{ "api_types": [ { "actions": [ { "action_id": "codeengine.computeenvironment.create", "description": "Allows you to create a Code Engine Compute Environment." }, { "action_id": "codeengine.computeenvironment.delete", "description": "Allows you to delete compute environments." }, { "action_id": "codeengine.computeenvironment.projects.create", "description": "Allows you to create projects in this compute environment." }, { "action_id": "codeengine.computeenvironment.projects.delete", "description": "Allows you to delete projects in this compute environment." }, { "action_id": "codeengine.config.read", "description": "Configuration Information Point API access" }, { "action_id": "codeengine.dashboard.view", "description": "View Dashboard" }, { "action_id": "codeengine.tenant.entities.create", "description": "Create project contents, such as applications, job definitions, and jobs" }, { "action_id": "codeengine.tenant.entities.delete", "description": "Delete existing items from within a project" }, { "action_id": "codeengine.tenant.entities.read", "description": "List and view existing items within a project" }, { "action_id": "codeengine.tenant.entities.update", "description": "Modify existing items already contained by a project, such as applications, jobs, or job definitions. This does not include the ability to create or delete these items." }, { "action_id": "codeengine.tenant.read", "description": "View project details" } ], "api_type_id": "crn:v1:bluemix:public:context-based-restrictions::::api-type:", "description": "Protects all service APIs.", "display_name": "All", "enforcement_modes": [ "disabled", "enabled", "report" ], "type": "service" }, { "actions": [ { "action_id": "global-search-tagging.tag.attach-access-tag", "description": "The ability to attach access management tags to a resource" }, { "action_id": "global-search-tagging.tag.attach-user-tag", "description": "The ability to attach a user tag to the resource" }, { "action_id": "global-search-tagging.tag.detach-access-tag", "description": "The ability to detach access management tags from a resource" }, { "action_id": "global-search-tagging.tag.detach-user-tag", "description": "The ability to detach a user tag from the resource" }, { "action_id": "resource-controller.alias.create", "description": "The ability to create aliases." }, { "action_id": "resource-controller.alias.delete", "description": "The ability to delete existing aliases." }, { "action_id": "resource-controller.alias.retrieve", "description": "The ability to see aliases." }, { "action_id": "resource-controller.alias.update", "description": "The ability to update or edit existing aliases." }, { "action_id": "resource-controller.binding.create", "description": "The ability to create bindings." }, { "action_id": "resource-controller.binding.delete", "description": "The ability to delete existing bindings." }, { "action_id": "resource-controller.binding.retrieve", "description": "The ability to see bindings." }, { "action_id": "resource-controller.binding.update", "description": "The ability to update or edit existing bindings." }, { "action_id": "resource-controller.credential.retrieve_all", "description": "The ability to retrieve all credentials for instances." }, { "action_id": "resource-controller.instance.create", "description": "The ability to create instances." }, { "action_id": "resource-controller.instance.delete", "description": "The ability to delete existing instances." }, { "action_id": "resource-controller.instance.retrieve", "description": "The ability to see instances." }, { "action_id": "resource-controller.instance.retrieve_history", "description": "The ability to see the history for instances." }, { "action_id": "resource-controller.instance.update", "description": "The ability to update or edit existing instances." }, { "action_id": "resource-controller.instance.update_plan", "description": "The ability to update the plan or configuration of existing instances." }, { "action_id": "resource-controller.key.create", "description": "The ability to create keys." }, { "action_id": "resource-controller.key.delete", "description": "The ability to delete existing keys." }, { "action_id": "resource-controller.key.manager_create", "description": "The ability to create keys by KeyManager." }, { "action_id": "resource-controller.key.manager_delete", "description": "The ability to delete existing keys by KeyManager." }, { "action_id": "resource-controller.key.manager_retrieve", "description": "The ability to retrieve keys by KeyManager." }, { "action_id": "resource-controller.key.manager_update", "description": "The ability to update or edit existing keys by KeyManager." }, { "action_id": "resource-controller.key.retrieve", "description": "The ability to retrieve keys." }, { "action_id": "resource-controller.key.update", "description": "The ability to update or edit existing keys." } ], "api_type_id": "crn:v1:bluemix:public:context-based-restrictions::::platform-api-type:", "description": "Protects all platform APIs.", "display_name": "All", "enforcement_modes": [ "disabled", "enabled", "report" ], "type": "platform" }, { "actions": [ { "action_id": "global-search-tagging.tag.attach-access-tag", "description": "The ability to attach access management tags to a resource" }, { "action_id": "global-search-tagging.tag.attach-user-tag", "description": "The ability to attach a user tag to the resource" }, { "action_id": "global-search-tagging.tag.detach-access-tag", "description": "The ability to detach access management tags from a resource" }, { "action_id": "global-search-tagging.tag.detach-user-tag", "description": "The ability to detach a user tag from the resource" }, { "action_id": "resource-controller.alias.create", "description": "The ability to create aliases." }, { "action_id": "resource-controller.alias.delete", "description": "The ability to delete existing aliases." }, { "action_id": "resource-controller.alias.retrieve", "description": "The ability to see aliases." }, { "action_id": "resource-controller.alias.update", "description": "The ability to update or edit existing aliases." }, { "action_id": "resource-controller.binding.create", "description": "The ability to create bindings." }, { "action_id": "resource-controller.binding.delete", "description": "The ability to delete existing bindings." }, { "action_id": "resource-controller.binding.retrieve", "description": "The ability to see bindings." }, { "action_id": "resource-controller.binding.update", "description": "The ability to update or edit existing bindings." }, { "action_id": "resource-controller.credential.retrieve_all", "description": "The ability to retrieve all credentials for instances." }, { "action_id": "resource-controller.instance.create", "description": "The ability to create instances." }, { "action_id": "resource-controller.instance.delete", "description": "The ability to delete existing instances." }, { "action_id": "resource-controller.instance.retrieve", "description": "The ability to see instances." }, { "action_id": "resource-controller.instance.retrieve_history", "description": "The ability to see the history for instances." }, { "action_id": "resource-controller.instance.update", "description": "The ability to update or edit existing instances." }, { "action_id": "resource-controller.instance.update_plan", "description": "The ability to update the plan or configuration of existing instances." }, { "action_id": "resource-controller.key.create", "description": "The ability to create keys." }, { "action_id": "resource-controller.key.delete", "description": "The ability to delete existing keys." }, { "action_id": "resource-controller.key.manager_create", "description": "The ability to create keys by KeyManager." }, { "action_id": "resource-controller.key.manager_delete", "description": "The ability to delete existing keys by KeyManager." }, { "action_id": "resource-controller.key.manager_retrieve", "description": "The ability to retrieve keys by KeyManager." }, { "action_id": "resource-controller.key.manager_update", "description": "The ability to update or edit existing keys by KeyManager." }, { "action_id": "resource-controller.key.retrieve", "description": "The ability to retrieve keys." }, { "action_id": "resource-controller.key.update", "description": "The ability to update or edit existing keys." } ], "api_type_id": "crn:v1:bluemix:public:context-based-restrictions::::platform-api-type:resource-management", "description": "Protects access to platform APIs related to resource instances such as attaching tags and managing service credentials.", "display_name": "Resource Management", "enforcement_modes": [ "disabled", "enabled", "report" ], "type": "platform" } ] }

Context-based restrictions | IBM Cloud API Docs