Microservice Engine Permissions¶
Microservice engine includes two parts: microservice management center and microservice gateway. The microservice engine supports three user roles:
- Workspace Admin
- Workspace Editor
- Workspace Viewer
Each role has different permissions, which are described below.
Microservice Governance Permissions¶
| Menu Objects | Actions | Workspace Admin | Workspace Editor | Workspace Viewer |
|---|---|---|---|---|
| Hosted Registry List | View List | ✓ | ✓ | ✓ |
| Hosted Registry | View Basic Information | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | |
| restart | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✗ | ✗ | |
| On/Off | ✓ | ✓ | ✗ | |
| Microservice Namespace | View | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ | |
| Microservice List | View | ✓ | ✓ | ✓ |
| filter namespace | ✓ | ✓ | ✓ | |
| Create | ✓ | ✓ | ✗ | |
| Governance | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ | |
| Service Governance Rules-Sentinel | View | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ | |
| Service Governance Rules-Mesh | Governance | ✓ | ✓ | ✗ |
| Instance List | View | ✓ | ✓ | ✓ |
| On/Off | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| Service Governance Policy-Sentinel | View | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ | |
| Service Governance Policy-Mesh | View | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | |
| Create with YAML | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| YAML Editing | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ | |
| Microservice Configuration List | View | ✓ | ✓ | ✓ |
| filter namespace | ✓ | ✓ | ✓ | |
| Batch delete | ✓ | ✓ | ✗ | |
| Export/Import | ✓ | ✓ | ✗ | |
| Create | ✓ | ✓ | ✗ | |
| Clone | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| History query | ✓ | ✓ | ✓ | |
| rollback | ✓ | ✓ | ✗ | |
| listen query | ✓ | ✓ | ✓ | |
| Business Monitor | View | ✓ | ✓ | ✓ |
| Resource Monitor | View | ✓ | ✓ | ✓ |
| Request Log | View | ✓ | ✓ | ✓ |
| Instance Log | View | ✓ | ✓ | ✓ |
| Plugin Center | View | ✓ | ✓ | ✓ |
| Open | ✓ | ✓ | ✗ | |
| Close | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| View Details | ✓ | ✓ | ✓ | |
| access registry list | view | ✓ | ✓ | ✓ |
| Access | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| Remove | ✓ | ✗ | ✗ | |
| Microservices | View List | ✓ | ✓ | ✓ |
| View Details | ✓ | ✓ | ✓ | |
| Governance | ✓ | ✓ | ✗ | |
| Service Governance Policy-Mesh | View | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | |
| Create with YAML | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| YAML Editing | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ |
Microservice Gateway Permissions¶
| Objects | Actions | Workspace Admin | Workspace Editor | Workspace Viewer |
|---|---|---|---|---|
| Gateway List | View | ✓ | ✓ | ✓ |
| Gateway instance | View | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✗ | ✗ | |
| Diagnostic Mode | View | ✓ | ✓ | ✓ |
| debug | ✓ | ✓ | ✗ | |
| Service List | View | ✓ | ✓ | ✓ |
| Add | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ | |
| Service Details | View | ✓ | ✓ | ✓ |
| Service Source Management | View | ✓ | ✓ | ✓ |
| Add | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ | |
| API List | View | ✓ | ✓ | ✓ |
| Create | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✗ | |
| Request Log | View | ✓ | ✓ | ✓ |
| Instance Log | View | ✓ | ✓ | ✓ |
| Plugin Center | View | ✓ | ✓ | ✓ |
| enable | ✓ | ✓ | ✗ | |
| disabled | ✓ | ✓ | ✗ | |
| Plugin Configuration | View | ✓ | ✓ | ✓ |
| enable | ✓ | ✓ | ✗ | |
| Domain List | View | ✓ | ✓ | ✓ |
| Add | ✓ | ✓ | ✗ | |
| edit | ✓ | ✓ | ✗ | |
| delete | ✓ | ✓ | ✓ | |
| Monitor Alert | View | ✓ | ✓ | ✓ |
Note
For a complete introduction to role and access management, please refer to Role and Access Management.