本文介紹如何授予RAM使用者操作成本管家的許可權。
前提條件
已建立RAM使用者。具體操作,請參見建立RAM使用者。
操作步驟
使用阿里雲帳號(主帳號)或Resource Access Management員登入RAM控制台。
建立一個自訂權限原則,其中在指令碼編輯頁簽,請使用以下指令碼替換配置框中的原有內容。具體操作,請參見通過指令碼編輯模式建立自訂權限原則。
說明每個動作的具體說明請參見授權資訊。
{ "Version": "1", "Statement": [ { "Action": "log:CreateLogStore", "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/*", "Effect": "Allow" }, { "Action": "log:CreateIndex", "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/aliyun_bill", "Effect": "Allow" }, { "Action": "log:UpdateIndex", "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/aliyun_bill", "Effect": "Allow" }, { "Action": "log:CreateDashboard", "Resource": "acs:log:*:*:project/bill-analysis-*/dashboard/*", "Effect": "Allow" }, { "Action": "log:UpdateDashboard", "Resource": "acs:log:*:*:project/bill-analysis-*/dashboard/*", "Effect": "Allow" }, { "Action": "log:CreateSavedSearch", "Resource": "acs:log:*:*:project/bill-analysis-*/savedsearch/*", "Effect": "Allow" }, { "Action": "log:UpdateSavedSearch", "Resource": "acs:log:*:*:project/bill-analysis-*/savedsearch/*", "Effect": "Allow" }, { "Action": "log:CreateJob", "Resource": "acs:log:*:*:project/bill-analysis-*/job/*", "Effect": "Allow" }, { "Action": "log:UpdateJob", "Resource": "acs:log:*:*:project/bill-analysis-*/job/*", "Effect": "Allow" }, { "Action": "log:CreateApp", "Resource": "acs:log:*:*:app/bill", "Effect": "Allow" }, { "Action": "log:UpdateApp", "Resource": "acs:log:*:*:app/bill", "Effect": "Allow" }, { "Action": "log:GetApp", "Resource": "acs:log:*:*:app/bill", "Effect": "Allow" }, { "Action": "log:DeleteApp", "Resource": "acs:log:*:*:app/bill", "Effect": "Allow" } ] }為RAM使用者添加建立的自訂權限原則。具體操作,請參見為RAM使用者授權。