In RAM, the following actions can be authorized to an ApsaraDB for MongoDB resource.

Action Action
CreateDBInstance ModifyDBInstanceSpec
DeleteDBInstance RenewDBInstance
CreateShardingDBInstance DeleteNode
ModifyNodeSpec CreateNode
RestartDBInstance ModifyDBInstanceMaintainTime
ModifyDBInstanceDescription DescribeDBInstanceAttribute
DescribeReplicaSetRole DescribeShardingNetworkAddress
ModifyDBInstanceNetworkType ModifyDBInstanceNetExpireTime
DescribeAccounts ResetAccountPassword
DescribeSecurityIps ModifySecurityIps
DescribeAuditRecords DescribeAuditFiles
DescribeBackupPolicy ModifyBackupPolicy
CreateBackup DescribeBackups
RestoreDBInstance DescribeDBInstancePerformance
DescribeDBInstances -

The DescribeDBInstances indicates that all instances of the user must be authorized during authorization. The interface that does not require authentication is DescribeRegions.