Simple Log Service:Authorize a RAM user to operate Cost Manager

Procedure

1. Log on to the RAM console by using you Alibaba Cloud account or a RAM user who has administrative rights.

2. Create a custom policy. On the JSON tab, replace the existing contents in the editor with the following script. For more information, see Create a custom policy in script edit mode.

   Note

   For more information about relevant actions, see RAM authorization.

   {
    "Version": "1",
    "Statement": [
     {
      "Action": "log:CreateLogStore",
      "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/*",
      "Effect": "Allow"
     },
     {
      "Action": "log:CreateIndex",
      "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/aliyun_bill",
      "Effect": "Allow"
     },
     {
      "Action": "log:UpdateIndex",
      "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/aliyun_bill",
      "Effect": "Allow"
     },
     {
      "Action": "log:CreateDashboard",
      "Resource": "acs:log:*:*:project/bill-analysis-*/dashboard/*",
      "Effect": "Allow"
     },
    {
      "Action": "log:UpdateDashboard",
      "Resource": "acs:log:*:*:project/bill-analysis-*/dashboard/*",
      "Effect": "Allow"
     },
    {
      "Action": "log:CreateSavedSearch",
      "Resource": "acs:log:*:*:project/bill-analysis-*/savedsearch/*",
      "Effect": "Allow"
     },
    {
      "Action": "log:UpdateSavedSearch",
      "Resource": "acs:log:*:*:project/bill-analysis-*/savedsearch/*",
      "Effect": "Allow"
     },
   {
      "Action": "log:CreateJob",
      "Resource": "acs:log:*:*:project/bill-analysis-*/job/*",
      "Effect": "Allow"
     },
    {
      "Action": "log:UpdateJob",
      "Resource": "acs:log:*:*:project/bill-analysis-*/job/*",
      "Effect": "Allow"
     },
   {
      "Action": "log:CreateApp",
      "Resource": "acs:log:*:*:app/bill",
      "Effect": "Allow"
     },
   {
      "Action": "log:UpdateApp",
      "Resource": "acs:log:*:*:app/bill",
      "Effect": "Allow"
     },
   {
      "Action": "log:GetApp",
      "Resource": "acs:log:*:*:app/bill",
      "Effect": "Allow"
     },
   {
      "Action": "log:DeleteApp",
      "Resource": "acs:log:*:*:app/bill",
      "Effect": "Allow"
     }
    ]
   }

3. Add the created custom policy to the RAM user. For more information, see Grant permissions to a RAM user.