This topic uses an example policy to demonstrate how to authorize a RAM user to view information of all cloud resources under an Alibaba Cloud account except billing information.

The following policy indicates that the authorized RAM user can view information of all cloud resources under an Alibaba Cloud account except billing information.

{
    "Version": "1",
    "Statement": [
        {
            "Action": [
                "*:Describe*",
                "*:List*",
                "*:Get*",
                "*:BatchGet*",
                "*:Query*",
                "*:BatchQuery*",
                "actiontrail:LookupEvents",
                "dm:Desc*",
                "dm:SenderStatistics*"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
    {
            "Action": [
                "bss:*",
                "efc:*"
            ],
            "Effect": "Deny",
            "Resource": "*"
        }

    ]
}