Supported RAM policy actions and resource types - Smart Access Gateway - Alibaba Cloud - Smart Access Gateway

Resource Access Management (RAM) is a service provided by Alibaba Cloud to manage user identities and resource access permissions. Using RAM helps you avoid sharing your Alibaba Cloud account keys with other users and allows you to grant users the least privilege access. RAM uses permission policies to define authorizations. This topic describes the general structure of a RAM policy, and the policy statement elements (Action, Resource, and Condition) defined by 智能接入网关 for RAM permission policies. The RAM code (RamCode) for 智能接入网关 is smartag , and the supported authorization granularity is 资源级 .

General structure of a policy

Permission policies support JSON format with the following general structure:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

The following list describes the fields in the policy:

Version: Specifies the policy version number. It is fixed at 1.
Statement:
- Effect: Specifies the authorization result. Valid values: Allow and Deny.
- Action: Specifies one or more operations that are allowed or denied.
- Resource: Specifies the specific objects affected by the operations. You can use Alibaba Cloud Resource Names (ARNs) to describe specific resources.
- Condition: Specifies the conditions for the authorization to take effect. This field is optional.
  - Condition operator: Specifies the conditional operators. Different types of conditions support different conditional operators.
  - Condition_key: Specifies the condition keys.
  - Condition_value: Specifies the condition values.

Action

The following table lists the actions defined by 智能接入网关. The table's columns are detailed below:

Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.
API: The API that you can call to perform the action.
Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.
Resource type: The type of the resource that support authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.
- For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding ARN in the Resource element of the policy.
- For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.
Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys that are applicable across all RAM-integrated services. For more information, see Common condition keys.
Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action	API	Access level	Resource type	Condition key	Dependent action
smartag:ModifySagRouteProtocolOspf	ModifySagRouteProtocolOspf	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:SynchronizeSmartAGWebConfig	SynchronizeSmartAGWebConfig		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:EnableSmartAGDpiMonitor	EnableSmartAGDpiMonitor	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySagWan	ModifySagWan	update	All resources. ``	None	None
smartag:UpdateSmartAccessGatewayWanSnat	UpdateSmartAccessGatewayWanSnat		All resources. ``	None	None
smartag:KickOutClients	KickOutClients		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySagWifi	ModifySagWifi		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagRouteList	DescribeSagRouteList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ListAccessPoints	ListAccessPoints	get	All resources. ``	None	None
smartag:ModifyCloudConnectNetwork	ModifyCloudConnectNetwork	update	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	None	None
smartag:DescribeHealthChecks	DescribeHealthChecks	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagStaticRouteList	DescribeSagStaticRouteList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySagHa	ModifySagHa	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeHealthCheckAttribute	DescribeHealthCheckAttribute	get	All resources. ``	None	None
smartag:GrantSagInstanceToVbr	GrantSagInstanceToVbr		All resources. ``	None	None
smartag:ModifySagPortRouteProtocol	ModifySagPortRouteProtocol		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagGlobalRouteProtocol	DescribeSagGlobalRouteProtocol	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UpdateSmartAccessGatewayDnsForward	UpdateSmartAccessGatewayDnsForward		All resources. ``	None	None
smartag:ClearSagCipher	ClearSagCipher		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifyDeviceAutoUpgradePolicy	ModifyDeviceAutoUpgradePolicy	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateServiceAddress	CreateServiceAddress		All resources. ``	None	None
smartag:DescribeSagRemoteAccess	DescribeSagRemoteAccess	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DisableSmartAccessGatewayUser	DisableSmartAccessGatewayUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteServiceAddress	DeleteServiceAddress		All resources. ``	None	None
smartag:DescribeDnatEntries	DescribeDnatEntries	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:AttachCcnInstanceToCen	AttachCcnInstanceToCen	none	All resources. ``	None	None
smartag:DescribeUserOnlineClients	DescribeUserOnlineClients	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifyRouteDistributionStrategy	ModifyRouteDistributionStrategy	update	All resources. ``	None	None
smartag:ModifyACL	ModifyACL	update	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	None	None
smartag:UpdateSmartAGDpiAttribute	UpdateSmartAGDpiAttribute	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:AssociateSmartAGWithApplicationBandwidthPackage	AssociateSmartAGWithApplicationBandwidthPackage		All resources. ``	None	None
smartag:DescribeSagVbrRelations	DescribeSagVbrRelations	get	All resources. ``	None	None
smartag:AddACLRule	AddACLRule	create	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	None	None
smartag:GetCloudConnectNetworkUseLimit	GetCloudConnectNetworkUseLimit	get	All resources. ``	None	None
smartag:UpdateSmartAccessGatewayBgpRoute	UpdateSmartAccessGatewayBgpRoute		All resources. ``	None	None
smartag:ModifySagPortRole	ModifySagPortRole		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:AssociateACL	AssociateACL	create	Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateQos	CreateQos	create	Qos `acs:smartag:{#regionId}:{#accountId}:qos/`	None	None
smartag:DiscribeSmartAccessGatewayDiagnosisReport	DiscribeSmartAccessGatewayDiagnosisReport	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:BindSerialNumber	BindSerialNumber	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DissociateSmartAGFromApplicationBandwidthPackage	DissociateSmartAGFromApplicationBandwidthPackage		All resources. ``	None	None
smartag:DetachCcnInstanceFromCen	DetachCcnInstanceFromCen	none	All resources. ``	None	None
smartag:ModifyACLRule	ModifyACLRule	update	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	None	None
smartag:DeactiveFlowLog	DeactiveFlowLog		*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#flowlogId}`	None	None
smartag:CreateSmartAccessGateway	CreateSmartAccessGateway	create	SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/`	None	None
smartag:UnbindVbr	UnbindVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DowngradeSmartAccessGateway	DowngradeSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteFlowLog	DeleteFlowLog	delete	*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	None	None
smartag:DescribeDeviceAutoUpgradePolicy	DescribeDeviceAutoUpgradePolicy	get	All resources. ``	None	None
smartag:UnlockSmartAccessGateway	UnlockSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteHealthCheck	DeleteHealthCheck	delete	All resources. ``	None	None
smartag:CreateQosPolicy	CreateQosPolicy	create	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:ModifySagExpressConnectInterface	ModifySagExpressConnectInterface	update	All resources. ``	None	None
smartag:ViewSmartAccessGatewayBgpRoute	ViewSmartAccessGatewayBgpRoute	get	All resources. ``	None	None
smartag:DescribeSmartAccessGatewayAttribute	DescribeSmartAccessGatewayAttribute	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteSnatEntry	DeleteSnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifyClientUserDNS	ModifyClientUserDNS	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeACLs	DescribeACLs	get	All resources. ``	None	None
smartag:ViewSmartAccessGatewayDnsForwards	ViewSmartAccessGatewayDnsForwards	get	All resources. ``	None	None
smartag:DescribeSagManagementPort	DescribeSagManagementPort	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateHealthCheck	CreateHealthCheck	create	All resources. ``	None	None
smartag:DisableSmartAGDpiMonitor	DisableSmartAGDpiMonitor	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteCloudConnectNetwork	DeleteCloudConnectNetwork	delete	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	None	None
smartag:ModifySagRouteProtocolBgp	ModifySagRouteProtocolBgp	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UpdateSmartAccessGatewayPortRouteProtocol	UpdateSmartAccessGatewayPortRouteProtocol		All resources. ``	None	None
