全部產品
Search
文件中心

Application Real-Time Monitoring Service:使用資源群組進行精細化資源控制-最新

更新時間:Apr 23, 2026

當您使用資源群組對資源進行分組管理時,可以結合存取控制(RAM),在單個阿里雲帳號內實現資源的隔離和精微調權限管理。本文總結了應用即時監控服務ARMS對資源群組的支援情況,以及資源群組層級的授權操作步驟。

說明

資源群組授權的工作原理

您可以使用資源群組(Resource Group)對阿里雲帳號內的資源進行分組管理。例如,為不同的專案建立對應的資源群組,並將資源轉移到對應的組中,以便集中管理各專案的資源。更多資訊,請參見什麼是資源群組

在完成資源分組後,您可以為不同的RAM授權主體(RAM使用者、RAM使用者組或RAM角色)授予指定資源群組範圍的許可權,從而限定這個授權主體只能管理該資源群組內的資源。更多資訊,請參見資源分組和授權

這種授權方式的優點有:

  • 許可權精細化:確保每個身份能獲得最準確的資源存取權限,避免帳號下的多重專案的資源混合管理。

  • 良好的擴充性:後續新增資源時,只需將其加入該資源群組,RAM身份便會自動獲得新資源的相應許可權,無需再次授權。

為RAM使用者授予資源群組層級的許可權

下面以RAM使用者為例,介紹授予指定資源群組內應用即時監控服務ARMS資源許可權的操作步驟。

1. 前置步驟

  1. 建立待使用的RAM使用者,可參考:建立RAM使用者

  2. 建立資源群組並將已有資源劃分到目標資源群組,可參考:建立資源群組資源自動轉組資源手動轉組

2. 進行資源群組層級授權

您可以通過以下任一方式進行資源群組層級授權。

方式一:在資源管理主控台中授權

通過資源群組的許可權管理功能為指定 RAM 使用者授權。詳情操作可參見為RAM身份授予資源群組範圍的許可權

  • 登入資源群組控制台

  • 在資源群組頁面,單擊目標資源群組操作列的許可權管理

  • 許可權管理頁簽,單擊新增授權

  • 新增授權面板,設定授權主體和權限原則。

    • 授權主體:選擇已有RAM使用者。

    • 權限原則:選擇系統策略或已建立的自訂策略,參考建立自訂權限原則

  • 單擊確認新增授權

方式二:在 RAM 控制台中授權

通過RAM控制台為指定 RAM 使用者進行資源群組層級授權。詳細操作可參見為RAM使用者授權

  • 使用阿里雲帳號(主帳號)或Resource Access Management員登入RAM控制台

  • 在左側導覽列,選擇身份管理 > 使用者使用者頁面,單擊目標RAM使用者操作列的添加許可權

  • 新增授權面板,為RAM使用者添加許可權。

    • 資源範圍:選擇資源群組層級

    • 授權主體:選擇已有 RAM 使用者或前面步驟建立的 RAM 使用者。

    • 權限原則:選擇系統策略或已建立的自訂策略,參考建立自訂權限原則

  • 單擊確認新增授權

支援資源群組的資源類型

應用即時監控服務ARMS支援資源群組的資源類型如下表所示:

雲端服務

雲端服務代碼

資源類型

應用即時監控服務ARMS

arms

application : 應用監控App

應用即時監控服務ARMS

arms

grafanaworkspace : Grafana服務

應用即時監控服務ARMS

arms

prometheus : 監控服務

應用即時監控服務ARMS

arms

synthetictask : 雲撥測任務

應用即時監控服務ARMS

arms

web : 前端監控App

說明

對於暫不支援資源群組的資源類型,如有需要,您可以在資源群組控制台提交反饋。

image

不支援資源群組層級授權的操作

應用即時監控服務ARMS中不支援資源群組層級授權的操作(Action)如下:

操作(Action)

