當您使用資源群組對資源進行分組管理時,可以結合存取控制(RAM),在單個阿里雲帳號內實現資源的隔離和精微調權限管理。本文總結了應用即時監控服務ARMS對資源群組的支援情況,以及資源群組層級的授權操作步驟。
-
只有支援資源群組的資源類型和支援資源群組層級授權的操作,資源群組層級授權才會生效。
-
對於不支援資源群組的資源類型,授予資源群組範圍的許可權將無效。在選擇資源範圍時,請選擇帳號層級,進行帳號層級授權。具體操作,請參見不支援資源群組層級授權的操作。
資源群組授權的工作原理
您可以使用資源群組(Resource Group)對阿里雲帳號內的資源進行分組管理。例如,為不同的專案建立對應的資源群組,並將資源轉移到對應的組中,以便集中管理各專案的資源。更多資訊,請參見什麼是資源群組。
在完成資源分組後,您可以為不同的RAM授權主體(RAM使用者、RAM使用者組或RAM角色)授予指定資源群組範圍的許可權,從而限定這個授權主體只能管理該資源群組內的資源。更多資訊,請參見資源分組和授權。
這種授權方式的優點有:
-
許可權精細化:確保每個身份能獲得最準確的資源存取權限,避免帳號下的多重專案的資源混合管理。
-
良好的擴充性:後續新增資源時,只需將其加入該資源群組,RAM身份便會自動獲得新資源的相應許可權,無需再次授權。
為RAM使用者授予資源群組層級的許可權
下面以RAM使用者為例,介紹授予指定資源群組內應用即時監控服務ARMS資源許可權的操作步驟。
1. 前置步驟
2. 進行資源群組層級授權
您可以通過以下任一方式進行資源群組層級授權。
方式一:在資源管理主控台中授權
通過資源群組的許可權管理功能為指定 RAM 使用者授權。詳情操作可參見為RAM身份授予資源群組範圍的許可權。
方式二:在 RAM 控制台中授權
通過RAM控制台為指定 RAM 使用者進行資源群組層級授權。詳細操作可參見為RAM使用者授權。
支援資源群組的資源類型
應用即時監控服務ARMS支援資源群組的資源類型如下表所示:
|
雲端服務 |
雲端服務代碼 |
資源類型 |
|
應用即時監控服務ARMS |
arms |
application : 應用監控App |
|
應用即時監控服務ARMS |
arms |
grafanaworkspace : Grafana服務 |
|
應用即時監控服務ARMS |
arms |
prometheus : 監控服務 |
|
應用即時監控服務ARMS |
arms |
synthetictask : 雲撥測任務 |
|
應用即時監控服務ARMS |
arms |
web : 前端監控App |
對於暫不支援資源群組的資源類型,如有需要,您可以在資源群組控制台提交反饋。

不支援資源群組層級授權的操作
應用即時監控服務ARMS中不支援資源群組層級授權的操作(Action)如下:
|
操作(Action) |
操作描述 |
|
arms:AddBlackboxTask |
- |
|
arms:AddCmsProduct |
- |
|
arms:AddGrafana |
- |
|
arms:AddIntegration |
- |
|
arms:AddPrometheusGlobalView |
- |
|
arms:AddPrometheusGlobalViewByAliClusterIds |
- |
|
arms:AddRecordingRule |
- |
|
arms:AddTask |
- |
|
arms:AddUser |
- |
|
arms:AlarmInsightsFeedback |
- |
|
arms:AllTagResources |
- |
|
arms:AppendInstancesToPrometheusGlobalView |
- |
|
arms:ApplyScenario |
- |
|
arms:BatchEmailVerifyLink |
- |
|
arms:BatchUpdateConvergeConfig |
- |
|
arms:BatchVerifyLink |
- |
|
arms:BlockAlarmNotification |
- |
|
arms:CMonitorCloudInstances |
- |
|
arms:CMonitorRegister |
- |
|
arms:CheckArmsDefaultSLR |
- |
|
arms:CheckCommercialStatus |
- |
|
arms:CheckDataConsistency |
- |
|
arms:CheckGlobalView |
- |
|
arms:CheckIntegrationYaml |
- |
|
arms:CheckServiceLinkedRoleForDeleting |
- |
|
arms:CheckServiceStatus |
- |
|
arms:CheckXtraceDefaultSLR |
- |
|
arms:ClaimAlarm |
- |
|
arms:CloseAlarm |
- |
|
arms:ConfigAgentLabel |
- |
|
arms:ConfigApp |
- |
|
arms:CreateAlertContact |
- |
|
arms:CreateAlertContactGroup |
- |
|
arms:CreateAlertTemplate |
- |
|
arms:CreateContact |
- |
|
arms:CreateContactGroup |
- |
|
arms:CreateContactSchedule |
- |
|
arms:CreateDispatchRule |
- |
|
arms:CreateDump |
- |
|
arms:CreateEscalation |
- |
|
arms:CreateEscalationPolicy |
- |
|
arms:CreateEvent |
- |
|
arms:CreateHeapDump |
- |
|
arms:CreateImmediateSyntheticTask |
- |
|
arms:CreateIncidentWorkFlow |
- |
|
arms:CreateIntegration |
- |
|
arms:CreateNotificationPolicy |
- |
|
arms:CreateOnCallSchedule |
- |
|
arms:CreateOrUpdateAlertTemplate |
- |
|
arms:CreateProm |
- |
|
arms:CreateRumAppGroup |
- |
|
arms:CreateRumUploadFileUrl |
- |
|
arms:CreateSecurityAuth |
- |
|
arms:CreateServiceDiscoveryConfig |
- |
|
arms:CreateTemplatesByAlertRules |
- |
|
arms:CreateWebhook |
- |
|
arms:DelResourcesByAccountId |
- |
|
arms:DeleteAlert |
- |
|
arms:DeleteAlertContact |
- |
|
arms:DeleteAlertContactGroup |
- |
|
arms:DeleteAlertTemplate |
- |
|
arms:DeleteAlertTemplates |
- |
|
arms:DeleteApp |
- |
|
arms:DeleteCmsExporter |
- |
|
arms:DeleteCmsProduct |
- |
|
arms:DeleteConfig |
- |
|
arms:DeleteContact |
- |
|
arms:DeleteContactGroup |
- |
|
arms:DeleteContactLink |
- |
|
arms:DeleteContactMember |
- |
|
arms:DeleteContactSchedule |
- |
|
arms:DeleteDeliverTask |
- |
|
arms:DeleteDispatchRule |
- |
|
arms:DeleteDump |
- |
|
arms:DeleteEscalation |
- |
|
arms:DeleteEscalationPolicy |
- |
|
arms:DeleteHeapDump |
- |
|
arms:DeleteIncidentWorkFlow |
- |
|
arms:DeleteIntegration |
- |
|
arms:DeleteIntegrationCustomJob |
- |
|
arms:DeleteInteractiveDashboard |
- |
|
arms:DeleteNotificationPolicy |
- |
|
arms:DeleteOnCallSchedule |
- |
|
arms:DeleteRumUploadFile |
- |
|
arms:DeleteScenario |
- |
|
arms:DeleteSilencePolicy |
- |
|
arms:DeleteSourceMap |
- |
|
arms:DeleteTask |
- |
|
arms:DeleteTraceAppUserMethod |
- |
|
arms:Describe |
- |
|
arms:DescribeAttacks |
- |
|
arms:DescribeBusinessLocation |
- |
|
arms:DescribeDispatchRule |
- |
|
arms:DescribeLicenseKey |
- |
|
arms:DescribeMetric |
- |
|
arms:DescribeMetricCardinality |
- |
|
arms:DescribeRegions |
- |
|
arms:DescribeTagsOfDuplicateRemoval |
- |
|
arms:DescribeTraceDatasource |
- |
|
arms:DescribeTraceEndpoint |
- |
|
arms:DescribeTraceLicenseKey |
- |
|
