All Products
Search

This Product

    Application Real-Time Monitoring Service:Use resource groups for fine-grained resource control

    Document Center

    Application Real-Time Monitoring Service:Use resource groups for fine-grained resource control

    Last Updated:Apr 25, 2026

    You can use resource groups with Resource Access Management (RAM) to isolate resources and manage permissions with fine-grained control within a single Alibaba Cloud account. This topic describes how Application Real-Time Monitoring Service (ARMS) supports resource groups and describes the steps to grant permissions at the resource group level.

    Note

    How resource group authorization works

    You can use resource groups to organize and manage resources in your Alibaba Cloud account. For example, you can create a resource group for each project and move resources into the corresponding group for centralized management. For more information, see What is a resource group?.

    After grouping resources, you can grant permissions on a specific resource group to different RAM entities, such as RAM users, RAM user groups, or RAM roles. This restricts the entity to managing only the resources within that resource group. For more information, see Resource grouping and authorization.

    This authorization method offers the following benefits:

    • Fine-grained permissions: Ensures that each identity has precisely the access permissions required for specific resources. This prevents mixing the management of resources from multiple projects under one account.

    • Good extensibility: When you add new resources, simply assign them to the resource group. The RAM identity automatically gains the corresponding permissions for the new resources without requiring additional permission grants.

    Grant resource group-level permissions to a RAM user

    This section uses a RAM user as an example to describe how to grant permissions on ARMS resources within a specific resource group.

    1. Prerequisites

    1. Create a RAM user. For more information, see Create a RAM user.

    2. Create a resource group and move existing resources to the target resource group. For more information, see Create a resource group, Automatically move resources to a resource group, and Manually move resources to a resource group.

    2. Grant resource group-level authorization

    You can grant resource group-level authorization using either of the following methods.

    Method 1: Grant authorization in the Resource Management console

    Use the permission management feature of resource groups to grant permissions to a specific RAM user. For more information, see Grant permissions on a resource group to a RAM identity.

    • Log on to the Resource Management console.

    • On the Resource Groups page, find the target resource group and click Permission Management in the Actions column.

    • On the Permission Management tab, click Add Authorization.

    • In the Add Authorization panel, configure the authorized entity and access policy.

      • Authorized Entity: Select an existing RAM user.

      • Access Policy: Select a system policy or a created custom policy. For more information, see Create a custom policy.

    • Click Confirm to Add Authorization.

    Method 2: Grant authorization in the RAM console

    Grant resource group-level authorization to a specific RAM user in the RAM console. For more information, see Manage RAM user permissions.

    • Use an Alibaba Cloud account or a RAM administrator to log on to the RAM console.

    • In the left navigation pane, choose Identity Management > Users. On the Users page, find the target RAM user and click Add Permissions in the Actions column.

    • In the Add Permissions panel, grant permissions to the RAM user.

      • Resource Scope: Select Resource Group Level.

      • Authorized Entity: Select an existing RAM user or the RAM user created in the previous steps.

      • Access Policy: Select a system policy or a created custom policy. For more information, see Create a custom policy.

    • Click Confirm to Add Authorization.

    Resource types that support resource groups

    The following table lists the ARMS resource types that support resource groups.

    Alibaba Cloud Service

    Service Code

    Resource Type

    Application Real-Time Monitoring Service (ARMS)

    arms

    application: Application Monitoring app

    Application Real-Time Monitoring Service (ARMS)

    arms

    grafanaworkspace: Grafana service

    Application Real-Time Monitoring Service (ARMS)

    arms

    prometheus: monitoring service

    Application Real-Time Monitoring Service (ARMS)

    arms

    synthetictask: Synthetic Monitoring task

    Application Real-Time Monitoring Service (ARMS)

    arms

    web: Browser Monitoring app
    Note

    For resource types that do not currently support resource groups, you can submit feedback in the Resource Group console.

    image

    Operations that do not support resource group-level authorization

    The following ARMS actions do not support resource group-level authorization:

    Action

    Description

    arms:AddArmsUser

    -

    arms:AddBlackboxTask

    -

    arms:AddCmsProduct

    -

    arms:AddGrafana

    -

    arms:AddIntegration

    -

    arms:AddRecordingRule

    Creates or updates a RecordingRule rule for Prometheus Monitoring.

    arms:AddTask

    -

    arms:AddUser

    -

    arms:AlarmInsightsFeedback

    -

    arms:AllTagResources

    -

    arms:AppendInstancesToPrometheusGlobalView

    Adds a data source to an ARMS Prometheus aggregation instance.

    arms:ApplyScenario

    -

    arms:BatchEmailVerifyLink

    -

    arms:BatchUpdateConvergeConfig

    -

    arms:BatchVerifyLink

    -

    arms:BlockAlarmNotification

    Blocks alert notifications. After an alert is blocked, no notifications are sent for a specified period.

    arms:CMonitorCloudInstances

    -

    arms:CMonitorRegister

    -

    arms:ChangeAlarmSeverity

    Modifies the alert severity.

    arms:CheckArmsDefaultSLR

    -

    arms:CheckCommercialStatus

    Checks the commercial activation status of a product.

    arms:CheckDataConsistency

    -

    arms:CheckGlobalView

    -

    arms:CheckIntegrationYaml

    -

    arms:CheckServiceLinkedRoleForDeleting

    -

    arms:CheckServiceStatus

    -

    arms:CheckXtraceDefaultSLR

    -

    arms:ClaimAlarm

    Claims an alert. This action is used with an escalation policy. When alerts are handled collaboratively, claiming an alert indicates that it is being processed.

    arms:CloseAlarm

    Closes an alert. Make sure that the alert has recovered before you close it. If an alert is continuously triggered, a new alert is generated after you close the current one.

    arms:ConfigAgentLabel

    -

    arms:ConfigApp

    -

    arms:ContactSendNocMessage

    -

    arms:CreateAlertContact

    -

    arms:CreateAlertContactGroup

    -

    arms:CreateAlertTemplate

    -

    arms:CreateContact

    -

    arms:CreateContactGroup

    -

    arms:CreateContactSchedule

    -

    arms:CreateDispatchRule

    -

    arms:CreateDump

    -

    arms:CreateEscalation

    -

    arms:CreateEscalationPolicy

    -

    arms:CreateEvent

    -

    arms:CreateHeapDump

    -

    arms:CreateImmediateSyntheticTask

    -

    arms:CreateIncidentWorkFlow

    -

    arms:CreateIntegration

    Creates an alert integration.

    arms:CreateNotificationPolicy

    -

    arms:CreateOnCallSchedule

    -

    arms:CreateOrUpdateAlertTemplate

    -

    arms:CreateOrUpdateEventBridgeIntegration

    Creates or modifies an EventBridge notification integration.

    arms:CreateProm

    -

    arms:CreateRumAppGroup

    -

    arms:CreateRumUploadFileUrl

    Used to upload files such as SourceMap files and symbol tables.

    arms:CreateSecurityAuth

    -

    arms:CreateServiceDiscoveryConfig

    -

    arms:CreateSyntheticTask

    -

    arms:CreateTemplatesByAlertRules

    -

    arms:CreateWebhook

    -

    arms:DelResourcesByAccountId

    -

    arms:DeleteAlert

    -

    arms:DeleteAlertContact

    -

    arms:DeleteAlertContactGroup

    -

    arms:DeleteAlertTemplate

    -

    arms:DeleteAlertTemplates

    -

    arms:DeleteApp

    -

    arms:DeleteCmsExporter

    Uninstalls a Prometheus for Alibaba Cloud Services instance.

    arms:DeleteCmsProduct

    -

    arms:DeleteConfig

    -

    arms:DeleteContact

    -

    arms:DeleteContactGroup

    Deletes an alert contact group.

    arms:DeleteContactLink

    -

    arms:DeleteContactMember

    -

    arms:DeleteContactSchedule

    -

    arms:DeleteDeliverTask

    -

    arms:DeleteDispatchRule

    -

    arms:DeleteDump

    -

    arms:DeleteEscalation

    -

    arms:DeleteEscalationPolicy

    -

    arms:DeleteEventBridgeIntegration

    Deletes an EventBridge notification integration.