操作描述

arms:AddBlackboxTask

-

arms:AddCmsProduct

-

arms:AddGrafana

-

arms:AddIntegration

-

arms:AddPrometheusGlobalView

-

arms:AddPrometheusGlobalViewByAliClusterIds

-

arms:AddRecordingRule

-

arms:AddTask

-

arms:AddUser

-

arms:AlarmInsightsFeedback

-

arms:AllTagResources

-

arms:AppendInstancesToPrometheusGlobalView

-

arms:ApplyScenario

-

arms:BatchEmailVerifyLink

-

arms:BatchUpdateConvergeConfig

-

arms:BatchVerifyLink

-

arms:BlockAlarmNotification

-

arms:CMonitorCloudInstances

-

arms:CMonitorRegister

-

arms:CheckArmsDefaultSLR

-

arms:CheckCommercialStatus

-

arms:CheckDataConsistency

-

arms:CheckGlobalView

-

arms:CheckIntegrationYaml

-

arms:CheckServiceLinkedRoleForDeleting

-

arms:CheckServiceStatus

-

arms:CheckXtraceDefaultSLR

-

arms:ClaimAlarm

-

arms:CloseAlarm

-

arms:ConfigAgentLabel

-

arms:ConfigApp

-

arms:CreateAlertContact

-

arms:CreateAlertContactGroup

-

arms:CreateAlertTemplate

-

arms:CreateContact

-

arms:CreateContactGroup

-

arms:CreateContactSchedule

-

arms:CreateDispatchRule

-

arms:CreateDump

-

arms:CreateEscalation

-

arms:CreateEscalationPolicy

-

arms:CreateEvent

-

arms:CreateHeapDump

-

arms:CreateImmediateSyntheticTask

-

arms:CreateIncidentWorkFlow

-

arms:CreateIntegration

-

arms:CreateNotificationPolicy

-

arms:CreateOnCallSchedule

-

arms:CreateOrUpdateAlertTemplate

-

arms:CreateProm

-

arms:CreateRumAppGroup

-

arms:CreateRumUploadFileUrl

-

arms:CreateSecurityAuth

-

arms:CreateServiceDiscoveryConfig

-

arms:CreateTemplatesByAlertRules

-

arms:CreateWebhook

-

arms:DelResourcesByAccountId

-

arms:DeleteAlert

-

arms:DeleteAlertContact

-

arms:DeleteAlertContactGroup

-

arms:DeleteAlertTemplate

-

arms:DeleteAlertTemplates

-

arms:DeleteApp

-

arms:DeleteCmsExporter

-

arms:DeleteCmsProduct

-

arms:DeleteConfig

-

arms:DeleteContact

-

arms:DeleteContactGroup

-

arms:DeleteContactLink

-

arms:DeleteContactMember

-

arms:DeleteContactSchedule

-

arms:DeleteDeliverTask

-

arms:DeleteDispatchRule

-

arms:DeleteDump

-

arms:DeleteEscalation

-

arms:DeleteEscalationPolicy

-

arms:DeleteHeapDump

-

arms:DeleteIncidentWorkFlow

-

arms:DeleteIntegration

-

arms:DeleteIntegrationCustomJob

-

arms:DeleteInteractiveDashboard

-

arms:DeleteNotificationPolicy

-

arms:DeleteOnCallSchedule

-

arms:DeleteRumUploadFile

-

arms:DeleteScenario

-

arms:DeleteSilencePolicy

-

arms:DeleteSourceMap

-

arms:DeleteTask

-

arms:DeleteTraceAppUserMethod

-

arms:Describe

-

arms:DescribeAttacks

-

arms:DescribeBusinessLocation

-

arms:DescribeDispatchRule

-

arms:DescribeLicenseKey

-

arms:DescribeMetric

-

arms:DescribeMetricCardinality

-

arms:DescribeRegions

-

arms:DescribeTagsOfDuplicateRemoval

-

arms:DescribeTraceDatasource

-

arms:DescribeTraceEndpoint

-

arms:DescribeTraceLicenseKey

-

arms:DescribeTraceLocation

-

arms:DescribeTraceQuality

-

arms:DescribeTraceResourcesStatus

-

arms:DescribeXTraceConfig

-

arms:DescribeXTraceUpgradeStatus

-

arms:DiagnoseTask

-

arms:DisableAlertTemplate

-

arms:DisableDeliverTask

-

arms:DoConvergeAction

-

arms:DoInsightsAction

-

arms:EmailVerifyLink

-

arms:EnableAlertTemplate

-

arms:EnableDeliverTask

-

arms:EnableGraphResource

-

arms:EnableServiceAccessForPrometheus

-

arms:ExportAlertTemplates

-

arms:ExportPrometheusRules

-

arms:GeneralQuery

-

arms:GetATPAccessURL

-

arms:GetAgentDownloadUrl

-

arms:GetAgentInfo

-

arms:GetAgentInfoByPage

-

arms:GetAgentUpgradeInfo

-

arms:GetAlarmHistories

-

arms:GetAlert

-

arms:GetAlertRulesByPage

-

arms:GetAlertsCommercialStatus

-

arms:GetAppApiPageInfo

-

arms:GetAppCenterComponent

-

arms:GetAppJVMConfig

-

arms:GetAppList

-

arms:GetAppLogStoreCorrelation

-

arms:GetApplication

-

arms:GetArmsInfo

-

arms:GetAssumeRoleCredentials

-

arms:GetBubbleUpBrief

-

arms:GetBubbleUpReport

-

arms:GetChanelLink

-

arms:GetChannelLink

-

arms:GetCloudEnvironmentId

-

arms:GetCloudMonitorInstallStatus

-

arms:GetCloudMonitorMetric

-

arms:GetCloudMonitorThumbnail

-

arms:GetCloudProductHealthCheckSetting

-

arms:GetCloudProductHealthStatus

-

arms:GetClusterInfo

-

arms:GetClusterState

-

arms:GetCmsInstallStatus

-

arms:GetCmsMetric

-

arms:GetCmsPurchaseStatus

-

arms:GetCmsThumbnail

-

arms:GetCommercialStatus

-

arms:GetCommercialStatusV2

-

arms:GetConsoleBaseInfo

-

arms:GetContactScheduleDetail

-

arms:GetConvergeConfig

-

arms:GetCurrentEnv

-

arms:GetDasEvents

-

arms:GetDashboardList

-

arms:GetDeliverTargetDetail

-

arms:GetDeliverTask

-

arms:GetDirectInstallStatus

-

arms:GetDirectMetric

-

arms:GetDirectThumbnail

-

arms:GetEscalationDetail

-

arms:GetEscalationDispatch

-

arms:GetEvent

-

arms:GetExceptionMetadata

-

arms:GetExporterListByIntegration

-

arms:GetGlobalViewUrl

-

arms:GetGrafanaDatasource

-

arms:GetGraphResourceStatus

-

arms:GetHeapDumpList

-

arms:GetImmediateSyntheticTask

-

arms:GetIntegrationCluster

-

arms:GetIntegrationInfo

-

arms:GetIntegrationState

-

arms:GetIntegrationToken

-

arms:GetJaegerServiceOperations

-

arms:GetJaegerServices

-

arms:GetJavaAgentDownloadUrl

-

arms:GetLokiCluster

-

arms:GetMetricDatas

-

arms:GetMetricQuantity

-

arms:GetMetricStatistics

-

arms:GetModuleConfig

-

arms:GetMultipleTrace

-

arms:GetOTTraceBriefInfos

-

arms:GetOTTraceCallstack

-

arms:GetOTTraceCallstackOverview

-

