Code
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
-
-
-
-
-
diff --git a/docs/iam/api-ref/iam_10_0011.html b/docs/iam/api-ref/iam_10_0011.html
index 3f6b693bd..e7be836ea 100644
--- a/docs/iam/api-ref/iam_10_0011.html
+++ b/docs/iam/api-ref/iam_10_0011.html
@@ -251,7 +251,7 @@
 
@@ -297,8 +297,8 @@
 
-
@@ -332,7 +332,7 @@
 
diff --git a/docs/iam/api-ref/iam_12_0513.html b/docs/iam/api-ref/iam_12_0513.html
new file mode 100644
index 000000000..0595ea922
--- /dev/null
+++ b/docs/iam/api-ref/iam_12_0513.html
@@ -0,0 +1,17 @@
+
+
+
                                                                    Enterprise Project Management
                                                                    
+
                                                                    
+
+
diff --git a/docs/iam/api-ref/iam_13_0605.html b/docs/iam/api-ref/iam_13_0605.html
index d50d83583..ce33c61dc 100644
--- a/docs/iam/api-ref/iam_13_0605.html
+++ b/docs/iam/api-ref/iam_13_0605.html
@@ -61,7 +61,7 @@
 
                                                                    Status Code
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    200
                                                                    
+
                                                                    200
                                                                    
 
                                                                    The request is successful.
                                                                    
+
                                                                    The request is successful.
                                                                    
                                                                     		
 
                                                                    400
                                                                    
+
                                                                    400
                                                                    
 
                                                                    The request is invalid.
                                                                    
+
                                                                    The request is invalid.
                                                                    
                                                                     		
 
                                                                    401
                                                                    
+
                                                                    401
                                                                    
 
                                                                    Authentication failed.
                                                                    
+
                                                                    Authentication failed.
                                                                    
                                                                     		
 
                                                                    403
                                                                    
+
                                                                    403
                                                                    
 
                                                                    You do not have permission to perform this action.
                                                                    
+
                                                                    You do not have permission to perform this action.
                                                                    
                                                                     		
 
                                                                    404
                                                                    
+
                                                                    404
                                                                    
 
                                                                    The requested resource cannot be found.
                                                                    
+
                                                                    The requested resource cannot be found.
                                                                    
                                                                     		
 
                                                                    500
                                                                    
+
                                                                    500
                                                                    
 
                                                                    A system error occurred.
                                                                    
+
                                                                    A system error occurred.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    String
                                                                    
                                                                     		
 
                                                                    Policy version.
                                                                    
-
                                                                     NOTE: 
                                                                    • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                                                                    • 1.1: Policy. A policy defines the permissions required to perform operations on a specific cloud resource under certain conditions.
                                                                    
+
                                                                     NOTE: 
                                                                    • 1.0: System-defined role. Only a limited number of service-level roles are provided for authorization.
                                                                    • 1.1: Policy. A policy defines the permissions required to perform actions on a specific cloud resource under certain conditions.
                                                                    
 
                                                                    
 
                                                                    		
 
                                                                    
 
                                                                    Array of strings
                                                                    
 
                                                                    Specific operation permissions on a resource. For details about supported actions, see "Permissions Policies and Supported Actions" in the API Reference of cloud services.
                                                                    
-
                                                                     NOTE: 
                                                                    • The value format is Service name:Resource type:Operation, for example, vpc:ports:create.
                                                                    • Service name: indicates the product name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and operations are not case-sensitive. You can use an asterisk (*) to represent all operations.
                                                                    • In the case of a custom policy for agencies, this parameter should be set to "Action": ["iam:agencies:assume"].
                                                                    
+
                                                                    Specific permissions on a resource. For details about supported actions, see "Permissions and Supported Actions" in the API Reference of cloud services.
                                                                    
+
                                                                     NOTE: 
                                                                    • Format: Service name:Resource type:Action, for example, vpc:ports:create
                                                                    • Service name: indicates the service name, such as ecs, evs, or vpc. Only lowercase letters are allowed. Resource types and actions are not case-sensitive. You can use an asterisk (*) to represent all actions.
                                                                    • In the case of a custom policy for agencies, this parameter value should be "Action": ["iam:tokens:assume"].
                                                                    
