當您使用資源群組對資源進行分組管理時,可以結合存取控制(RAM),在單個阿里雲帳號內實現資源的隔離和精微調權限管理。本文總結了Alibaba Cloud DNS對資源群組的支援情況,以及資源群組層級的授權操作步驟。
-
只有支援資源群組的資源類型和支援資源群組層級授權的操作,資源群組層級授權才會生效。
-
對於不支援資源群組的資源類型,授予資源群組範圍的許可權將無效。在選擇資源範圍時,請選擇帳號層級,進行帳號層級授權。具體操作,請參見不支援資源群組層級授權的操作。
資源群組授權的工作原理
您可以使用資源群組(Resource Group)對阿里雲帳號內的資源進行分組管理。例如,為不同的專案建立對應的資源群組,並將資源轉移到對應的組中,以便集中管理各專案的資源。更多資訊,請參見什麼是資源群組。
在完成資源分組後,您可以為不同的RAM授權主體(RAM使用者、RAM使用者組或RAM角色)授予指定資源群組範圍的許可權,從而限定這個授權主體只能管理該資源群組內的資源。更多資訊,請參見資源分組和授權。
這種授權方式的優點有:
-
許可權精細化:確保每個身份能獲得最準確的資源存取權限,避免帳號下的多重專案的資源混合管理。
-
良好的擴充性:後續新增資源時,只需將其加入該資源群組,RAM身份便會自動獲得新資源的相應許可權,無需再次授權。
為RAM使用者授予資源群組層級的許可權
下面以RAM使用者為例,介紹授予指定資源群組內Alibaba Cloud DNS資源許可權的操作步驟。
1. 前置步驟
2. 進行資源群組層級授權
您可以通過以下任一方式進行資源群組層級授權。
方式一:在資源管理主控台中授權
通過資源群組的許可權管理功能為指定 RAM 使用者授權。詳情操作可參見為RAM身份授予資源群組範圍的許可權。
方式二:在 RAM 控制台中授權
通過RAM控制台為指定 RAM 使用者進行資源群組層級授權。詳細操作可參見為RAM使用者授權。
支援資源群組的資源類型
Alibaba Cloud DNS支援資源群組的資源類型如下表所示:
|
雲端服務 |
雲端服務代碼 |
資源類型 |
|
Alibaba Cloud DNS |
alidns |
domain : 網域名稱解析 |
對於暫不支援資源群組的資源類型,如有需要,您可以在資源群組控制台提交反饋。

不支援資源群組層級授權的操作
Alibaba Cloud DNS中不支援資源群組層級授權的操作(Action)如下:
|
操作(Action) |
操作描述 |
|
alidns:AddBatchDomain |
- |
|
alidns:AddBatchDomainFromFile |
- |
|
alidns:AddBatchRr |
- |
|
alidns:AddBatchTempDomains |
- |
|
alidns:AddDnsCacheDomain |
- |
|
alidns:AddDnsMonitor |
- |
|
alidns:AddDnsTemplate |
- |
|
alidns:AddDnsTemplateRecord |
- |
|
alidns:AddDohUser |
- |
|
alidns:AddDomainGroup |
- |
|
alidns:AddGtmRecoveryPlan |
- |
|
alidns:AddRegistrar |
- |
|
alidns:AddRegistrarContact |
- |
|
alidns:AddRspDomainServerHoldStatusForGateway |
- |
|
alidns:AddUserProductFeedback |
- |
|
alidns:BatchDomainRecordOperate |
- |
|
alidns:BindInstanceDomains |
- |
|
alidns:CancelJob |
- |
|
alidns:CancelOrder |
- |
|
alidns:ChangeBatchDomainGroup |
- |
|
alidns:ChangeDomainOfDnsProduct |
- |
|
alidns:ChatAssistantMessage |
- |
|
alidns:CheckDomainRecord |
- |
|
alidns:CheckEdgeDnsClusterConnection |
- |
|
alidns:CheckEdgeDnsClusterDeploymentAppVersion |
- |
|
alidns:CheckEdgeDnsDeploymentAppVersion |
- |
|
alidns:CheckFusionClientAvailable |
- |
|
alidns:CheckGtmInstanceExistence |
- |
|
alidns:CheckInstanceAllowSystemAssign |
- |
|
alidns:CheckSubDomainRecord4Add |
- |
|
alidns:CompleteCommodity |
- |
|
alidns:CompleteCommodityWithoutTraffic |
- |
|
alidns:CopyGtmConfig |
- |
|
alidns:CreateCloudMonitorTask |
- |
|
alidns:CreateEdgeDnsCluster |
- |
|
alidns:CreateInstance |
- |
|
alidns:CreateMultiCommodityOrder |
- |
|
alidns:CreatePtrRecordSet |
- |
|
alidns:CreateRenewOrder |
- |
|
alidns:DeleteAssistantChat |
- |
|
alidns:DeleteBatchDomain |
- |
|
alidns:DeleteBatchRr |
- |
|
alidns:DeleteCloudGtmAddress |
- |
|
alidns:DeleteCloudGtmAddressPool |
- |
|
alidns:DeleteCloudGtmInstanceConfig |
- |
|
alidns:DeleteCloudGtmMonitorTemplate |
- |
|
alidns:DeleteCloudMonitorTask |
- |
|
alidns:DeleteCloudMonitorTasksJob |
- |
|
alidns:DeleteDnsMonitor |
- |
|
alidns:DeleteDnsTemplate |
- |
|
alidns:DeleteDnsTemplateRecord |
- |
|
alidns:DeleteDomainGroup |
- |
|
alidns:DeleteEdgeDnsCluster |
- |
|
alidns:DeleteFusionClientConfig |
- |
|
alidns:DeleteGtmRecoveryPlan |
- |
|
alidns:DeletePtrRecord |
- |
|
alidns:DescribeAccount |
- |
|
alidns:DescribeAlidnsGlobalAlert |
- |
|
alidns:DescribeAlidnsInstances |
- |
|
alidns:DescribeAlidnsPostBusinessStatus |
- |
|
alidns:DescribeBatchLogs |
- |
|
alidns:DescribeBatchResultCount |
- |
|
alidns:DescribeBatchResultDetail |
- |
|
alidns:DescribeBundleRecordTaskResult |
- |
|
alidns:DescribeBundleTempDomains |
- |
|
alidns:DescribeCanAddMonitorDomainRrs |
- |
|
alidns:DescribeCanAddMonitorSubDomainInfo |
- |
|
alidns:DescribeChangeLogs |
- |
|
alidns:DescribeCloudGtmAddress |
- |
|
alidns:DescribeCloudGtmAddressPool |
- |
|
alidns:DescribeCloudGtmAddressPoolReference |
- |
|
alidns:DescribeCloudGtmAddressReference |
- |
|
alidns:DescribeCloudGtmGlobalAlert |
- |
|
alidns:DescribeCloudGtmInstanceConfigAlert |
- |
|
alidns:DescribeCloudGtmInstanceConfigFullInfo |
- |
|
alidns:DescribeCloudGtmMonitorTemplate |
- |
|
alidns:DescribeCloudGtmSummary |
- |
|
alidns:DescribeCloudGtmSystemLines |
- |
|
