All Products
Search
Document Center

Access control

Last Updated: Jan 15, 2021

Description

All Artificial Intelligence Recommendation (AIRec) instances that are created by using an Alibaba Cloud account are the resources that are owned by the account. By default, an Alibaba Cloud account has full access permissions on the resources that belong to the account.

Alibaba Cloud Resource Access Management (RAM) allows you to grant access and management permissions on resources of your AIRec instance to RAM users.

Authentication rules of API operations

If a RAM user requests access to AIRec by using an API operation, a request is sent to RAM for authentication. This ensures that the RAM user is authorized to access the resources. The permissions to be checked are determined by the resources used by an API operation and the API syntax. The following table describes the authentication rules of API operations.

Description

API

Action

Authentication rule

Query the details of one or more instances.

GET /instances

ListInstance

acs:airec:$regionId:$accountId:instance/*

Create an AIRec instance.

POST /instances

CreateInstance

acs:airec:$regionId:$accountId:instance/*

Query the details of an instance based on a specified instance ID.

GET /instances/{instanceId}

DescribeInstance

acs:airec:$regionId:$accountId:instance/$instanceId

Delete an instance.

DELETE /instances/{instanceId}

DeleteInstance

acs:airec:$regionId:$accountId:instance/$instanceId

Modify the configurations of a specified instance.

PUT /instances/{instanceId}

ModifyInstance

acs:airec:$regionId:$accountId:instance/$instanceId

Increase quotas of a specified instance.

POST /instances/{instanceId}/actions/upgrade

UpgradeInstance

acs:airec:$regionId:$accountId:instance/$instanceId

Run a specified instance to start a full data import task.

POST /instances/{instanceId}/actions/import

RunInstance

acs:airec:$regionId:$accountId:instance/$instanceId

Verify the validity of information of a specified instance.

POST /instances/{instanceId}/actions/validate

ValidateInstance

acs:airec:$regionId:$accountId:instance/$instanceId

Query datasets of a specified instance.

GET /instances/{instanceId}/dataSets

ListDataSet

acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/*

Use a dataset of a specific version of a specified instance to provide online services.

POST /instances/{instanceId}/dataSets/{versionId}/actions/current

AttachDataSet

acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId

Stop a dataset of a specified version for a specified instance.

POST /instances/{instanceId}/dataSets/{versionId}/actions/stop

StopDataSet

acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId

Delete a dataset of a specified version for an instance.

POST /instances/{instanceId}/dataSets/{versionId}

DeleteDataSet

acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId

Query the data quality report of a specified dataset version for a specified instance.

GET /instances/{instanceId}/dataSets/{versionId}/report

DescribeDataSetReport

acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId

Query the error details of data in a specified dataset version of a specified instance.

GET /instances/{instanceId}/dataSets/{versionId}/messages

DescribeDataSetMessage

acs:airec:$regionId:$accountId:instance/$instanceId/dataSet/$versionId

Query the data sources of a specified instance.

GET /instances/{instanceId}/dataSources

ListDataSource

acs:airec:$regionId:$accountId:instance/$instanceId/dataSource/*

Modify the information of a single data source in a specified table of a specified instance.

PUT /instances/{instanceId}/dataSources/{tableName}

ModifyDataSource

acs:airec:$regionId:$accountId:instance/$instanceId/dataSource/$tableName

Create a discretization rule.

POST /instances/{instanceId}/diversifies

CreateDiversify

acs:airec:$regionId:$accountId:instance/$instanceId/diversify/*

Query discretization rules.

GET /instances/{instanceId}/diversifies

ListDiversify

acs:airec:$regionId:$accountId:instance/$instanceId/diversify/*

Query a discretization rule.

GET /instances/{instanceId}/diversifies/{name}

DescribeDiversify

acs:airec:$regionId:$accountId:instance/$instanceId/diversify/$name

Modify a discretization rule.

PUT /instances/{instanceId}/diversifies/{name}

ModifyDiversify

acs:airec:$regionId:$accountId:instance/$instanceId/diversify/$name

Delete a discretization rule.

DELETE /instances/{instanceId}/diversifies/{name}

DeleteDiversify

acs:airec:$regionId:$accountId:instance/$instanceId/diversify/$name

Push documents to specified tables in a specified instance.

POST /instances/{instanceId}/tables/{tableName}/actions/bulk

PushDocument

acs:airec:$regionId:$accountId:instance/$instanceId/table/$tableName

Query the recommendation results of a specified instance.

GET /instances/{instanceId}/actions/recommend

Recommend

acs:airec:$regionId:$accountId:instance/$instanceId

Push intervention data.

POST /instances/{instanceId}/actions/intervene

PushIntervention

acs:airec:$regionId:$accountId:instance/$instanceId

Create a mixed sorting rule.

POST /instances/{instanceId}/mixes

CreateMix

acs:airec:$regionId:$accountId:instance/$instanceId/mix/*

Query mixed sorting rules.

GET /instances/{instanceId}/mixes

ListMix

acs:airec:$regionId:$accountId:instance/$instanceId/mix/*

Query a mixed sorting rule.

GET /instances/{instanceId}/mixes/{name}

DescribeMix

acs:airec:$regionId:$accountId:instance/$instanceId/mix/$name

Modify a mixed sorting rule.

PUT /instances/{instanceId}/mixes/{name}

ModifyMix

acs:airec:$regionId:$accountId:instance/$instanceId/mix/$name

Delete a mixed sorting rule.

DELETE /instances/{instanceId}/mixes/{name}

DeleteMix

acs:airec:$regionId:$accountId:instance/$instanceId/mix/$name

Query the quota of an instance based on a specified instance ID.

GET /instances/{instanceId}/quota

DescribeQuota

acs:airec:$regionId:$accountId:instance/$instanceId/quota

Query channels and scenes of a specified instance.

GET /instances/{instanceId}/dashboard/parameters

ListDashboardParameters

acs:airec:$regionId:$accountId:instance/$instanceId/dashboard

Query the statistics of a specified instance.

GET /instances/{instanceId}/dashboard/statistics

ListDashboard

acs:airec:$regionId:$accountId:instance/$instanceId/dashboard

Query cross-channel users of a specified instance.

GET /instances/{instanceId}/dashboard/uid

ListDashboardUid

acs:airec:$regionId:$accountId:instance/$instanceId/dashboard

Query all asynchronous tasks of a specified instance by using the instance ID.

GET /instances/{instanceId}/tasks

ListInstanceTask

acs:airec:$regionId:$accountId:instance/$instanceId/task