    arms:DeleteHeapDump

    -

    arms:DeleteIncidentWorkFlow

    -

    arms:DeleteIntegration

    Deletes a collection rule for an integration.

    arms:DeleteIntegrationCustomJob

    -

    arms:DeleteInteractiveDashboard

    -

    arms:DeleteNotificationPolicy

    -

    arms:DeleteOnCallSchedule

    -

    arms:DeleteRumUploadFile

    Used to delete files such as symbol tables and SourceMap files.

    arms:DeleteScenario

    -

    arms:DeleteSilencePolicy

    Calls the DeleteSilencePolicy operation to delete a silence policy based on its ID.

    arms:DeleteSourceMap

    Deletes a SourceMap file uploaded in Browser Monitoring.

    arms:DeleteSyntheticMonitorGroup

    -

    arms:DeleteSyntheticTask

    Deletes a scheduled Synthetic Monitoring task.

    arms:DeleteTask

    -

    arms:DeleteTraceAppUserMethod

    -

    arms:Describe

    -

    arms:DescribeAttacks

    -

    arms:DescribeBusinessLocation

    -

    arms:DescribeDispatchRule

    -

    arms:DescribeGrafanaInstance

    -

    arms:DescribeLicenseKey

    -

    arms:DescribeMetric

    -

    arms:DescribeMetricCardinality

    -

    arms:DescribeRaspDependencyInstances

    -

    arms:DescribeRegions

    -

    arms:DescribeRiskDependencies

    -

    arms:DescribeTagsOfDuplicateRemoval

    -

    arms:DescribeTraceDatasource

    -

    arms:DescribeTraceEndpoint

    -

    arms:DescribeTraceLicenseKey

    -

    arms:DescribeTraceLocation

    -

    arms:DescribeTraceQuality

    -

    arms:DescribeTraceResourcesStatus

    -

    arms:DescribeXTraceConfig

    -

    arms:DescribeXTraceUpgradeStatus

    -

    arms:DiagnoseTask

    -

    arms:DisableAlertTemplate

    -

    arms:DisableDeliverTask

    -

    arms:DoConvergeAction

    -

    arms:DoInsightsAction

    Executes an action based on the specified module type.

    arms:EmailVerifyLink

    -

    arms:EnableAlertTemplate

    -

    arms:EnableDeliverTask

    -

    arms:EnableGraphResource

    -

    arms:EnableServiceAccessForPrometheus

    -

    arms:ExportAlertTemplates

    -

    arms:ExportPrometheusRules

    -

    arms:GeneralQuery

    -

    arms:GetATPAccessURL

    -

    arms:GetActionForward

    -

    arms:GetAgentDownloadUrl

    -

    arms:GetAgentInfo

    -

    arms:GetAgentInfoByPage

    -

    arms:GetAgentUpgradeInfo

    -

    arms:GetAlarmHistories

    The operation to query the history of sent alerts.

    arms:GetAlert

    -

    arms:GetAlertRulesByPage

    -

    arms:GetAlertsCommercialStatus

    -

    arms:GetAppApiPageInfo

    -

    arms:GetAppCenterComponent

    -

    arms:GetAppJVMConfig

    Obtains the JVM configuration information for each instance of an application.

    arms:GetAppList

    -

    arms:GetAppLogStoreCorrelation

    -

    arms:GetApplication

    -

    arms:GetArmsInfo

    -

    arms:GetAssumeRoleCredentials

    -

    arms:GetBubbleUpBrief

    -

    arms:GetBubbleUpReport

    -

    arms:GetChanelLink

    -

    arms:GetChannelLink

    -

    arms:GetCloudEnvironmentId

    -

    arms:GetCloudMonitorInstallStatus

    -

    arms:GetCloudMonitorMetric

    -

    arms:GetCloudMonitorThumbnail

    -

    arms:GetCloudProductHealthCheckSetting

    -

    arms:GetCloudProductHealthStatus

    -

    arms:GetClusterInfo

    -

    arms:GetClusterState

    -

    arms:GetCmsInstallStatus

    -

    arms:GetCmsMetric

    -

    arms:GetCmsPurchaseStatus

    -

    arms:GetCmsThumbnail

    -

    arms:GetCommercialConfig

    -

    arms:GetCommercialStatus

    -

    arms:GetCommercialStatusV2

    -

    arms:GetConsistencySnapshot

    -

    arms:GetConsoleBaseInfo

    -

    arms:GetContactScheduleDetail

    -

    arms:GetConvergeConfig

    -

    arms:GetCurrentEnv

    -

    arms:GetDasEvents

    -

    arms:GetDashboardList

    -

    arms:GetData

    -

    arms:GetDeliverTargetDetail

    -

    arms:GetDeliverTask

    -

    arms:GetDirectInstallStatus

    -

    arms:GetDirectMetric

    -

    arms:GetDirectThumbnail

    -

    arms:GetEscalationDetail

    -

    arms:GetEscalationDispatch

    -

    arms:GetEvent

    -

    arms:GetExceptionMetadata

    -

    arms:GetExporterListByIntegration

    -

    arms:GetGlobalViewUrl

    -

    arms:GetGrafanaDatasource

    -

    arms:GetGraphResourceStatus

    -

    arms:GetHeapDumpList

    -

    arms:GetImmediateSyntheticTask

    -

    arms:GetInnerCallChain

    -

    arms:GetIntegrationCluster

    -

    arms:GetIntegrationInfo

    -

    arms:GetIntegrationState

    Obtains the accessed state of an integration.

    arms:GetIntegrationToken

    -

    arms:GetJaegerServiceOperations

    -

    arms:GetJaegerServices

    -

    arms:GetJaegerTrace

    -

    arms:GetJavaAgentDownloadUrl

    -

    arms:GetLokiCluster

    -

    arms:GetMetricDatas

    -

    arms:GetMetricQuantity

    -

    arms:GetMetricStatistics

    -

    arms:GetModuleConfig

    -

    arms:GetMultipleTrace

    -

    arms:GetOTTraceBriefInfos

    -

    arms:GetOTTraceCallstack

    -

    arms:GetOTTraceCallstackOverview

    -

    arms:GetOTTraceDetails

    -

    arms:GetOldPrometheusRuleCount

    -

    arms:GetOnCallSchedulesDetail

    Calls the GetOnCallSchedulesDetail operation to query information about a scheduling policy.

    arms:GetPodAnnotation

    -

    arms:GetProfilingData

    -

    arms:GetPromUrl

    -

    arms:GetPromUserPref

    -

    arms:GetPrometheusAgentInfoAll

    -

    arms:GetPrometheusApiToken

    -

    arms:GetPrometheusRemoteWrite

    -

    arms:GetProxiedContent

    -

    arms:GetPubInfo

    -

    arms:GetRAMStatus

    -

    arms:GetRemoteUrl

    -

    arms:GetRepSize

    -

    arms:GetResourceConsumptionDashboardUrl

    -

    arms:GetRetcodeDataByQuery

    Queries Browser Monitoring data based on an SLS query statement.

    arms:GetRetcodeDatas

    -

    arms:GetRetcodeLogstore

    Obtains the SLS project and Logstore that correspond to a Browser Monitoring application under a specified account.

    arms:GetRetcodeShareUrl

    -

    arms:GetRumExceptionStack

    Obtains RUM exception stack information.

    arms:GetRumGroups

    -

    arms:GetRumOcuStatisticData

    Obtains RUM OCU usage data.

    arms:GetRumUploadFilePolicyStatus

    -

    arms:GetRumUploadFiles

    Obtains RUM-related files, including symbol tables and SourceMap files.

    arms:GetSLSStatus

    -

    arms:GetServices

    -

    arms:GetSlsProjectInfo

    -

    arms:GetSourceMapInfo

    Obtains the details of a SourceMap file uploaded in Browser Monitoring.

