Todos los productos
Search

Este producto

    E-MapReduce:Resource groups para un control detallado

    Centro de documentos

    E-MapReduce:Resource groups para un control detallado

    Última actualización: Sep 17, 2026

    Puede usar resource groups junto con RAM para aislar recursos e implementar una gestión detallada de permisos en una cuenta de Alibaba Cloud. Este tema explica cómo E-MapReduce admite los resource groups y los pasos para configurar la autorización a nivel de resource group.

    Nota

    Autorización de resource group

    Los resource groups le permiten agrupar y gestionar recursos dentro de su cuenta de Alibaba Cloud. Por ejemplo, puede crear un resource group para cada proyecto y mover los recursos correspondientes al grupo para gestionarlos de forma centralizada. Para obtener más información, consulte What is a resource group?.

    Una vez agrupados los recursos, puede otorgar permisos a nivel de resource group a entidades de RAM, como usuarios de RAM, grupos de usuarios de RAM o roles de RAM. Esto garantiza que una entidad gestione únicamente los recursos dentro de ese resource group específico. Para obtener más información, consulte Resource grouping and authorization.

    Este método de autorización ofrece las siguientes ventajas:

    • Permisos detallados: a cada identidad se le otorgan exactamente los permisos que necesita para acceder a los recursos. Así evita mezclar recursos de distintos proyectos en una sola cuenta.

    • Escalabilidad: cuando agregue nuevos recursos, solo tendrá que añadirlos al resource group. La identidad de RAM hereda automáticamente los permisos para esos recursos.

    Otorgar permisos a nivel de resource group

    A continuación se describe cómo otorgar permisos a un RAM user para gestionar recursos de E-MapReduce dentro de un resource group específico.

    1. Requisitos previos

    1. Cree el RAM user que planea utilizar. Para obtener más información, consulte Create a RAM user.

    2. Cree un resource group y mueva los recursos existentes al resource group de destino. Para obtener más información, consulte Create a resource group, Automatic resource transfer y Manual resource transfer.

    2. Otorgar permisos a nivel de resource group

    Puede otorgar permisos a nivel de resource group de las siguientes maneras:

    Consola de administración de recursos

    Utilice la función de gestión de permisos de un resource group para otorgar permisos a un usuario de RAM específico. Para obtener más información, consulte Grant resource group-scoped permissions to a RAM identity.

    • Inicie sesión en la consola de Resource Management.

    • En la página Resource Group, busque el resource group de destino y haga clic en Permission Management en la columna Actions.

    • En la pestaña Permission Management, haga clic en Grant Permission.

    • En el panel Grant Permission, configure la entidad y la política de permisos.

      • Principal: seleccione un usuario de RAM existente.

      • Permission Policy: seleccione una system policy o una custom policy existente. Para obtener más información, consulte Create a custom permission policy.

    • Haga clic en Confirm.

    Consola de RAM

    Otorgue permisos a nivel de resource group a un usuario de RAM específico desde la consola de RAM. Para obtener más información, consulte Manage permissions for a RAM user.

    • Inicie sesión en la consola de RAM con una cuenta de Alibaba Cloud o como administrador de RAM.

    • En el panel de navegación izquierdo, elija Identity Management > Users. En la página Users, busque el usuario de RAM de destino y haga clic en Add Permissions en la columna Actions.

    • En el panel Add Permissions, configure lo siguiente:

      • Resource Scope: seleccione Resource Group.

      • Principal: seleccione el usuario de RAM de destino.

      • Permission Policy: seleccione una system policy o una custom policy existente. Para obtener más información, consulte Create a custom permission policy.

    • Haga clic en Confirm.

    Tipos de recursos que admiten resource groups

    La siguiente tabla muestra los tipos de recursos de E-MapReduce que admiten resource groups:

    Servicio en la nube

    Código del servicio en la nube

    Tipo de recurso

    E-MapReduce

    emr

    cluster: clúster

    E-MapReduce

    emr

    flowproject: proyecto
    Nota

    Puede solicitar compatibilidad con otros tipos de recursos en la consola de Resource Group.

    image

    Operaciones sin autorización de resource group

    E-MapReduce no es compatible con la autorización a nivel de resource group para las siguientes acciones:

    Acción

    Descripción

    emr:AttachCluster

    -

    emr:AttachClusterForNote

    -

    emr:AuthRealName

    -

    emr:BindPrivateZoneVpc

    -

    emr:CheckAssumeRole

    -

    emr:CheckDLFCatalogAuth

    -

    emr:CheckProductActiveStatus

    -

    emr:CheckRenewClusterForAdmin

    -

    emr:CheckUserBalance

    -

    emr:CheckUserRole

    -

    emr:CleanupFlowEntitySnapshot

    -

    emr:CommitFlowEntitySnapshot

    -

    emr:CommonApiWhiteList

    -

    emr:CreateAlertContact

    -

    emr:CreateAlertDingDingGroup

    -

    emr:CreateAlertUserGroup

    -

    emr:CreateBackup

    -

    emr:CreateBackupPlan

    -

    emr:CreateBackupRule

    -

    emr:CreateCloudNativeCluster

    -

    emr:CreateClusterBootstrapAction

    -

    emr:CreateClusterCost

    -

    emr:CreateClusterEni

    -

    emr:CreateClusterTemplate

    -

    emr:CreateClusterV3

    -

    emr:CreateClusterWithTemplate

    -

    emr:CreateClusterWithTemplateForInternal

    -

    emr:CreateDisasterRecoveryPlan

    -

    emr:CreateExternalUsers

    -

    emr:CreateFlowProject

    -

    emr:CreateFlowProjectClusterSetting

    -

    emr:CreateJob

    -

    emr:CreateJobExecutionPlanFolder

    -

    emr:CreateLibrary

    -

    emr:CreateMetaTablePreviewTask

    -

    emr:CreateMetaTablePreviewTaskForOuter

    -

    emr:CreateNote

    -

    emr:CreateOnKubeCluster

    -

    emr:CreateParagraph

    -

    emr:CreateScalingGroupV2

    -

    emr:CreateUserPassword

    -

    emr:CreateUserStatistics

    -

    emr:CreateVerificationCode

    -

    emr:DeleteAlertContacts

    -

    emr:DeleteAlertDingDingGroups

    -

    emr:DeleteAlertUserGroups

    -

    emr:DeleteApiTemplate

    Elimina una plantilla de API específica.

