AliyunAgentLoopReadOnlyAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunAgentLoopReadOnlyAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunAgentLoopReadOnlyAccess policy: Provides read-only access to AgentLoop via Management Console.
Policy details
Type: service system policy
Creation time: 18:00:04 on June 11, 2026
Update time: 10:13:08 on July 07, 2026
Current version: v2
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"agentloop:Get*",
"agentloop:List*",
"agentloop:Describe*",
"agentloop:Search*",
"agentloop:ExecuteQuery"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"log:GetLogStoreLogs",
"log:GetLogStoreHistogram",
"log:GetIndex",
"log:GetLogStore",
"log:ListLogStores",
"log:GetProject",
"log:ListProject"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"airegistry:ListNamespaces",
"airegistry:ListNamespaceBySource",
"airegistry:GetNamespace",
"airegistry:GetPrompt",
"airegistry:ListPrompts",
"airegistry:ListPromptVersions",
"airegistry:GetPromptVersion",
"airegistry:GetPromptVersionDetail",
"airegistry:GetPromptGovernance",
"airegistry:GetSkillDetail",
"airegistry:GetSkillVersionDetail",
"airegistry:DownloadSkillVersion",
"airegistry:DownloadSkillVersionViaOss",
"airegistry:ListSkills"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"cms:ListWorkspaces",
"cms:GetWorkspace",
"cms:GetEntityStoreData",
"cms:GetServiceObservability",
"cms:DescribeIntranetRegions",
"cms:DescribeVpcForIntranetSynthetic",
"cms:DescribeVswitchForIntranetSynthetic",
"cms:DescribeSecurityGroupForIntranetSynthetic",
"cms:ListServices",
"cms:GetUmodelCommonSchemaRef",
"cms:ListAddons",
"cms:GetAddon",
"cms:GetAddonSchema",
"cms:GetAddonCodeTemplate",
"cms:GetAddonMetrics",
"cms:GetAddonAlertTemplates",
"cms:GetPrometheusUserSetting",
"cms:GetCmsService",
"cms:ListIntegrationPolicies",
"cms:GetIntegrationPolicy",
"cms:GetAddonRelease",
"cms:ListAddonReleases",
"cms:ListIntegrationPolicyAddons",
"cms:ListIntegrationPolicyDashboards",
"cms:GetPrometheusInstance",
"cms:ListPrometheusInstances",
"cms:GetCloudResource",
"cms:GetCloudResourceData",
"cms:GetRumInstance",
"cms:DescribeEnvironmentFeature"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"resourcecenter:GetResourceCenterServiceStatus"
],
"Resource": "*",
"Effect": "Allow"
}
]
}