All Products
Search
Document Center

DataHub:RAM user permission templates

Last Updated:Mar 12, 2026

Authorization policy

For more information about the authorization policies of DataHub, see Access control.

Template

The following template defines that authorized RAM users can obtain all permissions on only the test_ss project:

{
  "Statement": [
    {
      "Action": [
        "dhs:ListProject"
      ],
      "Effect": "Allow",
      "Resource": "acs:dhs:*:*:projects/*"
    },
    {
      "Action": [
        "dhs:GetProject"
      ],
      "Effect": "Allow",
      "Resource": "acs:dhs:*:*:projects/test_ss"
    },
    {
      "Action": [
        "dhs:*Topic",
        "dhs:*Shard",
        "dhs:*Subscription",
        "dhs:*Connector",
        "dhs:*Records"
      ],
      "Effect": "Allow",
      "Resource": "acs:dhs:*:*:projects/test_ss/topics/*"
    }
  ],
  "Version": "1"
}