All Products
Search
Document Center

Resource Management:ListPolicyAttachments

Last Updated:Dec 15, 2025

Queries policy attachment records.

Operation description

You can view the following information:

  • Policy attachment records within an Alibaba Cloud account or a resource group
  • Permission policies attached to RAM users, RAM user groups, or RAM roles
  • RAM users, RAM user groups, or RAM roles to which permission policies are attached within an Alibaba Cloud account or a resource group

Debugging

You can run this interface directly in OpenAPI Explorer, saving you the trouble of calculating signatures. After running successfully, OpenAPI Explorer can automatically generate SDK code samples.

Authorization information

There is currently no authorization information disclosed in the API.

Request parameters

ParameterTypeRequiredDescriptionExample
ResourceGroupIdstringNo

The ID of the resource group or the ID of the Alibaba Cloud account to which the resource group belongs. If you do not configure this parameter, the system lists all policy attachment records within the current account.

rg-001
PolicyTypestringNo

The type of the permission policy. If you do not configure this parameter, all types of policies are returned. Valid values:

  • Custom
  • System
System
PolicyNamestringNo

The name of the permission policy.

The name must be 1 to 128 characters in length and can contain letters, digits, and hyphen (-).

AdministratorAccess
PrincipalTypestringNo

The type of the object to which you want to attach the permission policy. If you do not configure this parameter, the system lists all types of objects. Valid values:

  • IMSUser: RAM user
  • IMSGroup: RAM user group
  • ServiceRole: RAM role
IMSUser
PrincipalNamestringNo

The name of the object to which you want to attach the permission policy.

alice@demo.onaliyun.com
PageNumberintegerNo

The page number.

Pages start from page 1. Default value: 1.

1
PageSizeintegerNo

The number of entries per page.

Valid values: 1 to 100. Default value: 10.

10
LanguagestringNo

The language in which you want to return the description of the system policy. Valid values:

  • en: English
  • zh-CN: Chinese
  • ja: Japanese
zh-CN

Response parameters

ParameterTypeDescriptionExample
object
PageNumberinteger

The page number.

1
PageSizeinteger

The number of entries per page.

10
PolicyAttachmentsarray<object>

The information about the permission policies.

PolicyAttachmentobject

The information about the permission policy.

AttachDatestring

The time when the permission policy is attached.

2015-01-23T12:33:18Z
Descriptionstring

The description of the permission policy.

The description of the policy.
PolicyNamestring

The name of the permission policy.

AdministratorAccess
PolicyTypestring

The type of the permission policy. Valid values:

  • Custom
  • System
System
PrincipalNamestring

The name of the object to which the permission policy is attached.

alice@demo.onaliyun.com
PrincipalTypestring

The type of the object to which the permission policy is attached. Valid values:

  • IMSUser: RAM user
  • IMSGroup: RAM user group
  • ServiceRole: RAM role
IMSUser
ResourceGroupIdstring

The ID of the resource group or the ID of the Alibaba Cloud account to which the resource group belongs.

rg-9gLOoK****
RequestIdstring

The request ID.

7B8A4E7D-6CFF-471D-84DF-195A7A241ECB
TotalCountinteger

The total number of entries returned.

2

Examples

Sample success responses

JSONformat

{
  "PageNumber": 1,
  "PageSize": 10,
  "PolicyAttachments": {
    "PolicyAttachment": [
      {
        "AttachDate": "2015-01-23T12:33:18Z",
        "Description": "The description of the policy.",
        "PolicyName": "AdministratorAccess",
        "PolicyType": "System",
        "PrincipalName": "alice@demo.onaliyun.com",
        "PrincipalType": "IMSUser",
        "ResourceGroupId": "rg-9gLOoK****"
      }
    ]
  },
  "RequestId": "7B8A4E7D-6CFF-471D-84DF-195A7A241ECB",
  "TotalCount": 2
}

Error codes

HTTP status codeError codeError messageDescription
400InvalidParameter.PolicyTypeThe specified policy type is invalid.The specified policy type is invalid.
404EntityNotExists.ResourceGroupThe specified resource group does not exist. You must first create a resource group.The specified resource group does not exist. You must first create a resource group.
404EntityNotExist.PolicyThe policy does not exist.The policy does not exist.

For a list of error codes, visit the Service error codes.

Change history

Change timeSummary of changesOperation
No change history