arms:GetOTTraceDetails

-

arms:GetOldPrometheusRuleCount

-

arms:GetOnCallSchedulesDetail

-

arms:GetPodAnnotation

-

arms:GetProfilingData

-

arms:GetPromUserPref

-

arms:GetPrometheusAgentInfoAll

-

arms:GetPrometheusApiToken

-

arms:GetPrometheusRemoteWrite

-

arms:GetPubInfo

-

arms:GetRAMStatus

-

arms:GetRemoteUrl

-

arms:GetRepSize

-

arms:GetResourceConsumptionDashboardUrl

-

arms:GetRetcodeDataByQuery

-

arms:GetRetcodeDatas

-

arms:GetRetcodeLogstore

-

arms:GetRetcodeShareUrl

-

arms:GetRumData

-

arms:GetRumExceptionStack

-

arms:GetRumGroups

-

arms:GetRumOcuStatisticData

-

arms:GetRumUploadFilePolicyStatus

-

arms:GetRumUploadFiles

-

arms:GetSLSStatus

-

arms:GetSlsProjectInfo

-

arms:GetSourceMapInfo

-

arms:GetSqlMetadata

-

arms:GetStack

-

arms:GetStat

-

arms:GetStsCreDential

-

arms:GetSupportEnv

-

arms:GetSyntheticCommercialDetailAndUsageEstimate

-

arms:GetSyntheticCommercialStatus

-

arms:GetSyntheticGrafanaDashboardUrl

-

arms:GetSyntheticMonitors

-

arms:GetSyntheticPrometheusCluster

-

arms:GetTagKey

-

arms:GetTagResourceSystemTags

-

arms:GetTagVal

-

arms:GetThumbnailUrlListByIntegration

-

arms:GetToCheckArmsDefaultSLR

-

arms:GetTrace

-

arms:GetTraceAggr

-

arms:GetTraceAppConfigTemplate

-

arms:GetTraceApps

-

arms:GetTraceChain

-

arms:GetTraceExplorerStatus

-

arms:GetTraceGroupBy

-

arms:GetTraceRegions

-

arms:GetTraces

-

arms:GetUserArmsPromClusterList

-

arms:GetUserDatasourceConfig4Sls

-

arms:GetUserInfo

-

arms:GetUserWhiteListStatus

-

arms:HealthCheck

-

arms:HighPriorityAlertClearRatio

-

arms:ImportAlertTemplates

-

arms:InitTraceResource

-

arms:InnerDeleteContactGroup

-

arms:InnerDeleteIMRobot

-

arms:InnerDispatchContactOptions

-

arms:InnerDispatchDetail

-

arms:InnerDispatchRuleCreate

-

arms:InnerFetchContactByArmsContactId

-

arms:InnerFetchContactGroupByArmsContactGroupId

-

arms:InnerGetUserTTSReissue

-

arms:InnerNotifyObjectContactList

-

arms:InnerUpdateAlertContact

-

arms:InnerUpdateAlertWebhook

-

arms:InnerUpdateContactGroup

-

arms:InnerUpdateDispatch

-

arms:InnerUpdateIMRobot

-

arms:InnerUpdateTTSReissue

-

arms:InsertConfig

-

arms:InsightsCreateInspectJob

-

arms:InsightsFeedbackJobReport

-

arms:InsightsGetInspectJobReport

-

arms:InsightsStopInspectJob

-

arms:InstallCloudMonitorProduct

-

arms:InstallCmsExporter

-

arms:InstallExporterByIntegration

-

arms:InstallMysqlExporter

-

arms:InvokeCenterPop

-

arms:InvokeRulerManager

-

arms:KeepAllCommercialTrace

-

arms:ListActivatedAlerts

-

arms:ListAlertContact

-

arms:ListAlertContactGroup

-

arms:ListAlertContactGroupOption

-

arms:ListAlertEvents

-

arms:ListAlertTemplates

-

arms:ListAlertWebhookContact

-

arms:ListAllAlertContact

-

arms:ListAllIMRobot

-

arms:ListApplicationInstance

-

arms:ListCloudMonitorCluster

-

arms:ListCloudMonitorClusterMetric

-

arms:ListCloudMonitorClusterProduct

-

arms:ListCloudMonitorClusterThumbnail

-

arms:ListCloudMonitorMigrateProduct

-

arms:ListCluster

-

arms:ListClusterApmWorkload

-

arms:ListClusterFromGrafana

-

arms:ListCmsInstances

-

arms:ListContactSchedule

-

arms:ListDashBoardsByIntegrationType

-

arms:ListDashboardsByName

-

arms:ListDeliverTask

-

arms:ListDispatchRule

-

arms:ListEntityDashboard

-

arms:ListEntityForPage

-

arms:ListEntityTypeAndCount

-

arms:ListEnvironmentResources

-

arms:ListEventBridgeIntegrations

-

arms:ListExporterMetrics

-

arms:ListFeatureFlags

-

arms:ListGrafanaInstance

-

arms:ListGrafarmsDashboard

-

arms:ListIMRobot

-

arms:ListImmediateSyntheticTasks

-

arms:ListIntegration

-

arms:ListLLMSessions

-

arms:ListMetricLabelValues

-

arms:ListMetricNames

-

arms:ListMetrics

-

arms:ListNotInstallCluster

-

arms:ListProbes

-

arms:ListPromAlertCluster

-

arms:ListPromCluster

-

arms:ListPromClusters

-

arms:ListPromFrontVars

-

arms:ListPrometheusAlertMetrics

-

arms:ListPrometheusAlertTemplates

-

arms:ListPrometheusDeliverCluster

-

arms:ListPrometheusGlobalView

-

arms:ListPrometheusInstance

-

arms:ListPrometheusInstances

-

arms:ListPrometheusRemoteWrites

-

arms:ListRaspApps

-

arms:ListResource

-

arms:ListScenario

-

arms:ListServerlessTopNApps

-

arms:ListSyntheticDetail

-

arms:ListSyntheticMonitorGroups

-

arms:ListSyntheticTags

-

arms:ListUserLogProjects

-

arms:ListUserLogSavedSearches

-

arms:ListUserLogstoreIndexes

-

arms:ListUserLogstores

-

arms:ListVpcClusterPage

-

arms:ListVpcSecurityGroupIds

-

arms:OpenArmsDefaultSLR

-

arms:OpenArmsService

-

arms:OpenArmsServiceSecondVersion

-

arms:OpenVCluster

-

arms:OpenXtraceDefaultSLR

-

arms:PreviewContactSchedule

-

arms:QueryAPMMetrics

-

arms:QueryAhasMachineMetric

-

arms:QueryAppMetadata

-

arms:QueryAuditLogs

-

arms:QueryCommercialFeeData

-

arms:QueryCommercialResourcePackage

-

arms:QueryCommercialUsage

-

arms:QueryCommercialUsageLimit

-

arms:QueryConfig

-

arms:QueryDataSet

-

arms:QueryEvents

-

arms:QueryHotSpotData

-

arms:QueryLLMSessionDetail

-

arms:QueryLLMTraceDetail

-

arms:QueryMetric

-

arms:QueryMetricByPage

-

arms:QueryProductConfig

-

arms:QueryProfilingData

-

arms:QueryProfilingWhitelist

-

arms:QueryPromInstallStatus

-

arms:QueryPrometheusFeeData

-

arms:QueryServiceDetailConsoleInfo

-

arms:QuerySyntheticAlertEventCount

-

arms:QuerySyntheticMetricData

-

arms:QueryTopology

-

arms:QueryTraces

