This topic describes the actions that a RAM user can perform on Log Service resources.

Actions that a RAM user can perform on Log Service resources

The following table describes the actions that you can authorize a RAM user to perform on Log Service resources.
Action Description
log:CreateProject Creates a project.
log:GetLogStoreLogs Queries logs in a Logstore of a specified project.
log:GetLogStoreHistogram Queries the distribution of logs in a Logstore of a specified project.
log:GetLogStore Queries the attributes of a Logstore.
log:ListLogStores Lists all Logstores in a specified project.
log:CreateLogStore Creates a Logstore in a project.
log:DeleteLogStore Deletes a Logstore, including all shards and indexes of the Logstore.
log:UpdateLogStore Updates the attributes of a Logstore.
log:GetCursorOrData (GetCursor and PullLogs) Queries a cursor based on the server time. Query logs based on the cursor and quantity.
log:ListShards Lists all available shards in a Logstore.
log:PostLogStoreLogs Writes logs to a specified Logstore.
log:CreateConfig Creates a Logtail configuration file in a project.
log:UpdateConfig Updates a Logtail configuration file.
log:DeleteConfig Deletes a Logtail configuration file.
log:GetConfig Queries the details of a Logtail configuration file.
log:ListConfig Lists all Logtail configuration files in a project. You can paginate the files by setting the parameters.
log:CreateMachineGroup Creates a machine group to specify the servers from which logs are collected.
log:UpdateMachineGroup Updates a machine group.
log:DeleteMachineGroup Deletes a machine group.
log:GetMachineGroup Queries the details of a machine group.
log:ListMachineGroup Lists the machine groups.
log:ListMachines Lists the machines in a machine group. The machines are connected to Log Service.
log:ApplyConfigToGroup Applies a Logtail configuration file to a machine group.
log:RemoveConfigFromGroup Deletes a Logtail configuration file from a machine group.
log:GetAppliedMachineGroups Retrieves the list of machines to which a Logtail configuration file is applied.
log:GetAppliedConfigs Retrieves the Logtail configuration files that are applied to a machine group.
log:GetShipperStatus Queries the status of LogShipper tasks.
log:RetryShipperTask Re-runs the failed LogShipper tasks.
log:CreateConsumerGroup Creates a consumer group in a specified Logstore.
log:UpdateConsumerGroup Modifies the attributes of a specified consumer group.
log:DeleteConsumerGroup Deletes a specified consumer group.
log:ListConsumerGroup Lists all consumer groups in a specified Logstore.
log:UpdateCheckPoint Updates the checkpoint of a shard in a specified consumer group.
log:HeartBeat Sends a heartbeat packet to Log Service for a consumer.
log:GetCheckPoint Retrieves the checkpoints of one or all shards in a specified consumer group.
log:CreateIndex Creates the indexes for a specified Logstore.
log:DeleteIndex Deletes the indexes from a specified Logstore.
log:GetIndex Queries the indexes of a specified Logstore.
log:UpdateIndex Updates the indexes of a specified Logstore.
log:CreateSavedSearch Creates a saved search.
log:UpdateSavedSearch Updates a saved search.
log:GetSavedSearch Queries a saved search.
log:DeleteSavedSearch Deletes a saved search.
log:ListSavedSearch Lists the saved searches.
log:CreateDashboard Creates a dashboard.
log:UpdateDashboard Updates a dashboard.
log:GetDashboard Queries a dashboard.
log:DeleteDashboard Deletes a dashboard.
log:ListDashboard Lists the dashboards.
log:CreateJob Creates a task. For example, creates an alert or subscription.
log:UpdateJob Updates a task.
log:CreateApp Grants a RAM user the permissions to create an application, such as Cost Manager and Log Audit Service.
log:UpdateApp Grants a RAM user the permissions to update an application, such as Cost Manager and Log Audit Service.
log:GetApp Grants a RAM user the permissions to query an application, such as Cost Manager and Log Audit Service.
log:DeleteApp Grants a RAM user the permissions to delete an application, such as Cost Manager and Log Audit Service.