CCN API 20250121 version

Reviewed-by: Hajba, László Antal <laszlo-antal.hajba@t-systems.com>
Co-authored-by: fanqinying <fanqinying@huawei.com>
Co-committed-by: fanqinying <fanqinying@huawei.com>

docs/ccn/api-ref/DeleteGlobalConnectionBandwidth.html

@@ -0,0 +1,97 @@
+<a name="DeleteGlobalConnectionBandwidth"></a><a name="DeleteGlobalConnectionBandwidth"></a>
+
+<h1 class="topictitle1">Deleting a Global Connection Bandwidth</h1>
+<div id="body1708331107508"><div class="section" id="DeleteGlobalConnectionBandwidth__topic1861000000"><h4 class="sectiontitle">Function</h4><p id="DeleteGlobalConnectionBandwidth__topic1861000002">This API is used to delete a global connection bandwidth.</p>
+</div>
+<div class="section" id="DeleteGlobalConnectionBandwidth__atuogenerate_1"><h4 class="sectiontitle">URI</h4><p id="DeleteGlobalConnectionBandwidth__topic1861000008">DELETE /v3/{domain_id}/gcb/gcbandwidths/{id}</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="DeleteGlobalConnectionBandwidth__topic1861000009" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Path Parameters</caption><thead align="left"><tr id="DeleteGlobalConnectionBandwidth__topic1861000017"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.3.2.5.1.1"><p id="DeleteGlobalConnectionBandwidth__topic1861000019">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.3.2.5.1.2"><p id="DeleteGlobalConnectionBandwidth__topic1861000021">Mandatory</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.2.3.2.5.1.3"><p id="DeleteGlobalConnectionBandwidth__topic1861000023">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.2.3.2.5.1.4"><p id="DeleteGlobalConnectionBandwidth__topic1861000025">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="DeleteGlobalConnectionBandwidth__topic1861000027"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.1 "><p id="DeleteGlobalConnectionBandwidth__topic1861000029">domain_id</p>
+</td>
+<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.2 "><p id="DeleteGlobalConnectionBandwidth__topic1861000031">Yes</p>
+</td>
+<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.3 "><p id="DeleteGlobalConnectionBandwidth__topic1861000033">String</p>
+</td>
+<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.2.3.2.5.1.4 "><p id="DeleteGlobalConnectionBandwidth__topic1861000035">Account ID.</p>
+</td>
+</tr>
+<tr id="DeleteGlobalConnectionBandwidth__topic1861000036"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.1 "><p id="DeleteGlobalConnectionBandwidth__topic1861000038">id</p>
+</td>
+<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.2 "><p id="DeleteGlobalConnectionBandwidth__topic1861000040">Yes</p>
+</td>
+<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.2.3.2.5.1.3 "><p id="DeleteGlobalConnectionBandwidth__topic1861000042">String</p>
+</td>
+<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.2.3.2.5.1.4 "><p id="DeleteGlobalConnectionBandwidth__topic1861000044">Instance ID.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="DeleteGlobalConnectionBandwidth__topic1861000045"><h4 class="sectiontitle">Request Parameters</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="DeleteGlobalConnectionBandwidth__HeaderParameter" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Request header parameters</caption><thead align="left"><tr id="DeleteGlobalConnectionBandwidth__topic1861000054"><th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.1"><p id="DeleteGlobalConnectionBandwidth__topic1861000056">Parameter</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.2"><p