Todos os produtos
Search

Este produto

    E-MapReduce:Grupos de recursos para controle refinado

    Central de documentação

    E-MapReduce:Grupos de recursos para controle refinado

    Última atualização: Jun 27, 2026

    Use grupos de recursos com o RAM para isolar recursos e implementar um gerenciamento de permissões refinado em uma conta Alibaba Cloud. Este tópico explica como o E-MapReduce oferece suporte a grupos de recursos e detalha as etapas para autorização no nível de grupo de recursos.

    Nota

    Autorização de grupo de recursos

    Os grupos de recursos permitem agrupar e gerenciar recursos dentro da sua conta Alibaba Cloud. Por exemplo, é possível criar um grupo de recursos para cada projeto e mover os recursos correspondentes para esse grupo, facilitando o gerenciamento centralizado. Para obter mais informações, consulte O que é um grupo de recursos?.

    Após agrupar seus recursos, conceda permissões no nível de grupo de recursos para entidades do RAM, como usuários RAM, grupos de usuários RAM ou funções RAM. Isso garante que uma entidade possa gerenciar apenas os recursos dentro daquele grupo específico. Para obter mais informações, consulte Agrupamento e autorização de recursos.

    Esse método de autorização oferece os seguintes benefícios:

    • Permissões refinadas: Cada identidade recebe exatamente as permissões necessárias para acessar os recursos, evitando a mistura de recursos de diferentes projetos em uma única conta.

    • Escalabilidade: Ao adicionar novos recursos, basta incluí-los no grupo de recursos. A identidade RAM herda automaticamente as permissões para os novos recursos.

    Conceder permissões no nível de grupo de recursos

    Este tópico descreve como conceder permissões a um RAM user para gerenciar recursos do E-MapReduce dentro de um grupo de recursos específico.

    1. Pré-requisitos

    1. Crie o RAM user que você pretende utilizar. Para obter mais informações, consulte Criar um usuário RAM.

    2. Crie um resource group e mova os recursos existentes para o grupo de recursos de destino. Para obter mais informações, consulte Criar um grupo de recursos, Transferência automática de recursos e Transferência manual de recursos.

    2. Conceder permissões no nível de grupo de recursos

    É possível conceder permissões no nível de grupo de recursos das seguintes maneiras:

    Resource management console

    Utilize o recurso de gerenciamento de permissões de um grupo de recursos para conceder permissões a um usuário RAM específico. Para obter mais informações, consulte Conceder permissões com escopo de grupo de recursos a uma identidade RAM.

    • Acesse o Resource Management console.

    • Na página Resource Group, localize o grupo de recursos de destino e clique em Permission Management na coluna Actions.

    • Na aba Permission Management, clique em Grant Permission.

    • No painel Grant Permission, configure a entidade e a política de permissões.

    • Clique em Confirm.

    RAM console

    No RAM console, conceda permissões no nível de grupo de recursos a um usuário RAM específico. Para obter mais informações, consulte Gerenciar permissões de um usuário RAM.

    • Acesse o RAM console com uma conta Alibaba Cloud ou como administrador RAM.

    • No painel de navegação à esquerda, escolha Identity Management > Users. Na página Users, localize o usuário RAM de destino e clique em Add Permissions na coluna Actions.

    • No painel Add Permissions, configure o seguinte:

      • Resource Scope: Selecione Resource Group.

      • Principal: Selecione o usuário RAM de destino.

      • Permission Policy: Selecione uma system policy ou uma custom policy existente. Para obter mais informações, consulte Criar uma política de permissões personalizada.

    • Clique em Confirm.

    Tipos de recursos compatíveis com grupos de recursos

    A tabela a seguir lista os tipos de recursos no E-MapReduce que oferecem suporte a grupos de recursos:

    Serviço de nuvem

    Código do serviço de nuvem

    Tipo de recurso

    E-MapReduce

    emr

    cluster: cluster

    E-MapReduce

    emr

    flowproject: project
    Nota

    Solicite suporte para outros tipos de recursos no Resource Group Console.

    image

    Operações sem autorização de grupo de recursos

    O E-MapReduce não oferece suporte à autorização no nível de grupo de recursos para as seguintes ações:

    Ação

    Descrição

    emr:AttachCluster

    -

    emr:AttachClusterForNote

    -

    emr:AuthRealName

    -

    emr:BindPrivateZoneVpc

    -

    emr:CheckAssumeRole

    -

    emr:CheckDLFCatalogAuth

    -

    emr:CheckProductActiveStatus

    -

    emr:CheckRenewClusterForAdmin

    -

    emr:CheckUserBalance

    -

    emr:CheckUserRole

    -

    emr:CleanupFlowEntitySnapshot

    -

    emr:CommitFlowEntitySnapshot

    -

    emr:CommonApiWhiteList

    -

    emr:CreateAlertContact

    -

    emr:CreateAlertDingDingGroup

    -

    emr:CreateAlertUserGroup

    -

    emr:CreateBackup

    -

    emr:CreateBackupPlan

    -

    emr:CreateBackupRule

    -

    emr:CreateCloudNativeCluster

    -

    emr:CreateClusterBootstrapAction

    -

    emr:CreateClusterCost

    -

    emr:CreateClusterEni

    -

    emr:CreateClusterTemplate

    -

    emr:CreateClusterV3

    -

    emr:CreateClusterWithTemplate

    -

    emr:CreateClusterWithTemplateForInternal

    -

    emr:CreateDisasterRecoveryPlan

    -

    emr:CreateExternalUsers

    -

    emr:CreateFlowProject

    -

    emr:CreateFlowProjectClusterSetting

    -

    emr:CreateJob

    -

    emr:CreateJobExecutionPlanFolder

    -

    emr:CreateLibrary

    -

    emr:CreateMetaTablePreviewTask

    -

    emr:CreateMetaTablePreviewTaskForOuter

    -

    emr:CreateNote

    -

    emr:CreateOnKubeCluster

    -

    emr:CreateParagraph

    -

    emr:CreateScalingGroupV2

    -

    emr:CreateUserPassword

    -

    emr:CreateUserStatistics

    -

    emr:CreateVerificationCode

    -

    emr:DeleteAlertContacts

    -

    emr:DeleteAlertDingDingGroups

    -

    emr:DeleteAlertUserGroups

    -

    emr:DeleteApiTemplate

    Exclui um modelo de API especificado.