    emr:DeleteApplication

    -

    emr:DeleteClusterBootstrapAction

    -

    emr:DeleteClusterScript

    -

    emr:DeleteClusterTemplate

    -

    emr:DeleteDiagnoseReport

    -

    emr:DeleteDisasterRecoveryPlan

    -

    emr:DeleteExecutionPlan

    -

    emr:DeleteFlowEditLock

    -

    emr:DeleteFlowProject

    -

    emr:DeleteFlowProjectById

    -

    emr:DeleteFlowProjectClusterSetting

    -

    emr:DeleteFlowProjectUser

    -

    emr:DeleteJob

    -

    emr:DeleteJobExecutionPlanFolder

    -

    emr:DeleteJobExecutionPlanParam

    -

    emr:DeleteLibraries

    -

    emr:DeleteNote

    -

    emr:DeleteParagraph

    -

    emr:DeleteScalingRule

    -

    emr:DeleteScalingTaskGroup

    -

    emr:DeleteUsers

    Elimina varios usuarios.

    emr:DescribeAvailableInstanceType

    -

    emr:DescribeClusterForInternal

    -

    emr:DescribeClusterForOuter

    -

    emr:DescribeClusterHealth

    -

    emr:DescribeClusterOperationHostTaskLog

    -

    emr:DescribeClusterResourcePoolSchedulerTypeForAdmin

    -

    emr:DescribeClusterServiceConfigForAdmin

    -

    emr:DescribeClusterServiceConfigTagForAdmin

    -

    emr:DescribeClusterTemplate

    -

    emr:DescribeDiskOpsActivity

    -

    emr:DescribeEmrMainVersion

    -

    emr:DescribeExecutionPlan

    -

    emr:DescribeFlowAgentToken

    -

    emr:DescribeFlowAgentUser

    -

    emr:DescribeFlowEntitySnapshot

    -

    emr:DescribeFlowNodeInstanceContainerLog

    -

    emr:DescribeFlowProjectClusterSetting

    -

    emr:DescribeJob

    -

    emr:DescribeKafkaReassign

    -

    emr:DescribeLibraryDetail

    -

    emr:DescribeLibraryInstallTaskDetail

    -

    emr:DescribeMetaDataSourceForOuter

    -

    emr:DescribeMetaDatabaseForOuter

    -

    emr:DescribeMetaTableColumnForOuter

    -

    emr:DescribeMetaTablePartitionForOuter

    -

    emr:DescribeMetaTablePreviewTask

    -

    emr:DescribeMetaTablePreviewTaskForOuter

    -

    emr:DescribeNote

    -

    emr:DescribeOperationTask

    -

    emr:DescribeParagraph

    -

    emr:DescribeRdsInstance

    -

    emr:DescribeScalingActivity

    -

    emr:DescribeScalingCommonConfig

    -

    emr:DescribeScalingGroupInstanceV2

    -

    emr:DescribeScalingGroupV2

    -

    emr:DescribeScalingMetrics

    -

    emr:DescribeScalingRule

    -

    emr:DescribeScalingTaskGroup

    -

    emr:DescribeServiceConfigDefinition

    -

    emr:DescribeServiceHealth

    -

    emr:DescribeUserStatistics

    -

    emr:DetachAndReleaseClusterEni

    -

    emr:DetachCluster

    -

    emr:DetachClusterForNote

    -

    emr:DiffFlowEntitySnapshot

    -

    emr:DumpMetaDataSourceForOuter

    -

    emr:EnableApplication

    -

    emr:ExecuteFsAction

    -

    emr:ExecuteHiveSql

    -

    emr:ExistsUser

    -

    emr:GetApiTemplate

    Obtiene la configuración detallada de una plantilla de API específica.

    emr:GetApplicationActions

    -

    emr:GetAuditLogs

    -

    emr:GetBackPlanInfo

    -

    emr:GetBackupInfo

    -

    emr:GetBackupRuleInfo

    -

    emr:GetClusterCost

    -

    emr:GetCostUploadSignature

    -

    emr:GetDisasterRecoveryPlan

    -

    emr:GetDoctorComputeSummary

    Obtiene los resultados del análisis de uso de un solo recurso en un clúster mediante EMR Doctor.

    emr:GetDoctorHBaseRegion

    Obtiene información sobre una región de HBase.

    emr:GetDoctorHBaseRegionServer

    Obtiene información sobre un RegionServer de HBase.

    emr:GetDoctorHBaseTable

    Obtiene información sobre una tabla de HBase.

    emr:GetDoctorHDFSCluster

    Obtiene los resultados del análisis de datos de HDFS de un clúster mediante EMR Doctor.

    emr:GetDoctorHDFSDirectory

    Obtiene los resultados del análisis de datos de un directorio específico de HDFS (hasta cinco niveles de profundidad) mediante EMR Doctor.