id="DeleteGlobalConnectionBandwidth__topic1861000058">Mandatory</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="20%" id="mcps1.3.3.2.2.5.1.3"><p id="DeleteGlobalConnectionBandwidth__topic1861000060">Type</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="40%" id="mcps1.3.3.2.2.5.1.4"><p id="DeleteGlobalConnectionBandwidth__topic1861000062">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="DeleteGlobalConnectionBandwidth__topic1861000064"><td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.1 "><p id="DeleteGlobalConnectionBandwidth__topic1861000066">X-Auth-Token</p>
+</td>
+<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.2 "><p id="DeleteGlobalConnectionBandwidth__topic1861000068">No</p>
+</td>
+<td class="cellrowborder" valign="top" width="20%" headers="mcps1.3.3.2.2.5.1.3 "><p id="DeleteGlobalConnectionBandwidth__topic1861000070">String</p>
+</td>
+<td class="cellrowborder" valign="top" width="40%" headers="mcps1.3.3.2.2.5.1.4 "><p id="DeleteGlobalConnectionBandwidth__topic1861000072">User token.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="DeleteGlobalConnectionBandwidth__topic1861000073"><h4 class="sectiontitle">Response Parameters</h4><p id="DeleteGlobalConnectionBandwidth__topic1861000075"><strong id="DeleteGlobalConnectionBandwidth__topic1861000076">Status code: 204</strong></p>
+<p id="DeleteGlobalConnectionBandwidth__topic1861000077">The global connection bandwidth has been deleted.</p>
+<p id="DeleteGlobalConnectionBandwidth__topic1861000078">None</p>
+</div>
+<div class="section" id="DeleteGlobalConnectionBandwidth__topic1861000079"><h4 class="sectiontitle">Example Requests</h4><p id="DeleteGlobalConnectionBandwidth__topic1861000081">Deleting a global connection bandwidth</p>
+<pre class="screen" id="DeleteGlobalConnectionBandwidth__topic1861000082">DELETE https://{cc_endpoint}/v3/{domain_id}/gcb/gcbandwidths/{id}</pre>
+</div>
+<div class="section" id="DeleteGlobalConnectionBandwidth__topic1861000083"><h4 class="sectiontitle">Example Responses</h4><p id="DeleteGlobalConnectionBandwidth__topic1861000085">None</p>
+</div>
+<div class="section" id="DeleteGlobalConnectionBandwidth__topic1861000086"><h4 class="sectiontitle">Status Codes</h4>
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="DeleteGlobalConnectionBandwidth__status_code" frame="border" border="1" rules="all"><thead align="left"><tr id="DeleteGlobalConnectionBandwidth__topic1861000092"><th align="left" class="cellrowborder" valign="top" width="15%" id="mcps1.3.7.2.1.3.1.1"><p id="DeleteGlobalConnectionBandwidth__topic1861000094">Status Code</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="85%" id="mcps1.3.7.2.1.3.1.2"><p id="DeleteGlobalConnectionBandwidth__topic1861000096">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="DeleteGlobalConnectionBandwidth__topic1861000098"><td class="cellrowborder" valign="top" width="15%" headers="mcps1.3.7.2.1.3.1.1 "><p id="DeleteGlobalConnectionBandwidth__topic1861000100">204</p>
+</td>
+<td class="cellrowborder" valign="top" width="85%" headers="mcps1.3.7.2.1.3.1.2 "><p id="DeleteGlobalConnectionBandwidth__topic1861000102">The global connection bandwidth has been deleted.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+<div class="section" id="DeleteGlobalConnectionBandwidth__topic1861000103"><h4 class="sectiontitle">Error Codes</h4><p id="DeleteGlobalConnectionBandwidth__topic1861000105">See <a href="ErrorCode.html">Error Codes</a>.</p>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="topic_300000019.html">Global Connection Bandwidths</a></div>
+</div>
+</div>
+