    arms:GetSpanNames

    -

    arms:GetSqlMetadata

    -

    arms:GetStack

    -

    arms:GetStsCreDential

    -

    arms:GetSupportEnv

    -

    arms:GetSyntheticCommercialDetailAndUsageEstimate

    -

    arms:GetSyntheticCommercialStatus

    -

    arms:GetSyntheticGrafanaDashboardUrl

    -

    arms:GetSyntheticMonitors

    -

    arms:GetSyntheticPrometheusCluster

    -

    arms:GetSyntheticTaskDetail

    Obtains the details of a scheduled network probe task based on the task ID.

    arms:GetSyntheticTaskList

    Obtains a list of scheduled Synthetic Monitoring tasks.

    arms:GetTProfInteractionSnapshot

    -

    arms:GetTagKey

    -

    arms:GetTagResourceSystemTags

    -

    arms:GetTagVal

    -

    arms:GetThumbnailUrlListByIntegration

    -

    arms:GetToCheckArmsDefaultSLR

    -

    arms:GetTrace

    -

    arms:GetTraceAggr

    -

    arms:GetTraceAppConfigTemplate

    -

    arms:GetTraceApps

    -

    arms:GetTraceChain

    -

    arms:GetTraceExplorerStatus

    -

    arms:GetTraceGroupBy

    -

    arms:GetTraceInfoList

    -

    arms:GetTraceRegions

    -

    arms:GetTraces

    -

    arms:GetUserArmsPromClusterList

    -

    arms:GetUserDatasourceConfig4Sls

    -

    arms:GetUserInfo

    -

    arms:GetUserList

    -

    arms:GetUserWhiteListStatus

    -

    arms:HealthCheck

    -

    arms:HighPriorityAlertClearRatio

    -

    arms:ImportAlertTemplates

    -

    arms:InitCloudProductHealthInspectionTasks

    -

    arms:InitTraceResource

    -

    arms:InnerDeleteContactGroup

    -

    arms:InnerDeleteIMRobot

    -

    arms:InnerDispatchContactOptions

    -

    arms:InnerDispatchDetail

    -

    arms:InnerDispatchRuleCreate

    -

    arms:InnerFetchContactByArmsContactId

    -

    arms:InnerFetchContactGroupByArmsContactGroupId

    -

    arms:InnerGetUserTTSReissue

    -

    arms:InnerNotifyObjectContactList

    -

    arms:InnerUpdateAlertContact

    -

    arms:InnerUpdateAlertContactInformation

    -

    arms:InnerUpdateAlertWebhook

    -

    arms:InnerUpdateContactGroup

    -

    arms:InnerUpdateDispatch

    -

    arms:InnerUpdateIMRobot

    -

    arms:InnerUpdateTTSReissue

    -

    arms:InsertConfig

    -

    arms:InsightsCreateInspectJob

    -

    arms:InsightsFeedbackJobReport

    -

    arms:InsightsGetInspectJobReport

    -

    arms:InsightsStopInspectJob

    -

    arms:InstallCloudMonitorProduct

    -

    arms:InstallCmsExporter

    -

    arms:InstallEventer

    -

    arms:InstallExporterByIntegration

    -

    arms:InstallMysqlExporter

    -

    arms:InvokeCenterPop

    -

    arms:InvokeRulerManager

    -

    arms:KeepAllCommercialTrace

    -

    arms:ListActivatedAlerts

    -

    arms:ListAlertContact

    -

    arms:ListAlertContactGroup

    -

    arms:ListAlertContactGroupOption

    -

    arms:ListAlertEvents

    Queries the history of alert events.

    arms:ListAlertTemplates

    -

    arms:ListAlertWebhookContact

    -

    arms:ListAllAlertContact

    -

    arms:ListAllIMRobot

    -

    arms:ListApplicationInstance

    -

    arms:ListCloudMonitorCluster

    -

    arms:ListCloudMonitorClusterMetric

    -

    arms:ListCloudMonitorClusterProduct

    -

    arms:ListCloudMonitorClusterThumbnail

    -

    arms:ListCloudMonitorMigrateProduct

    -

    arms:ListCluster

    -

    arms:ListClusterApmWorkload

    -

    arms:ListClusterFromGrafana

    -

    arms:ListContactSchedule

    -

    arms:ListDashBoardsByIntegrationType

    -

    arms:ListDashboardsByName

    Creates a Loki data source associated with Prometheus and related multi-data source dashboards.

    arms:ListDeliverTask

    -

    arms:ListDispatchRule

    -

    arms:ListEntityDashboard

    -

    arms:ListEntityForPage

    -

    arms:ListEntityTypeAndCount

    -

    arms:ListEnvironmentResources

    -

    arms:ListEventBridgeIntegrations

    Queries information about EventBridge notification integrations.

    arms:ListExporterMetrics

    -

    arms:ListFeatureFlags

    -

    arms:ListGrafanaInstance

    -

    arms:ListGrafarmsDashboard

    -

    arms:ListIMRobot

    -

    arms:ListImmediateSyntheticTasks

    -

    arms:ListIntegration

    Views the details of an integration list.

    arms:ListLLMSessions

    -

    arms:ListLLMTraces

    -

    arms:ListMetricLabelValues

    -

    arms:ListMetricNames

    -

    arms:ListMetrics

    -

    arms:ListNotInstallCluster

    -

    arms:ListPromAlertCluster

    -

    arms:ListPromCluster

    -

    arms:ListPromClusters

    -

    arms:ListPromFrontVars

    -

    arms:ListPrometheusAlertMetrics

    -

    arms:ListPrometheusAlertTemplates

    -

    arms:ListPrometheusDeliverCluster

    -

    arms:ListPrometheusGlobalView

    Adds an ARMS Prometheus aggregation instance and obtains a list of aggregation instances.

    arms:ListPrometheusInstance

    -

    arms:ListPrometheusInstances

    Obtains all normal instances of Prometheus.

    arms:ListPrometheusRemoteWrites

    -

    arms:ListRaspApps

    -

    arms:ListResource

    -

    arms:ListScenario

    -

    arms:ListServerlessTopNApps

    -

    arms:ListSyntheticCloudProduct

    -

    arms:ListSyntheticDetail

    Obtains network probe results.

    arms:ListSyntheticMonitorGroups

    -

    arms:ListSyntheticTags

    -

    arms:ListUserLogProjects

    -

    arms:ListUserLogSavedSearches

    -

    arms:ListUserLogstoreIndexes

    -

    arms:ListUserLogstores

    -

    arms:ListVpcClusterPage

    -

    arms:ListVpcSecurityGroupIds

    -

    arms:OpenArmsDefaultSLR

    -

    arms:OpenArmsService

    -

    arms:OpenArmsServiceSecondVersion

    -

    arms:OpenVCluster

    -

    arms:OpenXtraceDefaultSLR

    -

    arms:PreviewContactSchedule

    -

    arms:QueryAPMMetrics

    -

    arms:QueryAhasMachineMetric

    -

    arms:QueryAppMetadata

    Queries encoding mapping content based on an ID and type.

    arms:QueryAuditLogs

    -

    arms:QueryCMonitorAgentInfo

    -

    arms:QueryCommercialFeeData

    -

    arms:QueryCommercialResourcePackage

    -

    arms:QueryCommercialUsage

    Queries data write volume. It supports usage data for four products: Application Monitoring, Managed Service for OpenTelemetry, Prometheus, and Real User Monitoring.

    arms:QueryCommercialUsageLimit

    -

    arms:QueryConfig

    -

    arms:QueryDataSet

    -

    arms:QueryEvents

    -

    arms:QueryHotSpotData

    -

    arms:QueryLLMSessionDetail

    -

    arms:QueryLLMTraceDetail

    -

    arms:QueryMetric

    -

    arms:QueryMetricByPage

    -

    arms:QueryProductConfig

    -

    arms:QueryProfilingData

    -

    arms:QueryProfilingWhitelist

    -

    arms:QueryPromInstallStatus

    -

    arms:QueryPrometheusFeeData

    -

    arms:QueryReleaseMetric

    Queries metrics for different versions of EDAS and Kubernetes applications during release.