    emr:GetFlowAgentTrackStatus

    -

    emr:GetFlowAuditLogs

    -

    emr:GetFlowEntityRelationGraph

    -

    emr:GetMetadataTypeList

    -

    emr:GetOverview

    -

    emr:GetPriceForCreate

    -

    emr:GetPriceForCreateOnKubeCluster

    -

    emr:GetReleaseVersion

    -

    emr:GetSlsTempToken

    -

    emr:GetSupportApplications

    -

    emr:HasRamOauthPolicy

    -

    emr:IncreaseNodesDiskSize

    -

    emr:InnerCheckAckInstance

    -

    emr:InnerDescribeUserAccountStatus

    -

    emr:InstallLibraries

    -

    emr:KillExecutionJobInstance

    -

    emr:KillExecutionPlanInstance

    -

    emr:ListAdviceAction

    -

    emr:ListAlertContacts

    -

    emr:ListApmMetadata

    -

    emr:ListApplicationConfigVersions

    -

    emr:ListBackupPlans

    -

    emr:ListBackupRules

    -

    emr:ListBackups

    -

    emr:ListClusterAttach

    -

    emr:ListClusterBootstrapActions

    -

    emr:ListClusterCosts

    -

    emr:ListClusterForAdmin

    -

    emr:ListClusterForOuter

    -

    emr:ListClusterHostComponentForAdmin

    -

    emr:ListClusterOperationHostTask

    -

    emr:ListClusterServiceConfigHistoryForAdmin

    -

    emr:ListClusterTag

    -

    emr:ListClusterTagForAdmin

    -

    emr:ListClusterTypes

    -

    emr:ListComponentDefaultTopologies

    -

    emr:ListDependApplications

    -

    emr:ListDisasterRecoveryPlans

    -

    emr:ListDisasterRecoveryRecords

    -

    emr:ListDiskOpsEvents

    -

    emr:ListDoctorComputeSummary

    Obtiene información de uso de varios recursos del clúster según condiciones de filtro mediante EMR Doctor.

    emr:ListDoctorHBaseRegionServers

    Obtiene información sobre varios RegionServers de HBase.

    emr:ListDoctorHBaseTables

    Obtiene información sobre varias tablas de HBase.

    emr:ListDoctorJobsStats

    Obtiene información básica de resumen de ejecución de varios trabajos mediante EMR Doctor.