    emr:DeleteApplication

    -

    emr:DeleteClusterBootstrapAction

    -

    emr:DeleteClusterScript

    -

    emr:DeleteClusterTemplate

    -

    emr:DeleteDiagnoseReport

    -

    emr:DeleteDisasterRecoveryPlan

    -

    emr:DeleteExecutionPlan

    -

    emr:DeleteFlowEditLock

    -

    emr:DeleteFlowProject

    -

    emr:DeleteFlowProjectById

    -

    emr:DeleteFlowProjectClusterSetting

    -

    emr:DeleteFlowProjectUser

    -

    emr:DeleteJob

    -

    emr:DeleteJobExecutionPlanFolder

    -

    emr:DeleteJobExecutionPlanParam

    -

    emr:DeleteLibraries

    -

    emr:DeleteNote

    -

    emr:DeleteParagraph

    -

    emr:DeleteScalingRule

    -

    emr:DeleteScalingTaskGroup

    -

    emr:DeleteUsers

    Exclui vários usuários.

    emr:DescribeAvailableInstanceType

    -

    emr:DescribeClusterForInternal

    -

    emr:DescribeClusterForOuter

    -

    emr:DescribeClusterHealth

    -

    emr:DescribeClusterOperationHostTaskLog

    -

    emr:DescribeClusterResourcePoolSchedulerTypeForAdmin

    -

    emr:DescribeClusterServiceConfigForAdmin

    -

    emr:DescribeClusterServiceConfigTagForAdmin

    -

    emr:DescribeClusterTemplate

    -

    emr:DescribeDiskOpsActivity

    -

    emr:DescribeEmrMainVersion

    -

    emr:DescribeExecutionPlan

    -

    emr:DescribeFlowAgentToken

    -

    emr:DescribeFlowAgentUser

    -

    emr:DescribeFlowEntitySnapshot

    -

    emr:DescribeFlowNodeInstanceContainerLog

    -

    emr:DescribeFlowProjectClusterSetting

    -

    emr:DescribeJob

    -

    emr:DescribeKafkaReassign

    -

    emr:DescribeLibraryDetail

    -

    emr:DescribeLibraryInstallTaskDetail

    -

    emr:DescribeMetaDataSourceForOuter

    -

    emr:DescribeMetaDatabaseForOuter

    -

    emr:DescribeMetaTableColumnForOuter

    -

    emr:DescribeMetaTablePartitionForOuter

    -

    emr:DescribeMetaTablePreviewTask

    -

    emr:DescribeMetaTablePreviewTaskForOuter

    -

    emr:DescribeNote

    -

    emr:DescribeOperationTask

    -

    emr:DescribeParagraph

    -

    emr:DescribeRdsInstance

    -

    emr:DescribeScalingActivity

    -

    emr:DescribeScalingCommonConfig

    -

    emr:DescribeScalingGroupInstanceV2

    -

    emr:DescribeScalingGroupV2

    -

    emr:DescribeScalingMetrics

    -

    emr:DescribeScalingRule

    -

    emr:DescribeScalingTaskGroup

    -

    emr:DescribeServiceConfigDefinition

    -

    emr:DescribeServiceHealth

    -

    emr:DescribeUserStatistics

    -

    emr:DetachAndReleaseClusterEni

    -

    emr:DetachCluster

    -

    emr:DetachClusterForNote

    -

    emr:DiffFlowEntitySnapshot

    -

    emr:DumpMetaDataSourceForOuter

    -

    emr:EnableApplication

    -

    emr:ExecuteFsAction

    -

    emr:ExecuteHiveSql

    -

    emr:ExistsUser

    -

    emr:GetApiTemplate

    Obtém a configuração detalhada de um modelo de API especificado.

    emr:GetApplicationActions

    -

    emr:GetAuditLogs

    -

    emr:GetBackPlanInfo

    -

    emr:GetBackupInfo

    -

    emr:GetBackupRuleInfo

    -

    emr:GetClusterCost

    -

    emr:GetCostUploadSignature

    -

    emr:GetDisasterRecoveryPlan

    -

    emr:GetDoctorComputeSummary

    Obtém os resultados da análise de uso de um único recurso em um cluster usando o EMR Doctor.

    emr:GetDoctorHBaseRegion

    Obtém informações sobre uma região do HBase.

    emr:GetDoctorHBaseRegionServer

    Obtém informações sobre um RegionServer do HBase.

    emr:GetDoctorHBaseTable

    Obtém informações sobre uma tabela do HBase.

    emr:GetDoctorHDFSCluster

    Obtém os resultados da análise de dados HDFS de um cluster usando o EMR Doctor.

    emr:GetDoctorHDFSDirectory

    Obtém os resultados da análise de dados de um diretório HDFS específico (até cinco níveis de profundidade) usando o EMR Doctor.