    arms:QueryServiceDetailConsoleInfo

    -

    arms:QuerySyntheticAlertEventCount

    -

    arms:QuerySyntheticMetricData

    -

    arms:QueryTopology

    -

    arms:QueryTraces

    -

    arms:RefreshDashboardCluster

    -

    arms:RegisterCloudProduct

    -

    arms:ReinstallFlinkCluster

    -

    arms:RemoveSourcesFromPrometheusGlobalView

    Removes a data source from an ARMS Prometheus aggregation instance. Only non-Alibaba Cloud data sources can be removed.

    arms:ReportAgentDaemonStatus

    -

    arms:ReportEvent

    -

    arms:ReportJavaAttachStatus

    -

    arms:ResetConvergeConfig

    -

    arms:RestartPrometheusAgent

    -

    arms:SaveAlert

    -

    arms:SaveAlertTemplate

    -

    arms:SaveCommercialFeeChange

    -

    arms:SaveCommercialUsageLimit

    -

    arms:SaveContactGroup

    -

    arms:SaveContactMember

    -

    arms:SaveDataset

    -

    arms:SaveInteractiveDashboard

    -

    arms:SaveModuleConfig

    -

    arms:SaveProductConfig

    -

    arms:SaveSatelliteConfig

    -

    arms:SaveSyntheticMonitorGroup

    -

    arms:SaveTraceAppUserMethod

    -

    arms:SaveXTraceConfig

    -

    arms:SearchAlarmHistories

    -

    arms:SearchAlertContact

    -

    arms:SearchAlertContactGroup

    -

    arms:SearchAlertHistories

    -

    arms:SearchAlertRuleTemplate

    -

    arms:SearchAlertRules

    -

    arms:SearchContact

    -

    arms:SearchContactGroup

    Queries information about alert contact groups.

    arms:SearchEvents

    -

    arms:SearchRetcodeAppByPage

    -

    arms:SearchTagNames

    -

    arms:SearchTagValues

    -

    arms:SearchTraces

    -

    arms:SearchTracesByPage

    -

    arms:SendCustomIncidents

    -

    arms:SendMseIncident

    -

    arms:SetPromUserPref

    -

    arms:ShowGlobalView

    -

    arms:ShowGlobalViewWithCustomAuthorization

    -

    arms:ShowGlobalViewWithSubAccountInResourceDirectory

    -

    arms:StartAllCommercialRetcode

    -

    arms:StatisticsSyntheticUsage

    -

    arms:StopAllCommercialRetcode

    -

    arms:SyncRecordingRules

    Synchronizes the aggregation rules of a cluster to other destination clusters in the same region in batches.

    arms:TurnOnSecondSwitch

    -

    arms:UnBlockAlarmNotification

    -

    arms:UnInstallExporterByIntegration

    -

    arms:UnInstallGlobalView

    -

    arms:UninstallCloudMonitorCluster

    -

    arms:UninstallCloudMonitorProduct

    -

    arms:UpdateAlertContact

    -

    arms:UpdateAlertContactGroup

    -

    arms:UpdateAlertTemplate

    -

    arms:UpdateAlertsCommercialLimit

    -

    arms:UpdateAppConvergeConfig

    -

    arms:UpdateCloudMonitorCluster

    -

    arms:UpdateCloudProductHealthCheckSetting

    -

    arms:UpdateCmsProduct

    -

    arms:UpdateCommercialConfig

    -

    arms:UpdateConfig

    -

    arms:UpdateContact

    Sends a text message to an alert contact for mobile phone number validation.

    arms:UpdateContactGroup

    -

    arms:UpdateContactMember

    -

    arms:UpdateContactSchedule

    -

    arms:UpdateDispatchRule

    -

    arms:UpdateEscalation

    -

    arms:UpdateEscalationPolicy

    -

    arms:UpdateGrafanaInstance

    -

    arms:UpdateIncidentWorkFlow

    -

    arms:UpdateIntegration

    Modifies integration-related information.

    arms:UpdateInteractiveDashboard

    -

    arms:UpdateNotificationPolicy

    -

    arms:UpdateOnCallSchedule

    -

    arms:UpdatePrometheusAgentSize

    -

    arms:UpdateRumUploadFilePolicy

    -

    arms:UpdateShareLink

    -

    arms:UpdateShareStatus

    -

    arms:UpdateSourceMap

    Uploads a SourceMap file to ARMS Browser Monitoring.

    arms:UpdateTraceAppTags

    -

    arms:UpdateTraceAppUserMethod

    -

    arms:UpdateTraceEndpoint

    -

    arms:UpdateWebhook

    -

    arms:UpgradeOldXTraceAppLabelsToNewTags

    -

    arms:UpgradeXTrace

    -

    arms:UpsertRumMetadata

    -

    arms:UseHighPriorityAlert

    -

    For operations that do not support resource group authorization, selecting Resource Group Level as the resource scope during authorization is ineffective. If a RAM user still requires permissions for these operations, you must create a custom policy and select Account Level as the resource scope when granting the permissions.

    image.pngThe following are two examples of custom policies. You can adjust the policy content as needed.

    • Allows all read-only operations that do not support resource group-level authorization: The Action element lists all read-only operations that do not support resource group-level authorization.

