This topic uses an example policy to demonstrate how to authorize a RAM user to manage information of all resources under an Alibaba Cloud account except billing information.

The following policy indicates that the authorized RAM user can manage information of all resources under an Alibaba Cloud account except billing information.

{
    "Statement": [
        {
            "Action": "*",
            "Effect": "Allow",
            "Resource": "*"
        },
        {
            "Action": [
                "bss:*",
                "efc:*"
            ],
            "Effect": "Deny",
            "Resource": "*"
        }
    ],
    "Version": "1"
}