    emr:GetFlowAgentTrackStatus

    -

    emr:GetFlowAuditLogs

    -

    emr:GetFlowEntityRelationGraph

    -

    emr:GetMetadataTypeList

    -

    emr:GetOverview

    -

    emr:GetPriceForCreate

    -

    emr:GetPriceForCreateOnKubeCluster

    -

    emr:GetReleaseVersion

    -

    emr:GetSlsTempToken

    -

    emr:GetSupportApplications

    -

    emr:HasRamOauthPolicy

    -

    emr:IncreaseNodesDiskSize

    -

    emr:InnerCheckAckInstance

    -

    emr:InnerDescribeUserAccountStatus

    -

    emr:InstallLibraries

    -

    emr:KillExecutionJobInstance

    -

    emr:KillExecutionPlanInstance

    -

    emr:ListAdviceAction

    -

    emr:ListAlertContacts

    -

    emr:ListApmMetadata

    -

    emr:ListApplicationConfigVersions

    -

    emr:ListBackupPlans

    -

    emr:ListBackupRules

    -

    emr:ListBackups

    -

    emr:ListClusterAttach

    -

    emr:ListClusterBootstrapActions

    -

    emr:ListClusterCosts

    -

    emr:ListClusterForAdmin

    -

    emr:ListClusterForOuter

    -

    emr:ListClusterHostComponentForAdmin

    -

    emr:ListClusterOperationHostTask

    -

    emr:ListClusterServiceConfigHistoryForAdmin

    -

    emr:ListClusterTag

    -

    emr:ListClusterTagForAdmin

    -

    emr:ListClusterTypes

    -

    emr:ListComponentDefaultTopologies

    -

    emr:ListDependApplications

    -

    emr:ListDisasterRecoveryPlans

    -

    emr:ListDisasterRecoveryRecords

    -

    emr:ListDiskOpsEvents

    -

    emr:ListDoctorComputeSummary

    Obtém informações de uso de vários recursos do cluster com base em condições de filtro usando o EMR Doctor.

    emr:ListDoctorHBaseRegionServers

    Obtém informações sobre vários RegionServers do HBase.

    emr:ListDoctorHBaseTables

    Obtém informações sobre várias tabelas do HBase.

    emr:ListDoctorJobsStats

    Obtém informações básicas de resumo de tempo de execução de vários jobs usando o EMR Doctor.