arms:DescribeTraceLocation |
- |
|
arms:DescribeTraceQuality |
- |
|
arms:DescribeTraceResourcesStatus |
- |
|
arms:DescribeXTraceConfig |
- |
|
arms:DescribeXTraceUpgradeStatus |
- |
|
arms:DiagnoseTask |
- |
|
arms:DisableAlertTemplate |
- |
|
arms:DisableDeliverTask |
- |
|
arms:DoConvergeAction |
- |
|
arms:DoInsightsAction |
- |
|
arms:EmailVerifyLink |
- |
|
arms:EnableAlertTemplate |
- |
|
arms:EnableDeliverTask |
- |
|
arms:EnableGraphResource |
- |
|
arms:EnableServiceAccessForPrometheus |
- |
|
arms:ExportAlertTemplates |
- |
|
arms:ExportPrometheusRules |
- |
|
arms:GeneralQuery |
- |
|
arms:GetATPAccessURL |
- |
|
arms:GetAgentDownloadUrl |
- |
|
arms:GetAgentInfo |
- |
|
arms:GetAgentInfoByPage |
- |
|
arms:GetAgentUpgradeInfo |
- |
|
arms:GetAlarmHistories |
- |
|
arms:GetAlert |
- |
|
arms:GetAlertRulesByPage |
- |
|
arms:GetAlertsCommercialStatus |
- |
|
arms:GetAppApiPageInfo |
- |
|
arms:GetAppCenterComponent |
- |
|
arms:GetAppJVMConfig |
- |
|
arms:GetAppList |
- |
|
arms:GetAppLogStoreCorrelation |
- |
|
arms:GetApplication |
- |
|
arms:GetArmsInfo |
- |
|
arms:GetAssumeRoleCredentials |
- |
|
arms:GetBubbleUpBrief |
- |
|
arms:GetBubbleUpReport |
- |
|
arms:GetChanelLink |
- |
|
arms:GetChannelLink |
- |
|
arms:GetCloudEnvironmentId |
- |
|
arms:GetCloudMonitorInstallStatus |
- |
|
arms:GetCloudMonitorMetric |
- |
|
arms:GetCloudMonitorThumbnail |
- |
|
arms:GetCloudProductHealthCheckSetting |
- |
|
arms:GetCloudProductHealthStatus |
- |
|
arms:GetClusterInfo |
- |
|
arms:GetClusterState |
- |
|
arms:GetCmsInstallStatus |
- |
|
arms:GetCmsMetric |
- |
|
arms:GetCmsPurchaseStatus |
- |
|
arms:GetCmsThumbnail |
- |
|
arms:GetCommercialStatus |
- |
|
arms:GetCommercialStatusV2 |
- |
|
arms:GetConsoleBaseInfo |
- |
|
arms:GetContactScheduleDetail |
- |
|
arms:GetConvergeConfig |
- |
|
arms:GetCurrentEnv |
- |
|
arms:GetDasEvents |
- |
|
arms:GetDashboardList |
- |
|
arms:GetDeliverTargetDetail |
- |
|
arms:GetDeliverTask |
- |
|
arms:GetDirectInstallStatus |
- |
|
arms:GetDirectMetric |
- |
|
arms:GetDirectThumbnail |
- |
|
arms:GetEscalationDetail |
- |
|
arms:GetEscalationDispatch |
- |
|
arms:GetEvent |
- |
|
arms:GetExceptionMetadata |
- |
|
arms:GetExporterListByIntegration |
- |
|
arms:GetGlobalViewUrl |
- |
|
arms:GetGrafanaDatasource |
- |
|
arms:GetGraphResourceStatus |
- |
|
arms:GetHeapDumpList |
- |
|
arms:GetImmediateSyntheticTask |
- |
|
arms:GetIntegrationCluster |
- |
|
arms:GetIntegrationInfo |
- |
|
arms:GetIntegrationState |
- |
|
arms:GetIntegrationToken |
- |
|
arms:GetJaegerServiceOperations |
- |
|
arms:GetJaegerServices |
- |
|
arms:GetJavaAgentDownloadUrl |
- |
|
arms:GetLokiCluster |
- |
|
arms:GetMetricDatas |
- |
|
arms:GetMetricQuantity |
- |
|
arms:GetMetricStatistics |
- |
|
arms:GetModuleConfig |
- |
|
arms:GetMultipleTrace |
- |
|
arms:GetOTTraceBriefInfos |
- |
|
arms:GetOTTraceCallstack |
- |
|
arms:GetOTTraceCallstackOverview |
- |
|
arms:GetOTTraceDetails |
- |
|
arms:GetOldPrometheusRuleCount |
- |
|
arms:GetOnCallSchedulesDetail |
- |
|
arms:GetPodAnnotation |
- |
|
arms:GetProfilingData |
- |
|
arms:GetPromUserPref |
- |
|
arms:GetPrometheusAgentInfoAll |
- |
|
arms:GetPrometheusApiToken |
- |
|
arms:GetPrometheusRemoteWrite |
- |
|
arms:GetPubInfo |
- |
|
arms:GetRAMStatus |
- |
|
arms:GetRemoteUrl |
- |
|
arms:GetRepSize |
- |
|
arms:GetResourceConsumptionDashboardUrl |
- |
|
arms:GetRetcodeDataByQuery |
- |
|
arms:GetRetcodeDatas |
- |
|
arms:GetRetcodeLogstore |
- |
|
arms:GetRetcodeShareUrl |
- |
|
arms:GetRumData |
- |
|
arms:GetRumExceptionStack |
- |
|
arms:GetRumGroups |
- |
|
arms:GetRumOcuStatisticData |
- |
|
arms:GetRumUploadFilePolicyStatus |
- |
|
arms:GetRumUploadFiles |
- |
|
arms:GetSLSStatus |
- |
|
arms:GetSlsProjectInfo |
- |
|
arms:GetSourceMapInfo |
- |
|
arms:GetSqlMetadata |
- |
|
arms:GetStack |
- |
|
arms:GetStat |
- |
|
arms:GetStsCreDential |
- |
|
arms:GetSupportEnv |
- |
|
arms:GetSyntheticCommercialDetailAndUsageEstimate |
- |
|
arms:GetSyntheticCommercialStatus |
- |
|
arms:GetSyntheticGrafanaDashboardUrl |
- |
|
arms:GetSyntheticMonitors |
- |
|
arms:GetSyntheticPrometheusCluster |
- |
|
arms:GetTagKey |
- |
|
arms:GetTagResourceSystemTags |
- |
|
arms:GetTagVal |
- |
|
arms:GetThumbnailUrlListByIntegration |
- |
|
arms:GetToCheckArmsDefaultSLR |
- |
|
arms:GetTrace |
- |
|
arms:GetTraceAggr |
- |
|
arms:GetTraceAppConfigTemplate |
- |
|
arms:GetTraceApps |
- |
|
arms:GetTraceChain |
- |
|
arms:GetTraceExplorerStatus |
- |
|
arms:GetTraceGroupBy |
