Details for the Email Service

This topic covers details for writing policies to control access to the Email service.

Resource-Types

approved-senders

suppressions

Supported Variables

The Email Service supports all the general variables (see General Variables for All Requests), plus the ones listed here.

The approved-senders resource type can use the following variables:

Variable Variable Type Comments
target.approved-sender.id Entity (OCID)  
target.approved-sender.emailaddress String Use this variable with the APPROVED_SENDER_USE permissions only.

Details for Verb + Resource-Type Combinations

The following tables show the permissions and API operations covered by each verb. The level of access is cumulative as you go from inspect > read > use > manage. A plus sign (+) in a table cell indicates incremental access compared to the cell directly above it, whereas "no extra" indicates no incremental access.

For example, the use verb for the suppressions resource-type covers no extra permissions or API operations compared to the read verb.

approved-senders
Verbs Permissions APIs Fully Covered APIs Partially Covered
inspect

APPROVED_SENDER_INSPECT

ListSenders

none

read

INSPECT +

APPROVED_SENDER_READ

GetSender None
use

READ +

APPROVED_SENDER_USE

SmtpSend None
manage

USE +

APPROVED_SENDER_CREATE

APPROVED_SENDER_DELETE

APPROVED_SENDER_UPDATE

APPROVED_SENDER_MOVE

CreateSender

DeleteSender

UpdateSender

MoveSender

none

suppressions
Verbs Permissions APIs Fully Covered APIs Partially Covered
inspect

SUPPRESSION_INSPECT

ListSuppression

none

read

INSPECT +

SUPPRESSION_READ

GetSuppression None
use

No extra

 

None

None
manage

USE +

SUPPRESSION_CREATE

SUPPRESSION_DELETE

CreateSuppression

DeleteSuppression

none

Permissions Required for Each API Operation

The following table lists the API operations in a logical order, grouped by resource type.

For information about permissions, see Permissions.

API Operation Permissions Required to Use the Operation
ListSenders APPROVED_SENDER_INSPECT
GetSender APPROVED_SENDER_READ
CreateSender APPROVED_SENDER_CREATE
DeleteSender APPROVED_SENDER_DELETE
MoveSender APPROVED_SENDER_MOVE
SmtpSend APPROVED_SENDER_USE
ListSuppression SUPPRESSION_INSPECT
GetSuppression SUPPRESSION_READ
CreateSuppression SUPPRESSION_CREATE
DeleteSuppression SUPPRESSION_DELETE