    emr:ListEcsInstances

    -

    emr:ListEmrAvailableConfig

    -

    emr:ListEmrAvailableMetaType

    -

    emr:ListEmrAvailableResource

    -

    emr:ListEmrMainVersion

    -

    emr:ListEmrMainVersionServiceGroup

    -

    emr:ListEmrMainVersions

    -

    emr:ListExecutePlanMigrateInfo

    -

    emr:ListExecutionPlanInstanceTrend

    -

    emr:ListFailureJobExecutionInstances

    -

    emr:ListFeatures

    -

    emr:ListFlowClusterAllHosts

    -

    emr:ListFlowClusterK8sNamespace

    -

    emr:ListFlowEntitySnapshot

    -

    emr:ListFlowProjectClusterSetting

    -

    emr:ListFlowProjectUser

    -

    emr:ListGlobalConfigs

    -

    emr:ListHealthRule

    -

    emr:ListJobExecutionInstanceTrend

    -

    emr:ListJobExecutionInstances

    -

    emr:ListJobExecutionPlanHierarchy

    -

    emr:ListJobInstanceWorkers

    -

    emr:ListJobMigrateInfo

    -

    emr:ListKMSKeys

    -

    emr:ListKafkaReassign

    -

    emr:ListKafkaReassignForAdmin

    -

    emr:ListKafkaReassignTopic

    -

    emr:ListKafkaTopicStatistics

    -

    emr:ListKafkaTopicStatisticsForAdmin

    -

    emr:ListKeyPairNames

    -

    emr:ListLibraries

    -

    emr:ListLibraryInstallTasks

    -

    emr:ListLibraryStatus

    -

    emr:ListLocalDiskComponentInfo

    -

    emr:ListMetaCluster

    -

    emr:ListMetaDataSourceForOuter

    -

    emr:ListMetaDatabaseForOuter

    -

    emr:ListMetaTableColumnForOuter

    -

    emr:ListMetaTableForOuter

    -

    emr:ListMetaTablePartitionForOuter

    -

    emr:ListMetastoreTypes

    -

    emr:ListMetricsToDisplay

    -

    emr:ListNodeGroupSpecs

    -

    emr:ListNotes

    -

    emr:ListOperation

    -

    emr:ListOperationActivity

    -

    emr:ListOperationStageInstanceRelation

    -

    emr:ListOperationTask

    -

    emr:ListPrivateZones

    -

    emr:ListRamRole

    -

    emr:ListRamUsers

    -

    emr:ListRdsDatabase

    -

    emr:ListRdsInstance

    -

    emr:ListRegions

    -

    emr:ListReleaseVersions

    -

    emr:ListResourcePoolForAdmin

    -

    emr:ListScalingActivity

    -

    emr:ListScalingActivityV2

    -

    emr:ListScalingConfigItemV2

    -

    emr:ListScalingGroupV2

    -

    emr:ListSecurityGroups

    -

    emr:ListServiceComponentTopology

    -

    emr:ListSlsProject

    -

    emr:ListStack

    -

    emr:ListStackService

    -

    emr:ListStreamingSqlQuery

    -

    emr:ListSupportedServiceName

    -

    emr:ListTagKeys

    -

    emr:ListTagValues

    -

    emr:ListUserStatistics

    -

    emr:ListVpcInfo

    -

    emr:ListVswitch

    -

    emr:ManageUserPlatform

    -

    emr:MetastoreCreateDatabase

    -

    emr:MetastoreCreateKafkaTopic

    -

    emr:MetastoreCreateTable

    -

    emr:MetastoreDataPreview

    -

    emr:MetastoreDeleteKafkaTopic

    -

    emr:MetastoreDescribeDataSource

    -

    emr:MetastoreDescribeDatabase

    -

    emr:MetastoreDescribeKafkaConsumerGroup

    -

    emr:MetastoreDescribeKafkaTopic

    -

    emr:MetastoreDescribeTable

    -

    emr:MetastoreDescribeTask

    -

    emr:MetastoreDropDatabase

    -

    emr:MetastoreDropTable

    -

    emr:MetastoreListDataSource

    -

    emr:MetastoreListDataSourceForAdmin

    -

    emr:MetastoreListDatabases

    -

    emr:MetastoreListKafkaConsumerGroup

    -

    emr:MetastoreListKafkaTopic

    -

    emr:MetastoreListKafkaTopicForAdmin

    -

    emr:MetastoreListTablePartition

    -

    emr:MetastoreListTables

    -

    emr:MetastoreListTask

    -

    emr:MetastoreRetryTask

    -

    emr:MetastoreSearchTables

    -

    emr:MetastoreSync

    -

    emr:MetastoreUpdateKafkaTopic

    -

    emr:MetastoreUpdateKafkaTopicBatch

    -

    emr:MetastoreUpdateTable

    -

    emr:MigrateJobs

    -

    emr:ModifyAlertContact

    -

    emr:ModifyAlertDingDingGroup

    -

    emr:ModifyAlertUserGroup

    -

    emr:ModifyClusterBootstrapAction

    -

    emr:ModifyClusterTemplate

    -

    emr:ModifyExecutionPlanBasicInfo

    -

    emr:ModifyFlow

    -

    emr:ModifyFlowProject

    -

    emr:ModifyFlowProjectClusterSetting

    -

    emr:ModifyFlowProjectGeneralSetting

    -

    emr:ModifyFlowVariableCollection

    -

    emr:ModifyHealthRuleConfig

    -

    emr:ModifyJob

    -

    emr:ModifyJobExecutionPlanFolder

    -

    emr:ModifyJobExecutionPlanParam

    -

    emr:ModifyScalingConfigItemV2

    -

    emr:ModifyScalingGroupV2

    -

    emr:ModifyScalingRule

    -

    emr:ModifyUserChannelInfo

    -

    emr:ModifyUserStatistics

    -

    emr:PassRole

    -

    emr:PreCheckClusterBootstrapAction

    -

    emr:QueryGrafanaData

    -

    emr:QueryInfoByToken

    -

    emr:QueryLogKey

    -

    emr:QueryPrice

    -

    emr:QuerySlsMetricData

    -

    emr:QueryUserByToken

    -

    emr:QueryUserByUid

    -

    emr:QueryUserFromMns

    -

    emr:QueryUserPolicy

    -

    emr:RefreshClusterResourcePool

    -

    emr:ReleaseCluster

    -

    emr:ReleaseClusterForAdmin

    -

    emr:RemoveBackupRule

    -

    emr:RemoveDisasterRecoveryPlan

    -

    emr:RenewClusterForAdmin

    -

    emr:RerunExecutionPlan

    -

    emr:ResizeCluster

    -

    emr:ResizeClusterV2

    -

    emr:ResolveUser

    -

    emr:RestoreBackup

    -

    emr:RestoreDisasterRecovery

    -

    emr:ResumeExecutionPlan

    -

    emr:ResumeExecutionPlanScheduler

    -

    emr:RunApiTemplate

    Executa um modelo de API especificado.

    emr:RunClusterServiceActionForAdmin

    -

    emr:RunExecutionPlan

    -

    emr:RunNote

    -

    emr:RunParagraph

    -

    emr:SearchUsers

    -

    emr:StartApplication

    -

    emr:StopApplication

    -

    emr:SubmitFlow

    -

    emr:SubmitFlowJob

    -

    emr:SuspendExecutionPlan

    -

    emr:SuspendExecutionPlanScheduler

    -

    emr:SyncDataSourceSchema

    -

    emr:SyncDataSourceSchemaForAdmin

    -

    emr:SyncUserPassword

    -

    emr:SyncUserToFlow

    -

    emr:TagResources

    -

    emr:UninstallLibraries

    -

    emr:UnsubscribeUser

    -

    emr:UntagResources

    -

    emr:UpdateApiTemplate

    Atualiza um modelo de API especificado.

    emr:UpdateApplication

    -

    emr:UpdateBackupPlan

    -

    emr:UpdateBackupRule

    -

    emr:UpdateDisasterRecoveryPlan

    -

    emr:UpdateGlobalConfigs

    -

    Para operações que não oferecem suporte à autorização de grupo de recursos, definir o escopo do recurso como resource group level não terá efeito. Se um usuário RAM precisar dessas permissões, crie uma política personalizada e defina o escopo do recurso como account level.

    image.png Abaixo estão dois exemplos de políticas personalizadas. Ajuste o conteúdo conforme necessário.

    • Permite todas as operações somente leitura que não oferecem suporte à autorização no nível de grupo de recursos. O elemento Action lista essas operações.