-

arms:RefreshDashboardCluster

-

arms:RegisterCloudProduct

-

arms:ReinstallFlinkCluster

-

arms:RemoveSourcesFromPrometheusGlobalView

-

arms:ReportAgentDaemonStatus

-

arms:ReportEvent

-

arms:ReportJavaAttachStatus

-

arms:ResetConvergeConfig

-

arms:RestartPrometheusAgent

-

arms:SaveAlertTemplate

-

arms:SaveCommercialFeeChange

-

arms:SaveCommercialUsageLimit

-

arms:SaveContactGroup

-

arms:SaveContactMember

-

arms:SaveDataset

-

arms:SaveInteractiveDashboard

-

arms:SaveModuleConfig

-

arms:SaveProductConfig

-

arms:SaveSatelliteConfig

-

arms:SaveSyntheticMonitorGroup

-

arms:SaveTraceAppUserMethod

-

arms:SaveXTraceConfig

-

arms:SearchAlarmHistories

-

arms:SearchAlertContact

-

arms:SearchAlertContactGroup

-

arms:SearchAlertHistories

-

arms:SearchAlertRuleTemplate

-

arms:SearchAlertRules

-

arms:SearchContact

-

arms:SearchContactGroup

-

arms:SearchEvents

-

arms:SearchRetcodeAppByPage

-

arms:SearchTagNames

-

arms:SearchTagValues

-

arms:SearchTraces

-

arms:SearchTracesByPage

-

arms:SendCustomIncidents

-

arms:SendMseIncident

-

arms:SetPromUserPref

-

arms:ShowGlobalView

-

arms:ShowGlobalViewWithCustomAuthorization

-

arms:ShowGlobalViewWithSubAccountInResourceDirectory

-

arms:StartAllCommercialRetcode

-

arms:StatisticsSyntheticUsage

-

arms:StopAllCommercialRetcode

-

arms:SyncRecordingRules

-

arms:TurnOnSecondSwitch

-

arms:UnBlockAlarmNotification

-

arms:UnInstallExporterByIntegration

-

arms:UnInstallGlobalView

-

arms:UninstallCloudMonitorCluster

-

arms:UninstallCloudMonitorProduct

-

arms:UpdateAlertContact

-

arms:UpdateAlertContactGroup

-

arms:UpdateAlertTemplate

-

arms:UpdateAlertsCommercialLimit

-

arms:UpdateAppConvergeConfig

-

arms:UpdateCloudMonitorCluster

-

arms:UpdateCmsProduct

-

arms:UpdateCommercialConfig

-

arms:UpdateConfig

-

arms:UpdateContact

-

arms:UpdateContactGroup

-

arms:UpdateContactMember

-

arms:UpdateContactSchedule

-

arms:UpdateDispatchRule

-

arms:UpdateEscalation

-

arms:UpdateEscalationPolicy

-

arms:UpdateIncidentWorkFlow

-

arms:UpdateIntegration

-

arms:UpdateInteractiveDashboard

-

arms:UpdateNotificationPolicy

-

arms:UpdateOnCallSchedule

-

arms:UpdatePrometheusAgentSize

-

arms:UpdatePrometheusIntegration

-

arms:UpdateRumUploadFilePolicy

-

arms:UpdateShareLink

-

arms:UpdateShareStatus

-

arms:UpdateSourceMap

-

arms:UpdateTraceAppTags

-

arms:UpdateTraceAppUserMethod

-

arms:UpdateTraceEndpoint

-

arms:UpdateWebhook

-

arms:UpgradeOldXTraceAppLabelsToNewTags

-

arms:UpgradeXTrace

-

arms:UpsertRumMetadata

-

arms:UseHighPriorityAlert

-

對於不支援資源群組授權的操作,授權時資源範圍選取資源群組層級將無效。如果仍需要RAM使用者有上述操作許可權,您需要建立自訂權限原則,授權時資源範圍選取帳號層級

image.png以下是兩個自訂權限原則樣本,您可以根據實際需要調整策略內容。

  • 允許不支援資源群組層級授權的全部唯讀操作:Action中列舉不支援資源群組層級授權的所有隻讀操作。

    {
      "Version": "1",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "arms:AllTagResources",
            "arms:CheckArmsDefaultSLR",
            "arms:CheckGlobalView",
            "arms:CheckServiceStatus",
            "arms:CheckXtraceDefaultSLR",
            "arms:DescribeAttacks",
            "arms:DescribeBusinessLocation",
            "arms:DescribeMetricCardinality",
            "arms:DescribeRegions",
            "arms:DescribeTagsOfDuplicateRemoval",
            "arms:DescribeTraceDatasource",
            "arms:DescribeTraceEndpoint",
            "arms:DescribeTraceLicenseKey",
            "arms:DescribeTraceLocation",
            "arms:DescribeTraceQuality",
            "arms:DescribeTraceResourcesStatus",
            "arms:DescribeXTraceConfig",
            "arms:DescribeXTraceUpgradeStatus",
            "arms:DoConvergeAction",
            "arms:DoInsightsAction",
            "arms:GeneralQuery",
            "arms:GetATPAccessURL",
            "arms:GetAgentInfo",
            "arms:GetAgentUpgradeInfo",
            "arms:GetAlarmHistories",
            "arms:GetAlertsCommercialStatus",
            "arms:GetAppList",
            "arms:GetApplication",
            "arms:GetBubbleUpBrief",
            "arms:GetBubbleUpReport",
            "arms:GetChannelLink",
            "arms:GetCloudEnvironmentId",
            "arms:GetCloudMonitorInstallStatus",
            "arms:GetCloudMonitorMetric",
            "arms:GetCloudMonitorThumbnail",
            "arms:GetCloudProductHealthStatus",
            "arms:GetCmsPurchaseStatus",
            "arms:GetCommercialStatus",
            "arms:GetCommercialStatusV2",
            "arms:GetConsoleBaseInfo",
            "arms:GetContactScheduleDetail",
            "arms:GetConvergeConfig",
            "arms:GetCurrentEnv",
            "arms:GetDasEvents",
            "arms:GetDeliverTargetDetail",
            "arms:GetDeliverTask",
            "arms:GetDirectThumbnail",
            "arms:GetEscalationDetail",
            "arms:GetEscalationDispatch",
            "arms:GetGlobalViewUrl",
            "arms:GetGrafanaDatasource",
            "arms:GetGraphResourceStatus",
            "arms:GetHeapDumpList",
            "arms:GetJavaAgentDownloadUrl",
            "arms:GetMetricDatas",
            "arms:GetMetricQuantity",
            "arms:GetMetricStatistics",
            "arms:GetModuleConfig",
            "arms:GetMultipleTrace",
            "arms:GetOTTraceBriefInfos",
            "arms:GetOTTraceCallstack",
            "arms:GetOTTraceCallstackOverview",
            "arms:GetOTTraceDetails",
            "arms:GetOldPrometheusRuleCount",