alidns:DescribeCloudMonitorDetectCountOverview |
- |
|
alidns:DescribeCloudMonitorDetectCountSummary |
- |
|
alidns:DescribeCloudMonitorDetectLogs |
- |
|
alidns:DescribeCloudMonitorGlobalAlertConfig |
- |
|
alidns:DescribeCloudMonitorLatestDetectLogOverview |
- |
|
alidns:DescribeCloudMonitorLatestDetectLogs |
- |
|
alidns:DescribeCloudMonitorTask |
- |
|
alidns:DescribeCloudMonitorTaskAlertConfig |
- |
|
alidns:DescribeCloudMonitorTaskDetectSummary |
- |
|
alidns:DescribeCloudMonitorTaskOverview |
- |
|
alidns:DescribeDnsCacheDomains |
- |
|
alidns:DescribeDnsGtmAddrAttributeInfo |
- |
|
alidns:DescribeDnsGtmAvailableAlertGroup |
- |
|
alidns:DescribeDnsGtmMonitorAvailableConfig |
- |
|
alidns:DescribeDnsMonitor |
- |
|
alidns:DescribeDnsMonitorAvailableNodes |
- |
|
alidns:DescribeDnsMonitorTaskConfig |
- |
|
alidns:DescribeDnsMonitors |
- |
|
alidns:DescribeDnsProductInstance |
- |
|
alidns:DescribeDnsProductInstanceSummary |
- |
|
alidns:DescribeDnsProductInstances |
- |
|
alidns:DescribeDnsTemplateInfo |
- |
|
alidns:DescribeDnsTemplates |
- |
|
alidns:DescribeDnsUserInstancesInfo |
- |
|
alidns:DescribeDohAccountStatistics |
- |
|
alidns:DescribeDohDomainStatistics |
- |
|
alidns:DescribeDohDomainStatisticsSummary |
- |
|
alidns:DescribeDohSdkList |
- |
|
alidns:DescribeDohSubDomainStatistics |
- |
|
alidns:DescribeDohSubDomainStatisticsSummary |
- |
|
alidns:DescribeDohUserInfo |
- |
|
alidns:DescribeDomainBackups |
- |
|
alidns:DescribeDomainGroups |
- |
|
alidns:DescribeDomainLogs |
- |
|
alidns:DescribeDomainResolveStatisticsSummary |
- |
|
alidns:DescribeDomainStatisticsSummary |
- |
|
alidns:DescribeEdgeDnsAppAgentInfo |
- |
|
alidns:DescribeEdgeDnsAppLatestVersion |
- |
|
alidns:DescribeEdgeDnsClusterFullInfo |
- |
|
alidns:DescribeEdgeDnsClusterNodeContainers |
- |
|
alidns:DescribeEdgeDnsClusterNodeServiceStatus |
- |
|
alidns:DescribeEdgeDnsClusterResource |
- |
|
alidns:DescribeEdgeDnsClusterResourceOverview |
- |
|
alidns:DescribeEdgeDnsDeployNotFinalStatusTask |
- |
|
alidns:DescribeEdgeDnsDeployOptionalIp |
- |
|
alidns:DescribeEdgeDnsDeployOptionalVersion |
- |
|
alidns:DescribeEdgeDnsDeployTask |
- |
|
alidns:DescribeEdgeDnsDeploymentInfo |
- |
|
alidns:DescribeEdgeDnsDeploymentStatistics |
- |
|
alidns:DescribeEdgeDnsNodeConnectionToken |
- |
|
alidns:DescribeEdgeDnsNodeFullInfo |
- |
|
alidns:DescribeFusionOnPremisesInstances |
- |
|
alidns:DescribeFusionResources |
- |
|
alidns:DescribeGtmAvailableAlertGroup |
- |
|
alidns:DescribeGtmMonitorAvailableConfig |
- |
|
alidns:DescribeGtmRecoveryPlan |
- |
|
alidns:DescribeGtmRecoveryPlanAvailableConfig |
- |
|
alidns:DescribeGtmRecoveryPlans |
- |
|
alidns:DescribeImportDomainRecordsResult |
- |
|
alidns:DescribeImportDomainsResult |
- |
|
alidns:DescribeInstanceDomains |
- |
|
alidns:DescribeInstanceExtendStatus |
- |
|
alidns:DescribeInternetDnsLogs |
- |
|
alidns:DescribeIntranetFirewallProtectionDetail |
- |
|
alidns:DescribeIntranetFirewallProtectionDetails |
- |
|
alidns:DescribeIntranetFirewallProtectionHistory |
- |
|
alidns:DescribeIntranetFirewallProtectionLogs |
- |
|
alidns:DescribeIntranetFirewallProtectionOverview |
- |
|
alidns:DescribeIntranetFirewallProtectionRankings |
- |
|
alidns:DescribeInvalidDomains |
- |
|
alidns:DescribeIspFlushCacheInstances |
- |
|
alidns:DescribeIspFlushCacheRemainQuota |
- |
|
alidns:DescribeIspFlushCacheTask |
- |
|
alidns:DescribeIspFlushCacheTasks |
- |
|
alidns:DescribeJobOverview |
- |
|
alidns:DescribeJobs |
- |
|
alidns:DescribePostBusinessServiceStatus |
- |
|
alidns:DescribePtrRecordSet |
- |
|
alidns:DescribePtrRecords |
- |
|
alidns:DescribeRecommendCommodities |
- |
|
alidns:DescribeRecursionFirewallProtectionDetail |
- |
|
alidns:DescribeRecursionFirewallProtectionDetails |
- |
|
alidns:DescribeRecursionFirewallProtectionHistory |
- |
|
alidns:DescribeRecursionFirewallProtectionLogs |
- |
|
alidns:DescribeRecursionFirewallProtectionOverview |
- |
|
alidns:DescribeRecursionFirewallProtectionRankings |
- |
|
alidns:DescribeResolveAndOperatorClusterAssociationOverview |
- |
|