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "emr:GetApiTemplate",
        "emr:GetApplicationActions",
        "emr:GetAuditLogs",
        "emr:GetBackPlanInfo",
        "emr:GetBackupInfo",
        "emr:GetBackupRuleInfo",
        "emr:GetClusterCost",
        "emr:GetCostUploadSignature",
        "emr:GetDisasterRecoveryPlan",
        "emr:GetDoctorComputeSummary",
        "emr:GetDoctorHBaseRegion",
        "emr:GetDoctorHBaseRegionServer",
        "emr:GetDoctorHBaseTable",
        "emr:GetDoctorHDFSCluster",
        "emr:GetDoctorHDFSDirectory",
        "emr:GetFlowAgentTrackStatus",
        "emr:GetFlowAuditLogs",
        "emr:GetFlowEntityRelationGraph",
        "emr:GetMetadataTypeList",
        "emr:GetOverview",
        "emr:GetPriceForCreate",
        "emr:GetPriceForCreateOnKubeCluster",
        "emr:GetReleaseVersion",
        "emr:GetSlsTempToken",
        "emr:GetSupportApplications",
        "emr:ListAdviceAction",
        "emr:ListAlertContacts",
        "emr:ListApmMetadata",
        "emr:ListApplicationConfigVersions",
        "emr:ListBackupPlans",
        "emr:ListBackupRules",
        "emr:ListBackups",
        "emr:ListClusterAttach",
        "emr:ListClusterBootstrapActions",
        "emr:ListClusterCosts",
        "emr:ListClusterForAdmin",
        "emr:ListClusterForOuter",
        "emr:ListClusterHostComponentForAdmin",
        "emr:ListClusterOperationHostTask",
        "emr:ListClusterServiceConfigHistoryForAdmin",
        "emr:ListClusterTag",
        "emr:ListClusterTagForAdmin",
        "emr:ListClusterTypes",
        "emr:ListComponentDefaultTopologies",
        "emr:ListDependApplications",
        "emr:ListDisasterRecoveryPlans",
        "emr:ListDisasterRecoveryRecords",
        "emr:ListDiskOpsEvents",
        "emr:ListDoctorComputeSummary",
        "emr:ListDoctorHBaseRegionServers",
        "emr:ListDoctorHBaseTables",
        "emr:ListDoctorJobsStats",
        "emr:ListEcsInstances",
        "emr:ListEmrAvailableConfig",
        "emr:ListEmrAvailableMetaType",
        "emr:ListEmrAvailableResource",
        "emr:ListEmrMainVersion",
        "emr:ListEmrMainVersionServiceGroup",
        "emr:ListEmrMainVersions",
        "emr:ListExecutePlanMigrateInfo",
        "emr:ListExecutionPlanInstanceTrend",
        "emr:ListFailureJobExecutionInstances",
        "emr:ListFeatures",
        "emr:ListFlowClusterAllHosts",
        "emr:ListFlowClusterK8sNamespace",
        "emr:ListFlowEntitySnapshot",
        "emr:ListFlowProjectClusterSetting",
        "emr:ListFlowProjectUser",
        "emr:ListGlobalConfigs",
        "emr:ListHealthRule",
        "emr:ListJobExecutionInstanceTrend",
        "emr:ListJobExecutionInstances",
        "emr:ListJobExecutionPlanHierarchy",
        "emr:ListJobInstanceWorkers",
        "emr:ListJobMigrateInfo",
        "emr:ListKMSKeys",
        "emr:ListKafkaReassign",
        "emr:ListKafkaReassignForAdmin",
        "emr:ListKafkaReassignTopic",
        "emr:ListKafkaTopicStatistics",
        "emr:ListKafkaTopicStatisticsForAdmin",
        "emr:ListKeyPairNames",
        "emr:ListLibraries",
        "emr:ListLibraryInstallTasks",
        "emr:ListLibraryStatus",
        "emr:ListLocalDiskComponentInfo",
        "emr:ListMetaCluster",
        "emr:ListMetaDataSourceForOuter",
        "emr:ListMetaDatabaseForOuter",
        "emr:ListMetaTableColumnForOuter",
        "emr:ListMetaTableForOuter",
        "emr:ListMetaTablePartitionForOuter",
        "emr:ListMetastoreTypes",
        "emr:ListMetricsToDisplay",
        "emr:ListNodeGroupSpecs",
        "emr:ListNotes",
        "emr:ListOperation",
        "emr:ListOperationActivity",
        "emr:ListOperationStageInstanceRelation",
        "emr:ListOperationTask",
        "emr:ListPrivateZones",
        "emr:ListRamRole",
        "emr:ListRamUsers",
        "emr:ListRdsDatabase",
        "emr:ListRdsInstance",
        "emr:ListRegions",
        "emr:ListReleaseVersions",
        "emr:ListResourcePoolForAdmin",
        "emr:ListScalingActivity",
        "emr:ListScalingActivityV2",
        "emr:ListScalingConfigItemV2",
        "emr:ListScalingGroupV2",
        "emr:ListSecurityGroups",
        "emr:ListServiceComponentTopology",
        "emr:ListSlsProject",
        "emr:ListStack",
        "emr:ListStackService",
        "emr:ListStreamingSqlQuery",
        "emr:ListSupportedServiceName",
        "emr:ListTagKeys",
        "emr:ListTagValues",
        "emr:ListUserStatistics",
        "emr:ListVpcInfo",
        "emr:ListVswitch",
        "emr:QueryGrafanaData",
        "emr:QueryInfoByToken",
        "emr:QueryLogKey",
        "emr:QueryPrice",
        "emr:QuerySlsMetricData",
        "emr:QueryTableData",
        "emr:QueryTrendData",
        "emr:QueryUserById"
      ],
      "Resource": "*"
    }
  ]
}

    • Permite todas as operações que não oferecem suporte à autorização no nível de grupo de recursos. O elemento Action lista essas operações.