            "arms:GetOnCallSchedulesDetail",
            "arms:GetProfilingData",
            "arms:GetPromUserPref",
            "arms:GetPrometheusAgentInfoAll",
            "arms:GetPrometheusRemoteWrite",
            "arms:GetPubInfo",
            "arms:GetRAMStatus",
            "arms:GetRemoteUrl",
            "arms:GetRepSize",
            "arms:GetRetcodeDataByQuery",
            "arms:GetRumData",
            "arms:GetRumExceptionStack",
            "arms:GetRumGroups",
            "arms:GetRumOcuStatisticData",
            "arms:GetRumUploadFilePolicyStatus",
            "arms:GetRumUploadFiles",
            "arms:GetSLSStatus",
            "arms:GetSlsProjectInfo",
            "arms:GetStack",
            "arms:GetStat",
            "arms:GetStsCreDential",
            "arms:GetSyntheticCommercialDetailAndUsageEstimate",
            "arms:GetSyntheticGrafanaDashboardUrl",
            "arms:GetSyntheticPrometheusCluster",
            "arms:GetTagKey",
            "arms:GetTagResourceSystemTags",
            "arms:GetTagVal",
            "arms:GetToCheckArmsDefaultSLR",
            "arms:GetTrace",
            "arms:GetTraceAggr",
            "arms:GetTraceAppConfigTemplate",
            "arms:GetTraceApps",
            "arms:GetTraceChain",
            "arms:GetTraceExplorerStatus",
            "arms:GetTraceGroupBy",
            "arms:GetTraceRegions",
            "arms:GetUserDatasourceConfig4Sls",
            "arms:GetUserInfo",
            "arms:GetUserWhiteListStatus",
            "arms:HealthCheck",
            "arms:HighPriorityAlertClearRatio",
            "arms:InitTraceResource",
            "arms:InnerDispatchContactOptions",
            "arms:InnerDispatchDetail",
            "arms:InnerFetchContactByArmsContactId",
            "arms:InnerFetchContactGroupByArmsContactGroupId",
            "arms:InnerGetUserTTSReissue",
            "arms:InnerNotifyObjectContactList",
            "arms:InvokeRulerManager",
            "arms:ListActivatedAlerts",
            "arms:ListAlertContact",
            "arms:ListAlertContactGroup",
            "arms:ListAlertContactGroupOption",
            "arms:ListAlertEvents",
            "arms:ListAlertTemplates",
            "arms:ListAllAlertContact",
            "arms:ListAllIMRobot",
            "arms:ListApplicationInstance",
            "arms:ListCloudMonitorCluster",
            "arms:ListCloudMonitorClusterMetric",
            "arms:ListCloudMonitorClusterProduct",
            "arms:ListCloudMonitorClusterThumbnail",
            "arms:ListCloudMonitorMigrateProduct",
            "arms:ListClusterApmWorkload",
            "arms:ListContactSchedule",
            "arms:ListDashBoardsByIntegrationType",
            "arms:ListDeliverTask",
            "arms:ListEntityDashboard",
            "arms:ListEntityForPage",
            "arms:ListEntityTypeAndCount",
            "arms:ListEnvironmentResources",
            "arms:ListEventBridgeIntegrations",
            "arms:ListFeatureFlags",
            "arms:ListGrafanaInstance",
            "arms:ListIMRobot",
            "arms:ListImmediateSyntheticTasks",
            "arms:ListIntegration",
            "arms:ListMetricLabelValues",
            "arms:ListMetricNames",
            "arms:ListMetrics",
            "arms:ListNotInstallCluster",
            "arms:ListPromAlertCluster",
            "arms:ListPromCluster",
            "arms:ListPromFrontVars",
            "arms:ListPrometheusAlertMetrics",
            "arms:ListPrometheusAlertTemplates",
            "arms:ListPrometheusInstance",
            "arms:ListPrometheusRemoteWrites",
            "arms:ListRaspApps",
            "arms:ListResource",
            "arms:ListSyntheticDetail",
            "arms:ListSyntheticMonitorGroups",
            "arms:ListSyntheticTags",
            "arms:ListUserLogProjects",
            "arms:ListUserLogSavedSearches",
            "arms:ListUserLogstoreIndexes",
            "arms:ListUserLogstores",
            "arms:ListVpcClusterPage",
            "arms:ListVpcSecurityGroupIds",
            "arms:QueryAPMMetrics",
            "arms:QueryAhasMachineMetric",
            "arms:QueryAppMetadata",
            "arms:QueryCommercialFeeData",
            "arms:QueryCommercialResourcePackage",
            "arms:QueryCommercialUsage",
            "arms:QueryCommercialUsageLimit",
            "arms:QueryConfig",
            "arms:QueryEvents",
            "arms:QueryHotSpotData",
            "arms:QueryLLMSessionDetail",
            "arms:QueryLLMTraceDetail",
            "arms:QueryProductConfig",
            "arms:QueryProfilingData",
            "arms:QueryProfilingWhitelist",
            "arms:QueryPrometheusFeeData",
            "arms:QuerySyntheticMetricData",
            "arms:QueryTopology",
            "arms:QueryTraces",
            "arms:SaveProductConfig",
            "arms:SearchContact",
            "arms:SearchContactGroup",
            "arms:SearchTagNames",
            "arms:SearchTagValues",
            "arms:SearchTraces",
            "arms:SearchTracesByPage",
            "arms:ShowGlobalView",
            "arms:ShowGlobalViewWithCustomAuthorization",
            "arms:ShowGlobalViewWithSubAccountInResourceDirectory",
            "arms:StatisticsSyntheticUsage",
            "arms:UpdateAlertsCommercialLimit",
            "arms:UpdateCommercialConfig",
            "arms:UseHighPriorityAlert"
          ],
          "Resource": "*"
        }
      ]
    }
    