 
                                                                    
                                                                     		
 
                                                                    Object
                                                                    
                                                                     		
 
                                                                    Cloud resource. If this parameter is not specified during policy creation, it will not be returned in the response. 
                                                                    
-
                                                                     NOTE: 
                                                                    • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                                                                    • The region segment can be * or a region accessible to the user. The specified resource must belong to the corresponding service that actually exists.
                                                                    • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be set to "Resource": {"uri": ["/iam/agencies/07805acaba800fdd4fbdc00b8f888c7c"]}.
                                                                    
+
                                                                     NOTE: 
                                                                    • Format: ::::. For example, obs:::bucket:*. Asterisks are allowed.
                                                                    • The region segment can be * or a region accessible to the user. The service must exist and the specified resource must belong to the service.
                                                                    • In the case of a custom policy for agencies, the type of this parameter is Object, and the value should be "Resource": {"uri": ["/iam/agencies/agencyTest"]}.
                                                                    
 
                                                                    
 
                                                                    		
 
                                                                    
 
                                                                    
 
-
                                                                    Table 3 GetIdTokenAuthParams
                                                                    Parameter
                                                                    
+
                                                                    
@@ -93,7 +93,7 @@
 
                                                                    Table 3 auth
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Mandatory
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 4 GetIdTokenIdTokenBody
                                                                    Parameter
                                                                    
+
                                                                    
@@ -116,7 +116,7 @@
 
                                                                    Table 4 auth.id_token
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Mandatory
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 5 GetIdTokenIdScopeBody
                                                                    Parameter
                                                                    
+
                                                                    
@@ -135,7 +135,7 @@
 
-
@@ -148,7 +148,7 @@
 
                                                                    Table 5 auth.scope
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Mandatory
                                                                    
 
                                                                    Domain scope details. Specify a domain or a project.
                                                                    
                                                                     		
 
                                                                    project
                                                                    
+
                                                                    project
                                                                    
                                                                     		
 
                                                                    No
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 6 GetIdTokenScopeDomainOrProjectBody
                                                                    Parameter
                                                                    
+
                                                                    
@@ -179,10 +179,42 @@
 
                                                                    Table 6 auth.scope.domain
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Mandatory
                                                                    
                                                                     		
 
                                                                    
 
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 7 auth.scope.project
                                                                    Parameter
                                                                    
+
                                                                    Mandatory
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain ID or project ID. Specify either this parameter or the name parameter.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    No
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain name or project name. Specify either this parameter or the id parameter.
                                                                    
+
                                                                    
+
                                                                    
 
 
                                                                    Response Parameters
                                                                    Status code: 201
                                                                    
 
-
                                                                    Table 7 Parameters in the response header
                                                                    Parameter
                                                                    
+
                                                                    
@@ -201,7 +233,7 @@
 
                                                                    Table 8 Parameters in the response header
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 8 Parameters in the response body
                                                                    Parameter
                                                                    
+
                                                                    
@@ -220,7 +252,7 @@
 
                                                                    Table 9 Parameters in the response body
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 9 ScopedTokenInfo
                                                                    Parameter
                                                                    
+
                                                                    
@@ -256,7 +288,7 @@
 
-
@@ -270,7 +302,7 @@
 
-
@@ -279,7 +311,7 @@
 
-
@@ -288,7 +320,7 @@
 
                                                                    Table 10 token
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    User details.
                                                                    
                                                                     		
 
                                                                    domain
                                                                    
+
                                                                    domain
                                                                    
                                                                     		
 
                                                                    object
                                                                    
 
                                                                    Project details.
                                                                    
                                                                     		
 
                                                                    role
                                                                    
+
                                                                    roles
                                                                    
                                                                     		
 
                                                                    Array
                                                                    
 
                                                                    
 
                                                                    catalog
                                                                    
 
                                                                    object
                                                                    
+
                                                                    Array
                                                                    
                                                                     		
 
                                                                    Catalog details.
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 10 FederationUserBody
                                                                    Parameter
                                                                    
