Referensi Izin Akses
Referensi lengkap semua izin akses di ARSAKA PUGUH.
Format Izin Akses
Semua izin akses mengikuti pola ini:
plaintext
{domain}.{resource}.{action}Domain IAM
| Permission | Deskripsi |
|---|---|
iam.users.view | Lihat daftar dan detail pengguna |
iam.users.invite | Undang pengguna baru ke organisasi |
iam.users.update | Perbarui detail pengguna |
iam.users.suspend | Tangguhkan/aktifkan pengguna |
iam.users.remove | Hapus pengguna dari organisasi |
iam.roles.view | Lihat role dan izin akses |
iam.roles.create | Buat custom role |
iam.roles.update | Ubah izin akses role |
iam.roles.delete | Hapus custom role |
iam.service-accounts.view | Lihat service account |
iam.service-accounts.create | Buat service account |
iam.service-accounts.delete | Hapus service account |
iam.service-accounts.rotate | Rotasi API key |
Domain Organization
| Permission | Deskripsi |
|---|---|
organization.settings.view | Lihat pengaturan organisasi |
organization.settings.update | Perbarui pengaturan organisasi |
organization.members.view | Lihat daftar anggota |
organization.members.manage | Tambah/hapus anggota |
organization.applications.view | Lihat application |
organization.applications.create | Buat application baru |
organization.applications.update | Perbarui pengaturan application |
organization.applications.delete | Hapus application |
organization.delete | Hapus seluruh organisasi |
Domain Webhook
| Permission | Deskripsi |
|---|---|
webhook.endpoints.view | Lihat webhook endpoint |
webhook.endpoints.create | Buat webhook endpoint |
webhook.endpoints.update | Perbarui konfigurasi webhook |
webhook.endpoints.delete | Hapus webhook endpoint |
webhook.endpoints.test | Kirim test ping ke webhook |
webhook.deliveries.view | Lihat riwayat pengiriman |
webhook.deliveries.retry | Ulangi pengiriman yang gagal |
Domain Storage
| Permission | Deskripsi |
|---|---|
storage.files.view | Lihat dan unduh file |
storage.files.upload | Upload file baru |
storage.files.delete | Hapus file |
storage.buckets.view | Lihat storage bucket |
storage.buckets.create | Buat storage bucket |
storage.buckets.delete | Hapus storage bucket |
Domain Control
| Permission | Deskripsi |
|---|---|
control.audit.view | Lihat jejak audit |
control.audit.export | Ekspor audit log |
control.events.view | Lihat timeline event |
control.events.detail | Lihat detail event |
control.metrics.view | Lihat metrik sistem |
control.dlq.view | Lihat dead letter queue |
control.dlq.retry | Ulangi event yang gagal |
control.dlq.dismiss | Abaikan item DLQ |
Domain Billing
| Permission | Deskripsi |
|---|---|
billing.subscription.view | Lihat subscription saat ini |
billing.subscription.update | Ubah paket subscription |
billing.invoices.view | Lihat riwayat invoice |
billing.invoices.download | Unduh invoice |
billing.payment-methods.view | Lihat metode pembayaran |
billing.payment-methods.update | Perbarui metode pembayaran |
Pemetaan Izin per Role
Owner (Semua Izin)
Memiliki semua izin akses di semua domain.
Admin
plaintext
iam.users.*
iam.roles.*
iam.service-accounts.*
organization.settings.*
organization.members.*
organization.applications.*
webhook.*
storage.*
control.*Tidak termasuk:
organization.deletebilling.*
Member
plaintext
iam.users.view
iam.roles.view
iam.service-accounts.view
organization.settings.view
organization.members.view
organization.applications.view
webhook.endpoints.*
webhook.deliveries.view
storage.files.view
storage.files.upload
control.audit.view
control.events.view
control.metrics.viewViewer
plaintext
iam.users.view
iam.roles.view
organization.settings.view
organization.members.view
organization.applications.view
webhook.endpoints.view
webhook.deliveries.view
storage.files.view
control.audit.view
control.events.view
control.metrics.viewMemeriksa Izin Akses
Di Dashboard
Navigasi ke IAM > Permissions untuk melihat:
- Izin akses efektif Anda
- Perbandingan antar role
- Izin yang kurang untuk aksi tertentu
Via API
javascript
// Check single permission
const result = await client.checkPermission('webhook.endpoints.create');
// { allowed: true }
// Check multiple permissions
const results = await client.checkPermissions([
'webhook.endpoints.create',
'webhook.endpoints.delete',
'storage.files.upload'
]);
// {
// 'webhook.endpoints.create': true,
// 'webhook.endpoints.delete': false,
// 'storage.files.upload': true
// }
// Get all permissions
const allPermissions = await client.getMyPermissions();
// ['webhook.endpoints.view', 'webhook.endpoints.create', ...]Error Izin Akses
Ketika pengecekan izin gagal, Anda akan melihat:
Dashboard:
"Anda tidak memiliki izin untuk melakukan aksi ini."
API:
json
{
"detail": "Missing permission: webhook.endpoints.delete"
}