      {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "emr:AttachCluster",
        "emr:AttachClusterForNote",
        "emr:AuthRealName",
        "emr:BindPrivateZoneVpc",
        "emr:CheckAssumeRole",
        "emr:CheckDLFCatalogAuth",
        "emr:CheckProductActiveStatus",
        "emr:CheckRenewClusterForAdmin",
        "emr:CheckUserBalance",
        "emr:CheckUserRole",
        "emr:CleanupFlowEntitySnapshot",
        "emr:CommitFlowEntitySnapshot",
        "emr:CommonApiWhiteList",
        "emr:CreateAlertContact",
        "emr:CreateAlertDingDingGroup",
        "emr:CreateAlertUserGroup",
        "emr:CreateBackup",
        "emr:CreateBackupPlan",
        "emr:CreateBackupRule",
        "emr:CreateCloudNativeCluster",
        "emr:CreateClusterBootstrapAction",
        "emr:CreateClusterCost",
        "emr:CreateClusterEni",
        "emr:CreateClusterTemplate",
        "emr:CreateClusterV3",
        "emr:CreateClusterWithTemplate",
        "emr:CreateClusterWithTemplateForInternal",
        "emr:CreateDisasterRecoveryPlan",
        "emr:CreateExternalUsers",
        "emr:CreateFlowProject",
        "emr:CreateFlowProjectClusterSetting",
        "emr:CreateJob",
        "emr:CreateJobExecutionPlanFolder",
        "emr:CreateLibrary",
        "emr:CreateMetaTablePreviewTask",
        "emr:CreateMetaTablePreviewTaskForOuter",
        "emr:CreateNote",
        "emr:CreateOnKubeCluster",
        "emr:CreateParagraph",
        "emr:CreateScalingGroupV2",
        "emr:CreateUserPassword",
        "emr:CreateUserStatistics",
        "emr:CreateVerificationCode",
        "emr:DeleteAlertContacts",
        "emr:DeleteAlertDingDingGroups",
        "emr:DeleteAlertUserGroups",
        "emr:DeleteApiTemplate",
        "emr:DeleteApplication",
        "emr:DeleteClusterBootstrapAction",
        "emr:DeleteClusterScript",
        "emr:DeleteClusterTemplate",
        "emr:DeleteDiagnoseReport",
        "emr:DeleteDisasterRecoveryPlan",
        "emr:DeleteExecutionPlan",
        "emr:DeleteFlowEditLock",
        "emr:DeleteFlowProject",
        "emr:DeleteFlowProjectById",
        "emr:DeleteFlowProjectClusterSetting",
        "emr:DeleteFlowProjectUser",
        "emr:DeleteJob",
        "emr:DeleteJobExecutionPlanFolder",
        "emr:DeleteJobExecutionPlanParam",
        "emr:DeleteLibraries",
        "emr:DeleteNote",
        "emr:DeleteParagraph",
        "emr:DeleteScalingRule",
        "emr:DeleteScalingTaskGroup",
        "emr:DeleteUsers",
        "emr:DescribeAvailableInstanceType",
        "emr:DescribeClusterForInternal",
        "emr:DescribeClusterForOuter",
        "emr:DescribeClusterHealth",
        "emr:DescribeClusterOperationHostTaskLog",
        "emr:DescribeClusterResourcePoolSchedulerTypeForAdmin",
        "emr:DescribeClusterServiceConfigForAdmin",
        "emr:DescribeClusterServiceConfigTagForAdmin",
        "emr:DescribeClusterTemplate",
        "emr:DescribeDiskOpsActivity",
        "emr:DescribeEmrMainVersion",
        "emr:DescribeExecutionPlan",
        "emr:DescribeFlowAgentToken",
        "emr:DescribeFlowAgentUser",
        "emr:DescribeFlowEntitySnapshot",
        "emr:DescribeFlowNodeInstanceContainerLog",
        "emr:DescribeFlowProjectClusterSetting",
        "emr:DescribeJob",
        "emr:DescribeKafkaReassign",
        "emr:DescribeLibraryDetail",
        "emr:DescribeLibraryInstallTaskDetail",
        "emr:DescribeMetaDataSourceForOuter",
        "emr:DescribeMetaDatabaseForOuter",
        "emr:DescribeMetaTableColumnForOuter",
        "emr:DescribeMetaTablePartitionForOuter",
        "emr:DescribeMetaTablePreviewTask",
        "emr:DescribeMetaTablePreviewTaskForOuter",
        "emr:DescribeNote",
        "emr:DescribeOperationTask",
        "emr:DescribeParagraph",
        "emr:DescribeRdsInstance",
        "emr:DescribeScalingActivity",
        "emr:DescribeScalingCommonConfig",
        "emr:DescribeScalingGroupInstanceV2",
        "emr:DescribeScalingGroupV2",
        "emr:DescribeScalingMetrics",
        "emr:DescribeScalingRule",
        "emr:DescribeScalingTaskGroup",
        "emr:DescribeServiceConfigDefinition",
        "emr:DescribeServiceHealth",
        "emr:DescribeUserStatistics",
        "emr:DetachAndReleaseClusterEni",
        "emr:DetachCluster",
        "emr:DetachClusterForNote",
        "emr:DiffFlowEntitySnapshot",
        "emr:DumpMetaDataSourceForOuter",
        "emr:EnableApplication",
        "emr:ExecuteFsAction",
        "emr:ExecuteHiveSql",
        "emr:ExistsUser",
        "emr:GetApiTemplate",
        "emr:GetApplicationActions",
        "emr:GetAuditLogs",
        "emr:GetBackPlanInfo",
        "emr:GetBackupInfo",
        "emr:GetBackupRuleInfo",
        "emr:GetClusterCost",
        "emr:GetCostUploadSignature",
        "emr:GetDisasterRecoveryPlan",
        "emr:GetDoctorComputeSummary",
        "emr:GetDoctorHBaseRegion",
        "emr:GetDoctorHBaseRegionServer",
        "emr:GetDoctorHBaseTable",
        "emr:GetDoctorHDFSCluster",
        "emr:GetDoctorHDFSDirectory",
        "emr:GetFlowAgentTrackStatus",
        "emr:GetFlowAuditLogs",
        "emr:GetFlowEntityRelationGraph",
        "emr:GetMetadataTypeList",
        "emr:GetOverview",
        "emr:GetPriceForCreate",
        "emr:GetPriceForCreateOnKubeCluster",
        "emr:GetReleaseVersion",
        "emr:GetSlsTempToken",
        "emr:GetSupportApplications",
        "emr:HasRamOauthPolicy",
        "emr:IncreaseNodesDiskSize",
        "emr:InnerCheckAckInstance",
        "emr:InnerDescribeUserAccountStatus",
        "emr:InstallLibraries",
        "emr:KillExecutionJobInstance",
        "emr:KillExecutionPlanInstance",
        "emr:ListAdviceAction",
        "emr:ListAlertContacts",
        "emr:ListApmMetadata",
        "emr:ListApplicationConfigVersions",
        "emr:ListBackupPlans",
        "emr:ListBackupRules",
        "emr:ListBackups",
        "emr:ListClusterAttach",
        "emr:ListClusterBootstrapActions",
        "emr:ListClusterCosts",
        "emr:ListClusterForAdmin",
        "emr:ListClusterForOuter",
        "emr:ListClusterHostComponentForAdmin",
        "emr:ListClusterOperationHostTask",
        "emr:ListClusterServiceConfigHistoryForAdmin",
        "emr:ListClusterTag",
        "emr:ListClusterTagForAdmin",
        "emr:ListClusterTypes",
        "emr:ListComponentDefaultTopologies",
        "emr:ListDependApplications",
        "emr:ListDisasterRecoveryPlans",
        "emr:ListDisasterRecoveryRecords",
        "emr:ListDiskOpsEvents",