    emr:ListEcsInstances

    -

    emr:ListEmrAvailableConfig

    -

    emr:ListEmrAvailableMetaType

    -

    emr:ListEmrAvailableResource

    -

    emr:ListEmrMainVersion

    -

    emr:ListEmrMainVersionServiceGroup

    -

    emr:ListEmrMainVersions

    -

    emr:ListExecutePlanMigrateInfo

    -

    emr:ListExecutionPlanInstanceTrend

    -

    emr:ListFailureJobExecutionInstances

    -

    emr:ListFeatures

    -

    emr:ListFlowClusterAllHosts

    -

    emr:ListFlowClusterK8sNamespace

    -

    emr:ListFlowEntitySnapshot

    -

    emr:ListFlowProjectClusterSetting

    -

    emr:ListFlowProjectUser

    -

    emr:ListGlobalConfigs

    -

    emr:ListHealthRule

    -

    emr:ListJobExecutionInstanceTrend

    -

    emr:ListJobExecutionInstances

    -

    emr:ListJobExecutionPlanHierarchy

    -

    emr:ListJobInstanceWorkers

    -

    emr:ListJobMigrateInfo

    -

    emr:ListKMSKeys

    -

    emr:ListKafkaReassign

    -

    emr:ListKafkaReassignForAdmin

    -

    emr:ListKafkaReassignTopic

    -

    emr:ListKafkaTopicStatistics

    -

    emr:ListKafkaTopicStatisticsForAdmin

    -

    emr:ListKeyPairNames

    -

    emr:ListLibraries

    -

    emr:ListLibraryInstallTasks

    -

    emr:ListLibraryStatus

    -

    emr:ListLocalDiskComponentInfo

    -

    emr:ListMetaCluster

    -

    emr:ListMetaDataSourceForOuter

    -

    emr:ListMetaDatabaseForOuter

    -

    emr:ListMetaTableColumnForOuter

    -

    emr:ListMetaTableForOuter

    -

    emr:ListMetaTablePartitionForOuter

    -

    emr:ListMetastoreTypes

    -

    emr:ListMetricsToDisplay

    -

    emr:ListNodeGroupSpecs

    -

    emr:ListNotes

    -

    emr:ListOperation

    -

    emr:ListOperationActivity

    -

    emr:ListOperationStageInstanceRelation

    -

    emr:ListOperationTask

    -

    emr:ListPrivateZones

    -

    emr:ListRamRole

    -

    emr:ListRamUsers

    -

    emr:ListRdsDatabase

    -

    emr:ListRdsInstance

    -

    emr:ListRegions

    -

    emr:ListReleaseVersions

    -

    emr:ListResourcePoolForAdmin

    -

    emr:ListScalingActivity

    -

    emr:ListScalingActivityV2

    -

    emr:ListScalingConfigItemV2

    -

    emr:ListScalingGroupV2

    -

    emr:ListSecurityGroups

    -

    emr:ListServiceComponentTopology

    -

    emr:ListSlsProject

    -

    emr:ListStack

    -

    emr:ListStackService

    -

    emr:ListStreamingSqlQuery

    -

    emr:ListSupportedServiceName

    -

    emr:ListTagKeys

    -

    emr:ListTagValues

    -

    emr:ListUserStatistics

    -

    emr:ListVpcInfo

    -

    emr:ListVswitch

    -

    emr:ManageUserPlatform

    -

    emr:MetastoreCreateDatabase

    -

    emr:MetastoreCreateKafkaTopic

    -

    emr:MetastoreCreateTable

    -

    emr:MetastoreDataPreview

    -

    emr:MetastoreDeleteKafkaTopic

    -

    emr:MetastoreDescribeDataSource

    -

    emr:MetastoreDescribeDatabase

    -

    emr:MetastoreDescribeKafkaConsumerGroup

    -

    emr:MetastoreDescribeKafkaTopic

    -

    emr:MetastoreDescribeTable

    -

    emr:MetastoreDescribeTask

    -

    emr:MetastoreDropDatabase

    -

    emr:MetastoreDropTable

    -

    emr:MetastoreListDataSource

    -

    emr:MetastoreListDataSourceForAdmin

    -

    emr:MetastoreListDatabases

    -

    emr:MetastoreListKafkaConsumerGroup

    -

    emr:MetastoreListKafkaTopic

    -

    emr:MetastoreListKafkaTopicForAdmin

    -

    emr:MetastoreListTablePartition

    -

    emr:MetastoreListTables

    -

    emr:MetastoreListTask

    -

    emr:MetastoreRetryTask

    -

    emr:MetastoreSearchTables

    -

    emr:MetastoreSync

    -

    emr:MetastoreUpdateKafkaTopic

    -

    emr:MetastoreUpdateKafkaTopicBatch

    -

    emr:MetastoreUpdateTable

    -

    emr:MigrateJobs

    -

    emr:ModifyAlertContact

    -

    emr:ModifyAlertDingDingGroup

    -

    emr:ModifyAlertUserGroup

    -

    emr:ModifyClusterBootstrapAction

    -

    emr:ModifyClusterTemplate

    -

    emr:ModifyExecutionPlanBasicInfo

    -

    emr:ModifyFlow

    -

    emr:ModifyFlowProject

    -

    emr:ModifyFlowProjectClusterSetting

    -

    emr:ModifyFlowProjectGeneralSetting

    -

    emr:ModifyFlowVariableCollection

    -

    emr:ModifyHealthRuleConfig

    -

    emr:ModifyJob

    -

    emr:ModifyJobExecutionPlanFolder

    -

    emr:ModifyJobExecutionPlanParam

    -

    emr:ModifyScalingConfigItemV2

    -

    emr:ModifyScalingGroupV2

    -

    emr:ModifyScalingRule

    -

    emr:ModifyUserChannelInfo

    -

    emr:ModifyUserStatistics

    -

    emr:PassRole

    -

    emr:PreCheckClusterBootstrapAction

    -

    emr:QueryGrafanaData

    -

    emr:QueryInfoByToken

    -

    emr:QueryLogKey

    -

    emr:QueryPrice

    -

    emr:QuerySlsMetricData

    -

    emr:QueryUserByToken

    -

    emr:QueryUserByUid

    -

    emr:QueryUserFromMns

    -

    emr:QueryUserPolicy

    -

    emr:RefreshClusterResourcePool

    -

    emr:ReleaseCluster

    -

    emr:ReleaseClusterForAdmin

    -

    emr:RemoveBackupRule

    -

    emr:RemoveDisasterRecoveryPlan

    -

    emr:RenewClusterForAdmin

    -

    emr:RerunExecutionPlan

    -

    emr:ResizeCluster

    -

    emr:ResizeClusterV2

    -

    emr:ResolveUser

    -

    emr:RestoreBackup

    -

    emr:RestoreDisasterRecovery

    -

    emr:ResumeExecutionPlan

    -

    emr:ResumeExecutionPlanScheduler

    -

    emr:RunApiTemplate

    Ejecuta una plantilla de API específica.

    emr:RunClusterServiceActionForAdmin

    -

    emr:RunExecutionPlan

    -

    emr:RunNote

    -

    emr:RunParagraph

    -

    emr:SearchUsers

    -

    emr:StartApplication

    -

    emr:StopApplication

    -

    emr:SubmitFlow

    -

    emr:SubmitFlowJob

    -

    emr:SuspendExecutionPlan

    -

    emr:SuspendExecutionPlanScheduler

    -

    emr:SyncDataSourceSchema

    -

    emr:SyncDataSourceSchemaForAdmin

    -

    emr:SyncUserPassword

    -

    emr:SyncUserToFlow

    -

    emr:TagResources

    -

    emr:UninstallLibraries

    -

    emr:UnsubscribeUser

    -

    emr:UntagResources

    -

    emr:UpdateApiTemplate

    Actualiza una plantilla de API específica.

    emr:UpdateApplication

    -

    emr:UpdateBackupPlan

    -

    emr:UpdateBackupRule

    -

    emr:UpdateDisasterRecoveryPlan

    -

    emr:UpdateGlobalConfigs

    -

    Para las operaciones que no admiten autorización de resource group, establecer el alcance del recurso en resource group level no tiene ningún efecto. Si un usuario de RAM requiere estos permisos, cree una política personalizada y establezca el alcance del recurso en account level.

    image.png A continuación se muestran dos ejemplos de políticas personalizadas. Ajuste el contenido según sus necesidades.

    • Permite todas las operaciones de solo lectura que no son compatibles con la autorización a nivel de resource group. El elemento Action enumera estas operaciones.