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "arms:CheckArmsDefaultSLR",
        "arms:CheckCommercialStatus",
        "arms:CheckDataConsistency",
        "arms:CheckGlobalView",
        "arms:CheckIntegrationYaml",
        "arms:CheckServiceLinkedRoleForDeleting",
        "arms:CheckServiceStatus",
        "arms:CheckXtraceDefaultSLR",
        "arms:Describe",
        "arms:DescribeAttacks",
        "arms:DescribeBusinessLocation",
        "arms:DescribeDispatchRule",
        "arms:DescribeGrafanaInstance",
        "arms:DescribeLicenseKey",
        "arms:DescribeMetric",
        "arms:DescribeMetricCardinality",
        "arms:DescribeRaspDependencyInstances",
        "arms:DescribeRegions",
        "arms:DescribeRiskDependencies",
        "arms:DescribeTagsOfDuplicateRemoval",
        "arms:DescribeTraceDatasource",
        "arms:DescribeTraceEndpoint",
        "arms:DescribeTraceLicenseKey",
        "arms:DescribeTraceLocation",
        "arms:DescribeTraceQuality",
        "arms:DescribeTraceResourcesStatus",
        "arms:DescribeXTraceConfig",
        "arms:DescribeXTraceUpgradeStatus",
        "arms:DoInsightsAction",
        "arms:GetATPAccessURL",
        "arms:GetActionForward",
        "arms:GetAgentDownloadUrl",
        "arms:GetAgentInfo",
        "arms:GetAgentInfoByPage",
        "arms:GetAgentUpgradeInfo",
        "arms:GetAlarmHistories",
        "arms:GetAlert",
        "arms:GetAlertRulesByPage",
        "arms:GetAlertsCommercialStatus",
        "arms:GetAppApiPageInfo",
        "arms:GetAppCenterComponent",
        "arms:GetAppJVMConfig",
        "arms:GetAppList",
        "arms:GetAppLogStoreCorrelation",
        "arms:GetApplication",
        "arms:GetArmsInfo",
        "arms:GetAssumeRoleCredentials",
        "arms:GetBubbleUpBrief",
        "arms:GetBubbleUpReport",
        "arms:GetChanelLink",
        "arms:GetChannelLink",
        "arms:GetCloudEnvironmentId",
        "arms:GetCloudMonitorInstallStatus",
        "arms:GetCloudMonitorMetric",
        "arms:GetCloudMonitorThumbnail",
        "arms:GetCloudProductHealthCheckSetting",
        "arms:GetCloudProductHealthStatus",
        "arms:GetClusterInfo",
        "arms:GetClusterState",
        "arms:GetCmsInstallStatus",
        "arms:GetCmsMetric",
        "arms:GetCmsPurchaseStatus",
        "arms:GetCmsThumbnail",
        "arms:GetCommercialConfig",
        "arms:GetCommercialStatus",
        "arms:GetCommercialStatusV2",
        "arms:GetConsistencySnapshot",
        "arms:GetConsoleBaseInfo",
        "arms:GetContactScheduleDetail",
        "arms:GetConvergeConfig",
        "arms:GetCurrentEnv",
        "arms:GetDasEvents",
        "arms:GetDashboardList",
        "arms:GetData",
        "arms:GetDeliverTargetDetail",
        "arms:GetDeliverTask",
        "arms:GetDirectInstallStatus",
        "arms:GetDirectMetric",
        "arms:GetDirectThumbnail",
        "arms:GetEscalationDetail",
        "arms:GetEscalationDispatch",
        "arms:GetEvent",
        "arms:GetExceptionMetadata",
        "arms:GetExporterListByIntegration",
        "arms:GetGlobalViewUrl",
        "arms:GetGrafanaDatasource",
        "arms:GetGraphResourceStatus",
        "arms:GetHeapDumpList",
        "arms:GetImmediateSyntheticTask",
        "arms:GetInnerCallChain",
        "arms:GetIntegrationCluster",
        "arms:GetIntegrationInfo",
        "arms:GetIntegrationState",
        "arms:GetIntegrationToken",
        "arms:GetJaegerServiceOperations",
        "arms:GetJaegerServices",
        "arms:GetJaegerTrace",
        "arms:GetJavaAgentDownloadUrl",
        "arms:GetLokiCluster",
        "arms:GetMetricDatas",
        "arms:GetMetricQuantity",
        "arms:GetMetricStatistics",
        "arms:GetModuleConfig",
        "arms:GetMultipleTrace",
        "arms:GetOTTraceBriefInfos",
        "arms:GetOTTraceCallstack",
        "arms:GetOTTraceCallstackOverview",
        "arms:GetOTTraceDetails",
        "arms:GetOldPrometheusRuleCount",
        "arms:GetOnCallSchedulesDetail",
        "arms:GetPodAnnotation",
        "arms:GetProfilingData",
        "arms:GetPromUrl",
        "arms:GetPromUserPref",
        "arms:GetPrometheusAgentInfoAll",
        "arms:GetPrometheusApiToken",
        "arms:GetPrometheusRemoteWrite",
        "arms:GetProxiedContent",
        "arms:GetPubInfo",
        "arms:GetRAMStatus",
        "arms:GetRemoteUrl",
        "arms:GetRepSize",
        "arms:GetResourceConsumptionDashboardUrl",
        "arms:GetRetcodeDataByQuery",
        "arms:GetRetcodeDatas",
        "arms:GetRetcodeLogstore",
        "arms:GetRetcodeShareUrl",
        "arms:GetRumExceptionStack",
        "arms:GetRumGroups",
        "arms:GetRumOcuStatisticData",
        "arms:GetRumUploadFilePolicyStatus",
        "arms:GetRumUploadFiles",
        "arms:GetSLSStatus",
        "arms:GetServices",
        "arms:GetSlsProjectInfo",
        "arms:GetSourceMapInfo",
        "arms:GetSpanNames",
        "arms:GetSqlMetadata",
        "arms:GetStack",
        "arms:GetStsCreDential",
        "arms:GetSupportEnv",
        "arms:GetSyntheticCommercialDetailAndUsageEstimate",
        "arms:GetSyntheticCommercialStatus",
        "arms:GetSyntheticGrafanaDashboardUrl",
        "arms:GetSyntheticMonitors",
        "arms:GetSyntheticPrometheusCluster",
        "arms:GetSyntheticTaskDetail",
        "arms:GetSyntheticTaskList",
        "arms:GetTProfInteractionSnapshot",
        "arms:GetTagKey",
        "arms:GetTagResourceSystemTags",
        "arms:GetTagVal",
        "arms:GetThumbnailUrlListByIntegration",
        "arms:GetToCheckArmsDefaultSLR",
        "arms:GetTrace",
        "arms:GetTraceAggr",
        "arms:GetTraceAppConfigTemplate",
        "arms:GetTraceApps",
        "arms:GetTraceChain",
        "arms:GetTraceExplorerStatus",
        "arms:GetTraceGroupBy",
        "arms:GetTraceInfoList",
        "arms:GetTraceRegions",
        "arms:GetTraces",
        "arms:GetUserArmsPromClusterList",
        "arms:GetUserDatasourceConfig4Sls",
        "arms:GetUserInfo",
        "arms:GetUserList",
        "arms:GetUserWhiteListStatus",
        "arms:ListActivatedAlerts",
        "arms:ListAlertContact",
        "arms:ListAlertContactGroup",
        "arms:ListAlertContactGroupOption",
        "arms:ListAlertEvents",
        "arms:ListAlertTemplates",
        "arms:ListAlertWebhookContact",
        "arms:ListAllAlertContact",
        "arms:ListAllIMRobot",
        "arms:ListApplicationInstance",
        "arms:ListCloudMonitorCluster",
        "arms:ListCloudMonitorClusterMetric",
        "arms:ListCloudMonitorClusterProduct",
        "arms:ListCloudMonitorClusterThumbnail",
        "arms:ListCloudMonitorMigrateProduct",
        "arms:ListCluster",
        "arms:ListClusterApmWorkload",
        "arms:ListClusterFromGrafana",
        "arms:ListContactSchedule",
        "arms:ListDashBoardsByIntegrationType",
        "arms:ListDashboardsByName",
        "arms:ListDeliverTask",
        "arms:ListDispatchRule",
        "arms:ListEntityDashboard",
        "arms:ListEntityForPage",
        "arms:ListEntityTypeAndCount",
        "arms:ListEnvironmentResources",
        "arms:ListEventBridgeIntegrations",
        "arms:ListExporterMetrics",
        "arms:ListFeatureFlags",
        "arms:ListGrafanaInstance",
        "arms:ListGrafarmsDashboard",
        "arms:ListIMRobot",
        "arms:ListImmediateSyntheticTasks",
        "arms:ListIntegration",
        "arms:ListLLMSessions",
        "arms:ListLLMTraces",
        "arms:ListMetricLabelValues",
        "arms:ListMetricNames",
        "arms:ListMetrics",
        "arms:ListNotInstallCluster",
        "arms:ListPromAlertCluster",
        "arms:ListPromCluster",
        "arms:ListPromClusters",
        "arms:ListPromFrontVars",
        "arms:ListPrometheusAlertMetrics",
        "arms:ListPrometheusAlertTemplates",
        "arms:ListPrometheusDeliverCluster",
        "arms:ListPrometheusGlobalView",
        "arms:ListPrometheusInstance",
        "arms:ListPrometheusInstances",
        "arms:ListPrometheusRemoteWrites",
        "arms:ListRaspApps",
        "arms:ListResource",
        "arms:ListScenario",
        "arms:ListServerlessTopNApps",
        "arms:ListSyntheticCloudProduct",
        "arms:ListSyntheticDetail",
        "arms:ListSyntheticMonitorGroups",
        "arms:ListSyntheticTags",
        "arms:ListUserLogProjects",
        "arms:ListUserLogSavedSearches",
        "arms:ListUserLogstoreIndexes",
        "arms:ListUserLogstores",
        "arms:ListVpcClusterPage",
        "arms:ListVpcSecurityGroupIds",
        "arms:OpenArmsServiceSecondVersion",
        "arms:QueryAPMMetrics",
        "arms:QueryAhasMachineMetric",
        "arms:QueryAppMetadata",
        "arms:QueryAuditLogs",
        "arms:QueryCMonitorAgentInfo",
        "arms:QueryCommercialFeeData",
        "arms:QueryCommercialResourcePackage",
        "arms:QueryCommercialUsage",
        "arms:QueryCommercialUsageLimit",
        "arms:QueryConfig",
        "arms:QueryDataSet",
        "arms:QueryEvents",
        "arms:QueryHotSpotData",
        "arms:QueryLLMSessionDetail",
        "arms:QueryLLMTraceDetail",
        "arms:QueryMetric",
        "arms:QueryMetricByPage",
        "arms:QueryProductConfig",
        "arms:QueryProfilingData",
        "arms:QueryProfilingWhitelist",
        "arms:QueryPromInstallStatus",
        "arms:QueryPrometheusFeeData",
        "arms:QueryReleaseMetric",
        "arms:QueryServiceDetailConsoleInfo",
        "arms:QuerySyntheticAlertEventCount",
        "arms:QuerySyntheticMetricData",
        "arms:QueryTopology",
        "arms:QueryTraces",
        "arms:SearchAlarmHistories",
        "arms:SearchAlertContact",
        "arms:SearchAlertContactGroup",
        "arms:SearchAlertHistories",
        "arms:SearchAlertRuleTemplate",
        "arms:SearchAlertRules",
        "arms:SearchContact",
        "arms:SearchContactGroup",
        "arms:SearchEvents",
        "arms:SearchRetcodeAppByPage",
        "arms:SearchTagNames",
        "arms:SearchTagValues",
        "arms:SearchTraces",
        "arms:SearchTracesByPage"
      ],
      "Resource": "*"
    }
  ]
}