- |
|
arms:GetTraceRegions |
- |
|
arms:GetTraces |
- |
|
arms:GetUserArmsPromClusterList |
- |
|
arms:GetUserDatasourceConfig4Sls |
- |
|
arms:GetUserInfo |
- |
|
arms:GetUserWhiteListStatus |
- |
|
arms:HealthCheck |
- |
|
arms:HighPriorityAlertClearRatio |
- |
|
arms:ImportAlertTemplates |
- |
|
arms:InitTraceResource |
- |
|
arms:InnerDeleteContactGroup |
- |
|
arms:InnerDeleteIMRobot |
- |
|
arms:InnerDispatchContactOptions |
- |
|
arms:InnerDispatchDetail |
- |
|
arms:InnerDispatchRuleCreate |
- |
|
arms:InnerFetchContactByArmsContactId |
- |
|
arms:InnerFetchContactGroupByArmsContactGroupId |
- |
|
arms:InnerGetUserTTSReissue |
- |
|
arms:InnerNotifyObjectContactList |
- |
|
arms:InnerUpdateAlertContact |
- |
|
arms:InnerUpdateAlertWebhook |
- |
|
arms:InnerUpdateContactGroup |
- |
|
arms:InnerUpdateDispatch |
- |
|
arms:InnerUpdateIMRobot |
- |
|
arms:InnerUpdateTTSReissue |
- |
|
arms:InsertConfig |
- |
|
arms:InsightsCreateInspectJob |
- |
|
arms:InsightsFeedbackJobReport |
- |
|
arms:InsightsGetInspectJobReport |
- |
|
arms:InsightsStopInspectJob |
- |
|
arms:InstallCloudMonitorProduct |
- |
|
arms:InstallCmsExporter |
- |
|
arms:InstallExporterByIntegration |
- |
|
arms:InstallMysqlExporter |
- |
|
arms:InvokeCenterPop |
- |
|
arms:InvokeRulerManager |
- |
|
arms:KeepAllCommercialTrace |
- |
|
arms:ListActivatedAlerts |
- |
|
arms:ListAlertContact |
- |
|
arms:ListAlertContactGroup |
- |
|
arms:ListAlertContactGroupOption |
- |
|
arms:ListAlertEvents |
- |
|
arms:ListAlertTemplates |
- |
|
arms:ListAlertWebhookContact |
- |
|
arms:ListAllAlertContact |
- |
|
arms:ListAllIMRobot |
- |
|
arms:ListApplicationInstance |
- |
|
arms:ListCloudMonitorCluster |
- |
|
arms:ListCloudMonitorClusterMetric |
- |
|
arms:ListCloudMonitorClusterProduct |
- |
|
arms:ListCloudMonitorClusterThumbnail |
- |
|
arms:ListCloudMonitorMigrateProduct |
- |
|
arms:ListCluster |
- |
|
arms:ListClusterApmWorkload |
- |
|
arms:ListClusterFromGrafana |
- |
|
arms:ListCmsInstances |
- |
|
arms:ListContactSchedule |
- |
|
arms:ListDashBoardsByIntegrationType |
- |
|
arms:ListDashboardsByName |
- |
|
arms:ListDeliverTask |
- |
|
arms:ListDispatchRule |
- |
|
arms:ListEntityDashboard |
- |
|
arms:ListEntityForPage |
- |
|
arms:ListEntityTypeAndCount |
- |
|
arms:ListEnvironmentResources |
- |
|
arms:ListEventBridgeIntegrations |
- |
|
arms:ListExporterMetrics |
- |
|
arms:ListFeatureFlags |
- |
|
arms:ListGrafanaInstance |
- |
|
arms:ListGrafarmsDashboard |
- |
|
arms:ListIMRobot |
- |
|
arms:ListImmediateSyntheticTasks |
- |
|
arms:ListIntegration |
- |
|
arms:ListLLMSessions |
- |
|
arms:ListMetricLabelValues |
- |
|
arms:ListMetricNames |
- |
|
arms:ListMetrics |
- |
|
arms:ListNotInstallCluster |
- |
|
arms:ListProbes |
- |
|
arms:ListPromAlertCluster |
- |
|
arms:ListPromCluster |
- |
|
arms:ListPromClusters |
- |
|
arms:ListPromFrontVars |
- |
|
arms:ListPrometheusAlertMetrics |
- |
|
arms:ListPrometheusAlertTemplates |
- |
|
arms:ListPrometheusDeliverCluster |
- |
|
arms:ListPrometheusGlobalView |
- |
|
arms:ListPrometheusInstance |
- |
|
arms:ListPrometheusInstances |
- |
|
arms:ListPrometheusRemoteWrites |
- |
|
arms:ListRaspApps |
- |
|
arms:ListResource |
- |
|
arms:ListScenario |
- |
|
arms:ListServerlessTopNApps |
- |
|
arms:ListSyntheticDetail |
- |
|
arms:ListSyntheticMonitorGroups |
- |
|
arms:ListSyntheticTags |
- |
|
arms:ListUserLogProjects |
- |
|
arms:ListUserLogSavedSearches |
- |
|
arms:ListUserLogstoreIndexes |
- |
|
arms:ListUserLogstores |
- |
|
arms:ListVpcClusterPage |
- |
|
arms:ListVpcSecurityGroupIds |
- |
|
arms:OpenArmsDefaultSLR |
- |
|
arms:OpenArmsService |
- |
|
arms:OpenArmsServiceSecondVersion |
- |
|
arms:OpenVCluster |
- |
|
arms:OpenXtraceDefaultSLR |
- |
|
arms:PreviewContactSchedule |
- |
|
arms:QueryAPMMetrics |
- |
|
arms:QueryAhasMachineMetric |
- |
|
arms:QueryAppMetadata |
- |
|
arms:QueryAuditLogs |
- |
|
arms:QueryCommercialFeeData |
- |
|
arms:QueryCommercialResourcePackage |
- |
|
arms:QueryCommercialUsage |
- |
|
arms:QueryCommercialUsageLimit |
- |
|
arms:QueryConfig |
- |
|
arms:QueryDataSet |
- |
|
arms:QueryEvents |
- |
|
arms:QueryHotSpotData |
- |
|
arms:QueryLLMSessionDetail |
- |
|
arms:QueryLLMTraceDetail |
- |
|
arms:QueryMetric |
- |
|
arms:QueryMetricByPage |
- |
|
arms:QueryProductConfig |
- |
|
arms:QueryProfilingData |
- |
|
arms:QueryProfilingWhitelist |
- |
|
arms:QueryPromInstallStatus |
- |
|
arms:QueryPrometheusFeeData |
- |
|
arms:QueryServiceDetailConsoleInfo |
- |
|