docs/ccn/api-ref/PARAMETERS.txt

@@ -0,0 +1,3 @@
+version=""
+language="en-us"
+type=""

docs/ccn/api-ref/cc_01_0013.html

@@ -0,0 +1,8 @@
+<a name="cc_01_0013"></a><a name="cc_01_0013"></a>
+
+<h1 class="topictitle1">API Usage Guidelines</h1>
+<div id="body19408657"><p id="cc_01_0013__en-us_topic_0020507759_p1645204610259">Public cloud APIs comply with the RESTful API design principles. REST-based web services are organized into resources. Each resource is identified by one or more Uniform Resource Identifiers (URIs). An application accesses a resource based on the resource's Unified Resource Locator (URL). A URL is usually in the following format: https://<em id="cc_01_0013__en-us_topic_0020507759_i137795958918721">Endpoint/uri</em>. In the URL, <em id="cc_01_0013__en-us_topic_0020507759_i842352697154116">uri</em> indicates the resource path, that is, the API access path.</p>
+<p id="cc_01_0013__en-us_topic_0020507759_p4816427810259">Public cloud APIs use HTTPS as the transmission protocol. Requests/Responses are transmitted using JSON messages, with the media type represented by <strong id="cc_01_0013__en-us_topic_0020507759_b1025950229154127">Application/json</strong>.</p>
+<p id="cc_01_0013__en-us_topic_0020507759_p188289482118">For details about how to use APIs, see <a href="https://docs.otc.t-systems.com/en-us/api/apiug/apig-en-api-180328001.html?tag=API Documents" target="_blank" rel="noopener noreferrer">API Usage Guidelines</a>.</p>
+</div>
+

docs/ccn/api-ref/cc_01_0014.html

@@ -0,0 +1,25 @@
+<a name="cc_01_0014"></a><a name="cc_01_0014"></a>
+
+
+  <h1 class="topictitle1">API</h1>
+
+  <div id="body0000001229362129"><p id="cc_01_0014__p8060118"></p>
+</div>
+
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="topic_300000006.html">Central Networks</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="topic_300000008.html">Central Network Connections</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="topic_300000009.html">Central Network Policies</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="topic_300000014.html">Central Network Quotas</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="topic_300000015.html">Central Network Capabilities</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="topic_300000019.html">Global Connection Bandwidths</a></strong><br>
+</li>
+</ul>
+</div>
+

docs/ccn/api-ref/cc_01_0024.html

@@ -0,0 +1,15 @@
+<a name="cc_01_0024"></a><a name="cc_01_0024"></a>
+
+<h1 class="topictitle1">Appendix</h1>
+<div id="body1562897826874"></div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="cc_01_0025.html">Status Codes</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="ErrorCode.html">Error Codes</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="cc_01_0027.html">Obtaining a Project ID</a></strong><br>
+</li>
+</ul>
+</div>
+