        "emr:ListDoctorComputeSummary",
        "emr:ListDoctorHBaseRegionServers",
        "emr:ListDoctorHBaseTables",
        "emr:ListDoctorJobsStats",
        "emr:ListEcsInstances",
        "emr:ListEmrAvailableConfig",
        "emr:ListEmrAvailableMetaType",
        "emr:ListEmrAvailableResource",
        "emr:ListEmrMainVersion",
        "emr:ListEmrMainVersionServiceGroup",
        "emr:ListEmrMainVersions",
        "emr:ListExecutePlanMigrateInfo",
        "emr:ListExecutionPlanInstanceTrend",
        "emr:ListFailureJobExecutionInstances",
        "emr:ListFeatures",
        "emr:ListFlowClusterAllHosts",
        "emr:ListFlowClusterK8sNamespace",
        "emr:ListFlowEntitySnapshot",
        "emr:ListFlowProjectClusterSetting",
        "emr:ListFlowProjectUser",
        "emr:ListGlobalConfigs",
        "emr:ListHealthRule",
        "emr:ListJobExecutionInstanceTrend",
        "emr:ListJobExecutionInstances",
        "emr:ListJobExecutionPlanHierarchy",
        "emr:ListJobInstanceWorkers",
        "emr:ListJobMigrateInfo",
        "emr:ListKMSKeys",
        "emr:ListKafkaReassign",
        "emr:ListKafkaReassignForAdmin",
        "emr:ListKafkaReassignTopic",
        "emr:ListKafkaTopicStatistics",
        "emr:ListKafkaTopicStatisticsForAdmin",
        "emr:ListKeyPairNames",
        "emr:ListLibraries",
        "emr:ListLibraryInstallTasks",
        "emr:ListLibraryStatus",
        "emr:ListLocalDiskComponentInfo",
        "emr:ListMetaCluster",
        "emr:ListMetaDataSourceForOuter",
        "emr:ListMetaDatabaseForOuter",
        "emr:ListMetaTableColumnForOuter",
        "emr:ListMetaTableForOuter",
        "emr:ListMetaTablePartitionForOuter",
        "emr:ListMetastoreTypes",
        "emr:ListMetricsToDisplay",
        "emr:ListNodeGroupSpecs",
        "emr:ListNotes",
        "emr:ListOperation",
        "emr:ListOperationActivity",
        "emr:ListOperationStageInstanceRelation",
        "emr:ListOperationTask",
        "emr:ListPrivateZones",
        "emr:ListRamRole",
        "emr:ListRamUsers",
        "emr:ListRdsDatabase",
        "emr:ListRdsInstance",
        "emr:ListRegions",
        "emr:ListReleaseVersions",
        "emr:ListResourcePoolForAdmin",
        "emr:ListScalingActivity",
        "emr:ListScalingActivityV2",
        "emr:ListScalingConfigItemV2",
        "emr:ListScalingGroupV2",
        "emr:ListSecurityGroups",
        "emr:ListServiceComponentTopology",
        "emr:ListSlsProject",
        "emr:ListStack",
        "emr:ListStackService",
        "emr:ListStreamingSqlQuery",
        "emr:ListSupportedServiceName",
        "emr:ListTagKeys",
        "emr:ListTagValues",
        "emr:ListUserStatistics",
        "emr:ListVpcInfo",
        "emr:ListVswitch",
        "emr:ManageUserPlatform",
        "emr:MetastoreCreateDatabase",
        "emr:MetastoreCreateKafkaTopic",
        "emr:MetastoreCreateTable",
        "emr:MetastoreDataPreview",
        "emr:MetastoreDeleteKafkaTopic",
        "emr:MetastoreDescribeDataSource",
        "emr:MetastoreDescribeDatabase",
        "emr:MetastoreDescribeKafkaConsumerGroup",
        "emr:MetastoreDescribeKafkaTopic",
        "emr:MetastoreDescribeTable",
        "emr:MetastoreDescribeTask",
        "emr:MetastoreDropDatabase",
        "emr:MetastoreDropTable",
        "emr:MetastoreListDataSource",
        "emr:MetastoreListDataSourceForAdmin",
        "emr:MetastoreListDatabases",
        "emr:MetastoreListKafkaConsumerGroup",
        "emr:MetastoreListKafkaTopic",
        "emr:MetastoreListKafkaTopicForAdmin",
        "emr:MetastoreListTablePartition",
        "emr:MetastoreListTables",
        "emr:MetastoreListTask",
        "emr:MetastoreRetryTask",
        "emr:MetastoreSearchTables",
        "emr:MetastoreSync",
        "emr:MetastoreUpdateKafkaTopic",
        "emr:MetastoreUpdateKafkaTopicBatch",
        "emr:MetastoreUpdateTable",
        "emr:MigrateJobs",
        "emr:ModifyAlertContact",
        "emr:ModifyAlertDingDingGroup",
        "emr:ModifyAlertUserGroup",
        "emr:ModifyClusterBootstrapAction",
        "emr:ModifyClusterTemplate",
        "emr:ModifyExecutionPlanBasicInfo",
        "emr:ModifyFlow",
        "emr:ModifyFlowProject",
        "emr:ModifyFlowProjectClusterSetting",
        "emr:ModifyFlowProjectGeneralSetting",
        "emr:ModifyFlowVariableCollection",
        "emr:ModifyHealthRuleConfig",
        "emr:ModifyJob",
        "emr:ModifyJobExecutionPlanFolder",
        "emr:ModifyJobExecutionPlanParam",
        "emr:ModifyScalingConfigItemV2",
        "emr:ModifyScalingGroupV2",
        "emr:ModifyScalingRule",
        "emr:ModifyUserChannelInfo",
        "emr:ModifyUserStatistics",
        "emr:PassRole",
        "emr:PreCheckClusterBootstrapAction",
        "emr:QueryGrafanaData",
        "emr:QueryInfoByToken",
        "emr:QueryLogKey",
        "emr:QueryPrice",
        "emr:QuerySlsMetricData",
        "emr:QueryTableData",
        "emr:QueryTrendData",
        "emr:QueryUserById",
        "emr:ReassignKafka",
        "emr:RefreshBackupList",
        "emr:RemoveBackupPlan",
        "emr:RemoveBackupRule",
        "emr:RemoveScalingConfigItemV2",
        "emr:RestoreBackup",
        "emr:RestoreFlowEntitySnapshot",
        "emr:ResumeExecutionPlanInstance",
        "emr:ResumeExecutionPlanScheduler",
        "emr:ResumeFlow",
        "emr:RetryCreateLdapUser",
        "emr:RetryCreateUserPassword",
        "emr:RetryExecutionPlan",
        "emr:RetryExecutionPlanInstance",
        "emr:RetryOperationActivity",
        "emr:RunApiTemplate",
        "emr:RunDisasterRecoveryPlan",
        "emr:RunDiskOpsActivity",
        "emr:RunExecutionPlan",
        "emr:RunNoteParagraphs",
        "emr:RunParagraph",
        "emr:RunScalingActionV2",
        "emr:SaveParagraph",
        "emr:SaveReport",
        "emr:StartFlow",
        "emr:StartKafkaPreferredReplicaElection",
        "emr:StopParagraph",
        "emr:SuspendExecutionPlanInstance",
        "emr:SuspendExecutionPlanScheduler",
        "emr:UninstallLibraries",
        "emr:UpdateClusterCost",
        "emr:UpdateClusterMetaCollect",
        "emr:UpdateDisasterRecoveryPlan",
        "emr:UpdateKafkaReassignParam",
        "emr:UpdateLibraryInstallTaskStatus",
        "emr:UpdateNodeMaintenanceStatus",
        "emr:UpgradeHistory",
        "emr:UploadCostBucket",
        "emr:describeOperationTask",
        "emr:queryTableData",
        "emr:queryTrendData"
      ],
      "Resource": "*"
    }
  ]
}
    Importante