arms:QuerySyntheticAlertEventCount |
- |
|
arms:QuerySyntheticMetricData |
- |
|
arms:QueryTopology |
- |
|
arms:QueryTraces |
- |
|
arms:RefreshDashboardCluster |
- |
|
arms:RegisterCloudProduct |
- |
|
arms:ReinstallFlinkCluster |
- |
|
arms:RemoveSourcesFromPrometheusGlobalView |
- |
|
arms:ReportAgentDaemonStatus |
- |
|
arms:ReportEvent |
- |
|
arms:ReportJavaAttachStatus |
- |
|
arms:ResetConvergeConfig |
- |
|
arms:RestartPrometheusAgent |
- |
|
arms:SaveAlertTemplate |
- |
|
arms:SaveCommercialFeeChange |
- |
|
arms:SaveCommercialUsageLimit |
- |
|
arms:SaveContactGroup |
- |
|
arms:SaveContactMember |
- |
|
arms:SaveDataset |
- |
|
arms:SaveInteractiveDashboard |
- |
|
arms:SaveModuleConfig |
- |
|
arms:SaveProductConfig |
- |
|
arms:SaveSatelliteConfig |
- |
|
arms:SaveSyntheticMonitorGroup |
- |
|
arms:SaveTraceAppUserMethod |
- |
|
arms:SaveXTraceConfig |
- |
|
arms:SearchAlarmHistories |
- |
|
arms:SearchAlertContact |
- |
|
arms:SearchAlertContactGroup |
- |
|
arms:SearchAlertHistories |
- |
|
arms:SearchAlertRuleTemplate |
- |
|
arms:SearchAlertRules |
- |
|
arms:SearchContact |
- |
|
arms:SearchContactGroup |
- |
|
arms:SearchEvents |
- |
|
arms:SearchRetcodeAppByPage |
- |
|
arms:SearchTagNames |
- |
|
arms:SearchTagValues |
- |
|
arms:SearchTraces |
- |
|
arms:SearchTracesByPage |
- |
|
arms:SendCustomIncidents |
- |
|
arms:SendMseIncident |
- |
|
arms:SetPromUserPref |
- |
|
arms:ShowGlobalView |
- |
|
arms:ShowGlobalViewWithCustomAuthorization |
- |
|
arms:ShowGlobalViewWithSubAccountInResourceDirectory |
- |
|
arms:StartAllCommercialRetcode |
- |
|
arms:StatisticsSyntheticUsage |
- |
|
arms:StopAllCommercialRetcode |
- |
|
arms:SyncRecordingRules |
- |
|
arms:TurnOnSecondSwitch |
- |
|
arms:UnBlockAlarmNotification |
- |
|
arms:UnInstallExporterByIntegration |
- |
|
arms:UnInstallGlobalView |
- |
|
arms:UninstallCloudMonitorCluster |
- |
|
arms:UninstallCloudMonitorProduct |
- |
|
arms:UpdateAlertContact |
- |
|
arms:UpdateAlertContactGroup |
- |
|
arms:UpdateAlertTemplate |
- |
|
arms:UpdateAlertsCommercialLimit |
- |
|
arms:UpdateAppConvergeConfig |
- |
|
arms:UpdateCloudMonitorCluster |
- |
|
arms:UpdateCmsProduct |
- |
|
arms:UpdateCommercialConfig |
- |
|
arms:UpdateConfig |
- |
|
arms:UpdateContact |
- |
|
arms:UpdateContactGroup |
- |
|
arms:UpdateContactMember |
- |
|
arms:UpdateContactSchedule |
- |
|
arms:UpdateDispatchRule |
- |
|
arms:UpdateEscalation |
- |
|
arms:UpdateEscalationPolicy |
- |
|
arms:UpdateIncidentWorkFlow |
- |
|
arms:UpdateIntegration |
- |
|
arms:UpdateInteractiveDashboard |
- |
|
arms:UpdateNotificationPolicy |
- |
|
arms:UpdateOnCallSchedule |
- |
|
arms:UpdatePrometheusAgentSize |
- |
|
arms:UpdatePrometheusIntegration |
- |
|
arms:UpdateRumUploadFilePolicy |
- |
|
arms:UpdateShareLink |
- |
|
arms:UpdateShareStatus |
- |
|
arms:UpdateSourceMap |
- |
|
arms:UpdateTraceAppTags |
- |
|
arms:UpdateTraceAppUserMethod |
- |
|
arms:UpdateTraceEndpoint |
- |
|
arms:UpdateWebhook |
- |
|
arms:UpgradeOldXTraceAppLabelsToNewTags |
- |
|
arms:UpgradeXTrace |
- |
|
arms:UpsertRumMetadata |
- |
|
arms:UseHighPriorityAlert |
- |
對於不支援資源群組授權的操作,授權時資源範圍選取資源群組層級將無效。如果仍需要RAM使用者有上述操作許可權,您需要建立自訂權限原則,授權時資源範圍選取帳號層級。
以下是兩個自訂權限原則樣本,您可以根據實際需要調整策略內容。
-
允許不支援資源群組層級授權的全部唯讀操作:
Action中列舉不支援資源群組層級授權的所有隻讀操作。{ "Version": "1", "Statement": [ { "Effect": "Allow", "Action": [ "arms:AllTagResources", "arms:CheckArmsDefaultSLR", "arms:CheckGlobalView", "arms:CheckServiceStatus", "arms:CheckXtraceDefaultSLR", "arms:DescribeAttacks", "arms:DescribeBusinessLocation", "arms:DescribeMetricCardinality", "arms:DescribeRegions", "arms:DescribeTagsOfDuplicateRemoval", "arms:DescribeTraceDatasource", "arms:DescribeTraceEndpoint", "arms:DescribeTraceLicenseKey", "arms:DescribeTraceLocation", "arms:DescribeTraceQuality", "arms:DescribeTraceResourcesStatus", "arms:DescribeXTraceConfig", "arms:DescribeXTraceUpgradeStatus", "arms:DoConvergeAction", "arms:DoInsightsAction", "arms:GeneralQuery", "arms:GetATPAccessURL", "arms:GetAgentInfo", "arms:GetAgentUpgradeInfo", "arms:GetAlarmHistories", "arms:GetAlertsCommercialStatus", "arms:GetAppList", "arms:GetApplication", "arms:GetBubbleUpBrief", "arms:GetBubbleUpReport", "arms:GetChannelLink", "arms:GetCloudEnvironmentId", "arms:GetCloudMonitorInstallStatus", "arms:GetCloudMonitorMetric", "arms:GetCloudMonitorThumbnail", "arms:GetCloudProductHealthStatus", "arms:GetCmsPurchaseStatus", "arms:GetCommercialStatus", "arms:GetCommercialStatusV2", "arms:GetConsoleBaseInfo", "arms:GetContactScheduleDetail