Cloud Monitor:Grant permissions to a RAM user

Procedure

1. Log on to the RAM console as a RAM administrator.

2. In the left-side navigation pane, choose Identities > Users.

3. On the Users page, find the required RAM user, and click Add Permissions in the Actions column.

   

   You can also select multiple RAM users and click Add Permissions in the lower part of the page to grant permissions to the RAM users at a time.

4. In the Grant Permission panel, grant permissions to the RAM user.

   1. Set the Resource Scope parameter to Account.

      Note

      You can grant permissions on Cloud Monitor to an Alibaba Cloud account but not a resource group.

   2. Configure the Principal parameter.

      The principal is the RAM user to which you want to grant permissions. The current RAM user is automatically selected.

   3. Select a policy.

      • System Policy: the system policies. To specify system policies, select the required policies in the Policy Name column.

        Policy	Description
        AliyunCloudMonitorFullAccess	The permissions to manage CloudMonitor.
        AliyunCloudMonitorReadOnlyAccess	The read-only permissions on Cloud Monitor.

      • Custom Policy: the custom policies. To specify custom policies, select the required policies in the Policy Name column.

        For more information about how to create a custom policy, see Create a custom policy.

        For example, you can grant the RAM user the permissions to export monitoring data. The following sample code provides an example:

        {
          "Version": "1",
          "Statement": [
            {
              "Effect": "Allow",
              "Action": [
                "cms:BatchGet",
                "cms:Cursor"
              ],
              "Resource": [
                "*"
              ],
              "Condition": {}
            }
          ]
        }

5. Click Grant permissions.

6. Click Close.