+
                                                                    
@@ -303,11 +335,32 @@
 
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 11 token.user
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    Federated user details.
                                                                    
                                                                     		
 
                                                                    domain
                                                                    
+
                                                                    object
                                                                    
+
                                                                    Domain details.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    User ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Username.
                                                                    
+
                                                                    
 
 
                                                                    
 
                                                                    
 
-
                                                                    Table 11 OSFederationInfo
                                                                    Parameter
                                                                    
+
                                                                    
@@ -315,7 +368,7 @@
 
-
@@ -329,39 +382,18 @@
 
-
-
-
-
-
-
-
-
-
-
-
-
-
                                                                    Table 12 token.user.OS-FEDERATION
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
                                                                     		
 
                                                                    
 
                                                                    identify_provider
                                                                    
+
                                                                    identity_provider
                                                                    
                                                                     		
 
                                                                    object
                                                                    
 
                                                                    Protocol details.
                                                                    
                                                                     		
 
                                                                    groups
                                                                    
+
                                                                    groups
                                                                    
                                                                     		
 
                                                                    Array
                                                                    
                                                                     		
 
                                                                    User group details.
                                                                    
                                                                     		
 
                                                                    domain
                                                                    
-
                                                                    object
                                                                    
-
                                                                    Domain details.
                                                                    
-
                                                                    id
                                                                    
-
                                                                    String
                                                                    
-
                                                                    User ID.
                                                                    
-
                                                                    name
                                                                    
-
                                                                    String
                                                                    
-
                                                                    Username.
                                                                    
-
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 12 IdpIdInfo
                                                                    Parameter
                                                                    
+
                                                                    
@@ -380,7 +412,7 @@
 
                                                                    Table 13 token.user.OS-FEDERATION.identity_provider
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 13 ProtocolIdInfo
                                                                    Parameter
                                                                    
+
                                                                    
@@ -399,106 +431,210 @@
 
                                                                    Table 14 token.user.OS-FEDERATION.protocol
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 14 DomainInfo
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
                                                                    Table 15 token.user.OS-FEDERATION.groups
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    id
                                                                    
+
                                                                    id
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Domain ID.
                                                                    
+
                                                                    User group ID.
                                                                    
                                                                     		
 
                                                                    name
                                                                    
+
                                                                    name
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Domain name.
                                                                    
+
                                                                    User group name.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 15 ProjectInfo
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
-
-
-
-
                                                                    Table 16 token.user.domain
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    domain
                                                                    
+
                                                                    id
                                                                    
 
                                                                    object
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Domain details.
                                                                    
+
                                                                    Domain ID.
                                                                    
                                                                     		
 
                                                                    id
                                                                    
+
                                                                    name
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Project ID.
                                                                    
-
                                                                    name
                                                                    
-
                                                                    String
                                                                    
-
                                                                    Project name.
                                                                    
+
                                                                    Domain name.
                                                                    
                                                                     		
 
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 16 CatalogInfo
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
-
+
                                                                    Table 17 token.domain
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    id
                                                                    
+
                                                                    id
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Endpoint ID.
                                                                    
+
                                                                    Domain ID.
                                                                    
                                                                     		
 
                                                                    interface
                                                                    
+
                                                                    name
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Visibility of the API. public indicates that the API is available for public access.
                                                                    
+
                                                                    Domain name.
                                                                    
                                                                     		
 
                                                                    region
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
-
-
-
-
-
-
-
-
+
+
+
                                                                    Table 18 token.project
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    domain
                                                                    
 
                                                                    String
                                                                    
+
                                                                    object
                                                                    
 
                                                                    Region to which the endpoint belongs.
                                                                    
+
                                                                    Domain details.
                                                                    
                                                                     		
 
                                                                    region_id
                                                                    
+
                                                                    id
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Region ID.
                                                                    
+
                                                                    Project ID.
                                                                    
                                                                     		
 
                                                                    url
                                                                    
+
                                                                    name
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Endpoint URL.
                                                                    
+
                                                                    Project name.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 19 token.catalog
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Endpoint ID.
                                                                    
+
                                                                    interface
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Visibility of the API. public indicates that the API is available for public access.
                                                                    