", "arms:GetConvergeConfig", "arms:GetCurrentEnv", "arms:GetDasEvents", "arms:GetDeliverTargetDetail", "arms:GetDeliverTask", "arms:GetDirectThumbnail", "arms:GetEscalationDetail", "arms:GetEscalationDispatch", "arms:GetGlobalViewUrl", "arms:GetGrafanaDatasource", "arms:GetGraphResourceStatus", "arms:GetHeapDumpList", "arms:GetJavaAgentDownloadUrl", "arms:GetMetricDatas", "arms:GetMetricQuantity", "arms:GetMetricStatistics", "arms:GetModuleConfig", "arms:GetMultipleTrace", "arms:GetOTTraceBriefInfos", "arms:GetOTTraceCallstack", "arms:GetOTTraceCallstackOverview", "arms:GetOTTraceDetails", "arms:GetOldPrometheusRuleCount", "arms:GetOnCallSchedulesDetail", "arms:GetProfilingData", "arms:GetPromUserPref", "arms:GetPrometheusAgentInfoAll", "arms:GetPrometheusRemoteWrite", "arms:GetPubInfo", "arms:GetRAMStatus", "arms:GetRemoteUrl", "arms:GetRepSize", "arms:GetRetcodeDataByQuery", "arms:GetRumData", "arms:GetRumExceptionStack", "arms:GetRumGroups", "arms:GetRumOcuStatisticData", "arms:GetRumUploadFilePolicyStatus", "arms:GetRumUploadFiles", "arms:GetSLSStatus", "arms:GetSlsProjectInfo", "arms:GetStack", "arms:GetStat", "arms:GetStsCreDential", "arms:GetSyntheticCommercialDetailAndUsageEstimate", "arms:GetSyntheticGrafanaDashboardUrl", "arms:GetSyntheticPrometheusCluster", "arms:GetTagKey", "arms:GetTagResourceSystemTags", "arms:GetTagVal", "arms:GetToCheckArmsDefaultSLR", "arms:GetTrace", "arms:GetTraceAggr", "arms:GetTraceAppConfigTemplate", "arms:GetTraceApps", "arms:GetTraceChain", "arms:GetTraceExplorerStatus", "arms:GetTraceGroupBy", "arms:GetTraceRegions", "arms:GetUserDatasourceConfig4Sls", "arms:GetUserInfo", "arms:GetUserWhiteListStatus", "arms:HealthCheck", "arms:HighPriorityAlertClearRatio", "arms:InitTraceResource", "arms:InnerDispatchContactOptions", "arms:InnerDispatchDetail", "arms:InnerFetchContactByArmsContactId", "arms:InnerFetchContactGroupByArmsContactGroupId", "arms:InnerGetUserTTSReissue", "arms:InnerNotifyObjectContactList", "arms:InvokeRulerManager", "arms:ListActivatedAlerts", "arms:ListAlertContact", "arms:ListAlertContactGroup", "arms:ListAlertContactGroupOption", "arms:ListAlertEvents", "arms:ListAlertTemplates", "arms:ListAllAlertContact", "arms:ListAllIMRobot", "arms:ListApplicationInstance", "arms:ListCloudMonitorCluster", "arms:ListCloudMonitorClusterMetric", "arms:ListCloudMonitorClusterProduct", "arms:ListCloudMonitorClusterThumbnail", "arms:ListCloudMonitorMigrateProduct", "arms:ListClusterApmWorkload", "arms:ListContactSchedule", "arms:ListDashBoardsByIntegrationType", "arms:ListDeliverTask", "arms:ListEntityDashboard", "arms:ListEntityForPage", "arms:ListEntityTypeAndCount", "arms:ListEnvironmentResources", "arms:ListEventBridgeIntegrations", "arms:ListFeatureFlags", "arms:ListGrafanaInstance", "arms:ListIMRobot", "arms:ListImmediateSyntheticTasks", "arms:ListIntegration", "arms:ListMetricLabelValues", "arms:ListMetricNames", "arms:ListMetrics", "arms:ListNotInstallCluster", "arms:ListPromAlertCluster", "arms:ListPromCluster", "arms:ListPromFrontVars", "arms:ListPrometheusAlertMetrics", "arms:ListPrometheusAlertTemplates", "arms:ListPrometheusInstance", "arms:ListPrometheusRemoteWrites", "arms:ListRaspApps", "arms:ListResource", "arms:ListSyntheticDetail", "arms:ListSyntheticMonitorGroups", "arms:ListSyntheticTags", "arms:ListUserLogProjects", "arms:ListUserLogSavedSearches", "arms:ListUserLogstoreIndexes", "arms:ListUserLogstores", "arms:ListVpcClusterPage", "arms:ListVpcSecurityGroupIds", "arms:QueryAPMMetrics", "arms:QueryAhasMachineMetric", "arms:QueryAppMetadata", "arms:QueryCommercialFeeData", "arms:QueryCommercialResourcePackage", "arms:QueryCommercialUsage", "arms:QueryCommercialUsageLimit", "arms:QueryConfig", "arms:QueryEvents", "arms:QueryHotSpotData", "arms:QueryLLMSessionDetail", "arms:QueryLLMTraceDetail", "arms:QueryProductConfig", "arms:QueryProfilingData", "arms:QueryProfilingWhitelist", "arms:QueryPrometheusFeeData", "arms:QuerySyntheticMetricData", "arms:QueryTopology", "arms:QueryTraces", "arms:SaveProductConfig", "arms:SearchContact", "arms:SearchContactGroup", "arms:SearchTagNames", "arms:SearchTagValues", "arms:SearchTraces", "arms:SearchTracesByPage", "arms:ShowGlobalView", "arms:ShowGlobalViewWithCustomAuthorization", "arms:ShowGlobalViewWithSubAccountInResourceDirectory", "arms:StatisticsSyntheticUsage", "arms:UpdateAlertsCommercialLimit", "arms:UpdateCommercialConfig", "arms:UseHighPriorityAlert" ], "Resource": "*" } ] } -
允許不支援資源群組層級授權的全部操作:
Action中列舉不支援資源群組層級授權的全部操作。{ "Version": "1", "Statement": [ { "Effect": "Allow", "Action": [ "arms:AddBlackboxTask", "arms:AddCmsProduct", "arms:AddGrafana", "arms:AddIntegration", "arms:AddPrometheusGlobalView", "arms:AddPrometheusGlobalViewByAliClusterIds", "arms:AddRecordingRule", "arms:AddTask", "arms:AddUser", "arms:AlarmInsightsFeedback", "arms:AllTagResources", "arms:AppendInstancesToPrometheusGlobalView", "arms:ApplyScenario", "arms:BatchEmailVerifyLink", "arms:BatchUpdateConvergeConfig", "arms:BatchVerifyLink", "arms:BlockAlarmNotification", "arms:CMonitorCloudInstances", "arms:CMonitorRegister", "arms:CheckArmsDefaultSLR", "arms:CheckCommercialStatus", "arms:CheckDataConsistency", "arms:CheckGlobalView", "arms:CheckIntegrationYaml", "arms:CheckServiceLinkedRoleForDeleting", "arms:CheckServiceStatus", "arms:CheckXtraceDefaultSLR", "arms:ClaimAlarm", "arms:CloseAlarm", "arms:ConfigAgentLabel", "arms:ConfigApp", "arms:CreateAlertContact", "arms:CreateAlertContactGroup", "arms:CreateAlertTemplate", "arms:CreateContact", "arms:CreateContactGroup", "arms:CreateContactSchedule", "arms:CreateDispatchRule", "arms:CreateDump", "arms:CreateEscalation", "arms:CreateEscalationPolicy", "arms:CreateEvent", "arms:CreateHeapDump", "arms:CreateImmediateSyntheticTask", "arms:CreateIncidentWorkFlow", "arms:CreateIntegration", "arms:CreateNotificationPolicy", "arms:CreateOnCallSchedule", "arms:CreateOrUpdateAlertTemplate", "arms:CreateProm", "arms:CreateRumAppGroup", "arms:CreateRumUploadFileUrl", "arms:CreateSecurityAuth", "arms:CreateServiceDiscoveryConfig", "arms:CreateTemplatesByAlertRules", "arms:CreateWebhook", "arms:DelResourcesByAccountId", "arms:DeleteAlert", "arms:DeleteAlertContact", "arms:DeleteAlertContactGroup", "arms:DeleteAlertTemplate", "arms:DeleteAlertTemplates", "arms:DeleteApp", "arms:DeleteCmsExporter", "arms:DeleteCmsProduct", "arms:DeleteConfig", "arms:DeleteContact", "arms:DeleteContactGroup", "arms:DeleteContactLink", "arms:DeleteContactMember", "arms:DeleteContactSchedule", "arms:DeleteDeliverTask", "arms:DeleteDispatchRule", "arms:DeleteDump", "arms:DeleteEscalation", "arms:DeleteEscalationPolicy", "arms:DeleteHeapDump", "arms:DeleteIncidentWorkFlow", "arms:DeleteIntegration", "arms:DeleteIntegrationCustomJob", "arms:DeleteInteractiveDashboard", "arms:DeleteNotificationPolicy", "arms:DeleteOnCallSchedule", "arms:DeleteRumUploadFile", "arms:DeleteScenario", "arms:DeleteSilencePolicy", "arms:DeleteSourceMap", "arms:DeleteTask", "arms:DeleteTraceAppUserMethod", "arms:Describe", "arms:DescribeAttacks", "arms:DescribeBusinessLocation", "arms:DescribeDispatchRule", "arms:DescribeLicenseKey", "arms:DescribeMetric", "arms:DescribeMetricCardinality", "arms:DescribeRegions", "arms:DescribeTagsOfDuplicateRemoval", "arms:DescribeTraceDatasource", "arms:DescribeTraceEndpoint", "arms:DescribeTraceLicenseKey", "arms:DescribeTraceLocation", "arms:DescribeTraceQuality", "arms:DescribeTraceResourcesStatus", "arms:DescribeXTraceConfig", "arms:DescribeXTraceUpgradeStatus", "arms:DiagnoseTask", "arms:DisableAlertTemplate", "arms:DisableDeliverTask", "arms:DoConvergeAction", "arms:DoInsightsAction", "arms:EmailVerifyLink", "arms:EnableAlertTemplate", "arms:EnableDeliverTask", "arms:EnableGraphResource", "arms:EnableServiceAccessForPrometheus", "arms:ExportAlertTemplates", "arms:ExportPrometheusRules", "arms:GeneralQuery", "arms:GetATPAccessURL", "arms:GetAgentDownloadUrl", "arms:GetAgentInfo", "arms:GetAgentInfoByPage", "arms:GetAgentUpgradeInfo", "arms:GetAlarmHistories", "arms:GetAlert", "arms:GetAlertRulesByPage", "arms:GetAlertsCommercialStatus", "arms:GetAppApiPageInfo", "arms:GetAppCenterComponent", "arms:GetAppJVMConfig", "arms:GetAppList", "arms:GetAppLogStoreCorrelation", "arms:GetApplication", "arms:GetArmsInfo", "arms:GetAssumeRoleCredentials", "arms:GetBubbleUpBrief", "arms:GetBubbleUpReport", "arms:GetChanelLink", "arms:GetChannelLink", "arms:GetCloudEnvironmentId", "arms:GetCloudMonitorInstallStatus", "arms:GetCloudMonitorMetric", "arms:GetCloudMonitorThumbnail", "arms:GetCloudProductHealthCheckSetting", "arms:GetCloudProductHealthStatus", "arms:GetClusterInfo", "arms:GetClusterState", "arms:GetCmsInstallStatus", "arms:GetCmsMetric", "arms:GetCmsPurchaseStatus", "arms:GetCmsThumbnail", "arms:GetCommercialStatus", "arms:GetCommercialStatusV2", "arms:GetConsoleBaseInfo", "arms:GetContactScheduleDetail", "arms:GetConvergeConfig", "arms:GetCurrentEnv", "arms:GetDasEvents", "arms:GetDashboardList", "arms:GetDeliverTargetDetail", "arms:GetDeliverTask", "arms:GetDirectInstallStatus", "arms:GetDirectMetric", "arms:GetDirectThumbnail", "arms:GetEscalationDetail", "arms:GetEscalationDispatch", "arms:GetEvent", "arms:GetExceptionMetadata", "arms:GetExporterListByIntegration", "arms:GetGlobalViewUrl", "arms:GetGrafanaDatasource", "arms:GetGraphResourceStatus", "arms:GetHeapDumpList", "arms:GetImmediateSyntheticTask", "arms:GetIntegrationCluster", "arms:GetIntegrationInfo", "arms:GetIntegrationState", "arms:GetIntegrationToken", "arms:GetJaegerServiceOperations", "arms:GetJaegerServices", "arms:GetJavaAgentDownloadUrl", "arms:GetLokiCluster", "arms:GetMetricDatas", "arms:GetMetricQuantity", "arms:GetMetricStatistics", "arms:GetModuleConfig", "arms:GetMultipleTrace", "arms:GetOTTraceBriefInfos", "arms:GetOTTraceCallstack", "arms:GetOTTraceCallstackOverview", "arms:GetOTTraceDetails", "arms:GetOldPrometheusRuleCount", "arms:GetOnCallSchedulesDetail", "arms:GetPodAnnotation", "arms:GetProfilingData", "arms:GetPromUserPref", "arms:GetPrometheusAgentInfoAll", "arms:GetPrometheusApiToken", "arms:GetPrometheusRemoteWrite", "arms:GetPubInfo", "arms:GetRAMStatus", "arms:GetRemoteUrl", "arms:GetRepSize", "arms:GetResourceConsumptionDashboardUrl", "arms:GetRetcodeDataByQuery", "arms:GetRetcodeDatas", "arms:GetRetcodeLogstore", "arms:GetRetcodeShareUrl", "arms:GetRumData", "arms:GetRumExceptionStack", "arms:GetRumGroups", "arms:GetRumOcuStatisticData", "arms:GetRumUploadFilePolicyStatus", "arms:GetRumUploadFiles", "arms:GetSLSStatus", "arms:GetSlsProjectInfo", "arms:GetSourceMapInfo", "arms:GetSqlMetadata", "arms:GetStack", "arms:GetStat", "arms:GetStsCreDential", "arms:GetSupportEnv", "arms:GetSyntheticCommercialDetailAndUsageEstimate", "arms:GetSyntheticCommercialStatus", "arms:GetSyntheticGrafanaDashboardUrl", "arms:GetSyntheticMonitors", "arms:GetSyntheticPrometheusCluster", "arms:GetTagKey", "arms:GetTagResourceSystemTags", "arms:GetTagVal", "arms:GetThumbnailUrlListByIntegration", "arms:GetToCheckArmsDefaultSLR", "arms:GetTrace", "arms:GetTraceAggr", "arms:GetTraceAppConfigTemplate", "arms:GetTraceApps", "arms:GetTraceChain", "arms:GetTraceExplorerStatus", "arms:GetTraceGroupBy", "arms:GetTraceRegions", "arms:GetTraces", "arms:GetUserArmsPromClusterList", "arms:GetUserDatasourceConfig4Sls", "arms:GetUserInfo", "arms:GetUserWhiteListStatus", "arms:HealthCheck", "arms:HighPriorityAlertClearRatio", "arms:ImportAlertTemplates", "arms:InitTraceResource", "arms:InnerDeleteContactGroup", "arms:InnerDeleteIMRobot", "arms:InnerDispatchContactOptions", "arms:InnerDispatchDetail", "arms:InnerDispatchRuleCreate", "arms:InnerFetchContactByArmsContactId", "arms:InnerFetchContactGroupByArmsContactGroupId", "arms:InnerGetUserTTSReissue", "arms:InnerNotifyObjectContactList", "arms:InnerUpdateAlertContact", "arms:InnerUpdateAlertWebhook", "arms:InnerUpdateContactGroup", "arms:InnerUpdateDispatch", "arms:InnerUpdateIMRobot", "arms:InnerUpdateTTSReissue", "arms:InsertConfig", "arms:InsightsCreateInspectJob", "arms:InsightsFeedbackJobReport", "arms:InsightsGetInspectJobReport", "arms:InsightsStopInspectJob", "arms:InstallCloudMonitorProduct", "arms:InstallCmsExporter", "arms:InstallExporterByIntegration", "arms:InstallMysqlExporter", "arms:InvokeCenterPop", "arms:InvokeRulerManager", "arms:KeepAllCommercialTrace", "arms:ListActivatedAlerts", "arms:ListAlertContact", "arms:ListAlertContactGroup", "arms:ListAlertContactGroupOption", "arms:ListAlertEvents", "arms:ListAlertTemplates", "arms:ListAlertWebhookContact", "arms:ListAllAlertContact", "arms:ListAllIMRobot", "arms:ListApplicationInstance", "arms:ListCloudMonitorCluster", "arms:ListCloudMonitorClusterMetric", "arms:ListCloudMonitorClusterProduct", "arms:ListCloudMonitorClusterThumbnail", "arms:ListCloudMonitorMigrateProduct", "arms:ListCluster", "arms:ListClusterApmWorkload", "arms:ListClusterFromGrafana", "arms:ListCmsInstances", "arms:ListContactSchedule", "arms:ListDashBoardsByIntegrationType", "arms:ListDashboardsByName", "arms:ListDeliverTask", "arms:ListDispatchRule", "arms:ListEntityDashboard", "arms:ListEntityForPage", "arms:ListEntityTypeAndCount", "arms:ListEnvironmentResources", "arms:ListEventBridgeIntegrations", "arms:ListExporterMetrics", "arms:ListFeatureFlags", "arms:ListGrafanaInstance", "arms:ListGrafarmsDashboard", "arms:ListIMRobot", "arms:ListImmediateSyntheticTasks", "arms:ListIntegration", "arms:ListLLMSessions", "arms:ListMetricLabelValues", "arms:ListMetricNames", "arms:ListMetrics", "arms:ListNotInstallCluster", "arms:ListProbes", "arms:ListPromAlertCluster", "arms:ListPromCluster", "arms:ListPromClusters", "arms:ListPromFrontVars", "arms:ListPrometheusAlertMetrics", "arms:ListPrometheusAlertTemplates", "arms:ListPrometheusDeliverCluster", "arms:ListPrometheusGlobalView", "arms:ListPrometheusInstance", "arms:ListPrometheusInstances", "arms:ListPrometheusRemoteWrites", "arms:ListRaspApps", "arms:ListResource", "arms:ListScenario", "arms:ListServerlessTopNApps", "arms:ListSyntheticDetail", "arms:ListSyntheticMonitorGroups", "arms:ListSyntheticTags", "arms:ListUserLogProjects", "arms:ListUserLogSavedSearches", "arms:ListUserLogstoreIndexes", "arms:ListUserLogstores", "arms:ListVpcClusterPage", "arms:ListVpcSecurityGroupIds", "arms:OpenArmsDefaultSLR", "arms:OpenArmsService", "arms:OpenArmsServiceSecondVersion", "arms:OpenVCluster", "arms:OpenXtraceDefaultSLR", "arms:PreviewContactSchedule", "arms:QueryAPMMetrics", "arms:QueryAhasMachineMetric", "arms:QueryAppMetadata", "arms:QueryAuditLogs", "arms:QueryCommercialFeeData", "arms:QueryCommercialResourcePackage", "arms:QueryCommercialUsage", "arms:QueryCommercialUsageLimit", "arms:QueryConfig", "arms:QueryDataSet", "arms:QueryEvents", "arms:QueryHotSpotData", "arms:QueryLLMSessionDetail", "arms:QueryLLMTraceDetail", "arms:QueryMetric", "arms:QueryMetricByPage", "arms:QueryProductConfig", "arms:QueryProfilingData", "arms:QueryProfilingWhitelist", "arms:QueryPromInstallStatus", "arms:QueryPrometheusFeeData", "arms:QueryServiceDetailConsoleInfo", "arms:QuerySyntheticAlertEventCount", "arms:QuerySyntheticMetricData", "arms:QueryTopology", "arms:QueryTraces", "arms:RefreshDashboardCluster", "arms:RegisterCloudProduct", "arms:ReinstallFlinkCluster", "arms:RemoveSourcesFromPrometheusGlobalView", "arms:ReportAgentDaemonStatus", "arms:ReportEvent", "arms:ReportJavaAttachStatus", "arms:ResetConvergeConfig", "arms:RestartPrometheusAgent", "arms:SaveAlertTemplate", "arms:SaveCommercialFeeChange", "arms:SaveCommercialUsageLimit", "arms:SaveContactGroup", "arms:SaveContactMember", "arms:SaveDataset", "arms:SaveInteractiveDashboard", "arms:SaveModuleConfig", "arms:SaveProductConfig", "arms:SaveSatelliteConfig", "arms:SaveSyntheticMonitorGroup", "arms:SaveTraceAppUserMethod", "arms:SaveXTraceConfig", "arms:SearchAlarmHistories", "arms:SearchAlertContact", "arms:SearchAlertContactGroup", "arms:SearchAlertHistories", "arms:SearchAlertRuleTemplate", "arms:SearchAlertRules", "arms:SearchContact", "arms:SearchContactGroup", "arms:SearchEvents", "arms:SearchRetcodeAppByPage", "arms:SearchTagNames", "arms:SearchTagValues", "arms:SearchTraces", "arms:SearchTracesByPage", "arms:SendCustomIncidents", "arms:SendMseIncident", "arms:SetPromUserPref", "arms:ShowGlobalView", "arms:ShowGlobalViewWithCustomAuthorization", "arms:ShowGlobalViewWithSubAccountInResourceDirectory", "arms:StartAllCommercialRetcode", "arms:StatisticsSyntheticUsage", "arms:StopAllCommercialRetcode", "arms:SyncRecordingRules", "arms:TurnOnSecondSwitch", "arms:UnBlockAlarmNotification", "arms:UnInstallExporterByIntegration", "arms:UnInstallGlobalView", "arms:UninstallCloudMonitorCluster", "arms:UninstallCloudMonitorProduct", "arms:UpdateAlertContact", "arms:UpdateAlertContactGroup", "arms:UpdateAlertTemplate", "arms:UpdateAlertsCommercialLimit", "arms:UpdateAppConvergeConfig", "arms:UpdateCloudMonitorCluster", "arms:UpdateCmsProduct", "arms:UpdateCommercialConfig", "arms:UpdateConfig", "arms:UpdateContact", "arms:UpdateContactGroup", "arms:UpdateContactMember", "arms:UpdateContactSchedule", "arms:UpdateDispatchRule", "arms:UpdateEscalation", "arms:UpdateEscalationPolicy", "arms:UpdateIncidentWorkFlow", "arms:UpdateIntegration", "arms:UpdateInteractiveDashboard", "arms:UpdateNotificationPolicy", "arms:UpdateOnCallSchedule", "arms:UpdatePrometheusAgentSize", "arms:UpdatePrometheusIntegration", "arms:UpdateRumUploadFilePolicy", "arms:UpdateShareLink", "arms:UpdateShareStatus", "arms:UpdateSourceMap", "arms:UpdateTraceAppTags", "arms:UpdateTraceAppUserMethod", "arms:UpdateTraceEndpoint", "arms:UpdateWebhook", "arms:UpgradeOldXTraceAppLabelsToNewTags", "arms:UpgradeXTrace", "arms:UpsertRumMetadata", "arms:UseHighPriorityAlert" ], "Resource": "*" } ] }
獲得帳號層級許可權的RAM使用者或RAM角色,能夠操作整個帳號範圍內的相關資源。請務必確認所授與權限是否符合預期,遵從最小授權原則謹慎分配許可權。
常見問題
如何查看當前資源屬於哪個資源群組?
-
方式一:單擊資源名稱,進入資源的詳情頁面,即可查看到當前資源的資源群組。
-
方式二:登入資源管理主控台,單擊,在左側選擇目標資源所屬帳號(預設為當前帳號),通過篩選條件定位目標資源,即可查看其所屬資源群組。
如何查看當前產品在某個資源群組下的所有資源?
如何批量修改多個資源的資源群組?
登入資源管理主控台,單擊,在目標資源群組所在行的操作列下,單擊資源管理以進入資源管理頁面。通過篩選條件定位多個目標資源,批量勾選第一列的複選框後單擊下方轉移資源群組,並按頁面提示完成資源群組修改。