在 Zilliz Cloud 平台中,基于角色的访问控制(RBAC)在定义组织、项目以及集群的权 限方面发挥着重要作用。RBAC 使得组织和项目的管理员能够有效地管理用户的角色和访问权限,以确保集群安全。
角色名称 | Web 控制台 | API 操作 |
---|
组织 & 项目 | | |
组织管理员 | 提供对整个组织内的全面访问权限: | RESTful Cloud (list cloud providers & regions) Cluster (create, list, describe, drop, modify, resume, suspend, list projects) Import (import, get import progress, list import jobs) Collection (list, create, describe, drop) Vector (delete, insert, search, query, get, upsert)
SDK (Python, Java, Go, Node.js) Credential (create, delete, list, update, addUserToRole, selectUser) Alias (create, drop, describe, alter, list) System (getVersion, checkHealth) Collection (create, drop, describe, show, load, release, flush, getFlushState, compaction, getStatistics, rename) Partition (create, drop, hasPartition, load, release, show) Index (create, drop, getIndexState, getIndexBuildProgress, describeIndex) Vector (search, insert, delete, get, query)
|
项目管理员 | 提供对整个项目内的全面访问权限: | RESTful SDK (Python, Java, Go, Node.js) Credential (create, delete, list, update, addUserToRole, selectUser) Alias (create, drop, describe, alter, list) System (getVersion, checkHealth) Collection (create, drop, describe, show, load, release, flush, getFlushState, compaction, getStatistics, rename) Partition (create, drop, hasPartition, load, release, show) Index (create, drop, getIndexState, getIndexBuildProgress, describeIndex) Vector (search, insert, delete, get, query)
|
项目成员 | 提供对项目内所有集群的读写权限: | RESTful SDK (Python, Java, Go, Node.js) Alias (create, drop, describe, alter, list) System (getVersion, checkHealth) Collection (create, drop, describe, show, load, release, flush, getFlushState, compaction, getStatistics, rename) Partition (create, drop, hasPartition, load, release, show) Index (create, drop, getIndexState, getIndexBuildProgress, describeIndex) Vector (search, insert, delete, get, query)
|
集群内置角色 | | |
管理员 (db_admin ) | 提供指定集群的完全访问权限。 | RESTful SDK (Python, Java, Go, Node.js) Credential (create, delete, list, update, addUserToRole, selectUser) Alias (create, drop, describe, alter, list) System (getVersion, checkHealth) Collection (create, drop, describe, show, load, release, flush, getFlushState, compaction, getStatistics, rename) Partition (create, drop, hasPartition, load, release, show) Index (create, drop, getIndexState, getIndexBuildProgress, describeIndex) Vector (search, insert, delete, get, query)
|
读写权限 (db_rw ) | 提供指定集群的读写权限。 | RESTful SDK (Python, Java, Go, Node.js) System (getVersion, checkHealth) Alias (create, drop, describe, alter, list) Collection (create, drop, describe, show, load, release, flush, getFlushState, rename) Partition (create, drop, hasPartition, load, release, show) Index (create, drop, getIndexState, getIndexBuildProgress, describeIndex) Vector (search, insert, delete, get, query)
|
只读权限 (db_ro ) | 提供指定集群的只读权限。 | RESTful SDK (Python, Java, Go, Node.js) Alias (describe, list) System (getVersion, checkHealth) Collection (describe, show, load) Partition (hasPartition, show) Index (getIndexState, getIndexBuildProgress, describeIndex) Vector (search, get, query)
|