  • 允許不支援資源群組層級授權的全部操作:Action中列舉不支援資源群組層級授權的全部操作。

    {
      "Version": "1",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "arms:AddBlackboxTask",
            "arms:AddCmsProduct",
            "arms:AddGrafana",
            "arms:AddIntegration",
            "arms:AddPrometheusGlobalView",
            "arms:AddPrometheusGlobalViewByAliClusterIds",
            "arms:AddRecordingRule",
            "arms:AddTask",
            "arms:AddUser",
            "arms:AlarmInsightsFeedback",
            "arms:AllTagResources",
            "arms:AppendInstancesToPrometheusGlobalView",
            "arms:ApplyScenario",
            "arms:BatchEmailVerifyLink",
            "arms:BatchUpdateConvergeConfig",
            "arms:BatchVerifyLink",
            "arms:BlockAlarmNotification",
            "arms:CMonitorCloudInstances",
            "arms:CMonitorRegister",
            "arms:CheckArmsDefaultSLR",
            "arms:CheckCommercialStatus",
            "arms:CheckDataConsistency",
            "arms:CheckGlobalView",
            "arms:CheckIntegrationYaml",
            "arms:CheckServiceLinkedRoleForDeleting",
            "arms:CheckServiceStatus",
            "arms:CheckXtraceDefaultSLR",
            "arms:ClaimAlarm",
            "arms:CloseAlarm",
            "arms:ConfigAgentLabel",
            "arms:ConfigApp",
            "arms:CreateAlertContact",
            "arms:CreateAlertContactGroup",
            "arms:CreateAlertTemplate",
            "arms:CreateContact",
            "arms:CreateContactGroup",
            "arms:CreateContactSchedule",
            "arms:CreateDispatchRule",
            "arms:CreateDump",
            "arms:CreateEscalation",
            "arms:CreateEscalationPolicy",
            "arms:CreateEvent",
            "arms:CreateHeapDump",
            "arms:CreateImmediateSyntheticTask",
            "arms:CreateIncidentWorkFlow",
            "arms:CreateIntegration",
            "arms:CreateNotificationPolicy",
            "arms:CreateOnCallSchedule",
            "arms:CreateOrUpdateAlertTemplate",
            "arms:CreateProm",
            "arms:CreateRumAppGroup",
            "arms:CreateRumUploadFileUrl",
            "arms:CreateSecurityAuth",
            "arms:CreateServiceDiscoveryConfig",
            "arms:CreateTemplatesByAlertRules",
            "arms:CreateWebhook",
            "arms:DelResourcesByAccountId",
            "arms:DeleteAlert",
            "arms:DeleteAlertContact",
            "arms:DeleteAlertContactGroup",
            "arms:DeleteAlertTemplate",
            "arms:DeleteAlertTemplates",
            "arms:DeleteApp",
            "arms:DeleteCmsExporter",
            "arms:DeleteCmsProduct",
            "arms:DeleteConfig",
            "arms:DeleteContact",
            "arms:DeleteContactGroup",
            "arms:DeleteContactLink",
            "arms:DeleteContactMember",
            "arms:DeleteContactSchedule",
            "arms:DeleteDeliverTask",
            "arms:DeleteDispatchRule",
            "arms:DeleteDump",
            "arms:DeleteEscalation",
            "arms:DeleteEscalationPolicy",
            "arms:DeleteHeapDump",
            "arms:DeleteIncidentWorkFlow",
            "arms:DeleteIntegration",
            "arms:DeleteIntegrationCustomJob",
            "arms:DeleteInteractiveDashboard",
            "arms:DeleteNotificationPolicy",
            "arms:DeleteOnCallSchedule",
            "arms:DeleteRumUploadFile",
            "arms:DeleteScenario",
            "arms:DeleteSilencePolicy",
            "arms:DeleteSourceMap",
            "arms:DeleteTask",
            "arms:DeleteTraceAppUserMethod",
            "arms:Describe",
            "arms:DescribeAttacks",
            "arms:DescribeBusinessLocation",
            "arms:DescribeDispatchRule",
            "arms:DescribeLicenseKey",
            "arms:DescribeMetric",
            "arms:DescribeMetricCardinality",
            "arms:DescribeRegions",
            "arms:DescribeTagsOfDuplicateRemoval",
            "arms:DescribeTraceDatasource",
            "arms:DescribeTraceEndpoint",
            "arms:DescribeTraceLicenseKey",
            "arms:DescribeTraceLocation",
            "arms:DescribeTraceQuality",
            "arms:DescribeTraceResourcesStatus",
            "arms:DescribeXTraceConfig",
            "arms:DescribeXTraceUpgradeStatus",
            "arms:DiagnoseTask",
            "arms:DisableAlertTemplate",
            "arms:DisableDeliverTask",
            "arms:DoConvergeAction",
            "arms:DoInsightsAction",
            "arms:EmailVerifyLink",
            "arms:EnableAlertTemplate",
            "arms:EnableDeliverTask",
            "arms:EnableGraphResource",
            "arms:EnableServiceAccessForPrometheus",
            "arms:ExportAlertTemplates",
            "arms:ExportPrometheusRules",
            "arms:GeneralQuery",
            "arms:GetATPAccessURL",
            "arms:GetAgentDownloadUrl",
            "arms:GetAgentInfo",
            "arms:GetAgentInfoByPage",
            "arms:GetAgentUpgradeInfo",
            "arms:GetAlarmHistories",
            "arms:GetAlert",
            "arms:GetAlertRulesByPage",
            "arms:GetAlertsCommercialStatus",
            "arms:GetAppApiPageInfo",
            "arms:GetAppCenterComponent",
            "arms:GetAppJVMConfig",
            "arms:GetAppList",
            "arms:GetAppLogStoreCorrelation",
            "arms:GetApplication",
            "arms:GetArmsInfo",
            "arms:GetAssumeRoleCredentials",
            "arms:GetBubbleUpBrief",
            "arms:GetBubbleUpReport",
            "arms:GetChanelLink",
            "arms:GetChannelLink",
            "arms:GetCloudEnvironmentId",
            "arms:GetCloudMonitorInstallStatus",
            "arms:GetCloudMonitorMetric",
            "arms:GetCloudMonitorThumbnail",
            "arms:GetCloudProductHealthCheckSetting",
            "arms:GetCloudProductHealthStatus",
            "arms:GetClusterInfo",
            "arms:GetClusterState",
            "arms:GetCmsInstallStatus",
            "arms:GetCmsMetric",
            "arms:GetCmsPurchaseStatus",
            "arms:GetCmsThumbnail",
            "arms:GetCommercialStatus",
            "arms:GetCommercialStatusV2",
            "arms:GetConsoleBaseInfo",
            "arms:GetContactScheduleDetail",
            "arms:GetConvergeConfig",
            "arms:GetCurrentEnv",
            "arms:GetDasEvents",
            "arms:GetDashboardList",
            "arms:GetDeliverTargetDetail",
            "arms:GetDeliverTask",
            "arms:GetDirectInstallStatus",
            "arms:GetDirectMetric",
            "arms:GetDirectThumbnail",
            "arms:GetEscalationDetail",
            "arms:GetEscalationDispatch",
            "arms:GetEvent",
            "arms:GetExceptionMetadata",
            "arms:GetExporterListByIntegration",
            "arms:GetGlobalViewUrl",
            "arms:GetGrafanaDatasource",
            "arms:GetGraphResourceStatus",
            "arms:GetHeapDumpList",
            "arms:GetImmediateSyntheticTask",
            "arms:GetIntegrationCluster",
            "arms:GetIntegrationInfo",
            "arms:GetIntegrationState",
            "arms:GetIntegrationToken",
            "arms:GetJaegerServiceOperations",
            "arms:GetJaegerServices",
            "arms:GetJavaAgentDownloadUrl",
            "arms:GetLokiCluster",
            "arms:GetMetricDatas",
            "arms:GetMetricQuantity",
            "arms:GetMetricStatistics",
            "arms:GetModuleConfig",
            "arms:GetMultipleTrace",
            "arms:GetOTTraceBriefInfos",
            "arms:GetOTTraceCallstack",
            "arms:GetOTTraceCallstackOverview",
            "arms:GetOTTraceDetails",
            "arms:GetOldPrometheusRuleCount",
            "arms:GetOnCallSchedulesDetail",
            "arms:GetPodAnnotation",
            "arms:GetProfilingData",
            "arms:GetPromUserPref",
            "arms:GetPrometheusAgentInfoAll",
            "arms:GetPrometheusApiToken",
            "arms:GetPrometheusRemoteWrite",
            "arms:GetPubInfo",
            "arms:GetRAMStatus",
            "arms:GetRemoteUrl",
            "arms:GetRepSize",
            "arms:GetResourceConsumptionDashboardUrl",
            "arms:GetRetcodeDataByQuery",
            "arms:GetRetcodeDatas",
            "arms:GetRetcodeLogstore",
            "arms:GetRetcodeShareUrl",
            "arms:GetRumData",
            "arms:GetRumExceptionStack",
            "arms:GetRumGroups",
            "arms:GetRumOcuStatisticData",
            "arms:GetRumUploadFilePolicyStatus",
            "arms:GetRumUploadFiles",
            "arms:GetSLSStatus",
            "arms:GetSlsProjectInfo",
            "arms:GetSourceMapInfo",
            "arms:GetSqlMetadata",
            "arms:GetStack",
            "arms:GetStat",
            "arms:GetStsCreDential",
            "arms:GetSupportEnv",
            "arms:GetSyntheticCommercialDetailAndUsageEstimate",
            "arms:GetSyntheticCommercialStatus",
            "arms:GetSyntheticGrafanaDashboardUrl",
            "arms:GetSyntheticMonitors",
            "arms:GetSyntheticPrometheusCluster",
            "arms:GetTagKey",
            "arms:GetTagResourceSystemTags",
            "arms:GetTagVal",
            "arms:GetThumbnailUrlListByIntegration",
            "arms:GetToCheckArmsDefaultSLR",
            "arms:GetTrace",
            "arms:GetTraceAggr",
