Data Transmission Service：使用資源群組進行精細化資源控制-最新

資源群組授權的工作原理

您可以使用資源群組（Resource Group）對阿里雲帳號內的資源進行分組管理。例如，為不同的專案建立對應的資源群組，並將資源轉移到對應的組中，以便集中管理各專案的資源。更多資訊，請參見什麼是資源群組。

在完成資源分組後，您可以為不同的RAM授權主體（RAM使用者、RAM使用者組或RAM角色）授予指定資源群組範圍的許可權，從而限定這個授權主體只能管理該資源群組內的資源。更多資訊，請參見資源分組和授權。

這種授權方式的優點有：

• 許可權精細化：確保每個身份能獲得最準確的資源存取權限，避免帳號下的多重專案的資源混合管理。

• 良好的擴充性：後續新增資源時，只需將其加入該資源群組，RAM身份便會自動獲得新資源的相應許可權，無需再次授權。

為RAM使用者授予資源群組層級的許可權

下面以RAM使用者為例，介紹授予指定資源群組內Data Transmission Service資源許可權的操作步驟。

支援資源群組的資源類型

Data Transmission Service支援資源群組的資源類型如下表所示：

不支援資源群組層級授權的操作

Data Transmission Service中不支援資源群組層級授權的操作（Action）如下：

對於不支援資源群組授權的操作，授權時資源範圍選取資源群組層級將無效。如果仍需要RAM使用者有上述操作許可權，您需要建立自訂權限原則，授權時資源範圍選取帳號層級。

以下是兩個自訂權限原則樣本，您可以根據實際需要調整策略內容。

• 允許不支援資源群組層級授權的全部唯讀操作：Action中列舉不支援資源群組層級授權的所有隻讀操作。

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "dts:CheckDefaultEventRule",
          "dts:CheckDefaultRole",
          "dts:CountJobByCondition",
          "dts:CreateServiceLinkedRoleForZeroETL",
          "dts:CreateZeroETLInstance",
          "dts:DescribeBasicConfigs",
          "dts:DescribeCheckJobs",
          "dts:DescribeClusterNodeInfo",
          "dts:DescribeConnectionStatus",
          "dts:DescribeDTSIP",
          "dts:DescribeDnsResolveResult",
          "dts:DescribeDocParserJobResult",
          "dts:DescribeDocParserJobStatus",
          "dts:DescribeDomainRegions",
          "dts:DescribeDtsJobsTransmission",
          "dts:DescribeEventMetaInfo",
          "dts:DescribeGadInstanceDetail",
          "dts:DescribeGadInstanceDtsMembers",
          "dts:DescribeGadInstances",
          "dts:DescribeHistoryEvents",
          "dts:DescribeHistoryEventsStat",
          "dts:DescribeInstanceInventory",
          "dts:DescribeMigrationJobs",
          "dts:DescribePreCheckCreateGadOrderResult",
          "dts:DescribeRAGFlowAvailableZones",
          "dts:DescribeRAGFlowInstancePrice",
          "dts:DescribeSubscriptionInstances",
          "dts:DescribeSynchronizationJobStatusList",
          "dts:DescribeSynchronizationObjectModifyStatus",
          "dts:DescribeTagKeys",
          "dts:DescribeTagValues",
          "dts:DescribeUserEventConfig",
          "dts:DescribeWorkflowJobResult",
          "dts:DescribeZeroETLInstanceLimitation",
          "dts:GenerateChatCompletion",
          "dts:LoginRAGFlowInstance",
          "dts:ModifyConsumerGroupPassword",
          "dts:Ping",
          "dts:PreviewData",
          "dts:PreviewSql",
          "dts:PromoteToMaster",
          "dts:ShieldPrecheck"
        ],
        "Resource": "*"
      }
    ]
  }
  