smartag:UpdateSmartAccessGatewayVersion	UpdateSmartAccessGatewayVersion	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSAGDeviceInfo	DescribeSAGDeviceInfo	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySmartAccessGatewayUpBandwidth	ModifySmartAccessGatewayUpBandwidth	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySagStaticRoute	ModifySagStaticRoute	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagWifi	DescribeSagWifi	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ProbeAccessPointNetworkQuality	ProbeAccessPointNetworkQuality		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:RevokeInstanceFromCbn	RevokeInstanceFromCbn		*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}`	None	None
smartag:DeleteSmartAccessGatewayDnsForward	DeleteSmartAccessGatewayDnsForward		All resources. ``	None	None
smartag:CreateCloudConnectNetwork	CreateCloudConnectNetwork	create	CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/`	None	None
smartag:ModifyFlowLogAttribute	ModifyFlowLogAttribute	update	All resources. ``	None	None
smartag:AddDnatEntry	AddDnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:AddSmartAccessGatewayDnsForward	AddSmartAccessGatewayDnsForward		All resources. ``	None	None
smartag:ActivateSmartAccessGateway	ActivateSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DisassociateACL	DisassociateACL	delete	All resources. ``	None	None
smartag:DescribeSmartAccessGatewayVersions	DescribeSmartAccessGatewayVersions	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySagWanSnat	ModifySagWanSnat		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ViewSmartAccessGatewayPortRouteProtocol	ViewSmartAccessGatewayPortRouteProtocol	get	All resources. ``	None	None
smartag:DisassociateQos	DisassociateQos	update	Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySagGlobalRouteProtocol	ModifySagGlobalRouteProtocol		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ResetSmartAccessGatewayClientUserPassword	ResetSmartAccessGatewayClientUserPassword		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:GetAclAttribute	GetAclAttribute	get	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	None	None
smartag:ListEnterpriseCode	ListEnterpriseCode	list	EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/`	None	None
smartag:DescribeSagHa	DescribeSagHa	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateFlowLog	CreateFlowLog	create	FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/`	None	None
smartag:UpdateSmartAGUserAccelerateConfig	UpdateSmartAGUserAccelerateConfig		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:BindSmartAccessGateway	BindSmartAccessGateway		*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	None	None
smartag:DescribeFlowLogSags	DescribeFlowLogSags	get	*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	None	None
smartag:CreateSagExpressConnectInterface	CreateSagExpressConnectInterface	create	All resources. ``	None	None
smartag:ViewSmartAccessGatewayGlobalRouteProtocol	ViewSmartAccessGatewayGlobalRouteProtocol	get	All resources. ``	None	None
smartag:DescribeSagPortList	DescribeSagPortList	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagTrafficTopN	DescribeSagTrafficTopN	get	All resources. ``	None	None
smartag:GetQosAttribute	GetQosAttribute	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:DescribeRouteDistributionStrategies	DescribeRouteDistributionStrategies	get	All resources. ``	None	None
smartag:DescribeQosCars	DescribeQosCars	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:DescribeSagWanSnat	DescribeSagWanSnat	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeBindableSmartAccessGateways	DescribeBindableSmartAccessGateways	get	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSmartAccessGatewayHa	DescribeSmartAccessGatewayHa	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UpdateEnterpriseCode	UpdateEnterpriseCode	update	*EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode}`	None	None
smartag:UpgradeSmartAccessGateway	UpgradeSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DisassociateFlowLog	DisassociateFlowLog		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:AssociateFlowLog	AssociateFlowLog		SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}` FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	None	None
smartag:RevokeSagInstanceFromCcn	RevokeSagInstanceFromCcn		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySagUserDns	ModifySagUserDns		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySAGAdminPassword	ModifySAGAdminPassword		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteProbeTask	DeleteProbeTask		*ProbeTask `acs:smartag:{#regionId}:{#accountId}:probetask/{#ProbeTaskId}`	None	None
smartag:ModifyQos	ModifyQos	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:DescribeSagExpressConnectInterfaceList	DescribeSagExpressConnectInterfaceList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:RoamClientUser	RoamClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateSmartAccessGatewayClientUser	CreateSmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:RebootSmartAccessGateway	RebootSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UnbindSmartAccessGateway	UnbindSmartAccessGateway		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySagLan	ModifySagLan		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateEnterpriseCode	CreateEnterpriseCode	create	EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/`	None	None
smartag:DiagnoseSmartAccessGateway	DiagnoseSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeGrantSagVbrRules	DescribeGrantSagVbrRules	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeGrantRules	DescribeGrantRules	get	All resources. ``	None	None
smartag:UpdateSmartAccessGatewayDns	UpdateSmartAccessGatewayDns		All resources. ``	None	None
smartag:ViewSmartAccessGatewayWanSnat	ViewSmartAccessGatewayWanSnat	get	All resources. ``	None	None
smartag:ListProbeTask	ListProbeTask	list	All resources. ``	None	None
smartag:DescribeSmartAccessGatewayClientUsers	DescribeSmartAccessGatewayClientUsers	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:GetSmartAGDpiAttribute	GetSmartAGDpiAttribute	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeCloudConnectNetworks	DescribeCloudConnectNetworks	get	All resources. ``	None	None
smartag:DescribeSagRouteProtocolBgp	DescribeSagRouteProtocolBgp	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateQosCar	CreateQosCar	create	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:DescribeGrantSagRules	DescribeGrantSagRules	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:RevokeInstanceFromVbr	RevokeInstanceFromVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:MoveResourceGroup	MoveResourceGroup		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagRouteProtocolOspf	DescribeSagRouteProtocolOspf	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:EnableSmartAccessGatewayUser	EnableSmartAccessGatewayUser	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateACL	CreateACL	create	Acl `acs:smartag:{#regionId}:{#accountId}:acl/`	None	None