            "arms:GetTraceAppConfigTemplate",
            "arms:GetTraceApps",
            "arms:GetTraceChain",
            "arms:GetTraceExplorerStatus",
            "arms:GetTraceGroupBy",
            "arms:GetTraceRegions",
            "arms:GetTraces",
            "arms:GetUserArmsPromClusterList",
            "arms:GetUserDatasourceConfig4Sls",
            "arms:GetUserInfo",
            "arms:GetUserWhiteListStatus",
            "arms:HealthCheck",
            "arms:HighPriorityAlertClearRatio",
            "arms:ImportAlertTemplates",
            "arms:InitTraceResource",
            "arms:InnerDeleteContactGroup",
            "arms:InnerDeleteIMRobot",
            "arms:InnerDispatchContactOptions",
            "arms:InnerDispatchDetail",
            "arms:InnerDispatchRuleCreate",
            "arms:InnerFetchContactByArmsContactId",
            "arms:InnerFetchContactGroupByArmsContactGroupId",
            "arms:InnerGetUserTTSReissue",
            "arms:InnerNotifyObjectContactList",
            "arms:InnerUpdateAlertContact",
            "arms:InnerUpdateAlertWebhook",
            "arms:InnerUpdateContactGroup",
            "arms:InnerUpdateDispatch",
            "arms:InnerUpdateIMRobot",
            "arms:InnerUpdateTTSReissue",
            "arms:InsertConfig",
            "arms:InsightsCreateInspectJob",
            "arms:InsightsFeedbackJobReport",
            "arms:InsightsGetInspectJobReport",
            "arms:InsightsStopInspectJob",
            "arms:InstallCloudMonitorProduct",
            "arms:InstallCmsExporter",
            "arms:InstallExporterByIntegration",
            "arms:InstallMysqlExporter",
            "arms:InvokeCenterPop",
            "arms:InvokeRulerManager",
            "arms:KeepAllCommercialTrace",
            "arms:ListActivatedAlerts",
            "arms:ListAlertContact",
            "arms:ListAlertContactGroup",
            "arms:ListAlertContactGroupOption",
            "arms:ListAlertEvents",
            "arms:ListAlertTemplates",
            "arms:ListAlertWebhookContact",
            "arms:ListAllAlertContact",
            "arms:ListAllIMRobot",
            "arms:ListApplicationInstance",
            "arms:ListCloudMonitorCluster",
            "arms:ListCloudMonitorClusterMetric",
            "arms:ListCloudMonitorClusterProduct",
            "arms:ListCloudMonitorClusterThumbnail",
            "arms:ListCloudMonitorMigrateProduct",
            "arms:ListCluster",
            "arms:ListClusterApmWorkload",
            "arms:ListClusterFromGrafana",
            "arms:ListCmsInstances",
            "arms:ListContactSchedule",
            "arms:ListDashBoardsByIntegrationType",
            "arms:ListDashboardsByName",
            "arms:ListDeliverTask",
            "arms:ListDispatchRule",
            "arms:ListEntityDashboard",
            "arms:ListEntityForPage",
            "arms:ListEntityTypeAndCount",
            "arms:ListEnvironmentResources",
            "arms:ListEventBridgeIntegrations",
            "arms:ListExporterMetrics",
            "arms:ListFeatureFlags",
            "arms:ListGrafanaInstance",
            "arms:ListGrafarmsDashboard",
            "arms:ListIMRobot",
            "arms:ListImmediateSyntheticTasks",
            "arms:ListIntegration",
            "arms:ListLLMSessions",
            "arms:ListMetricLabelValues",
            "arms:ListMetricNames",
            "arms:ListMetrics",
            "arms:ListNotInstallCluster",
            "arms:ListProbes",
            "arms:ListPromAlertCluster",
            "arms:ListPromCluster",
            "arms:ListPromClusters",
            "arms:ListPromFrontVars",
            "arms:ListPrometheusAlertMetrics",
            "arms:ListPrometheusAlertTemplates",
            "arms:ListPrometheusDeliverCluster",
            "arms:ListPrometheusGlobalView",
            "arms:ListPrometheusInstance",
            "arms:ListPrometheusInstances",
            "arms:ListPrometheusRemoteWrites",
            "arms:ListRaspApps",
            "arms:ListResource",
            "arms:ListScenario",
            "arms:ListServerlessTopNApps",
            "arms:ListSyntheticDetail",
            "arms:ListSyntheticMonitorGroups",
            "arms:ListSyntheticTags",
            "arms:ListUserLogProjects",
            "arms:ListUserLogSavedSearches",
            "arms:ListUserLogstoreIndexes",
            "arms:ListUserLogstores",
            "arms:ListVpcClusterPage",
            "arms:ListVpcSecurityGroupIds",
            "arms:OpenArmsDefaultSLR",
            "arms:OpenArmsService",
            "arms:OpenArmsServiceSecondVersion",
            "arms:OpenVCluster",
            "arms:OpenXtraceDefaultSLR",
            "arms:PreviewContactSchedule",
            "arms:QueryAPMMetrics",
            "arms:QueryAhasMachineMetric",
            "arms:QueryAppMetadata",
            "arms:QueryAuditLogs",
            "arms:QueryCommercialFeeData",
            "arms:QueryCommercialResourcePackage",
            "arms:QueryCommercialUsage",
            "arms:QueryCommercialUsageLimit",
            "arms:QueryConfig",
            "arms:QueryDataSet",
            "arms:QueryEvents",
            "arms:QueryHotSpotData",
            "arms:QueryLLMSessionDetail",
            "arms:QueryLLMTraceDetail",
            "arms:QueryMetric",
            "arms:QueryMetricByPage",
            "arms:QueryProductConfig",
            "arms:QueryProfilingData",
            "arms:QueryProfilingWhitelist",
            "arms:QueryPromInstallStatus",
            "arms:QueryPrometheusFeeData",
            "arms:QueryServiceDetailConsoleInfo",
            "arms:QuerySyntheticAlertEventCount",
            "arms:QuerySyntheticMetricData",
            "arms:QueryTopology",
            "arms:QueryTraces",
            "arms:RefreshDashboardCluster",
            "arms:RegisterCloudProduct",
            "arms:ReinstallFlinkCluster",
            "arms:RemoveSourcesFromPrometheusGlobalView",
            "arms:ReportAgentDaemonStatus",
            "arms:ReportEvent",
            "arms:ReportJavaAttachStatus",
            "arms:ResetConvergeConfig",
            "arms:RestartPrometheusAgent",
            "arms:SaveAlertTemplate",
            "arms:SaveCommercialFeeChange",
            "arms:SaveCommercialUsageLimit",
            "arms:SaveContactGroup",
            "arms:SaveContactMember",
            "arms:SaveDataset",
            "arms:SaveInteractiveDashboard",
            "arms:SaveModuleConfig",
            "arms:SaveProductConfig",
            "arms:SaveSatelliteConfig",
            "arms:SaveSyntheticMonitorGroup",
            "arms:SaveTraceAppUserMethod",
            "arms:SaveXTraceConfig",
            "arms:SearchAlarmHistories",
            "arms:SearchAlertContact",
            "arms:SearchAlertContactGroup",
            "arms:SearchAlertHistories",
            "arms:SearchAlertRuleTemplate",
            "arms:SearchAlertRules",
            "arms:SearchContact",
            "arms:SearchContactGroup",
            "arms:SearchEvents",
            "arms:SearchRetcodeAppByPage",
            "arms:SearchTagNames",
            "arms:SearchTagValues",
            "arms:SearchTraces",
            "arms:SearchTracesByPage",
            "arms:SendCustomIncidents",
            "arms:SendMseIncident",
            "arms:SetPromUserPref",
            "arms:ShowGlobalView",
            "arms:ShowGlobalViewWithCustomAuthorization",
            "arms:ShowGlobalViewWithSubAccountInResourceDirectory",
            "arms:StartAllCommercialRetcode",
            "arms:StatisticsSyntheticUsage",
            "arms:StopAllCommercialRetcode",
            "arms:SyncRecordingRules",
            "arms:TurnOnSecondSwitch",
            "arms:UnBlockAlarmNotification",
            "arms:UnInstallExporterByIntegration",
            "arms:UnInstallGlobalView",
            "arms:UninstallCloudMonitorCluster",
            "arms:UninstallCloudMonitorProduct",
            "arms:UpdateAlertContact",
            "arms:UpdateAlertContactGroup",
            "arms:UpdateAlertTemplate",
            "arms:UpdateAlertsCommercialLimit",
            "arms:UpdateAppConvergeConfig",
            "arms:UpdateCloudMonitorCluster",
            "arms:UpdateCmsProduct",
            "arms:UpdateCommercialConfig",
            "arms:UpdateConfig",
            "arms:UpdateContact",
            "arms:UpdateContactGroup",
            "arms:UpdateContactMember",
            "arms:UpdateContactSchedule",
            "arms:UpdateDispatchRule",
            "arms:UpdateEscalation",
            "arms:UpdateEscalationPolicy",
            "arms:UpdateIncidentWorkFlow",
            "arms:UpdateIntegration",
            "arms:UpdateInteractiveDashboard",
            "arms:UpdateNotificationPolicy",
            "arms:UpdateOnCallSchedule",
            "arms:UpdatePrometheusAgentSize",
            "arms:UpdatePrometheusIntegration",
            "arms:UpdateRumUploadFilePolicy",
            "arms:UpdateShareLink",
            "arms:UpdateShareStatus",
            "arms:UpdateSourceMap",
            "arms:UpdateTraceAppTags",
            "arms:UpdateTraceAppUserMethod",
            "arms:UpdateTraceEndpoint",
            "arms:UpdateWebhook",
            "arms:UpgradeOldXTraceAppLabelsToNewTags",
            "arms:UpgradeXTrace",
            "arms:UpsertRumMetadata",
            "arms:UseHighPriorityAlert"
          ],
          "Resource": "*"
        }
      ]
    }
    