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "emr:GetApiTemplate",
        "emr:GetApplicationActions",
        "emr:GetAuditLogs",
        "emr:GetBackPlanInfo",
        "emr:GetBackupInfo",
        "emr:GetBackupRuleInfo",
        "emr:GetClusterCost",
        "emr:GetCostUploadSignature",
        "emr:GetDisasterRecoveryPlan",
        "emr:GetDoctorComputeSummary",
        "emr:GetDoctorHBaseRegion",
        "emr:GetDoctorHBaseRegionServer",
        "emr:GetDoctorHBaseTable",
        "emr:GetDoctorHDFSCluster",
        "emr:GetDoctorHDFSDirectory",
        "emr:GetFlowAgentTrackStatus",
        "emr:GetFlowAuditLogs",
        "emr:GetFlowEntityRelationGraph",
        "emr:GetMetadataTypeList",
        "emr:GetOverview",
        "emr:GetPriceForCreate",
        "emr:GetPriceForCreateOnKubeCluster",
        "emr:GetReleaseVersion",
        "emr:GetSlsTempToken",
        "emr:GetSupportApplications",
        "emr:ListAdviceAction",
        "emr:ListAlertContacts",
        "emr:ListApmMetadata",
        "emr:ListApplicationConfigVersions",
        "emr:ListBackupPlans",
        "emr:ListBackupRules",
        "emr:ListBackups",
        "emr:ListClusterAttach",
        "emr:ListClusterBootstrapActions",
        "emr:ListClusterCosts",
        "emr:ListClusterForAdmin",
        "emr:ListClusterForOuter",
        "emr:ListClusterHostComponentForAdmin",
        "emr:ListClusterOperationHostTask",
        "emr:ListClusterServiceConfigHistoryForAdmin",
        "emr:ListClusterTag",
        "emr:ListClusterTagForAdmin",
        "emr:ListClusterTypes",
        "emr:ListComponentDefaultTopologies",
        "emr:ListDependApplications",
        "emr:ListDisasterRecoveryPlans",
        "emr:ListDisasterRecoveryRecords",
        "emr:ListDiskOpsEvents",
        "emr:ListDoctorComputeSummary",
        "emr:ListDoctorHBaseRegionServers",
        "emr:ListDoctorHBaseTables",
        "emr:ListDoctorJobsStats",
        "emr:ListEcsInstances",
        "emr:ListEmrAvailableConfig",
        "emr:ListEmrAvailableMetaType",
        "emr:ListEmrAvailableResource",
        "emr:ListEmrMainVersion",
        "emr:ListEmrMainVersionServiceGroup",
        "emr:ListEmrMainVersions",
        "emr:ListExecutePlanMigrateInfo",
        "emr:ListExecutionPlanInstanceTrend",
        "emr:ListFailureJobExecutionInstances",
        "emr:ListFeatures",
        "emr:ListFlowClusterAllHosts",
        "emr:ListFlowClusterK8sNamespace",
        "emr:ListFlowEntitySnapshot",
        "emr:ListFlowProjectClusterSetting",
        "emr:ListFlowProjectUser",
        "emr:ListGlobalConfigs",
        "emr:ListHealthRule",
        "emr:ListJobExecutionInstanceTrend",
        "emr:ListJobExecutionInstances",
        "emr:ListJobExecutionPlanHierarchy",
        "emr:ListJobInstanceWorkers",
        "emr:ListJobMigrateInfo",
        "emr:ListKMSKeys",
        "emr:ListKafkaReassign",
        "emr:ListKafkaReassignForAdmin",
        "emr:ListKafkaReassignTopic",
        "emr:ListKafkaTopicStatistics",
        "emr:ListKafkaTopicStatisticsForAdmin",
        "emr:ListKeyPairNames",
        "emr:ListLibraries",
        "emr:ListLibraryInstallTasks",
        "emr:ListLibraryStatus",
        "emr:ListLocalDiskComponentInfo",
        "emr:ListMetaCluster",
        "emr:ListMetaDataSourceForOuter",
        "emr:ListMetaDatabaseForOuter",
        "emr:ListMetaTableColumnForOuter",
        "emr:ListMetaTableForOuter",
        "emr:ListMetaTablePartitionForOuter",
        "emr:ListMetastoreTypes",
        "emr:ListMetricsToDisplay",
        "emr:ListNodeGroupSpecs",
        "emr:ListNotes",
        "emr:ListOperation",
        "emr:ListOperationActivity",
        "emr:ListOperationStageInstanceRelation",
        "emr:ListOperationTask",
        "emr:ListPrivateZones",
        "emr:ListRamRole",
        "emr:ListRamUsers",
        "emr:ListRdsDatabase",
        "emr:ListRdsInstance",
        "emr:ListRegions",
        "emr:ListReleaseVersions",
        "emr:ListResourcePoolForAdmin",
        "emr:ListScalingActivity",
        "emr:ListScalingActivityV2",
        "emr:ListScalingConfigItemV2",
        "emr:ListScalingGroupV2",
        "emr:ListSecurityGroups",
        "emr:ListServiceComponentTopology",
        "emr:ListSlsProject",
        "emr:ListStack",
        "emr:ListStackService",
        "emr:ListStreamingSqlQuery",
        "emr:ListSupportedServiceName",
        "emr:ListTagKeys",
        "emr:ListTagValues",
        "emr:ListUserStatistics",
        "emr:ListVpcInfo",
        "emr:ListVswitch",
        "emr:QueryGrafanaData",
        "emr:QueryInfoByToken",
        "emr:QueryLogKey",
        "emr:QueryPrice",
        "emr:QuerySlsMetricData",
        "emr:QueryTableData",
        "emr:QueryTrendData",
        "emr:QueryUserById"
      ],
      "Resource": "*"
    }
  ]
}

    • Permite todas las operaciones que no son compatibles con la autorización a nivel de resource group. El elemento Action enumera estas operaciones.

