All Products
Search
Document Center

Resource Access Management:AliyunCloudMonitorReadOnlyBasicAccess

Last Updated:Jan 30, 2026

AliyunCloudMonitorReadOnlyBasicAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunCloudMonitorReadOnlyBasicAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunCloudMonitorReadOnlyBasicAccess policy: Provides read-only basic access to Cloud Monitor via Management Console.

Policy details

  • Type: service system policy

  • Creation time: 14:39:24 on February 06, 2024

  • Update time: 01:44:26 on January 30, 2026

  • Current version: v4

Policy content

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "cms:Get*",
        "cms:List*",
        "cms:Query*",
        "cms:BatchQuery*",
        "cms:Describe*",
        "cms:Cursor",
        "cms:BatchGet",
        "cms:BatchExport",
        "cms:Check*"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Effect": "Allow",
      "Action": [
        "arms:Describe",
        "arms:GetCommercialStatusV2",
        "arms:ListAddons",
        "arms:ListGrafanaInstance",
        "arms:QueryMetric",
        "arms:GetOldPrometheusRuleCount",
        "arms:ListPromAlertCluster",
        "arms:GetSupport*",
        "arms:GetIntegration*",
        "arms:GetConsoleBaseInfo",
        "arms:ListTagResources",
        "arms:TagResources"
      ],
      "Resource": "*"
    },
    {
      "Action": [
        "log:GetLogStoreLogs",
        "log:QueryPrometheusMetrics",
        "log:QueryMetrics"
      ],
      "Resource": [
          "acs:log:*:*:project/*/logstore/aliyun-prom-*",
          "acs:log:*:*:project/*/storeview/aliyun_prom_*"
      ],
      "Effect": "Allow"
    }
  ]
}

References