重要

獲得帳號層級許可權的RAM使用者或RAM角色,能夠操作整個帳號範圍內的相關資源。請務必確認所授與權限是否符合預期,遵從最小授權原則謹慎分配許可權。

常見問題

如何查看當前資源屬於哪個資源群組?

  • 方式一:單擊資源名稱,進入資源的詳情頁面,即可查看到當前資源的資源群組。

  • 方式二:登入資源管理主控台,單擊資源中心 > 資源搜尋,在左側選擇目標資源所屬帳號(預設為當前帳號),通過篩選條件定位目標資源,即可查看其所屬資源群組。

如何查看當前產品在某個資源群組下的所有資源?

  • 方式一:登入資源管理主控台,單擊資源中心 > 資源搜尋,然後在左側的資源所屬帳號(預設為當前帳號)下選擇單擊目標資源群組名稱,最後在右側的選擇資源類型中選擇當前產品,即可查看當前產品在某個資源群組下的所有資源。

  • 方式二:登入資源管理主控台,單擊資源群組 > 資源群組,然後找到目標資源群組,單擊其所在行的操作列下的資源管理,最後在資源管理頁面上方的產品下拉框中選擇當前產品,即可查看當前產品在某個資源群組下的所有資源。

如何批量修改多個資源的資源群組?

登入資源管理主控台,單擊資源群組 > 資源群組,在目標資源群組所在行的操作列下,單擊資源管理以進入資源管理頁面。通過篩選條件定位多個目標資源,批量勾選第一列的複選框後單擊下方轉移資源群組,並按頁面提示完成資源群組修改。