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "emr:AttachCluster",
        "emr:AttachClusterForNote",
        "emr:AuthRealName",
        "emr:BindPrivateZoneVpc",
        "emr:CheckAssumeRole",
        "emr:CheckDLFCatalogAuth",
        "emr:CheckProductActiveStatus",
        "emr:CheckRenewClusterForAdmin",
        "emr:CheckUserBalance",
        "emr:CheckUserRole",
        "emr:CleanupFlowEntitySnapshot",
        "emr:CommitFlowEntitySnapshot",
        "emr:CommonApiWhiteList",
        "emr:CreateAlertContact",
        "emr:CreateAlertDingDingGroup",
        "emr:CreateAlertUserGroup",
        "emr:CreateBackup",
        "emr:CreateBackupPlan",
        "emr:CreateBackupRule",
        "emr:CreateCloudNativeCluster",
        "emr:CreateClusterBootstrapAction",
        "emr:CreateClusterCost",
        "emr:CreateClusterEni",
        "emr:CreateClusterTemplate",
        "emr:CreateClusterV3",
        "emr:CreateClusterWithTemplate",
        "emr:CreateClusterWithTemplateForInternal",
        "emr:CreateDisasterRecoveryPlan",
        "emr:CreateExternalUsers",
        "emr:CreateFlowProject",
        "emr:CreateFlowProjectClusterSetting",
        "emr:CreateJob",
        "emr:CreateJobExecutionPlanFolder",
        "emr:CreateLibrary",
        "emr:CreateMetaTablePreviewTask",
        "emr:CreateMetaTablePreviewTaskForOuter",
        "emr:CreateNote",
        "emr:CreateOnKubeCluster",
        "emr:CreateParagraph",
        "emr:CreateScalingGroupV2",
        "emr:CreateUserPassword",
        "emr:CreateUserStatistics",
        "emr:CreateVerificationCode",
        "emr:DeleteAlertContacts",
        "emr:DeleteAlertDingDingGroups",
        "emr:DeleteAlertUserGroups",
        "emr:DeleteApiTemplate",
        "emr:DeleteApplication",
        "emr:DeleteClusterBootstrapAction",
        "emr:DeleteClusterScript",
        "emr:DeleteClusterTemplate",
        "emr:DeleteDiagnoseReport",
        "emr:DeleteDisasterRecoveryPlan",
        "emr:DeleteExecutionPlan",
        "emr:DeleteFlowEditLock",
        "emr:DeleteFlowProject",
        "emr:DeleteFlowProjectById",
        "emr:DeleteFlowProjectClusterSetting",
        "emr:DeleteFlowProjectUser",
        "emr:DeleteJob",
        "emr:DeleteJobExecutionPlanFolder",
        "emr:DeleteJobExecutionPlanParam",
        "emr:DeleteLibraries",
        "emr:DeleteNote",
        "emr:DeleteParagraph",
        "emr:DeleteScalingRule",
        "emr:DeleteScalingTaskGroup",
        "emr:DeleteUsers",
        "emr:DescribeAvailableInstanceType",
        "emr:DescribeClusterForInternal",
        "emr:DescribeClusterForOuter",
        "emr:DescribeClusterHealth",
        "emr:DescribeClusterOperationHostTaskLog",
        "emr:DescribeClusterResourcePoolSchedulerTypeForAdmin",
        "emr:DescribeClusterServiceConfigForAdmin",
        "emr:DescribeClusterServiceConfigTagForAdmin",
        "emr:DescribeClusterTemplate",
        "emr:DescribeDiskOpsActivity",
        "emr:DescribeEmrMainVersion",
        "emr:DescribeExecutionPlan",
        "emr:DescribeFlowAgentToken",
        "emr:DescribeFlowAgentUser",
        "emr:DescribeFlowEntitySnapshot",
        "emr:DescribeFlowNodeInstanceContainerLog",
        "emr:DescribeFlowProjectClusterSetting",
        "emr:DescribeJob",
        "emr:DescribeKafkaReassign",
        "emr:DescribeLibraryDetail",
        "emr:DescribeLibraryInstallTaskDetail",
        "emr:DescribeMetaDataSourceForOuter",
        "emr:DescribeMetaDatabaseForOuter",
        "emr:DescribeMetaTableColumnForOuter",
        "emr:DescribeMetaTablePartitionForOuter",
        "emr:DescribeMetaTablePreviewTask",
        "emr:DescribeMetaTablePreviewTaskForOuter",
        "emr:DescribeNote",
        "emr:DescribeOperationTask",
        "emr:DescribeParagraph",
        "emr:DescribeRdsInstance",
        "emr:DescribeScalingActivity",
        "emr:DescribeScalingCommonConfig",
        "emr:DescribeScalingGroupInstanceV2",
        "emr:DescribeScalingGroupV2",
        "emr:DescribeScalingMetrics",
        "emr:DescribeScalingRule",
        "emr:DescribeScalingTaskGroup",
        "emr:DescribeServiceConfigDefinition",
        "emr:DescribeServiceHealth",
        "emr:DescribeUserStatistics",
        "emr:DetachAndReleaseClusterEni",
        "emr:DetachCluster",
        "emr:DetachClusterForNote",
        "emr:DiffFlowEntitySnapshot",
        "emr:DumpMetaDataSourceForOuter",
        "emr:EnableApplication",
        "emr:ExecuteFsAction",
        "emr:ExecuteHiveSql",
        "emr:ExistsUser",
        "emr:GetApiTemplate",
        "emr:GetApplicationActions",
        "emr:GetAuditLogs",
        "emr:GetBackPlanInfo",
        "emr:GetBackupInfo",
        "emr:GetBackupRuleInfo",
        "emr:GetClusterCost",
        "emr:GetCostUploadSignature",
        "emr:GetDisasterRecoveryPlan",
        "emr:GetDoctorComputeSummary",
        "emr:GetDoctorHBaseRegion",
        "emr:GetDoctorHBaseRegionServer",
        "emr:GetDoctorHBaseTable",
        "emr:GetDoctorHDFSCluster",
        "emr:GetDoctorHDFSDirectory",
        "emr:GetFlowAgentTrackStatus",
        "emr:GetFlowAuditLogs",
        "emr:GetFlowEntityRelationGraph",
        "emr:GetMetadataTypeList",
        "emr:GetOverview",
        "emr:GetPriceForCreate",
        "emr:GetPriceForCreateOnKubeCluster",
        "emr:GetReleaseVersion",
        "emr:GetSlsTempToken",
        "emr:GetSupportApplications",
        "emr:HasRamOauthPolicy",
        "emr:IncreaseNodesDiskSize",
        "emr:InnerCheckAckInstance",
        "emr:InnerDescribeUserAccountStatus",
        "emr:InstallLibraries",
        "emr:KillExecutionJobInstance",
        "emr:KillExecutionPlanInstance",
        "emr:ListAdviceAction",
        "emr:ListAlertContacts",
        "emr:ListApmMetadata",
        "emr:ListApplicationConfigVersions",
        "emr:ListBackupPlans",
        "emr:ListBackupRules",
        "emr:ListBackups",
        "emr:ListClusterAttach",
        "emr:ListClusterBootstrapActions",
        "emr:ListClusterCosts",
        "emr:ListClusterForAdmin",
        "emr:ListClusterForOuter",
        "emr:ListClusterHostComponentForAdmin",
        "emr:ListClusterOperationHostTask",
        "emr:ListClusterServiceConfigHistoryForAdmin",
        "emr:ListClusterTag",
        "emr:ListClusterTagForAdmin",
        "emr:ListClusterTypes",
        "emr:ListComponentDefaultTopologies",
        "emr:ListDependApplications",
        "emr:ListDisasterRecoveryPlans",
        "emr:ListDisasterRecoveryRecords",
        "emr:ListDiskOpsEvents",