    • Allows all operations that do not support resource group-level authorization: The Action element lists all operations that do not support resource group-level authorization.

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "arms:AddArmsUser",
        "arms:AddBlackboxTask",
        "arms:AddCmsProduct",
        "arms:AddGrafana",
        "arms:AddIntegration",
        "arms:AddRecordingRule",
        "arms:AddTask",
        "arms:AddUser",
        "arms:AlarmInsightsFeedback",
        "arms:AllTagResources",
        "arms:AppendInstancesToPrometheusGlobalView",
        "arms:ApplyScenario",
        "arms:BatchEmailVerifyLink",
        "arms:BatchUpdateConvergeConfig",
        "arms:BatchVerifyLink",
        "arms:BlockAlarmNotification",
        "arms:CMonitorCloudInstances",
        "arms:CMonitorRegister",
        "arms:ChangeAlarmSeverity",
        "arms:CheckArmsDefaultSLR",
        "arms:CheckCommercialStatus",
        "arms:CheckDataConsistency",
        "arms:CheckGlobalView",
        "arms:CheckIntegrationYaml",
        "arms:CheckServiceLinkedRoleForDeleting",
        "arms:CheckServiceStatus",
        "arms:CheckXtraceDefaultSLR",
        "arms:ClaimAlarm",
        "arms:CloseAlarm",
        "arms:ConfigAgentLabel",
        "arms:ConfigApp",
        "arms:ContactSendNocMessage",
        "arms:CreateAlertContact",
        "arms:CreateAlertContactGroup",
        "arms:CreateAlertTemplate",
        "arms:CreateContact",
        "arms:CreateContactGroup",
        "arms:CreateContactSchedule",
        "arms:CreateDispatchRule",
        "arms:CreateDump",
        "arms:CreateEscalation",
        "arms:CreateEscalationPolicy",
        "arms:CreateEvent",
        "arms:CreateHeapDump",
        "arms:CreateImmediateSyntheticTask",
        "arms:CreateIncidentWorkFlow",
        "arms:CreateIntegration",
        "arms:CreateNotificationPolicy",
        "arms:CreateOnCallSchedule",
        "arms:CreateOrUpdateAlertTemplate",
        "arms:CreateOrUpdateEventBridgeIntegration",
        "arms:CreateProm",
        "arms:CreateRumAppGroup",
        "arms:CreateRumUploadFileUrl",
        "arms:CreateSecurityAuth",
        "arms:CreateServiceDiscoveryConfig",
        "arms:CreateSyntheticTask",
        "arms:CreateTemplatesByAlertRules",
        "arms:CreateWebhook",
        "arms:DelResourcesByAccountId",
        "arms:DeleteAlert",
        "arms:DeleteAlertContact",
        "arms:DeleteAlertContactGroup",
        "arms:DeleteAlertTemplate",
        "arms:DeleteAlertTemplates",
        "arms:DeleteApp",
        "arms:DeleteCmsExporter",
        "arms:DeleteCmsProduct",
        "arms:DeleteConfig",
        "arms:DeleteContact",
        "arms:DeleteContactGroup",
        "arms:DeleteContactLink",
        "arms:DeleteContactMember",
        "arms:DeleteContactSchedule",
        "arms:DeleteDeliverTask",
        "arms:DeleteDispatchRule",
        "arms:DeleteDump",
        "arms:DeleteEscalation",
        "arms:DeleteEscalationPolicy",
        "arms:DeleteEventBridgeIntegration",
        "arms:DeleteHeapDump",
        "arms:DeleteIncidentWorkFlow",
        "arms:DeleteIntegration",
        "arms:DeleteIntegrationCustomJob",
        "arms:DeleteInteractiveDashboard",
        "arms:DeleteNotificationPolicy",
        "arms:DeleteOnCallSchedule",
        "arms:DeleteRumUploadFile",
        "arms:DeleteScenario",
        "arms:DeleteSilencePolicy",
        "arms:DeleteSourceMap",
        "arms:DeleteSyntheticMonitorGroup",
        "arms:DeleteSyntheticTask",
        "arms:DeleteTask",
        "arms:DeleteTraceAppUserMethod",
        "arms:Describe",
        "arms:DescribeAttacks",
        "arms:DescribeBusinessLocation",
        "arms:DescribeDispatchRule",
        "arms:DescribeGrafanaInstance",
        "arms:DescribeLicenseKey",
        "arms:DescribeMetric",
        "arms:DescribeMetricCardinality",
        "arms:DescribeRaspDependencyInstances",
        "arms:DescribeRegions",
        "arms:DescribeRiskDependencies",
        "arms:DescribeTagsOfDuplicateRemoval",
        "arms:DescribeTraceDatasource",
        "arms:DescribeTraceEndpoint",
        "arms:DescribeTraceLicenseKey",
        "arms:DescribeTraceLocation",
        "arms:DescribeTraceQuality",
        "arms:DescribeTraceResourcesStatus",
        "arms:DescribeXTraceConfig",
        "arms:DescribeXTraceUpgradeStatus",
        "arms:DiagnoseTask",
        "arms:DisableAlertTemplate",
        "arms:DisableDeliverTask",
        "arms:DoConvergeAction",
        "arms:DoInsightsAction",
        "arms:EmailVerifyLink",
        "arms:EnableAlertTemplate",
        "arms:EnableDeliverTask",
        "arms:EnableGraphResource",
        "arms:EnableServiceAccessForPrometheus",
        "arms:ExportAlertTemplates",
        "arms:ExportPrometheusRules",
        "arms:GeneralQuery",
        "arms:GetATPAccessURL",
        "arms:GetActionForward",
        "arms:GetAgentDownloadUrl",
        "arms:GetAgentInfo",
        "arms:GetAgentInfoByPage",
        "arms:GetAgentUpgradeInfo",
        "arms:GetAlarmHistories",
        "arms:GetAlert",
        "arms:GetAlertRulesByPage",
        "arms:GetAlertsCommercialStatus",
        "arms:GetAppApiPageInfo",
        "arms:GetAppCenterComponent",
        "arms:GetAppJVMConfig",
        "arms:GetAppList",
        "arms:GetAppLogStoreCorrelation",
        "arms:GetApplication",
        "arms:GetArmsInfo",
        "arms:GetAssumeRoleCredentials",
        "arms:GetBubbleUpBrief",
        "arms:GetBubbleUpReport",
        "arms:GetChanelLink",
        "arms:GetChannelLink",
        "arms:GetCloudEnvironmentId",
        "arms:GetCloudMonitorInstallStatus",
        "arms:GetCloudMonitorMetric",
        "arms:GetCloudMonitorThumbnail",
        "arms:GetCloudProductHealthCheckSetting",
        "arms:GetCloudProductHealthStatus",
        "arms:GetClusterInfo",
        "arms:GetClusterState",
        "arms:GetCmsInstallStatus",
        "arms:GetCmsMetric",
        "arms:GetCmsPurchaseStatus",
        "arms:GetCmsThumbnail",
        "arms:GetCommercialConfig",
        "arms:GetCommercialStatus",
        "arms:GetCommercialStatusV2",
        "arms:GetConsistencySnapshot",
        "arms:GetConsoleBaseInfo",
        "arms:GetContactScheduleDetail",
        "arms:GetConvergeConfig",
        "arms:GetCurrentEnv",
        "arms:GetDasEvents",
        "arms:GetDashboardList",
        "arms:GetData",
        "arms:GetDeliverTargetDetail",
        "arms:GetDeliverTask",
        "arms:GetDirectInstallStatus",
        "arms:GetDirectMetric",
        "arms:GetDirectThumbnail",
        "arms:GetEscalationDetail",
        "arms:GetEscalationDispatch",
        "arms:GetEvent",
        "arms:GetExceptionMetadata",
        "arms:GetExporterListByIntegration",
        "arms:GetGlobalViewUrl",
        "arms:GetGrafanaDatasource",
        "arms:GetGraphResourceStatus",
        "arms:GetHeapDumpList",
        "arms:GetImmediateSyntheticTask",
        "arms:GetInnerCallChain",
        "arms:GetIntegrationCluster",
        "arms:GetIntegrationInfo",
        "arms:GetIntegrationState",
        "arms:GetIntegrationToken",
        "arms:GetJaegerServiceOperations",
        "arms:GetJaegerServices",
        "arms:GetJaegerTrace",
        "arms:GetJavaAgentDownloadUrl",
        "arms:GetLokiCluster",
        "arms:GetMetricDatas",
        "arms:GetMetricQuantity",
        "arms:GetMetricStatistics",
        "arms:GetModuleConfig",
        "arms:GetMultipleTrace",
        "arms:GetOTTraceBriefInfos",
        "arms:GetOTTraceCallstack",
        "arms:GetOTTraceCallstackOverview",
        "arms:GetOTTraceDetails",
        "arms:GetOldPrometheusRuleCount",
        "arms:GetOnCallSchedulesDetail",
        "arms:GetPodAnnotation",
        "arms:GetProfilingData",
        "arms:GetPromUrl",
        "arms:GetPromUserPref",
        "arms:GetPrometheusAgentInfoAll",
        "arms:GetPrometheusApiToken",
        "arms:GetPrometheusRemoteWrite",
        "arms:GetProxiedContent",
        "arms:GetPubInfo",
        "arms:GetRAMStatus",
        "arms:GetRemoteUrl",
        "arms:GetRepSize",
        "arms:GetResourceConsumptionDashboardUrl",
        "arms:GetRetcodeDataByQuery",
        "arms:GetRetcodeDatas",
        "arms:GetRetcodeLogstore",
        "arms:GetRetcodeShareUrl",
        "arms:GetRumExceptionStack",
        "arms:GetRumGroups",
        "arms:GetRumOcuStatisticData",
        "arms:GetRumUploadFilePolicyStatus",
        "arms:GetRumUploadFiles",
        "arms:GetSLSStatus",
        "arms:GetServices",
        "arms:GetSlsProjectInfo",
        "arms:GetSourceMapInfo",
        "arms:GetSpanNames",
        "arms:GetSqlMetadata",
        "arms:GetStack",
        "arms:GetStsCreDential",
        "arms:GetSupportEnv",
        "arms:GetSyntheticCommercialDetailAndUsageEstimate",
        "arms:GetSyntheticCommercialStatus",
        "arms:GetSyntheticGrafanaDashboardUrl",
        "arms:GetSyntheticMonitors",
        "arms:GetSyntheticPrometheusCluster",
        "arms:GetSyntheticTaskDetail",
        "arms:GetSyntheticTaskList",
        "arms:GetTProfInteractionSnapshot",
        "arms:GetTagKey",
