Roles and permissions

Permission to perform actions on API Gateway is determined by the user's role in the organization. The content below details the permissions of each role for each resource type.

Roles

Role	Description
Org Admin	Full rights to view and manage API Gateway resources (Gateway, Route, Service, Upstream, API Catalog, Plugin, Consumer, Certificate, Custom Domain).
Org Viewer	Views resources in the organization. Cannot create, update, or delete.

Organization management

Action	Org Admin	Org Viewer
View the member list
View the role list

The FPT Integration Platform operations team creates organizations, adds members to an organization, and assigns their roles. To get access for a member, contact your organization administrator or FPT Cloud support at 1800 6139 / support@fptcloud.com.

API Gateway resources

API Gateway

Action	Org Admin	Org Viewer
View the API Gateway list
Create an API Gateway		-
View API Gateway details: Overview, Service Configuration
Update an API Gateway: Basic Information, Launch Configuration, Load Balancer Configuration, Autoscaling Configuration		-

Route

Action	Org Admin	Org Viewer
View the Route list
View Route details: Route information, Upstream, Service, and the Plugin list of the Route
Create a Route		-
Update a Route		-
Delete a Route		-

Service

Action	Org Admin	Org Viewer
View the Service list
View Service details, including the Upstream of the Service
Update a Service		-
Delete a Service		-

Upstream

Action	Org Admin	Org Viewer
View the Upstream list
View Upstream details
Update an Upstream		-
Delete an Upstream		-

API Catalog

Action	Org Admin	Org Viewer
View the API Catalog list
View API Catalog details: Overview, API Definition, API Deploy
Map an API to a Route		-
Map a server to an Upstream		-
Delete an API Catalog entry		-

Plugin

Action	Org Admin	Org Viewer
View the Plugin list
Create a Plugin: OpenID Connect, Rate Limiting, Proxy Rewrite, CORS		-
Update a Plugin		-
Assign a Plugin to a Scope: Global, Route, Service		-
Enable / Disable a Plugin		-
Delete a Plugin		-

Consumer

Action	Org Admin	Org Viewer
View the Consumer list
Create a Consumer		-
View Consumer details and the JWT Credential list
Create, update, or delete a JWT Credential		-
Delete a Consumer		-

Certificate

Action	Org Admin	Org Viewer
View the certificate list and certificate details
Import a certificate		-
Renew a certificate		-
Delete a certificate		-

Custom Domain

Action	Org Admin	Org Viewer
View the gateway endpoint list
Add a custom domain, from the API Gateway details or while creating an API Gateway		-
Change the certificate of a custom domain		-
Delete a custom domain		-

Roles​

Organization management​

API Gateway resources​

API Gateway​

Route​

Service​

Upstream​

API Catalog​

Plugin​

Consumer​

Certificate​

Custom Domain​

Next steps​