smartag:ModifyQosPolicy	ModifyQosPolicy	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:DeleteQosCar	DeleteQosCar	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:DowngradeSmartAccessGatewaySoftware	DowngradeSmartAccessGatewaySoftware		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagWanList	DescribeSagWanList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeQosPolicies	DescribeQosPolicies	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:AddSnatEntry	AddSnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteSmartAccessGateway	DeleteSmartAccessGateway	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteSmartAccessGatewayClientUser	DeleteSmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeACLAttribute	DescribeACLAttribute	get	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	None	None
smartag:DeleteSagExpressConnectInterface	DeleteSagExpressConnectInterface	delete	All resources. ``	None	None
smartag:UnbindSerialNumber	UnbindSerialNumber		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:CreateSmartAccessGatewaySoftware	CreateSmartAccessGatewaySoftware	create	All resources. ``	None	None
smartag:DescribeClientUserDNS	DescribeClientUserDNS	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagPortRouteProtocolList	DescribeSagPortRouteProtocolList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeFlowLogs	DescribeFlowLogs	get	FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/` FlowLog `acs:smartag::{#accountId}:flowlog/*`	None	None
smartag:ActiveFlowLog	ActiveFlowLog		*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#flowlogId}`	None	None
smartag:DescribeQoses	DescribeQoses	get	Qos `acs:smartag::{#accountId}:qos/` Qos `acs:smartag::{#accountId}:qos/` Qos `acs:smartag::{#accountId}:qos/*`	None	None
smartag:DeleteSagStaticRoute	DeleteSagStaticRoute	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteACLRule	DeleteACLRule	delete	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	None	None
smartag:DescribeSnatEntries	DescribeSnatEntries	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:GrantSagInstanceToCcn	GrantSagInstanceToCcn		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifyQosCar	ModifyQosCar	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:DeleteACL	DeleteACL	delete	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	None	None
smartag:DescribeSagUserDns	DescribeSagUserDns	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ListSmartAGApiUnsupportedFeature	ListSmartAGApiUnsupportedFeature	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagOnlineClientStatistics	DescribeSagOnlineClientStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ViewSmartAccessGatewayRoutes	ViewSmartAccessGatewayRoutes	get	All resources. ``	None	None
smartag:CreateSagStaticRoute	CreateSagStaticRoute	create	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteQosPolicy	DeleteQosPolicy	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:DeleteQos	DeleteQos	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	None	None
smartag:BindVbr	BindVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ListSmartAGByAccessPoint	ListSmartAGByAccessPoint	get	All resources. ``	None	None
smartag:ClearSagRouteableAddress	ClearSagRouteableAddress	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UpdateSmartAccessGatewayOspfRoute	UpdateSmartAccessGatewayOspfRoute		All resources. ``	None	None
smartag:GetAdvancedMonitorState	GetAdvancedMonitorState	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	None	None
smartag:UpdateProbeTask	UpdateProbeTask		All resources. ``	None	None
smartag:DescribeSagCurrentDns	DescribeSagCurrentDns	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteRouteDistributionStrategy	DeleteRouteDistributionStrategy	delete	All resources. ``	None	None
smartag:CreateProbeTask	CreateProbeTask		ProbeTask `acs:smartag:{#regionId}:{#accountId}:probetask/` *SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	None	None
smartag:DescribeSagWan4G	DescribeSagWan4G	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UpdateSmartAccessGatewayGlobalRouteProtocol	UpdateSmartAccessGatewayGlobalRouteProtocol		All resources. ``	None	None
smartag:ViewSmartAccessGatewayDns	ViewSmartAccessGatewayDns	get	All resources. ``	None	None
smartag:AssociateQos	AssociateQos	update	Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSagDropTopN	DescribeSagDropTopN	get	All resources. ``	None	None
smartag:SetAdvancedMonitorState	SetAdvancedMonitorState		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	None	None
smartag:DescribeSagLanList	DescribeSagLanList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeSmartAccessGateways	DescribeSmartAccessGateways	get	All resources. ``	None	None
smartag:ModifySmartAccessGateway	ModifySmartAccessGateway	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteEnterpriseCode	DeleteEnterpriseCode	delete	*EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode}`	None	None
smartag:ListAccessPointNetworkQualities	ListAccessPointNetworkQualities	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifySmartAccessGatewayClientUser	ModifySmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UpdateSmartAGEnterpriseCode	UpdateSmartAGEnterpriseCode	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ModifyHealthCheck	ModifyHealthCheck	update	All resources. ``	None	None
smartag:ListAvailableServiceAddress	ListAvailableServiceAddress	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	None	None
smartag:ViewSmartAccessGatewayOspfRoute	ViewSmartAccessGatewayOspfRoute	get	All resources. ``	None	None
smartag:UpdateSmartAGAccessPoint	UpdateSmartAGAccessPoint	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UpgradeSmartAccessGatewaySoftware	UpgradeSmartAccessGatewaySoftware		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:ListDpiConfigError	ListDpiConfigError	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DescribeUserFlowStatistics	DescribeUserFlowStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:GetSmartAccessGatewayUseLimit	GetSmartAccessGatewayUseLimit	get	All resources. ``	None	None
smartag:DescribeUnbindFlowLogSags	DescribeUnbindFlowLogSags	get	All resources. ``	None	None
smartag:DescribeUserOnlineClientStatistics	DescribeUserOnlineClientStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:UpdateSmartAccessGatewayAdminPassword	UpdateSmartAccessGatewayAdminPassword		All resources. ``	None	None
smartag:ModifySagRemoteAccess	ModifySagRemoteAccess	update	All resources. ``	None	None
smartag:ModifySagManagementPort	ModifySagManagementPort		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:DeleteDnatEntry	DeleteDnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	None	None
smartag:GrantInstanceToCbn	GrantInstanceToCbn		*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}`	None	None

