Details of Verb and Resource-Type Combinations
The level of access is cumulative as you go from inspect, read, use, manage
.
A plus sign (+) in a table cell indicates incremental access compared to the cell
directly above it, whereas no extra indicates no incremental access. For
example, the read
verb for the
disaster-recovery-protection-groups
resource-type includes the
same permissions and API operations as the inspect
verb. The
DISASTER_RECOVERY_PROTECTION_GROUP_READ
provides permissions
and enables the GetDrProtectionGroup
API operation. The
use
verb covers UpdateDrProtectionGroup
API
operations with additional permissions required compared to read
.
Lastly, manage
requires more permissions compared to
use
and enables additional operations.
Table 6-4 Disaster Recovery (DR) Protection Group Verbs and Permissions
Access Level | Permissions (| = or, & = and) | REST APIs Covered |
---|---|---|
inspect |
DISASTER_RECOVERY_PROTECTION_GROUP_INSPECT |
ListDrProtectionGroups |
read |
inspect
+DISASTER_RECOVERY_PROTECTION_GROUP_READ |
GetDrProtectionGroup |
use |
read
+DISASTER_RECOVERY_PROTECTION_GROUP_UPDATE |
UpdateDrProtectionGroup |
inspect |
use +DISASTER_RECOVERY_PROTECTION_GROUP_CREATE
DISASTER_RECOVERY_PROTECTION_GROUP_DELETE |
|
Table 6-5 Disaster Recovery Plan Verbs and Permissions
Access Level | Permissions (| = or, & = and) | REST APIs Covered |
---|---|---|
inspect |
DISASTER_RECOVERY_WORKREQUEST_INSPECT |
ListDrPlans |
read |
inspect +DISASTER_RECOVERY_PLAN_READ |
GetDrPlan |
use |
read +DISASTER_RECOVERY_PLAN_UPDATE |
UpdateDrPlan |
inspect |
use +DISASTER_RECOVERY_PLAN_CREATE
DISASTER_RECOVERY_PLAN_DELETE |
|
Table 6-6 Disaster Recovery Plan Execution Verbs and Permissions
Access Level | Permissions (| = or, & = and) | REST APIs Covered |
---|---|---|
inspect |
DISASTER_RECOVERY_PLAN_EXECUTION_INSPECT |
ListDrPlanExecutions |
read |
inspect
+DISASTER_RECOVERY_PLAN_EXECUTION_READ |
GetDrPlanExecution |
use |
read
+DISASTER_RECOVERY_PLAN_EXECUTION_UPDATE |
UpdateDrPlanExecution (for DR plan
executions)
|
inspect |
use +DISASTER_RECOVERY_PLAN_EXECUTION_CREATE |
|
manage |
use +DISASTER_RECOVERY_PLAN_EXECUTION_DELETE |
DeleteDrPlanExecution (for DR plan
executions)
|
Table 6-7 Precheck Execution Verbs and Permissions
Access Level | Permissions (| = or, & = and) | REST APIs Covered |
---|---|---|
inspect |
DISASTER_RECOVERY_PLAN_EXECUTION_INSPECT |
ListDrPlanExecutions |
read |
inspect
+DISASTER_RECOVERY_PLAN_EXECUTION_READ |
GetDrPlanExecution |
use |
read +DISASTER_RECOVERY_PLAN_PRECHECK_UPDATE |
UpdateDrPlanExecution
(for precheck executions) |
manage |
use +DISASTER_RECOVERY_PLAN_PRECHECK_CREATE |
CreateDrPlanExecution
(for precheck executions) |
manage |
use +DISASTER_RECOVERY_PLAN_PRECHECK_DELETE |
DeleteDrPlanExecution
(for precheck executions) |
Table 6-8 Work Request Verbs and Permissions
Access Level | Permissions (| = or, & = and) | REST APIs Covered |
---|---|---|
inspect |
DISASTER_RECOVERY_WORK_REQUEST_INSPECT |
|
read |
inspect +DISASTER_RECOVERY_WORKREQUEST_READ |
GetWorkRequest |
manage |
read +DISASTER_RECOVERY_WORKREQUEST_DELETE |
CancelWorkRequest |
Parent topic: Policies for Full Stack Disaster Recovery