In the RAM console, you can authorize RAM users to call the following operations on an ApsaraDB for MongoDB resource.

API operation API operation
CreateDBInstance ModifyDBInstanceSpec
DeleteDBInstance RenewDBInstance
CreateShardingDBInstance DeleteNode
ModifyNodeSpec CreateNode
RestartDBInstance ModifyDBInstanceMaintainTime
ModifyDBInstanceDescription DescribeDBInstanceAttribute
DescribeReplicaSetRole DescribeShardingNetworkAddress
ModifyDBInstanceNetworkType ModifyDBInstanceNetExpireTime
DescribeAccounts ResetAccountPassword
DescribeSecurityIps ModifySecurityIps
DescribeAuditRecords DescribeAuditFiles
DescribeBackupPolicy ModifyBackupPolicy
CreateBackup DescribeBackups
RestoreDBInstance DescribeDBInstancePerformance
DescribeDBInstances -

For the DescribeDBInstances operation, you must grant the permissions to call the operation on all instances. No authentication is required for the DescribeRegions operation.