• 允許不支援資源群組層級授權的全部操作：Action中列舉不支援資源群組層級授權的全部操作。

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "dts:AddTags",
          "dts:AllocateRAGFlowInstancePublicConnection",
          "dts:CheckDefaultEventRule",
          "dts:CheckDefaultRole",
          "dts:ConfigureSynchronizationJobReplicatorCompare",
          "dts:ConfigureZeroETLJob",
          "dts:CountJobByCondition",
          "dts:CreateDocParserJob",
          "dts:CreateGadInstance",
          "dts:CreateRAGFlowInstance",
          "dts:CreateRAGKnowledgeBase",
          "dts:CreateServiceLinkedRoleForZeroETL",
          "dts:CreateZeroETLInstance",
          "dts:DeleteGadInstance",
          "dts:DeleteNetWorkPath",
          "dts:DeleteRAGFlowInstance",
          "dts:DescribeBasicConfigs",
          "dts:DescribeCheckJobDiffDetails",
          "dts:DescribeCheckJobStatus",
          "dts:DescribeCheckJobs",
          "dts:DescribeClusterNodeInfo",
          "dts:DescribeConnectionStatus",
          "dts:DescribeDTSIP",
          "dts:DescribeDnsResolveResult",
          "dts:DescribeDocParserJobResult",
          "dts:DescribeDocParserJobStatus",
          "dts:DescribeDomainRegions",
          "dts:DescribeDtsJob",
          "dts:DescribeDtsJobsTransmission",
          "dts:DescribeEventMetaInfo",
          "dts:DescribeGadInstanceDetail",
          "dts:DescribeGadInstanceDtsMembers",
          "dts:DescribeGadInstances",
          "dts:DescribeHistoryEvents",
          "dts:DescribeHistoryEventsStat",
          "dts:DescribeInstanceInventory",
          "dts:DescribeMigrationJobs",
          "dts:DescribeNetWorkNisAnalysis",
          "dts:DescribePreCheckCreateGadOrderResult",
          "dts:DescribeRAGDocumentParseResult",
          "dts:DescribeRAGFlowAvailableZones",
          "dts:DescribeRAGFlowInstanceAttribute",
          "dts:DescribeRAGFlowInstancePrice",
          "dts:DescribeRdsInfo",
          "dts:DescribeSubscriptionInstances",
          "dts:DescribeSynchronizationJobStatusList",
          "dts:DescribeSynchronizationObjectModifyStatus",
          "dts:DescribeTagKeys",
          "dts:DescribeTagValues",
          "dts:DescribeUserEventConfig",
          "dts:DescribeWorkflowJobResult",
          "dts:DescribeZeroETLInstanceLimitation",
          "dts:DetachGadInstanceDbMember",
          "dts:DisableRAGFlowInstanceSSO",
          "dts:EnableRAGFlowInstanceSSO",
          "dts:Feedback",
          "dts:GenerateChatCompletion",
          "dts:GetAnswer",
          "dts:GetLindormInstanceInner",
          "dts:GetSimilarQuestions",
          "dts:InitDtsRdsInstance",
          "dts:ListRAGDocument",
          "dts:ListRAGKnowledgeBase",
          "dts:LoginRAGFlowInstance",
          "dts:ModifyConsumerGroupPassword",
          "dts:ModifyDtsJobDedicatedCluster",
          "dts:ModifyEventScheduleTime",
          "dts:ModifyGadInstanceName",
          "dts:ModifyRAGFlowInstanceDescription",
          "dts:ModifyRAGFlowInstanceSSO",
          "dts:ModifyRAGFlowSecurityIps",
          "dts:Ping",
          "dts:PreCheckCreateGadOrder",
          "dts:PreviewData",
          "dts:PreviewSql",
          "dts:PromoteToMaster",
          "dts:RemoveTags",
          "dts:SaveEtlJob",
          "dts:ShieldPrecheck",
          "dts:StartReverseWriter",
          "dts:SubmitDocParserJob",
          "dts:SwitchPhysicalDtsJobToCloud",
          "dts:TagResources",
          "dts:UntagResources",
          "dts:UploadRAGDocument"
        ],
        "Resource": "*"
      }
    ]
  }
  

常見問題