AliyunServiceRolePolicyForPAINextIDE is the authorization policy dedicated to a service-linked role. The policy is automatically attached to a service role when the service role is created. Then, the service-linked role is authorized to access other cloud services. This policy is updated by the relevant Alibaba Cloud service. Do not attach this policy to a RAM identity other than a service-linked role.
Policy details
Type: service system policy
Creation time: 22:16:49 on April 23, 2025
Update time: 22:16:49 on April 23, 2025
Current version: v1
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"odps:ActOnBehalfOfAnotherUser",
"odps:GetJobCount",
"odps:GetTableInfo",
"odps:GetFunctionInfo",
"odps:ListTablePartitions",
"odps:PreviewTable",
"odps:ListProjects",
"odps:CreateProject",
"odps:GetProject",
"odps:ListOutboundInternetAddress",
"odps:UpdateOutboundInternetAddress",
"odps:CreateRole",
"odps:UpdateRole",
"odps:UpdateUsersToAdmin",
"odps:UpdateUsersToSuperAdmin",
"odps:UpdateUsersToRole",
"odps:UpdateProjectStatus",
"odps:GetRoleAcl",
"odps:GetRoleAclOnObject",
"odps:GetRolePolicy",
"odps:ListResources",
"odps:ListRoles",
"odps:GetPackage",
"odps:CreatePackage",
"odps:ListPackages",
"odps:UpdatePackage",
"odps:ListUserPermissionsAsStringByProject",
"odps:ListUserPermissionsByProject",
"odps:ListUsersInfoByProject",
"odps:ListProjectUsers",
"odps:CreateSchema",
"odps:ListSchemas",
"odps:ListFunctions",
"odps:GetTrustedProjects",
"odps:GetAclAuthInfo",
"odps:CheckRamRole",
"odps:GetAsyncJobResult",
"odps:ListTables",
"odps:ListUsersByRole",
"odps:ListQuotaRoutingRules",
"odps:GetQuotaRoutingRule",
"odps:GetQuota",
"odps:ListQuotas",
"odps:ListQuotasPlans",
"odps:GetQuotaPlan",
"odps:GetQuotaSchedule",
"odps:ListUsers",
"odps:GetMetric",
"odps:GetQuotaUsage",
"odps:ListTopJobInfo",
"odps:ListJobInfos",
"odps:ListJobSnapshotInfos",
"odps:KillJobs",
"odps:GetJobResourceUsage",
"odps:GetRunningJobs",
"odps:GetJobSummaryByPreCompute",
"odps:GetJobLogView",
"odps:GetJobAnalyzeQuotaUsage",
"odps:GetJobAnalyzeQuotaDistribution",
"odps:GetJobInfo",
"odps:ListSimilarJobInfos",
"odps:ListJobMetric"
],
"Effect": "Allow",
"Resource": "*"
},
{
"Action": [
"stream:ActOnBehalfOfAnotherUser",
"stream:CreateDeployment",
"stream:StartJobWithParams",
"stream:ListDeployments",
"stream:GetDeployment",
"stream:GetJob",
"stream:StopJob",
"stream:DeleteDeployment"
],
"Effect": "Allow",
"Resource": "*"
},
{
"Action": "dlf-auth:ActOnBehalfOfAnotherUser",
"Effect": "Allow",
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"emr-serverless-spark:CreateSqlStatement",
"emr-serverless-spark:GetSqlStatement",
"emr-serverless-spark:TerminateSqlStatement",
"emr-serverless-spark:ListSessionClusters",
"emr-serverless-spark:CancelJobRun",
"emr-serverless-spark:ListJobRuns",
"emr-serverless-spark:GetJobRun",
"emr-serverless-spark:StartJobRun",
"emr-serverless-spark:AddMembers"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"adb:SubmitSparkApp",
"adb:GetSparkAppState",
"adb:GetSparkAppLog",
"adb:GetSparkAppWebUiAddress",
"adb:ListSparkApps",
"adb:GetSparkAppInfo",
"adb:KillSparkApp",
"adb:DescribeAdbMySqlTables",
"adb:getDatabaseObjectsByFilter",
"adb:getTable"
],
"Resource": "*"
},
{
"Action": [
"searchengine:GetInstance",
"searchengine:ListInstances",
"searchengine:GetTable",
"searchengine:ListTables"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "nextide.pai.aliyuncs.com"
}
}
}
]
}