+
                                                                    region
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Region to which the endpoint belongs.
                                                                    
+
                                                                    region_id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Region ID.
                                                                    
+
                                                                    url
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Endpoint URL.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 20 token.project.domain
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain name.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
diff --git a/docs/iam/api-ref/iam_13_0606.html b/docs/iam/api-ref/iam_13_0606.html
index ccb777fce..ed25e1a8e 100644
--- a/docs/iam/api-ref/iam_13_0606.html
+++ b/docs/iam/api-ref/iam_13_0606.html
@@ -101,7 +101,7 @@
 
                                                                    Table 21 token.roles
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Permission ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Permission name.
                                                                    
                                                                     		
 
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 5 UnscopedTokenInfo
                                                                    Parameter
                                                                    
+
                                                                    
@@ -141,7 +141,7 @@
 
                                                                    Table 5 token
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 6 FederationUserBody
                                                                    Parameter
                                                                    
+
                                                                    
@@ -156,11 +156,32 @@
 
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 6 token.user
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    Federated user details.
                                                                    
                                                                     		
 
                                                                    domain
                                                                    
+
                                                                    object
                                                                    
+
                                                                    Domain details.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    User ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Username
                                                                    
+
                                                                    
 
 
                                                                    
 
                                                                    
 
-
                                                                    Table 7 OSFederationInfo
                                                                    Parameter
                                                                    
+
                                                                    
@@ -168,7 +189,7 @@
 
-
@@ -182,39 +203,18 @@
 
-
-
-
-
-
-
-
-
-
-
-
-
-
                                                                    Table 7 token.user.OS-FEDERATION
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
                                                                     		
 
                                                                    
 
                                                                    identify_provider
                                                                    
+
                                                                    identity_provider
                                                                    
                                                                     		
 
                                                                    object
                                                                    
 
                                                                    Protocol details.
                                                                    
                                                                     		
 
                                                                    groups
                                                                    
+
                                                                    groups
                                                                    
                                                                     		
 
                                                                    Array
                                                                    
                                                                     		
 
                                                                    User group details.
                                                                    
                                                                     		
 
                                                                    domain
                                                                    
-
                                                                    object
                                                                    
-
                                                                    Domain details.
                                                                    
-
                                                                    id
                                                                    
-
                                                                    String
                                                                    
-
                                                                    User ID.
                                                                    
-
                                                                    name
                                                                    
-
                                                                    String
                                                                    
-
                                                                    Username.
                                                                    
-
                                                                    
                                                                     
 
                                                                    
 
                                                                    
 
-
                                                                    Table 8 IdpIdInfo
                                                                    Parameter
                                                                    
+
                                                                    
@@ -233,7 +233,7 @@
 
                                                                    Table 8 token.user.OS-FEDERATION.identity_provider
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 9 ProtocolIdInfo
                                                                    Parameter
                                                                    
+
                                                                    
@@ -252,26 +252,165 @@
 
                                                                    Table 9 token.user.OS-FEDERATION.protocol
                                                                    Parameter
                                                                    
                                                                     		
 
                                                                    Type
                                                                    
 
                                                                    
 
                                                                    
 
-
                                                                    Table 10 DomainInfo
                                                                    Parameter
                                                                    
+
                                                                    
-
-
-
-
-
-
-
-
+
+
+
                                                                    Table 10 token.user.OS-FEDERATION.groups
                                                                    Parameter
                                                                    
 
                                                                    Type
                                                                    
+
                                                                    Type
                                                                    
 
                                                                    Description
                                                                    
+
                                                                    Description
                                                                    
                                                                     		
 
                                                                    
 
                                                                    id
                                                                    
+
                                                                    id
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Domain ID.
                                                                    
+
                                                                    User group ID.
                                                                    
                                                                     		
 
                                                                    name
                                                                    
+
                                                                    name
                                                                    
 
                                                                    String
                                                                    
+
                                                                    String
                                                                    
 
                                                                    Domain name.
                                                                    
+
                                                                    User group name.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 11 token.user.domain
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Domain name.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 12 token.roles
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Permission ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Permission name.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
                                                                    Table 13 token.catalog
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    endpoints
                                                                    
