全部產品
Search
文件中心

Simple Log Service:授權RAM使用者操作成本管家

更新時間:Dec 17, 2024

本文介紹如何授予RAM使用者操作成本管家的許可權。

前提條件

已建立RAM使用者。具體操作,請參見建立RAM使用者

操作步驟

  1. 使用阿里雲帳號(主帳號)或Resource Access Management員登入RAM控制台

  2. 建立一個自訂權限原則,其中在指令碼編輯頁簽,請使用以下指令碼替換配置框中的原有內容。具體操作,請參見通過指令碼編輯模式建立自訂權限原則

    說明

    每個動作的具體說明請參見授權資訊

    {
     "Version": "1",
     "Statement": [
      {
       "Action": "log:CreateLogStore",
       "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/*",
       "Effect": "Allow"
      },
      {
       "Action": "log:CreateIndex",
       "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/aliyun_bill",
       "Effect": "Allow"
      },
      {
       "Action": "log:UpdateIndex",
       "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/aliyun_bill",
       "Effect": "Allow"
      },
      {
       "Action": "log:CreateDashboard",
       "Resource": "acs:log:*:*:project/bill-analysis-*/dashboard/*",
       "Effect": "Allow"
      },
     {
       "Action": "log:UpdateDashboard",
       "Resource": "acs:log:*:*:project/bill-analysis-*/dashboard/*",
       "Effect": "Allow"
      },
     {
       "Action": "log:CreateSavedSearch",
       "Resource": "acs:log:*:*:project/bill-analysis-*/savedsearch/*",
       "Effect": "Allow"
      },
     {
       "Action": "log:UpdateSavedSearch",
       "Resource": "acs:log:*:*:project/bill-analysis-*/savedsearch/*",
       "Effect": "Allow"
      },
    {
       "Action": "log:CreateJob",
       "Resource": "acs:log:*:*:project/bill-analysis-*/job/*",
       "Effect": "Allow"
      },
     {
       "Action": "log:UpdateJob",
       "Resource": "acs:log:*:*:project/bill-analysis-*/job/*",
       "Effect": "Allow"
      },
    {
       "Action": "log:CreateApp",
       "Resource": "acs:log:*:*:app/bill",
       "Effect": "Allow"
      },
    {
       "Action": "log:UpdateApp",
       "Resource": "acs:log:*:*:app/bill",
       "Effect": "Allow"
      },
    {
       "Action": "log:GetApp",
       "Resource": "acs:log:*:*:app/bill",
       "Effect": "Allow"
      },
    {
       "Action": "log:DeleteApp",
       "Resource": "acs:log:*:*:app/bill",
       "Effect": "Allow"
      }
     ]
    }
  3. 為RAM使用者添加建立的自訂權限原則。具體操作,請參見為RAM使用者授權