    Um usuário RAM ou função RAM com permissões no nível de conta pode gerenciar todos os recursos dentro da conta. Certifique-se de conceder apenas as permissões necessárias e siga rigorosamente o princípio do menor privilégio.

    Perguntas frequentes

    Verificar o grupo de recursos de um recurso

    • Método 1: Clique em no nome do recurso para acessar sua página de detalhes. Nessa página, visualize o grupo de recursos.

    • Método 2: Acesse o Resource Management console e clique em Resource Center > Resource Search. No painel de navegação à esquerda, selecione a conta à qual o recurso pertence (o padrão é current account). Use os filtros para localizar o recurso de destino e visualizar seu grupo de recursos.

    Visualizar recursos de produto em um grupo de recursos

    • Método 1: Acesse o Resource Management console e clique em Resource Center > Resource Search. No painel de navegação à esquerda, na seção da conta (o padrão é current account), clique em no nome do grupo de recursos de destino. Em seguida, à direita, selecione o produto na lista suspensa Select Resource Type para visualizar todos os seus recursos nesse grupo.

    • Método 2: Acesse o Resource Management console e clique em Resource Groups > Resource Groups. Localize o grupo de recursos de destino e clique em Resource Management na coluna Actions. Na página Resource Management, selecione o produto na lista suspensa Product na parte superior para visualizar todos os seus recursos no grupo.

    Transferir recursos em massa para um grupo de recursos

    Acesse o Resource Management console e clique em Resource Groups > Resource Groups. Na linha do grupo de recursos de destino, clique em Resource Management na coluna Actions para acessar a página Resource Management. Utilize os filtros para localizar os recursos desejados. Marque as caixas de seleção dos recursos na primeira coluna, clique em Transfer Resource Group na parte inferior e siga as instruções na tela para concluir a transferência.