+
                                                                    Array of objects
                                                                    
+
                                                                    Endpoint information.
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Service ID.
                                                                    
+
                                                                    name
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Service name.
                                                                    
+
                                                                    type
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Type of the service to which the API belongs.
                                                                    
+
                                                                    
+
                                                                    
+
+
                                                                    
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
+
diff --git a/docs/iam/api-ref/iam_19_0003.html b/docs/iam/api-ref/iam_19_0003.html
index a5fa041f3..e1e94504f 100644
--- a/docs/iam/api-ref/iam_19_0003.html
+++ b/docs/iam/api-ref/iam_19_0003.html
@@ -4,8 +4,8 @@
 
                                                                    By default, new users do not have permissions assigned. You need to add a user to one or more groups, and attach permissions policies to these groups. Users inherit permissions from the groups to which they are added and can perform specified operations on cloud services based on the permissions.
                                                                    
 
                                                                    An account has all the permissions required to call all APIs, but users must be assigned the required permissions. The permissions required for calling an API are determined by the actions supported by the API. Only users who have been granted permissions allowing the actions can call the API successfully. For example, if a user queries ECSs using an API, the user must have been granted permissions that allow the ecs:servers:list action.
                                                                    
 
                                                                    Supported Actions
                                                                    IAM provides system-defined policies that can be directly used. You can also create custom policies and use them to supplement system-defined policies, implementing more refined access control. Operations supported by policies are specific to APIs. The following are common concepts related to policies:
                                                                    
-
                                                                    • Permission: Defined by actions in a custom policy.
                                                                    • APIs: REST APIs that can be called in a custom policy.
                                                                    • Actions: Added to a custom policy to control permissions for specific operations.
                                                                    
-
                                                                     
                                                                    • The check mark (√) and cross symbol (x) indicate that an action takes effect or does not take effect for the corresponding type of projects. A hyphen (-) indicates that an action is irrelevant to the corresponding type of projects.
                                                                    • IAM is a global service which does not involve project-based authorization.
                                                                    • Some permissions only support actions and do not support APIssuch as permissions for virtual MFA device management.
                                                                    
+
                                                                    • Permission: Defined by actions in a custom policy.
                                                                    • APIs: REST APIs that can be called in a custom policy.
                                                                    • Actions: Added to a custom policy to control permissions for specific operations.
                                                                    • IAM projects: the authorization scope of a custom policy. The custom policies can be attached to user groups for authorization in IAM.
                                                                    
+
                                                                     
                                                                    • The check mark (√) and cross symbol (x) indicate that an action takes effect or does not take effect for the corresponding type of projects. A hyphen (-) indicates that an action is irrelevant to the corresponding type of projects.
                                                                    • IAM is a global service which does not involve project-based authorization.
                                                                    • Some permissions only support actions and do not support APIs such as permissions for virtual MFA device management.
                                                                    
 
                                                                    
 
                                                                    
 
                                                                    
diff --git a/docs/iam/api-ref/iam_20_0000.html b/docs/iam/api-ref/iam_20_0000.html
index 2272f4e7d..9e81cbe58 100644
--- a/docs/iam/api-ref/iam_20_0000.html
+++ b/docs/iam/api-ref/iam_20_0000.html
@@ -26,6 +26,8 @@
 
 
                                                                  • Security Settings
                                                                    
 
                                                                    • 
+
                                                                  • Enterprise Project Management
                                                                    
+
                                                                    • 
 
                                                                  • Federated Identity Authentication Management
                                                                    
 
                                                                    • 
 
                                                                  • Version Information Management
                                                                    

                                                                    • Table 14 token.catalog.endpoints
                                                                    Parameter
                                                                    
+
                                                                    Type
                                                                    
+
                                                                    Description
                                                                    
+
                                                                    id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Endpoint ID.
                                                                    
+
                                                                    interface
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Visibility of the API. public indicates that the API is available for public access.
                                                                    
+
                                                                    region
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Region to which the endpoint belongs.
                                                                    
+
                                                                    region_id
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Region ID.
                                                                    
+
                                                                    url
                                                                    
+
                                                                    String
                                                                    
+
                                                                    Endpoint URL.