All Products
Search
Document Center

Create custom policies for system administrators

Last Updated: Sep 07, 2021

This topic describes how to create custom policies for system administrators.

  1. Log on to the RAM console by using your Alibaba Cloud account.

  2. In the left-side navigation pane, click Policies under Permissions.

  3. On the Policies page, click Create Policy.

  4. On the Create Custom Policy page, enter SystemAdministratorAccess in Policy Name.

  5. Enter system administrator permissions in Note.

  6. Select Script for Configuration Mode.

  7. Copy the following content to the Policy Document:

    {
     "Statement": [
         {
             "Effect": "Allow",
             "Action": "*",
             "Resource": "*"
             "Condition":{
                "StringNotLike":{
                    "Action":
                    [
                        "ram:*",
                        "ims:*",
                        "resourcemanager:*",
                        "bss:*",
                        "bssapi:*",
                        "efc:*"
                    ]
                }
            }
         },
         {
             "Effect": "Allow",
             "Action":
                 [
                     "ram:GetRole",
                     "ram:ListRoles",
                     "ram:CreateServiceLinkedRole",
                     "ram:DeleteServiceLinkedRole",
                     "bss:DescribeOrderList",
                     "bss:DescribeOrderDetail",
                     "bss:PayOrder",
                     "bss:CancelOrder"
                 ],
             "Resource": "*"
         }
     ],
     "Version": "1"
    }
  8. Click OK.