This topic describes how to authorize a Resource Access Management (RAM) user to view information about all cloud resources within an Alibaba Cloud account except billing information. This topic provides a policy as an example.

The following policy specifies that the authorized RAM user can view information about all cloud resources within an Alibaba Cloud account except billing information.

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "*:Describe*",
                "*:List*",
                "*:Get*",
                "*:BatchGet*",
                "*:Query*",
                "*:BatchQuery*",
                "actiontrail:LookupEvents",
                "dm:Desc*",
                "dm:SenderStatistics*"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
    {
            "Action": [
                "bss:*",
                "efc:*"
            ],
            "Effect": "Deny",
            "Resource": "*"
        }

    ]
}