        "emr:ListDoctorComputeSummary",
        "emr:ListDoctorHBaseRegionServers",
        "emr:ListDoctorHBaseTables",
        "emr:ListDoctorJobsStats",
        "emr:ListEcsInstances",
        "emr:ListEmrAvailableConfig",
        "emr:ListEmrAvailableMetaType",
        "emr:ListEmrAvailableResource",
        "emr:ListEmrMainVersion",
        "emr:ListEmrMainVersionServiceGroup",
        "emr:ListEmrMainVersions",
        "emr:ListExecutePlanMigrateInfo",
        "emr:ListExecutionPlanInstanceTrend",
        "emr:ListFailureJobExecutionInstances",
        "emr:ListFeatures",
        "emr:ListFlowClusterAllHosts",
        "emr:ListFlowClusterK8sNamespace",
        "emr:ListFlowEntitySnapshot",
        "emr:ListFlowProjectClusterSetting",
        "emr:ListFlowProjectUser",
        "emr:ListGlobalConfigs",
        "emr:ListHealthRule",
        "emr:ListJobExecutionInstanceTrend",
        "emr:ListJobExecutionInstances",
        "emr:ListJobExecutionPlanHierarchy",
        "emr:ListJobInstanceWorkers",
        "emr:ListJobMigrateInfo",
        "emr:ListKMSKeys",
        "emr:ListKafkaReassign",
        "emr:ListKafkaReassignForAdmin",
        "emr:ListKafkaReassignTopic",
        "emr:ListKafkaTopicStatistics",
        "emr:ListKafkaTopicStatisticsForAdmin",
        "emr:ListKeyPairNames",
        "emr:ListLibraries",
        "emr:ListLibraryInstallTasks",
        "emr:ListLibraryStatus",
        "emr:ListLocalDiskComponentInfo",
        "emr:ListMetaCluster",
        "emr:ListMetaDataSourceForOuter",
        "emr:ListMetaDatabaseForOuter",
        "emr:ListMetaTableColumnForOuter",
        "emr:ListMetaTableForOuter",
        "emr:ListMetaTablePartitionForOuter",
        "emr:ListMetastoreTypes",
        "emr:ListMetricsToDisplay",
        "emr:ListNodeGroupSpecs",
        "emr:ListNotes",
        "emr:ListOperation",
        "emr:ListOperationActivity",
        "emr:ListOperationStageInstanceRelation",
        "emr:ListOperationTask",
        "emr:ListPrivateZones",
        "emr:ListRamRole",
        "emr:ListRamUsers",
        "emr:ListRdsDatabase",
        "emr:ListRdsInstance",
        "emr:ListRegions",
        "emr:ListReleaseVersions",
        "emr:ListResourcePoolForAdmin",
        "emr:ListScalingActivity",
        "emr:ListScalingActivityV2",
        "emr:ListScalingConfigItemV2",
        "emr:ListScalingGroupV2",
        "emr:ListSecurityGroups",
        "emr:ListServiceComponentTopology",
        "emr:ListSlsProject",
        "emr:ListStack",
        "emr:ListStackService",
        "emr:ListStreamingSqlQuery",
        "emr:ListSupportedServiceName",
        "emr:ListTagKeys",
        "emr:ListTagValues",
        "emr:ListUserStatistics",
        "emr:ListVpcInfo",
        "emr:ListVswitch",
        "emr:ManageUserPlatform",
        "emr:MetastoreCreateDatabase",
        "emr:MetastoreCreateKafkaTopic",
        "emr:MetastoreCreateTable",
        "emr:MetastoreDataPreview",
        "emr:MetastoreDeleteKafkaTopic",
        "emr:MetastoreDescribeDataSource",
        "emr:MetastoreDescribeDatabase",
        "emr:MetastoreDescribeKafkaConsumerGroup",
        "emr:MetastoreDescribeKafkaTopic",
        "emr:MetastoreDescribeTable",
        "emr:MetastoreDescribeTask",
        "emr:MetastoreDropDatabase",
        "emr:MetastoreDropTable",
        "emr:MetastoreListDataSource",
        "emr:MetastoreListDataSourceForAdmin",
        "emr:MetastoreListDatabases",
        "emr:MetastoreListKafkaConsumerGroup",
        "emr:MetastoreListKafkaTopic",
        "emr:MetastoreListKafkaTopicForAdmin",
        "emr:MetastoreListTablePartition",
        "emr:MetastoreListTables",
        "emr:MetastoreListTask",
        "emr:MetastoreRetryTask",
        "emr:MetastoreSearchTables",
        "emr:MetastoreSync",
        "emr:MetastoreUpdateKafkaTopic",
        "emr:MetastoreUpdateKafkaTopicBatch",
        "emr:MetastoreUpdateTable",
        "emr:MigrateJobs",
        "emr:ModifyAlertContact",
        "emr:ModifyAlertDingDingGroup",
        "emr:ModifyAlertUserGroup",
        "emr:ModifyClusterBootstrapAction",
        "emr:ModifyClusterTemplate",
        "emr:ModifyExecutionPlanBasicInfo",
        "emr:ModifyFlow",
        "emr:ModifyFlowProject",
        "emr:ModifyFlowProjectClusterSetting",
        "emr:ModifyFlowProjectGeneralSetting",
        "emr:ModifyFlowVariableCollection",
        "emr:ModifyHealthRuleConfig",
        "emr:ModifyJob",
        "emr:ModifyJobExecutionPlanFolder",
        "emr:ModifyJobExecutionPlanParam",
        "emr:ModifyScalingConfigItemV2",
        "emr:ModifyScalingGroupV2",
        "emr:ModifyScalingRule",
        "emr:ModifyUserChannelInfo",
        "emr:ModifyUserStatistics",
        "emr:PassRole",
        "emr:PreCheckClusterBootstrapAction",
        "emr:QueryGrafanaData",
        "emr:QueryInfoByToken",
        "emr:QueryLogKey",
        "emr:QueryPrice",
        "emr:QuerySlsMetricData",
        "emr:QueryTableData",
        "emr:QueryTrendData",
        "emr:QueryUserById",
        "emr:ReassignKafka",
        "emr:RefreshBackupList",
        "emr:RemoveBackupPlan",
        "emr:RemoveBackupRule",
        "emr:RemoveScalingConfigItemV2",
        "emr:RestoreBackup",
        "emr:RestoreFlowEntitySnapshot",
        "emr:ResumeExecutionPlanInstance",
        "emr:ResumeExecutionPlanScheduler",
        "emr:ResumeFlow",
        "emr:RetryCreateLdapUser",
        "emr:RetryCreateUserPassword",
        "emr:RetryExecutionPlan",
        "emr:RetryExecutionPlanInstance",
        "emr:RetryOperationActivity",
        "emr:RunApiTemplate",
        "emr:RunDisasterRecoveryPlan",
        "emr:RunDiskOpsActivity",
        "emr:RunExecutionPlan",
        "emr:RunNoteParagraphs",
        "emr:RunParagraph",
        "emr:RunScalingActionV2",
        "emr:SaveParagraph",
        "emr:SaveReport",
        "emr:StartFlow",
        "emr:StartKafkaPreferredReplicaElection",
        "emr:StopParagraph",
        "emr:SuspendExecutionPlanInstance",
        "emr:SuspendExecutionPlanScheduler",
        "emr:UninstallLibraries",
        "emr:UpdateClusterCost",
        "emr:UpdateClusterMetaCollect",
        "emr:UpdateDisasterRecoveryPlan",
        "emr:UpdateKafkaReassignParam",
        "emr:UpdateLibraryInstallTaskStatus",
        "emr:UpdateNodeMaintenanceStatus",
        "emr:UpgradeHistory",
        "emr:UploadCostBucket",
        "emr:describeOperationTask",
        "emr:queryTableData",
        "emr:queryTrendData"
      ],
      "Resource": "*"
    }
  ]
}
    Importante

