Details of Verb and Resource-Type Combinations
The level of access is cumulative as you go from inspect, read, use, manage.
A plus sign (+) in a table cell indicates incremental access compared to the cell
directly above it, whereas no extra indicates no incremental access. For
example, the read verb for the
disaster-recovery-protection-groups resource-type includes the
same permissions and API operations as the inspect verb. The
DISASTER_RECOVERY_PROTECTION_GROUP_READ provides permissions
and enables the GetDrProtectionGroup API operation. The
use verb covers UpdateDrProtectionGroup API
operations with additional permissions required compared to read.
Lastly, manage requires more permissions compared to
use and enables additional operations.
Table 6-4 Disaster Recovery (DR) Protection Group Verbs and Permissions
| Access Level | Permissions (| = or, & = and) | REST APIs Covered |
|---|---|---|
inspect |
DISASTER_RECOVERY_PROTECTION_GROUP_INSPECT |
ListDrProtectionGroups |
read |
inspect
+DISASTER_RECOVERY_PROTECTION_GROUP_READ |
GetDrProtectionGroup |
use |
read
+DISASTER_RECOVERY_PROTECTION_GROUP_UPDATE |
UpdateDrProtectionGroup |
manage |
use +DISASTER_RECOVERY_PROTECTION_GROUP_CREATE
DISASTER_RECOVERY_PROTECTION_GROUP_DELETE |
|
Table 6-5 Disaster Recovery Plan Verbs and Permissions
| Access Level | Permissions (| = or, & = and) | REST APIs Covered |
|---|---|---|
inspect |
DISASTER_RECOVERY_WORKREQUEST_INSPECT |
ListDrPlans |
read |
inspect +DISASTER_RECOVERY_PLAN_READ |
GetDrPlan |
use |
read +DISASTER_RECOVERY_PLAN_UPDATE |
UpdateDrPlan |
manage |
use +DISASTER_RECOVERY_PLAN_CREATE
DISASTER_RECOVERY_PLAN_DELETE |
|
Table 6-6 Disaster Recovery Plan Execution Verbs and Permissions
| Access Level | Permissions (| = or, & = and) | REST APIs Covered |
|---|---|---|
inspect |
DISASTER_RECOVERY_PLAN_EXECUTION_INSPECT |
ListDrPlanExecutions |
read |
inspect
+DISASTER_RECOVERY_PLAN_EXECUTION_READ |
GetDrPlanExecution |
use |
read
+DISASTER_RECOVERY_PLAN_EXECUTION_UPDATE |
UpdateDrPlanExecution (for DR plan
executions)
|
manage |
use +DISASTER_RECOVERY_PLAN_EXECUTION_CREATEuse +DISASTER_RECOVERY_PLAN_EXECUTION_DELETE |
|
Table 6-7 Precheck Execution Verbs and Permissions
| Access Level | Permissions (| = or, & = and) | REST APIs Covered |
|---|---|---|
inspect |
DISASTER_RECOVERY_PLAN_EXECUTION_INSPECT |
ListDrPlanExecutions |
read |
inspect
+DISASTER_RECOVERY_PLAN_EXECUTION_READ |
GetDrPlanExecution |
use |
read +DISASTER_RECOVERY_PLAN_PRECHECK_UPDATE |
UpdateDrPlanExecution
(for precheck executions) |
manage |
use +DISASTER_RECOVERY_PLAN_PRECHECK_CREATEuse +DISASTER_RECOVERY_PLAN_PRECHECK_DELETE |
CreateDrPlanExecution(for plan and precheck executions) DeleteDrPlanExecution
(for plan and precheck executions) |
Table 6-8 Work Request Verbs and Permissions
| Access Level | Permissions (| = or, & = and) | REST APIs Covered |
|---|---|---|
inspect |
DISASTER_RECOVERY_WORK_REQUEST_INSPECT |
|
read |
inspect +DISASTER_RECOVERY_WORKREQUEST_READ |
GetWorkRequest |
manage |
read +DISASTER_RECOVERY_WORKREQUEST_DELETE |
CancelWorkRequest |
Parent topic: Policies for Full Stack Disaster Recovery