Resource

The following table lists the resources defined by 智能接入网关. Specify them in the Resource element of RAM policy statements to grant permissions for specific operations. They are uniquely identified by ARNs. Format: acs:{#ramcode}:{#regionId}:{#accountId}:{#resourceType}:

acs: The initialism of Alibaba Cloud service, which indicates the public cloud of Alibaba Cloud.
{#ramcode}: The code used in RAM to indicate an Alibaba Cloud service.
{#regionId}: The region ID. If the resource covers all regions, set it to an asterisk (*).
{#accountId}: The ID of the Alibaba Cloud account. If the resource covers all Alibaba Cloud accounts, set it to an asterisk (*).
{#resourceType}: The service-defined resource identifier. It supports a hierarchical structure, which is similar to a file path. If the statement covers global resources, set it to an asterisk (*).

Resource type	ARN
SmartAccessGateway	acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId} acs:smartag:{#regionId}:{#accountId}:smartaccessgateway/{#SmartAgId} acs:smartag:{#regionId}:{#accountId}:smartag/* acs:smartag::{#accountId}:smartag/
CloudConnectNetwork	acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId} acs:smartag:{#regionId}:{#accountId}:ccn/* acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId} acs:smartag:{#regionId}:{#accountId}:ccn/{#AssociatedCcnId} acs:smartag::{#accountId}:ccn/
Acl	acs:smartag:{#regionId}:{#accountId}:acl/{#AclId} acs:smartag:{#regionId}:{#accountId}:acl/* acs:smartag::{#accountId}:acl/
ApplicationBandwidthPackage	acs:smartag:{#regionId}:{#accountId}:abwp/{#ApplicationBandwidthPackageId}
Qos	acs:smartag:{#regionId}:{#accountId}:qos/* acs:smartag:{#regionId}:{#accountId}:qos/{#QosId} acs:smartag::{#accountId}:qos/
FlowLog	acs:smartag:{#regionId}:{#accountId}:flowlog/{#flowlogId} acs:smartag:{#regionId}:{#accountId}:flowlog/* acs:smartag::{#accountId}:flowlog/
EnterpriseCode	acs:smartag:{#regionId}:{#accountId}:enterprisecode/* acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode}
SagExpressConnectInterface	acs:smartag:{#regionId}:{#accountId}:sagexpressconnectinterface/*
ProbeTask	acs:smartag:{#regionId}:{#accountId}:probetask/{#ProbeTaskId} acs:smartag:{#regionId}:{#accountId}:probetask/*
SmartAGSmartag	acs:smartag:{#regionId}:{#accountId}:* acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}

Condition

The following table lists the product-level condition keys defined by 智能接入网关. You can also use Alibaba Cloud's Common condition keys. Specify these keys in the Condition element of RAM policy statements to define granular authorization rules. In the condition key, specify the condition values in the Condition_value element of the policy.

Each condition key has a specific data type, such as string, number, Boolean, or IP address. The data type determines which conditional operators can be used to compare the request values against policy values. You must specify the conditional operators compatible with the data type of the condition key. Mismatched operators will invalidate the policy. See Condition operator for valid combinations.

Condition key	Description	Data type
acs:ResourceTag	The tag information.	String
acs:RequestTag	The request tag.	String

How to create custom RAM policies?

You can create custom policies and grant them to RAM users, RAM user groups, or RAM roles. For instructions, see: