System Upgrade Permissions for Roving Edge Infrastructure

Describes the details for writing user IAM policies that control access to rules for the system upgrade capability of a Roving Edge Infrastructure device.

Resource-Types

systemupgrade

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage.

systemupgrade

Verbs Permissions APIs Fully Covered APIs Partially Covered

inspect

SYSTEM_UPGRADE_INSPECT

ListTasks

None

read

SYSTEM_UPGRADE_INSPECT

SYSTEM_UPGRADE_READ

ListTasks

ListSystemUpgrades

GetTask

None

use

SYSTEM_UPGRADE_INSPECT

SYSTEM_UPGRADE_READ

SYSTEM_UPGRADE_UPDATE

ListTasks

ListSystemUpgrades

GetTask

None

manage

SYSTEM_UPGRADE_INSPECT

SYSTEM_UPGRADE_READ

SYSTEM_UPGRADE_UPDATE

SYSTEM_UPGRADE_DELETE

ListTasks

ListSystemUpgrades

GetTask

NodeReboot

SystemUpgradesDownload

UpgradeNode

RollbackNode

UnlockNode

StartTask

SystemUpgradesDelete

None