skills.rest
yuezhen-huang
yuezhen-huangCOMMUNITY
Explore all skills by this author →
GitHub

iam

Manage ByteCloud IAM user groups, RBAC permission requests, and cloud tickets across control planes.

Updated Apr 30, 2026
Search Tags:#access control#rbac#iam#permission#user group#bytecloud#cloud ticket
One-click install
npx skills add https://github.com/yuezhen-huang/my-bytedance-skillhub --skill iam-yuezhen-huang
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: iam
Source: https://github.com/yuezhen-huang/my-bytedance-skillhub/tree/main/iam
Command: npx skills add https://github.com/yuezhen-huang/my-bytedance-skillhub --skill iam-yuezhen-huang

SYSTEM DOCUMENTATION & REQUIREMENTS

💡 This Skill includes references (resource) components.

What problem does it solve? It removes the manual clicking through ByteCloud IAM consoles by letting you manage custom user groups, inspect your own role grants, request missing RBAC permissions, and track or cancel cloud tickets from a single CLI-driven workflow across CN, I18N, US-TTP, and EU-TTP control planes. ## Core Features & Use Cases - User Group Management: Create custom groups, add or remove members and admins, list group members, and search users by name or username. - RBAC Permission Requests: Apply for permissions as a person, service account, custom group, or org node, with automatic duplicate-ticket detection and owner auto-fill for permanent requests. - Ticket Workflow: Query ticket details, list tickets by scope (created by me, pending my approval, all), and cancel pending tickets, with correct sub-region routing for i18n US-East and Singapore. - Use Case: A test run fails with a permission error containing an apply URL; paste that URL into apply_permission to file the request, then use get_ticket to monitor approval status. ## Quick Start Ask the agent to apply for the missing RBAC permission by pasting the apply URL from your test error, or request it to list your IAM roles on a specific site such as cn or us-ttp.

Frequently Asked Questions about iam

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I apply for a missing RBAC permission on ByteCloud?▼

Use the apply_permission action with either the apply URL from your error message or an explicit role_name plus resource_value. It supports person, service account, custom group, and org group principals, and automatically checks for an existing pending ticket before submitting.

How do I create an IAM user group and add members?▼

Call create_group with a name and vregion, then use add_members or add_admins with the returned custom_group_id and a list of usernames. You can also list group members or search users to find the right accounts first.

How can I list all my IAM roles on a site?▼

Use the list_my_roles action with a vregion such as cn, i18n, us-ttp, or eu-ttp. It automatically paginates through the full /iam/mine/role/list data and returns every role, resource, and binding for the current user.

Why does get_ticket return ticket not found for i18n?▼

i18n tickets are sharded by sub-region (US-East or Singapore-Central). Use the home_vregion_alias returned by apply_permission, such as i18n-sg, when calling get_ticket or cancel_ticket, otherwise the backend returns error 1000030003.

Does apply_permission create duplicate tickets if called twice?▼

No. Before submitting, it checks for an existing pending ticket with the same resource, role, and principal, and returns that ticket with already_exists set to true. You can pass force=true only when you intentionally need a new request.

Can I cancel a pending IAM ticket from the CLI?▼

Yes, use cancel_ticket with the ticket_id, bpm_id, or the ticket detail URL. The ticket_id accepts plain numbers, int64 values, or full URLs, and the action works across all supported control planes with the correct vregion alias.

Related Skills

Explore More Software Engineering Skills→
tomztomz

ibm-cli

Automate IBM Cloud CLI workflows with login, targeting, and resource management.

Community
Intermediate
VitorRibeiro45VitorRibeiro45

paperclip-create-agent

Submit Paperclip agent hire requests through the governance approval workflow.

Community
Advanced
dennisvinkdennisvink

aws-cleanrooms

Diagnoses AWS Clean Rooms permission failures and CloudWatch logging issues for ML jobs.

Community
Advanced
alex-quan-001alex-quan-001

tcoc-incident-review

Fetch TCOC Jira Incident tickets, classify misclassified ones, and execute batch updates.

Community
Intermediate