docs/ccn/api-ref/cc_01_0027.html

@@ -0,0 +1,46 @@
+<a name="cc_01_0027"></a><a name="cc_01_0027"></a>
+
+<h1 class="topictitle1">Obtaining a Project ID</h1>
+<div id="body8662426"><div class="section" id="cc_01_0027__en-us_topic_0121673684_section1876711368114"><h4 class="sectiontitle">Scenarios</h4><p id="cc_01_0027__en-us_topic_0121673684_p177063681115">A project ID is required for some URLs when an API is called. Therefore, you need to obtain a project ID in advance. Two methods are available:</p>
+<ul id="cc_01_0027__en-us_topic_0121673684_ul2770123611111"><li id="cc_01_0027__en-us_topic_0121673684_li157701436141116"><a href="#cc_01_0027__en-us_topic_0121673684_section86806471133">Obtain the Project ID by Calling an API</a></li><li id="cc_01_0027__en-us_topic_0121673684_li07701836121118"><a href="#cc_01_0027__en-us_topic_0121673684_section32975495318">Obtain the Project ID from the Console</a></li></ul>
+</div>
+<div class="section" id="cc_01_0027__en-us_topic_0121673684_section86806471133"><a name="cc_01_0027__en-us_topic_0121673684_section86806471133"></a><a name="en-us_topic_0121673684_section86806471133"></a><h4 class="sectiontitle">Obtain the Project ID by Calling an API</h4><p id="cc_01_0027__en-us_topic_0121673684_p31183326524">You can obtain the project ID by calling the IAM API used to query project information based on the specified criteria.</p>
+<p id="cc_01_0027__en-us_topic_0121673684_p857314915139">The API used to obtain a project ID is GET https://{Endpoint}/v3/projects. {Endpoint} is the IAM endpoint and can be obtained from <a href="https://docs.otc.t-systems.com/regions-and-endpoints/index.html" target="_blank" rel="noopener noreferrer">Regions and Endpoints</a>. </p>
+<p id="cc_01_0027__en-us_topic_0121673684_p3770181514218">The following is an example response. The value of <strong id="cc_01_0027__en-us_topic_0121673684_b842352706123544">id</strong> is the project ID.</p>
+<pre class="screen" id="cc_01_0027__en-us_topic_0121673684_screen14199113161316">{
+    "projects": [
+        {
+            "domain_id": "65ewtrgaggshhk1223245sghjlse684b",
+            "is_domain": false,
+            "parent_id": "65ewtrgaggshhk1223245sghjlse684b",
+            "name": "project_name",
+            "description": "",
+            "links": {
+                "next": null,
+                "previous": null,
+                "self": "https://www.example.com/v3/projects/a4adasfjljaaaakla12334jklga9sasfg"
+            },
+            "id": "a4adasfjljaaaakla12334jklga9sasfg",
+            "enabled": true
+        }
+    ],
+    "links": {
+        "next": null,
+        "previous": null,
+        "self": "https://www.example.com/v3/projects"
+    }
+}</pre>
+</div>
+<div class="section" id="cc_01_0027__en-us_topic_0121673684_section32975495318"><a name="cc_01_0027__en-us_topic_0121673684_section32975495318"></a><a name="en-us_topic_0121673684_section32975495318"></a><h4 class="sectiontitle">Obtain a Project ID from the Console</h4><div class="p" id="cc_01_0027__en-us_topic_0121673684_p1356864351018">A project ID needs to be specified in the URIs of some APIs. Therefore, you need to obtain the project ID before calling APIs. The following procedure describes how to obtain a project ID:<ol id="cc_01_0027__en-us_topic_0121673684_ol7453556171010"><li id="cc_01_0027__en-us_topic_0121673684_li645315621018">Log in to the management console.</li><li id="cc_01_0027__en-us_topic_0121673684_li142001547118">Click the username and select <strong id="cc_01_0027__en-us_topic_0121673684_b10350181718117">My Credentials</strong> from the drop-down list.<p id="cc_01_0027__en-us_topic_0121673684_p13639183110119">On the <strong id="cc_01_0027__en-us_topic_0121673684_b19682129101113">My Credentials</strong> page, view project IDs in the project list.</p>
+<div class="fignone" id="cc_01_0027__en-us_topic_0121673684_fig12841949131317"><span class="figcap"><b>Figure 1 </b>Viewing project IDs</span><br><span><img id="cc_01_0027__en-us_topic_0121673684_image1184449141315" src="en-us_image_0000001508295281.png"></span></div>
+<p id="cc_01_0027__en-us_topic_0121673684_p55531521415">In multi-project scenarios, expand the region, and obtain your sub-project ID from the <strong id="cc_01_0027__en-us_topic_0121673684_b314916613146">Project ID</strong> column.</p>
+</li></ol>
+</div>
+</div>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="cc_01_0024.html">Appendix</a></div>
+</div>
+</div>
+