        "arms:GetTagResourceSystemTags",
        "arms:GetTagVal",
        "arms:GetThumbnailUrlListByIntegration",
        "arms:GetToCheckArmsDefaultSLR",
        "arms:GetTrace",
        "arms:GetTraceAggr",
        "arms:GetTraceAppConfigTemplate",
        "arms:GetTraceApps",
        "arms:GetTraceChain",
        "arms:GetTraceExplorerStatus",
        "arms:GetTraceGroupBy",
        "arms:GetTraceInfoList",
        "arms:GetTraceRegions",
        "arms:GetTraces",
        "arms:GetUserArmsPromClusterList",
        "arms:GetUserDatasourceConfig4Sls",
        "arms:GetUserInfo",
        "arms:GetUserList",
        "arms:GetUserWhiteListStatus",
        "arms:HealthCheck",
        "arms:HighPriorityAlertClearRatio",
        "arms:ImportAlertTemplates",
        "arms:InitCloudProductHealthInspectionTasks",
        "arms:InitTraceResource",
        "arms:InnerDeleteContactGroup",
        "arms:InnerDeleteIMRobot",
        "arms:InnerDispatchContactOptions",
        "arms:InnerDispatchDetail",
        "arms:InnerDispatchRuleCreate",
        "arms:InnerFetchContactByArmsContactId",
        "arms:InnerFetchContactGroupByArmsContactGroupId",
        "arms:InnerGetUserTTSReissue",
        "arms:InnerNotifyObjectContactList",
        "arms:InnerUpdateAlertContact",
        "arms:InnerUpdateAlertContactInformation",
        "arms:InnerUpdateAlertWebhook",
        "arms:InnerUpdateContactGroup",
        "arms:InnerUpdateDispatch",
        "arms:InnerUpdateIMRobot",
        "arms:InnerUpdateTTSReissue",
        "arms:InsertConfig",
        "arms:InsightsCreateInspectJob",
        "arms:InsightsFeedbackJobReport",
        "arms:InsightsGetInspectJobReport",
        "arms:InsightsStopInspectJob",
        "arms:InstallCloudMonitorProduct",
        "arms:InstallCmsExporter",
        "arms:InstallEventer",
        "arms:InstallExporterByIntegration",
        "arms:InstallMysqlExporter",
        "arms:InvokeCenterPop",
        "arms:InvokeRulerManager",
        "arms:KeepAllCommercialTrace",
        "arms:ListActivatedAlerts",
        "arms:ListAlertContact",
        "arms:ListAlertContactGroup",
        "arms:ListAlertContactGroupOption",
        "arms:ListAlertEvents",
        "arms:ListAlertTemplates",
        "arms:ListAlertWebhookContact",
        "arms:ListAllAlertContact",
        "arms:ListAllIMRobot",
        "arms:ListApplicationInstance",
        "arms:ListCloudMonitorCluster",
        "arms:ListCloudMonitorClusterMetric",
        "arms:ListCloudMonitorClusterProduct",
        "arms:ListCloudMonitorClusterThumbnail",
        "arms:ListCloudMonitorMigrateProduct",
        "arms:ListCluster",
        "arms:ListClusterApmWorkload",
        "arms:ListClusterFromGrafana",
        "arms:ListContactSchedule",
        "arms:ListDashBoardsByIntegrationType",
        "arms:ListDashboardsByName",
        "arms:ListDeliverTask",
        "arms:ListDispatchRule",
        "arms:ListEntityDashboard",
        "arms:ListEntityForPage",
        "arms:ListEntityTypeAndCount",
        "arms:ListEnvironmentResources",
        "arms:ListEventBridgeIntegrations",
        "arms:ListExporterMetrics",
        "arms:ListFeatureFlags",
        "arms:ListGrafanaInstance",
        "arms:ListGrafarmsDashboard",
        "arms:ListIMRobot",
        "arms:ListImmediateSyntheticTasks",
        "arms:ListIntegration",
        "arms:ListLLMSessions",
        "arms:ListLLMTraces",
        "arms:ListMetricLabelValues",
        "arms:ListMetricNames",
        "arms:ListMetrics",
        "arms:ListNotInstallCluster",
        "arms:ListPromAlertCluster",
        "arms:ListPromCluster",
        "arms:ListPromClusters",
        "arms:ListPromFrontVars",
        "arms:ListPrometheusAlertMetrics",
        "arms:ListPrometheusAlertTemplates",
        "arms:ListPrometheusDeliverCluster",
        "arms:ListPrometheusGlobalView",
        "arms:ListPrometheusInstance",
        "arms:ListPrometheusInstances",
        "arms:ListPrometheusRemoteWrites",
        "arms:ListRaspApps",
        "arms:ListResource",
        "arms:ListScenario",
        "arms:ListServerlessTopNApps",
        "arms:ListSyntheticCloudProduct",
        "arms:ListSyntheticDetail",
        "arms:ListSyntheticMonitorGroups",
        "arms:ListSyntheticTags",
        "arms:ListUserLogProjects",
        "arms:ListUserLogSavedSearches",
        "arms:ListUserLogstoreIndexes",
        "arms:ListUserLogstores",
        "arms:ListVpcClusterPage",
        "arms:ListVpcSecurityGroupIds",
        "arms:OpenArmsDefaultSLR",
        "arms:OpenArmsService",
        "arms:OpenArmsServiceSecondVersion",
        "arms:OpenVCluster",
        "arms:OpenXtraceDefaultSLR",
        "arms:PreviewContactSchedule",
        "arms:QueryAPMMetrics",
        "arms:QueryAhasMachineMetric",
        "arms:QueryAppMetadata",
        "arms:QueryAuditLogs",
        "arms:QueryCMonitorAgentInfo",
        "arms:QueryCommercialFeeData",
        "arms:QueryCommercialResourcePackage",
        "arms:QueryCommercialUsage",
        "arms:QueryCommercialUsageLimit",
        "arms:QueryConfig",
        "arms:QueryDataSet",
        "arms:QueryEvents",
        "arms:QueryHotSpotData",
        "arms:QueryLLMSessionDetail",
        "arms:QueryLLMTraceDetail",
        "arms:QueryMetric",
        "arms:QueryMetricByPage",
        "arms:QueryProductConfig",
        "arms:QueryProfilingData",
        "arms:QueryProfilingWhitelist",
        "arms:QueryPromInstallStatus",
        "arms:QueryPrometheusFeeData",
        "arms:QueryReleaseMetric",
        "arms:QueryServiceDetailConsoleInfo",
        "arms:QuerySyntheticAlertEventCount",
        "arms:QuerySyntheticMetricData",
        "arms:QueryTopology",
        "arms:QueryTraces",
        "arms:RefreshDashboardCluster",
        "arms:RegisterCloudProduct",
        "arms:ReinstallFlinkCluster",
        "arms:RemoveSourcesFromPrometheusGlobalView",
        "arms:ReportAgentDaemonStatus",
        "arms:ReportEvent",
        "arms:ReportJavaAttachStatus",
        "arms:ResetConvergeConfig",
        "arms:RestartPrometheusAgent",
        "arms:SaveAlert",
        "arms:SaveAlertTemplate",
        "arms:SaveCommercialFeeChange",
        "arms:SaveCommercialUsageLimit",
        "arms:SaveContactGroup",
        "arms:SaveContactMember",
        "arms:SaveDataset",
        "arms:SaveInteractiveDashboard",
        "arms:SaveModuleConfig",
        "arms:SaveProductConfig",
        "arms:SaveSatelliteConfig",
        "arms:SaveSyntheticMonitorGroup",
        "arms:SaveTraceAppUserMethod",
        "arms:SaveXTraceConfig",
        "arms:SearchAlarmHistories",
        "arms:SearchAlertContact",
        "arms:SearchAlertContactGroup",
        "arms:SearchAlertHistories",
        "arms:SearchAlertRuleTemplate",
        "arms:SearchAlertRules",
        "arms:SearchContact",
        "arms:SearchContactGroup",
        "arms:SearchEvents",
        "arms:SearchRetcodeAppByPage",
        "arms:SearchTagNames",
        "arms:SearchTagValues",
        "arms:SearchTraces",
        "arms:SearchTracesByPage",
        "arms:SendCustomIncidents",
        "arms:SendMseIncident",
        "arms:SetPromUserPref",
        "arms:ShowGlobalView",
        "arms:ShowGlobalViewWithCustomAuthorization",
        "arms:ShowGlobalViewWithSubAccountInResourceDirectory",
        "arms:StartAllCommercialRetcode",
        "arms:StatisticsSyntheticUsage",
        "arms:StopAllCommercialRetcode",
        "arms:SyncRecordingRules",
        "arms:TurnOnSecondSwitch",
        "arms:UnBlockAlarmNotification",
        "arms:UnInstallExporterByIntegration",
        "arms:UnInstallGlobalView",
        "arms:UninstallCloudMonitorCluster",
        "arms:UninstallCloudMonitorProduct",
        "arms:UpdateAlertContact",
        "arms:UpdateAlertContactGroup",
        "arms:UpdateAlertTemplate",
        "arms:UpdateAlertsCommercialLimit",
        "arms:UpdateAppConvergeConfig",
        "arms:UpdateCloudMonitorCluster",
        "arms:UpdateCloudProductHealthCheckSetting",
        "arms:UpdateCmsProduct",
        "arms:UpdateCommercialConfig",
        "arms:UpdateConfig",
        "arms:UpdateContact",
        "arms:UpdateContactGroup",
        "arms:UpdateContactMember",
        "arms:UpdateContactSchedule",
        "arms:UpdateDispatchRule",
        "arms:UpdateEscalation",
        "arms:UpdateEscalationPolicy",
        "arms:UpdateGrafanaInstance",
        "arms:UpdateIncidentWorkFlow",
        "arms:UpdateIntegration",
        "arms:UpdateInteractiveDashboard",
        "arms:UpdateNotificationPolicy",
        "arms:UpdateOnCallSchedule",
        "arms:UpdatePrometheusAgentSize",
        "arms:UpdateRumUploadFilePolicy",
        "arms:UpdateShareLink",
        "arms:UpdateShareStatus",
        "arms:UpdateSourceMap",
        "arms:UpdateTraceAppTags",
        "arms:UpdateTraceAppUserMethod",
        "arms:UpdateTraceEndpoint",
        "arms:UpdateWebhook",
        "arms:UpgradeOldXTraceAppLabelsToNewTags",
        "arms:UpgradeXTrace",
        "arms:UpsertRumMetadata",
        "arms:UseHighPriorityAlert"
      ],
      "Resource": "*"
    }
  ]
}
    Important