alidns:DescribeResolveSummary |
- |
|
alidns:DescribeRestoreDomainResults |
- |
|
alidns:DescribeRestoringDomainTasks |
- |
|
alidns:DescribeSiteMonitor |
- |
|
alidns:DescribeSiteMonitorIspCityInfos |
- |
|
alidns:DescribeSiteMonitorIspInfos |
- |
|
alidns:DescribeSlaveDnsDomains |
- |
|
alidns:DescribeSubJobs |
- |
|
alidns:DescribeSubdomainRecords |
- |
|
alidns:DescribeSupportLines |
- |
|
alidns:DescribeTags |
- |
|
alidns:DescribeTransferDomains |
- |
|
alidns:DescribeUserContactInfo |
- |
|
alidns:DescribeUserGrayStatus |
- |
|
alidns:DescribleMultiCommodityPrices |
- |
|
alidns:ExecuteGtmRecoveryPlan |
- |
|
alidns:ExportDomainJob |
- |
|
alidns:ExportResolveSummaryJob |
- |
|
alidns:FetchFusionFirewallThreatDownloadUrl |
- |
|
alidns:FinishEdgeDnsDeployTask |
- |
|
alidns:GetMainDomainName |
- |
|
alidns:GetTxtRecordForRetrievalDomainName |
- |
|
alidns:GetTxtRecordForVerify |
- |
|
alidns:ListAlidnsAlertLogs |
- |
|
alidns:ListAssistantChat |
- |
|
alidns:ListAssistantMessage |
- |
|
alidns:ListAssistantQuestionGuide |
- |
|
alidns:ListAssociatedResolveClusters |
- |
|
alidns:ListAvailableAlertGroups |
- |
|
alidns:ListCloudGtmAddressPools |
- |
|
alidns:ListCloudGtmAddresses |
- |
|
alidns:ListCloudGtmAlertLogs |
- |
|
alidns:ListCloudGtmAvailableAlertGroups |
- |
|
alidns:ListCloudGtmInstanceConfigs |
- |
|
alidns:ListCloudGtmInstances |
- |
|
alidns:ListCloudGtmMonitorNodes |
- |
|
alidns:ListCloudGtmMonitorTemplates |
- |
|
alidns:ListCloudMonitorAlertLogs |
- |
|
alidns:ListCloudMonitorProbes |
- |
|
alidns:ListCloudMonitorTasks |
- |
|
alidns:ListEdgeDnsAlertLogs |
- |
|
alidns:ListEdgeDnsClusters |
- |
|
alidns:ListEdgeDnsNodes |
- |
|
alidns:ListEdgeDnsNotifyConfigs |
- |
|
alidns:ListEdgeDnsNotifyGatewayConfigs |
- |
|
alidns:ListEdgeDnsResolveLogs |
- |
|
alidns:ListEppClient |
- |
|
alidns:ListTagResources |
- |
|
alidns:ListTld |
- |
|
alidns:ManuallyRetryEdgeDnsClusterDispatchDataJob |
- |
|
alidns:OpenPostBusinessService |
- |
|
alidns:OperateBatchDomain |
- |
|
alidns:OrderPaidNotice |
- |
|
alidns:PreviewGtmRecoveryPlan |
- |
|
alidns:QueryAllowRenewPeriodList |
- |
|
alidns:QueryDnsMonitorErrorEvent |
- |
|
alidns:QueryDnsMonitorFailureRate |
- |
|
alidns:QueryDnsMonitorHistory |
- |
|
alidns:QueryDnsMonitorLast |
- |
|
alidns:QueryDnsMonitorNodeResponseTime |
- |
|
alidns:QueryDnsMonitorStatistics |
- |
|
alidns:QueryEdgeDnsMonitors |
- |
|
alidns:QueryEdgeDnsResolveQps |
- |
|
alidns:QueryEdgeDnsTopData |
- |
|
alidns:QueryEdgeDnsTopDomain |
- |
|
alidns:QueryEdgeDnsTopRCode |
- |
|
alidns:QueryInstanceUnpaidOrder |
- |
|
alidns:QueryRenewPrice |
- |
|
alidns:RecheckInvalidDomain |
- |
|
alidns:ReclaimDomain |
- |
|
alidns:RefundOrder |
- |
|
alidns:RemoveRspDomainServerHoldStatusForGateway |
- |
|
alidns:ReplacePtrRecordSet |
- |
|
alidns:ResetBatchResult |
- |
|
alidns:ResetImportDomainsResult |
- |
|
alidns:RetrieveBatchDomain |
- |
|
alidns:RetrieveDomain |
- |
|
alidns:RollbackGtmRecoveryPlan |
- |
|
alidns:SaveResolveClustersAssociation |
- |
|
alidns:ScanSubdomainRecords |
- |
|
alidns:SearchCloudGtmAddressPools |
- |
|
alidns:SearchCloudGtmAddresses |
- |
|
alidns:SearchCloudGtmInstanceConfigs |
- |
|
alidns:SearchCloudGtmInstances |
- |
|
alidns:SearchCloudGtmMonitorTemplates |
- |
|
alidns:SearchCloudMonitorTasks |
- |
|
alidns:SearchEdgeDnsClusters |
- |
|
alidns:SearchEdgeDnsNodes |
- |
|
alidns:SendVerifyCode |
- |
|
alidns:SetCloudMonitorTaskStatus |
- |
|
alidns:SetDomainAuthLogConfig |
- |
|
alidns:SetEdgeDnsClusterRecurseEnableStatus |
- |
|
alidns:SetInstanceRenewalStatus |
- |
|
alidns:SetPtrRecordStatus |
- |
|
alidns:SubmitEdgeDnsDeployRetryTask |
- |
|
alidns:SubmitEdgeDnsDeployTask |
- |
|
alidns:SubmitImportDomainRecordsFile |
- |
|
alidns:SubmitIspFlushCacheTask |
- |
|
alidns:TagResources |
- |
|
alidns:TemporaryCancelFusionResource |
- |
|
alidns:TransferBatchDomain |
- |
|
alidns:UnbindInstanceDomains |
- |
|
alidns:UntagResources |
- |
|
alidns:UpdateAlidnsGlobalAlert |
- |
|
alidns:UpdateAlidnsLineRecordSet |
- |
|
alidns:UpdateAssistantChatName |
- |