docs/ccn/api-ref/cc_01_0029.html

@@ -0,0 +1,32 @@
+<a name="cc_01_0029"></a><a name="cc_01_0029"></a>
+
+<h1 class="topictitle1">Change History</h1>
+<div id="body1537170042492">
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cc_01_0029__table1837301914523" frame="border" border="1" rules="all"><thead align="left"><tr id="cc_01_0029__row837361905216"><th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.1.1.3.1.1"><p id="cc_01_0029__p837311199521">Released On</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="50%" id="mcps1.3.1.1.3.1.2"><p id="cc_01_0029__p1337318193520">Description</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="cc_01_0029__row576265362912"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.1.1.3.1.1 "><p id="cc_01_0029__p173021457162912">2025-01-29</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.1.1.3.1.2 "><p id="cc_01_0029__p183021579292">This release incorporates the following changes:</p>
+<p id="cc_01_0029__p163027576294">Deleted sections "Binding a Global Connection Bandwidth to an Instance" and "Unbinding a Global Connection Bandwidth from an Instance."</p>
+</td>
+</tr>
+<tr id="cc_01_0029__row6111193155014"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.1.1.3.1.1 "><p id="cc_01_0029__p1411113165019">2025-01-22</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.1.1.3.1.2 "><p id="cc_01_0029__p11117319507">This release incorporates the following changes:</p>
+<p id="cc_01_0029__p11442134695017">Resolved the issue that there were two titles for querying the details about a global connection bandwidth.</p>
+</td>
+</tr>
+<tr id="cc_01_0029__row133731019145211"><td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.1.1.3.1.1 "><p id="cc_01_0029__p3373101905214">2024-11-26</p>
+</td>
+<td class="cellrowborder" valign="top" width="50%" headers="mcps1.3.1.1.3.1.2 "><p id="cc_01_0029__p15373191911529">This issue is the first official release.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+</div>
+

docs/ccn/api-ref/cc_02_0001.html

@@ -0,0 +1,14 @@
+<a name="cc_02_0001"></a><a name="cc_02_0001"></a>
+
+<h1 class="topictitle1">Permissions and Supported Actions</h1>
+<div id="body0000001666003276"><p id="cc_02_0001__p8060118"></p>
+</div>
+<div>
+<ul class="ullinks">
+<li class="ulchildlink"><strong><a href="cc_02_0002.html">Introduction</a></strong><br>
+</li>
+<li class="ulchildlink"><strong><a href="cc_02_0003.html">Actions Supported by Policy-based Authorization</a></strong><br>
+</li>
+</ul>
+</div>
+