    A RAM user or RAM role granted account-level permissions can operate on all relevant resources within the entire account. Ensure that the granted permissions align with your expectations. Follow the Principle of Least Privilege (PoLP) when assigning permissions.

    FAQ

    How do I view the resource group to which a resource belongs?

    • Method 1: Click the resource name to go to its details page. You can then view the resource group of the resource.

    • Method 2: Log on to the Resource Management console. Click Resource Center > Resource Search. In the left navigation pane, select the account to which the target resource belongs. The default is Current Account. Use the filter conditions to locate the target resource and view its resource group.

    How do I view all resources of a product in a specific resource group?

    • Method 1: Log on to the Resource Management console. Click Resource Center > Resource Search. In the left navigation pane, under the account that owns the resource (the default is Current Account), click the name of the target resource group. Then, in the Select Resource Type section on the right, select the product to view all of its resources in that resource group.

    • Method 2: Log on to the Resource Management console. Click Resource Groups > Resource Groups. Find the target resource group and click Resource Management in the Actions column. On the Resource Management page, select the product from the Product drop-down list to view all of its resources in that resource group.

    How do I change the resource group for multiple resources in a batch?

    Log on to the Resource Management console. Click Resource Groups > Resource Groups. In the Actions column for the target resource group, click Resource Management to go to the resource management page. Use the filter conditions to locate the target resources. Select the check boxes in the first column for the resources, and then click Move Resource Group at the bottom. Follow the on-screen instructions to complete the change.