    Un usuario o rol de RAM con permisos a nivel de cuenta puede gestionar todos los recursos dentro de la cuenta. Asegúrese de otorgar únicamente los permisos necesarios y siga estrictamente el principio de privilegio mínimo.

    Preguntas frecuentes

    Consultar el resource group de un recurso

    • Método 1: Haga clic en el nombre del recurso para abrir su página de detalles. En esta página se muestra el resource group.

    • Método 2: Inicie sesión en la consola de Resource Management y seleccione Resource Center > Resource Search. En el panel de navegación izquierdo, seleccione la cuenta a la que pertenece el recurso (de forma predeterminada, current account). Utilice los filtros para localizar el recurso deseado. A continuación, consulte su resource group.

    Ver los recursos de un producto en un resource group

    • Método 1: Inicie sesión en la consola de Resource Management y seleccione Resource Center > Resource Search. En el panel de navegación izquierdo, dentro de la sección de cuentas (de forma predeterminada, current account), haga clic en el nombre del resource group correspondiente. Después, en el panel derecho, seleccione el producto en la lista desplegable Select Resource Type para ver todos sus recursos dentro de ese resource group.

    • Método 2: Inicie sesión en la consola de Resource Management y seleccione Resource Groups > Resource Groups. Localice el resource group deseado y haga clic en Resource Management en la columna Actions. En la página Resource Management, seleccione el producto en la lista desplegable Product de la parte superior para consultar todos sus recursos en dicho resource group.

    Transferir varios recursos a un resource group de forma masiva

    Inicie sesión en la consola de Resource Management y seleccione Resource Groups > Resource Groups. En la fila del resource group de destino, haga clic en Resource Management dentro de la columna Actions para abrir la página de administración de recursos. Use los filtros para ubicar los recursos deseados. Marque las casillas de selección de la primera columna correspondientes a esos recursos, haga clic en Transfer Resource Group en la parte inferior y siga las instrucciones en pantalla para completar la transferencia.