docs/ccn/api-ref/cc_02_0002.html

@@ -0,0 +1,54 @@
+<a name="cc_02_0002"></a><a name="cc_02_0002"></a>
+
+<h1 class="topictitle1">Introduction</h1>
+<div id="body0000001666163656"><p id="cc_02_0002__en-us_topic_0000001543357345_en-us_topic_0166806405_p8060118">You can use Identity and Access Management (IAM) for fine-grained permissions management of your Cloud Connect resources. If your account does not need individual IAM users, you can skip this topic.</p>
+<p id="cc_02_0002__en-us_topic_0000001543357345_p134411546125113">With IAM, you can control access to specific cloud resources. IAM supports role/policy-based authorization and identity policy-based authorization.</p>
+<p id="cc_02_0002__en-us_topic_0000001543357345_p42876599533">The following table describes the differences between the two authorization models.</p>
+
+<div class="tablenoborder"><table cellpadding="4" cellspacing="0" summary="" id="cc_02_0002__en-us_topic_0000001543357345_table159282122556" frame="border" border="1" rules="all"><caption><b>Table 1 </b>Differences between role/policy-based and identity policy-based authorization</caption><thead align="left"><tr id="cc_02_0002__en-us_topic_0000001543357345_row792881220554"><th align="left" class="cellrowborder" valign="top" width="11.151115111511151%" id="mcps1.3.4.2.6.1.1"><p id="cc_02_0002__en-us_topic_0000001543357345_p6928111255520">Authorization Model</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="13.881388138813882%" id="mcps1.3.4.2.6.1.2"><p id="cc_02_0002__en-us_topic_0000001543357345_p13929412185520">Authorization Using</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="14.821482148214821%" id="mcps1.3.4.2.6.1.3"><p id="cc_02_0002__en-us_topic_0000001543357345_p1292901213550">Permissions</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="20.392039203920394%" id="mcps1.3.4.2.6.1.4"><p id="cc_02_0002__en-us_topic_0000001543357345_p112821992615">Authorization Method</p>
+</th>
+<th align="left" class="cellrowborder" valign="top" width="39.753975397539755%" id="mcps1.3.4.2.6.1.5"><p id="cc_02_0002__en-us_topic_0000001543357345_p1192961265516">Scenario</p>
+</th>
+</tr>
+</thead>
+<tbody><tr id="cc_02_0002__en-us_topic_0000001543357345_row1792901217551"><td class="cellrowborder" valign="top" width="11.151115111511151%" headers="mcps1.3.4.2.6.1.1 "><p id="cc_02_0002__p292920121551">Role/Policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.881388138813882%" headers="mcps1.3.4.2.6.1.2 "><p id="cc_02_0002__p15929101210555">User-permission-authorization scope</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.821482148214821%" headers="mcps1.3.4.2.6.1.3 "><ul id="cc_02_0002__ul2704781578"><li id="cc_02_0002__li6704118175711">System-defined roles</li><li id="cc_02_0002__li1770414814572">System-defined policies</li><li id="cc_02_0002__li107049819575">Custom policies</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="20.392039203920394%" headers="mcps1.3.4.2.6.1.4 "><p id="cc_02_0002__p328216917618">Assigning roles or policies to principals</p>
+</td>
+<td class="cellrowborder" valign="top" width="39.753975397539755%" headers="mcps1.3.4.2.6.1.5 "><p id="cc_02_0002__p59291712115518">To authorize a user, you need to add it to a user group first and then specify the scope of authorization. It is hard to provide fine-grained permissions control using authorization by user groups and a limited number of condition keys. This method is suitable for small- and medium-sized enterprises.</p>
+</td>
+</tr>
+<tr id="cc_02_0002__en-us_topic_0000001543357345_row19929111214556"><td class="cellrowborder" valign="top" width="11.151115111511151%" headers="mcps1.3.4.2.6.1.1 "><p id="cc_02_0002__p29291512115519">Identity policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="13.881388138813882%" headers="mcps1.3.4.2.6.1.2 "><p id="cc_02_0002__p10929812155512">User-policy</p>
+</td>
+<td class="cellrowborder" valign="top" width="14.821482148214821%" headers="mcps1.3.4.2.6.1.3 "><ul id="cc_02_0002__ul1312492614575"><li id="cc_02_0002__li536019279574">System-defined identity policies</li><li id="cc_02_0002__li143601327205719">Custom identity policies</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="20.392039203920394%" headers="mcps1.3.4.2.6.1.4 "><ul id="cc_02_0002__ul1319021516719"><li id="cc_02_0002__li131909156715">Assigning identity policies to principals</li><li id="cc_02_0002__li4190131510720">Attaching identity policies to principals</li></ul>
+</td>
+<td class="cellrowborder" valign="top" width="39.753975397539755%" headers="mcps1.3.4.2.6.1.5 "><p id="cc_02_0002__p4929161285513">You can authorize a user by attaching an identity policy to it. User-specific authorization and a variety of key conditions allow for more fine-grained permissions control. However, this model can be hard to set up. It requires a certain amount of expertise and is suitable for medium- and large-sized enterprises.</p>
+</td>
+</tr>
+</tbody>
+</table>
+</div>
+<p id="cc_02_0002__p55249285120">Policies and actions in the two authorization models are not interoperable. You are advised to use the identity policy-based authorization model.</p>
+<p id="cc_02_0002__en-us_topic_0000001543357345_p0993113231017">If you use IAM users in your account to call an API, the IAM users must be granted the required permissions. The permissions required for calling an API are determined by the actions supported by the API. Only users who have been granted permissions allowing the actions can call the API successfully.</p>
+<p id="cc_02_0002__p14557171212">Assume that an IAM user wants to call an API to query central networks. With role/policy-based authorization, the IAM user must be granted the permissions allowing for action <strong id="cc_02_0002__b01706181139">cc:centralNetwork:list</strong>. With identity policy-based authorization, the IAM user must be granted the permissions allowing for action <strong id="cc_02_0002__b16335637121312">cc:centralNetwork:list</strong>.</p>
+</div>
+<div>
+<div class="familylinks">
+<div class="parentlink"><strong>Parent topic:</strong> <a href="cc_02_0001.html">Permissions and Supported Actions</a></div>
+</div>
+</div>
+