|
alidns:UpdateAssistantMessageFeedback |
- |
|
alidns:UpdateBatchRr |
- |
|
alidns:UpdateCloudGtmAddressEnableStatus |
- |
|
alidns:UpdateCloudGtmAddressManualAvailableStatus |
- |
|
alidns:UpdateCloudGtmAddressPoolEnableStatus |
- |
|
alidns:UpdateCloudGtmAddressPoolRemark |
- |
|
alidns:UpdateCloudGtmAddressRemark |
- |
|
alidns:UpdateCloudGtmGlobalAlert |
- |
|
alidns:UpdateCloudGtmInstanceConfigBasic |
- |
|
alidns:UpdateCloudGtmInstanceConfigRemark |
- |
|
alidns:UpdateCloudGtmInstanceName |
- |
|
alidns:UpdateCloudGtmMonitorTemplateRemark |
- |
|
alidns:UpdateCloudMonitorGlobalAlertConfig |
- |
|
alidns:UpdateCloudMonitorTask |
- |
|
alidns:UpdateCloudMonitorTaskAlertConfig |
- |
|
alidns:UpdateCloudMonitorTaskRemark |
- |
|
alidns:UpdateDnsMonitor |
- |
|
alidns:UpdateDnsTemplateName |
- |
|
alidns:UpdateDnsTemplateRecord |
- |
|
alidns:UpdateDomainGroup |
- |
|
alidns:UpdateDomainServerHoldStatus |
- |
|
alidns:UpdateDomainStatus |
- |
|
alidns:UpdateEdgeDnsCluster |
- |
|
alidns:UpdateEdgeDnsClusterRecurseRemark |
- |
|
alidns:UpdateEdgeDnsNodeName |
- |
|
alidns:UpdateEdgeDnsNodeRemark |
- |
|
alidns:UpdateEdgeDnsNotifyConfig |
- |
|
alidns:UpdateEdgeDnsNotifyGatewayConfig |
- |
|
alidns:UpdateEdgeDnsSyslogDnsLogNotifyConfig |
- |
|
alidns:UpdateFusionClientConfig |
- |
|
alidns:UpdateFusionClientNodeEscapeConfig |
- |
|
alidns:UpdateFusionFirewallSubscriptionConfig |
- |
|
alidns:UpdateGtmRecoveryPlan |
- |
|
alidns:UpdateIspFlushCacheInstanceConfig |
- |
|
alidns:UpdatePtrRecordRemark |
- |
|
alidns:UpdateRspDomainServerHoldStatus |
- |
|
alidns:UpdateRspDomainServerHoldStatusOte |
- |
|
alidns:UpdateRspDomainServerProhibitStatus |
- |
|
alidns:UpdateRspDomainServerProhibitStatusForGateway |
- |
|
alidns:UpdateRspDomainStatus |
- |
|
alidns:UpdateRspDomainStatusOte |
- |
|
alidns:UpdateUserProductFeedback |
- |
|
alidns:ValidateDomainCanAdd |
- |
|
alidns:ValidateVerifyCode |
- |
|
alidns:VerifyAccount |
- |
|
alidns:VerifyTxtRecord |
- |
|
alidns:VerifyTxtRecordForRetrievalDomainName |
- |
|
alidns:addDomainRecord |
- |
|
alidns:deleteDomainRecord |
- |
|
alidns:null |
- |
|
alidns:read |
- |
|
alidns:setDomainRecordStatus |
- |
|
alidns:update |
- |
|
alidns:updateDomainRecord |
- |
|
alidns:updateDomainRecordRemark |
- |
對於不支援資源群組授權的操作,授權時資源範圍選取資源群組層級將無效。如果仍需要RAM使用者有上述操作許可權,您需要建立自訂權限原則,授權時資源範圍選取帳號層級。
以下是兩個自訂權限原則樣本,您可以根據實際需要調整策略內容。
-
允許不支援資源群組層級授權的全部唯讀操作:
Action中列舉不支援資源群組層級授權的所有隻讀操作。{ "Version": "1", "Statement": [ { "Effect": "Allow", "Action": [ "alidns:CheckDomainRecord", "alidns:CheckEdgeDnsClusterConnection", "alidns:CheckEdgeDnsClusterDeploymentAppVersion", "alidns:CheckEdgeDnsDeploymentAppVersion", "alidns:CheckGtmInstanceExistence", "alidns:CheckInstanceAllowSystemAssign", "alidns:CheckSubDomainRecord4Add", "alidns:DescribeAccount", "alidns:DescribeAlidnsInstances", "alidns:DescribeBatchLogs", "alidns:DescribeBatchResultCount", "alidns:DescribeBatchResultDetail", "alidns:DescribeBundleTempDomains", "alidns:DescribeCanAddMonitorDomainRrs", "alidns:DescribeCanAddMonitorSubDomainInfo", "alidns:DescribeChangeLogs", "alidns:DescribeCloudGtmAddress", "alidns:DescribeCloudGtmAddressPool", "alidns:DescribeCloudGtmAddressPoolReference", "alidns:DescribeCloudGtmAddressReference", "alidns:DescribeCloudGtmGlobalAlert", "alidns:DescribeCloudGtmInstanceConfigAlert", "alidns:DescribeCloudGtmInstanceConfigFullInfo", "alidns:DescribeCloudGtmMonitorTemplate", "alidns:DescribeCloudGtmSummary", "alidns:DescribeCloudGtmSystemLines", "alidns:DescribeCloudMonitorDetectCountOverview", "alidns:DescribeCloudMonitorDetectCountSummary", "alidns:DescribeCloudMonitorGlobalAlertConfig", "alidns:DescribeCloudMonitorTask", "alidns:DescribeCloudMonitorTaskAlertConfig", "alidns:DescribeDnsCacheDomains", "alidns:DescribeDnsGtmAddrAttributeInfo", "alidns:DescribeDnsGtmAvailableAlertGroup", "alidns:DescribeDnsGtmMonitorAvailableConfig", "alidns:DescribeDnsMonitor", "alidns:DescribeDnsMonitorAvailableNodes", "alidns:DescribeDnsMonitorTaskConfig", "alidns:DescribeDnsMonitors", "alidns:DescribeDnsProductInstance", "alidns:DescribeDnsProductInstanceSummary", "alidns:DescribeDnsProductInstances", "alidns:DescribeDnsTemplateInfo", "alidns:DescribeDnsTemplates", "alidns:DescribeDnsUserInstancesInfo", "alidns:DescribeDohAccountStatistics", "alidns:DescribeDohDomainStatistics", "alidns:DescribeDohDomainStatisticsSummary", "alidns:DescribeDohSdkList", "alidns:DescribeDohSubDomainStatistics", "alidns:DescribeDohSubDomainStatisticsSummary", "alidns:DescribeDohUserInfo", "alidns:DescribeDomainBackups", "alidns:DescribeDomainGroups", "alidns:DescribeDomainLogs", "alidns:DescribeDomainResolveStatisticsSummary", "alidns:DescribeDomainStatisticsSummary", "alidns:DescribeEdgeDnsAppAgentInfo", "alidns:DescribeEdgeDnsAppLatestVersion", "alidns:DescribeEdgeDnsClusterNodeContainers", "alidns:DescribeEdgeDnsClusterNodeServiceStatus", "alidns:DescribeEdgeDnsClusterResource", "alidns:DescribeEdgeDnsClusterResourceOverview", "alidns:DescribeEdgeDnsDeployNotFinalStatusTask", "alidns:DescribeEdgeDnsDeployOptionalIp", "alidns:DescribeEdgeDnsDeployOptionalVersion", "alidns:DescribeEdgeDnsDeployTask", "alidns:DescribeEdgeDnsDeploymentInfo", "alidns:DescribeEdgeDnsDeploymentStatistics", "alidns:DescribeEdgeDnsNodeConnectionToken", "alidns:DescribeFusionOnPremisesInstances", "alidns:DescribeFusionResources", "alidns:DescribeGtmAvailableAlertGroup", "alidns:DescribeGtmMonitorAvailableConfig", "alidns:DescribeGtmRecoveryPlan", "alidns:DescribeGtmRecoveryPlanAvailableConfig", "alidns:DescribeGtmRecoveryPlans", "alidns:DescribeImportDomainRecordsResult", "alidns:DescribeImportDomainsResult", "alidns:DescribeInstanceDomains", "alidns:DescribeInstanceExtendStatus", "alidns:DescribeInternetDnsLogs", "alidns:DescribeInvalidDomains", "alidns:DescribeIspFlushCacheInstances", "alidns:DescribeIspFlushCacheRemainQuota", "alidns:DescribeIspFlushCacheTask", "alidns:DescribeIspFlushCacheTasks", "alidns:DescribePtrRecordSet", "alidns:DescribePtrRecords", "alidns:DescribeRecommendCommodities", "alidns:DescribeRecursionFirewallProtectionDetails", "alidns:DescribeResolveSummary", "alidns:DescribeRestoreDomainResults", "alidns:DescribeRestoringDomainTasks", "alidns:DescribeSiteMonitor", "alidns:DescribeSiteMonitorIspCityInfos", "alidns:DescribeSiteMonitorIspInfos", "alidns:DescribeSlaveDnsDomains", "alidns:DescribeSupportLines", "alidns:DescribeTags", "alidns:DescribeTransferDomains", "alidns:DescribeUserContactInfo", "alidns:DescribeUserGrayStatus", "alidns:DescribleMultiCommodityPrices", "alidns:ExportDomainJob", "alidns:FetchFusionFirewallThreatDownloadUrl", "alidns:GetMainDomainName", "alidns:GetTxtRecordForRetrievalDomainName", "alidns:GetTxtRecordForVerify", "alidns:ListAssistantChat", "alidns:ListAssistantMessage", "alidns:ListAssistantQuestionGuide", "alidns:ListAvailableAlertGroups", "alidns:ListCloudGtmAddressPools", "alidns:ListCloudGtmAddresses", "alidns:ListCloudGtmAlertLogs", "alidns:ListCloudGtmAvailableAlertGroups", "alidns:ListCloudGtmInstanceConfigs", "alidns:ListCloudGtmInstances", "alidns:ListCloudGtmMonitorNodes", "alidns:ListCloudGtmMonitorTemplates", "alidns:ListCloudMonitorAlertLogs", "alidns:ListCloudMonitorProbes", "alidns:ListCloudMonitorTasks", "alidns:ListTagResources", "alidns:PreviewGtmRecoveryPlan", "alidns:QueryDnsMonitorErrorEvent", "alidns:QueryDnsMonitorFailureRate", "alidns:QueryDnsMonitorHistory", "alidns:QueryDnsMonitorLast", "alidns:QueryDnsMonitorNodeResponseTime", "alidns:QueryDnsMonitorStatistics", "alidns:QueryEdgeDnsTopData", "alidns:QueryEdgeDnsTopDomain", "alidns:QueryInstanceUnpaidOrder", "alidns:QueryRenewPrice", "alidns:ScanSubdomainRecords", "alidns:SearchCloudGtmAddressPools", "alidns:SearchCloudGtmAddresses", "alidns:SearchCloudGtmInstanceConfigs", "alidns:SearchCloudGtmInstances", "alidns:SearchCloudGtmMonitorTemplates", "alidns:SearchCloudMonitorTasks", "alidns:SetInstanceRenewalStatus", "alidns:ValidateDomainCanAdd", "alidns:VerifyAccount", "alidns:VerifyTxtRecord", "alidns:VerifyTxtRecordForRetrievalDomainName" ], "Resource": "*" } ] } -
允許不支援資源群組層級授權的全部操作:
Action中列舉不支援資源群組層級授權的全部操作。{ "Version": "1", "Statement": [ { "Effect": "Allow", "Action": [ "alidns:AddBatchDomain", "alidns:AddBatchDomainFromFile", "alidns:AddBatchRr", "alidns:AddBatchTempDomains", "alidns:AddDnsCacheDomain", "alidns:AddDnsMonitor", "alidns:AddDnsTemplate", "alidns:AddDnsTemplateRecord", "alidns:AddDohUser", "alidns:AddDomainGroup", "alidns:AddGtmRecoveryPlan", "alidns:AddRegistrar", "alidns:AddRegistrarContact", "alidns:AddRspDomainServerHoldStatusForGateway", "alidns:AddUserProductFeedback", "alidns:BatchDomainRecordOperate", "alidns:BindInstanceDomains", "alidns:CancelJob", "alidns:CancelOrder", "alidns:ChangeBatchDomainGroup", "alidns:ChangeDomainOfDnsProduct", "alidns:ChatAssistantMessage", "alidns:CheckDomainRecord", "alidns:CheckEdgeDnsClusterConnection", "alidns:CheckEdgeDnsClusterDeploymentAppVersion", "alidns:CheckEdgeDnsDeploymentAppVersion", "alidns:CheckFusionClientAvailable", "alidns:CheckGtmInstanceExistence", "alidns:CheckInstanceAllowSystemAssign", "alidns:CheckSubDomainRecord4Add", "alidns:CompleteCommodity", "alidns:CompleteCommodityWithoutTraffic", "alidns:CopyGtmConfig", "alidns:CreateCloudMonitorTask", "alidns:CreateEdgeDnsCluster", "alidns:CreateInstance", "alidns:CreateMultiCommodityOrder", "alidns:CreatePtrRecordSet", "alidns:CreateRenewOrder", "alidns:DeleteAssistantChat", "alidns:DeleteBatchDomain", "alidns:DeleteBatchRr", "alidns:DeleteCloudGtmAddress", "alidns:DeleteCloudGtmAddressPool", "alidns:DeleteCloudGtmInstanceConfig", "alidns:DeleteCloudGtmMonitorTemplate", "alidns:DeleteCloudMonitorTask", "alidns:DeleteCloudMonitorTasksJob", "alidns:DeleteDnsMonitor", "alidns:DeleteDnsTemplate", "alidns:DeleteDnsTemplateRecord", "alidns:DeleteDomainGroup", "alidns:DeleteEdgeDnsCluster", "alidns:DeleteFusionClientConfig", "alidns:DeleteGtmRecoveryPlan", "alidns:DeletePtrRecord", "alidns:DescribeAccount", "alidns:DescribeAlidnsGlobalAlert", "alidns:DescribeAlidnsInstances", "alidns:DescribeAlidnsPostBusinessStatus", "alidns:DescribeBatchLogs", "alidns:DescribeBatchResultCount", "alidns:DescribeBatchResultDetail", "alidns:DescribeBundleRecordTaskResult", "alidns:DescribeBundleTempDomains", "alidns:DescribeCanAddMonitorDomainRrs", "alidns:DescribeCanAddMonitorSubDomainInfo", "alidns:DescribeChangeLogs", "alidns:DescribeCloudGtmAddress", "alidns:DescribeCloudGtmAddressPool", "alidns:DescribeCloudGtmAddressPoolReference", "alidns:DescribeCloudGtmAddressReference", "alidns:DescribeCloudGtmGlobalAlert", "alidns:DescribeCloudGtmInstanceConfigAlert", "alidns:DescribeCloudGtmInstanceConfigFullInfo", "alidns:DescribeCloudGtmMonitorTemplate", "alidns:DescribeCloudGtmSummary", "alidns:DescribeCloudGtmSystemLines", "alidns:DescribeCloudMonitorDetectCountOverview", "alidns:DescribeCloudMonitorDetectCountSummary", "alidns:DescribeCloudMonitorDetectLogs", "alidns:DescribeCloudMonitorGlobalAlertConfig", "alidns:DescribeCloudMonitorLatestDetectLogOverview", "alidns:DescribeCloudMonitorLatestDetectLogs", "alidns:DescribeCloudMonitorTask", "alidns:DescribeCloudMonitorTaskAlertConfig", "alidns:DescribeCloudMonitorTaskDetectSummary", "alidns:DescribeCloudMonitorTaskOverview", "alidns:DescribeDnsCacheDomains", "alidns:DescribeDnsGtmAddrAttributeInfo", "alidns:DescribeDnsGtmAvailableAlertGroup", "alidns:DescribeDnsGtmMonitorAvailableConfig", "alidns:DescribeDnsMonitor", "alidns:DescribeDnsMonitorAvailableNodes", "alidns:DescribeDnsMonitorTaskConfig", "alidns:DescribeDnsMonitors", "alidns:DescribeDnsProductInstance", "alidns:DescribeDnsProductInstanceSummary", "alidns:DescribeDnsProductInstances", "alidns:DescribeDnsTemplateInfo", "alidns:DescribeDnsTemplates", "alidns:DescribeDnsUserInstancesInfo", "alidns:DescribeDohAccountStatistics", "alidns:DescribeDohDomainStatistics", "alidns:DescribeDohDomainStatisticsSummary", "alidns:DescribeDohSdkList", "alidns:DescribeDohSubDomainStatistics", "alidns:DescribeDohSubDomainStatisticsSummary", "alidns:DescribeDohUserInfo", "alidns:DescribeDomainBackups", "alidns:DescribeDomainGroups", "alidns:DescribeDomainLogs", "alidns:DescribeDomainResolveStatisticsSummary", "alidns:DescribeDomainStatisticsSummary", "alidns:DescribeEdgeDnsAppAgentInfo", "alidns:DescribeEdgeDnsAppLatestVersion", "alidns:DescribeEdgeDnsClusterFullInfo", "alidns:DescribeEdgeDnsClusterNodeContainers", "alidns:DescribeEdgeDnsClusterNodeServiceStatus", "alidns:DescribeEdgeDnsClusterResource", "alidns:DescribeEdgeDnsClusterResourceOverview", "alidns:DescribeEdgeDnsDeployNotFinalStatusTask", "alidns:DescribeEdgeDnsDeployOptionalIp", "alidns:DescribeEdgeDnsDeployOptionalVersion", "alidns:DescribeEdgeDnsDeployTask", "alidns:DescribeEdgeDnsDeploymentInfo", "alidns:DescribeEdgeDnsDeploymentStatistics", "alidns:DescribeEdgeDnsNodeConnectionToken", "alidns:DescribeEdgeDnsNodeFullInfo", "alidns:DescribeFusionOnPremisesInstances", "alidns:DescribeFusionResources", "alidns:DescribeGtmAvailableAlertGroup", "alidns:DescribeGtmMonitorAvailableConfig", "alidns:DescribeGtmRecoveryPlan", "alidns:DescribeGtmRecoveryPlanAvailableConfig", "alidns:DescribeGtmRecoveryPlans", "alidns:DescribeImportDomainRecordsResult", "alidns:DescribeImportDomainsResult", "alidns:DescribeInstanceDomains", "alidns:DescribeInstanceExtendStatus", "alidns:DescribeInternetDnsLogs", "alidns:DescribeIntranetFirewallProtectionDetail", "alidns:DescribeIntranetFirewallProtectionDetails", "alidns:DescribeIntranetFirewallProtectionHistory", "alidns:DescribeIntranetFirewallProtectionLogs", "alidns:DescribeIntranetFirewallProtectionOverview", "alidns:DescribeIntranetFirewallProtectionRankings", "alidns:DescribeInvalidDomains", "alidns:DescribeIspFlushCacheInstances", "alidns:DescribeIspFlushCacheRemainQuota", "alidns:DescribeIspFlushCacheTask", "alidns:DescribeIspFlushCacheTasks", "alidns:DescribeJobOverview", "alidns:DescribeJobs", "alidns:DescribePostBusinessServiceStatus", "alidns:DescribePtrRecordSet", "alidns:DescribePtrRecords", "alidns:DescribeRecommendCommodities", "alidns:DescribeRecursionFirewallProtectionDetail", "alidns:DescribeRecursionFirewallProtectionDetails", "alidns:DescribeRecursionFirewallProtectionHistory", "alidns:DescribeRecursionFirewallProtectionLogs", "alidns:DescribeRecursionFirewallProtectionOverview", "alidns:DescribeRecursionFirewallProtectionRankings", "alidns:DescribeResolveAndOperatorClusterAssociationOverview", "alidns:DescribeResolveSummary", "alidns:DescribeRestoreDomainResults", "alidns:DescribeRestoringDomainTasks", "alidns:DescribeSiteMonitor", "alidns:DescribeSiteMonitorIspCityInfos", "alidns:DescribeSiteMonitorIspInfos", "alidns:DescribeSlaveDnsDomains", "alidns:DescribeSubJobs", "alidns:DescribeSubdomainRecords", "alidns:DescribeSupportLines", "alidns:DescribeTags", "alidns:DescribeTransferDomains", "alidns:DescribeUserContactInfo", "alidns:DescribeUserGrayStatus", "alidns:DescribleMultiCommodityPrices", "alidns:ExecuteGtmRecoveryPlan", "alidns:ExportDomainJob", "alidns:ExportResolveSummaryJob", "alidns:FetchFusionFirewallThreatDownloadUrl", "alidns:FinishEdgeDnsDeployTask", "alidns:GetMainDomainName", "alidns:GetTxtRecordForRetrievalDomainName", "alidns:GetTxtRecordForVerify", "alidns:ListAlidnsAlertLogs", "alidns:ListAssistantChat", "alidns:ListAssistantMessage", "alidns:ListAssistantQuestionGuide", "alidns:ListAssociatedResolveClusters", "alidns:ListAvailableAlertGroups", "alidns:ListCloudGtmAddressPools", "alidns:ListCloudGtmAddresses", "alidns:ListCloudGtmAlertLogs", "alidns:ListCloudGtmAvailableAlertGroups", "alidns:ListCloudGtmInstanceConfigs", "alidns:ListCloudGtmInstances", "alidns:ListCloudGtmMonitorNodes", "alidns:ListCloudGtmMonitorTemplates", "alidns:ListCloudMonitorAlertLogs", "alidns:ListCloudMonitorProbes", "alidns:ListCloudMonitorTasks", "alidns:ListEdgeDnsAlertLogs", "alidns:ListEdgeDnsClusters", "alidns:ListEdgeDnsNodes", "alidns:ListEdgeDnsNotifyConfigs", "alidns:ListEdgeDnsNotifyGatewayConfigs", "alidns:ListEdgeDnsResolveLogs", "alidns:ListEppClient", "alidns:ListTagResources", "alidns:ListTld", "alidns:ManuallyRetryEdgeDnsClusterDispatchDataJob", "alidns:OpenPostBusinessService", "alidns:OperateBatchDomain", "alidns:OrderPaidNotice", "alidns:PreviewGtmRecoveryPlan", "alidns:QueryAllowRenewPeriodList", "alidns:QueryDnsMonitorErrorEvent", "alidns:QueryDnsMonitorFailureRate", "alidns:QueryDnsMonitorHistory", "alidns:QueryDnsMonitorLast", "alidns:QueryDnsMonitorNodeResponseTime", "alidns:QueryDnsMonitorStatistics", "alidns:QueryEdgeDnsMonitors", "alidns:QueryEdgeDnsResolveQps", "alidns:QueryEdgeDnsTopData", "alidns:QueryEdgeDnsTopDomain", "alidns:QueryEdgeDnsTopRCode", "alidns:QueryInstanceUnpaidOrder", "alidns:QueryRenewPrice", "alidns:RecheckInvalidDomain", "alidns:ReclaimDomain", "alidns:RefundOrder", "alidns:RemoveRspDomainServerHoldStatusForGateway", "alidns:ReplacePtrRecordSet", "alidns:ResetBatchResult", "alidns:ResetImportDomainsResult", "alidns:RetrieveBatchDomain", "alidns:RetrieveDomain", "alidns:RollbackGtmRecoveryPlan", "alidns:SaveResolveClustersAssociation", "alidns:ScanSubdomainRecords", "alidns:SearchCloudGtmAddressPools", "alidns:SearchCloudGtmAddresses", "alidns:SearchCloudGtmInstanceConfigs", "alidns:SearchCloudGtmInstances", "alidns:SearchCloudGtmMonitorTemplates", "alidns:SearchCloudMonitorTasks", "alidns:SearchEdgeDnsClusters", "alidns:SearchEdgeDnsNodes", "alidns:SendVerifyCode", "alidns:SetCloudMonitorTaskStatus", "alidns:SetDomainAuthLogConfig", "alidns:SetEdgeDnsClusterRecurseEnableStatus", "alidns:SetInstanceRenewalStatus", "alidns:SetPtrRecordStatus", "alidns:SubmitEdgeDnsDeployRetryTask", "alidns:SubmitEdgeDnsDeployTask", "alidns:SubmitImportDomainRecordsFile", "alidns:SubmitIspFlushCacheTask", "alidns:TagResources", "alidns:TemporaryCancelFusionResource", "alidns:TransferBatchDomain", "alidns:UnbindInstanceDomains", "alidns:UntagResources", "alidns:UpdateAlidnsGlobalAlert", "alidns:UpdateAlidnsLineRecordSet", "alidns:UpdateAssistantChatName", "alidns:UpdateAssistantMessageFeedback", "alidns:UpdateBatchRr", "alidns:UpdateCloudGtmAddressEnableStatus", "alidns:UpdateCloudGtmAddressManualAvailableStatus", "alidns:UpdateCloudGtmAddressPoolEnableStatus", "alidns:UpdateCloudGtmAddressPoolRemark", "alidns:UpdateCloudGtmAddressRemark", "alidns:UpdateCloudGtmGlobalAlert", "alidns:UpdateCloudGtmInstanceConfigBasic", "alidns:UpdateCloudGtmInstanceConfigRemark", "alidns:UpdateCloudGtmInstanceName", "alidns:UpdateCloudGtmMonitorTemplateRemark", "alidns:UpdateCloudMonitorGlobalAlertConfig", "alidns:UpdateCloudMonitorTask", "alidns:UpdateCloudMonitorTaskAlertConfig", "alidns:UpdateCloudMonitorTaskRemark", "alidns:UpdateDnsMonitor", "alidns:UpdateDnsTemplateName", "alidns:UpdateDnsTemplateRecord", "alidns:UpdateDomainGroup", "alidns:UpdateDomainServerHoldStatus", "alidns:UpdateDomainStatus", "alidns:UpdateEdgeDnsCluster", "alidns:UpdateEdgeDnsClusterRecurseRemark", "alidns:UpdateEdgeDnsNodeName", "alidns:UpdateEdgeDnsNodeRemark", "alidns:UpdateEdgeDnsNotifyConfig", "alidns:UpdateEdgeDnsNotifyGatewayConfig", "alidns:UpdateEdgeDnsSyslogDnsLogNotifyConfig", "alidns:UpdateFusionClientConfig", "alidns:UpdateFusionClientNodeEscapeConfig", "alidns:UpdateFusionFirewallSubscriptionConfig", "alidns:UpdateGtmRecoveryPlan", "alidns:UpdateIspFlushCacheInstanceConfig", "alidns:UpdatePtrRecordRemark", "alidns:UpdateRspDomainServerHoldStatus", "alidns:UpdateRspDomainServerHoldStatusOte", "alidns:UpdateRspDomainServerProhibitStatus", "alidns:UpdateRspDomainServerProhibitStatusForGateway", "alidns:UpdateRspDomainStatus", "alidns:UpdateRspDomainStatusOte", "alidns:UpdateUserProductFeedback", "alidns:ValidateDomainCanAdd", "alidns:ValidateVerifyCode", "alidns:VerifyAccount", "alidns:VerifyTxtRecord", "alidns:VerifyTxtRecordForRetrievalDomainName", "alidns:addDomainRecord", "alidns:deleteDomainRecord", "alidns:null", "alidns:read", "alidns:setDomainRecordStatus", "alidns:update", "alidns:updateDomainRecord", "alidns:updateDomainRecordRemark" ], "Resource": "*" } ] }
獲得帳號層級許可權的RAM使用者或RAM角色,能夠操作整個帳號範圍內的相關資源。請務必確認所授與權限是否符合預期,遵從最小授權原則謹慎分配許可權。
常見問題
如何查看當前資源屬於哪個資源群組?
-
方式一:單擊資源名稱,進入資源的詳情頁面,即可查看到當前資源的資源群組。
-
方式二:登入資源管理主控台,單擊,在左側選擇目標資源所屬帳號(預設為當前帳號),通過篩選條件定位目標資源,即可查看其所屬資源群組。
如何查看當前產品在某個資源群組下的所有資源?
如何批量修改多個資源的資源群組?
登入資源管理主控台,單擊,在目標資源群組所在行的操作列下,單擊資源管理以進入資源管理頁面。通過篩選條件定位多個目標資源,批量勾選第一列的複選框後單擊下方轉移資源群組,並按頁面提示完成資源群組修改。