在RAM中,可以对一个MongoDB资源进行以下Action的授权。

Action CreateDBInstance ModifyNodeSpecBatch ModifySecurityGroupConfiguration
DeleteDBInstance createNodeBatch CheckCloudResourceAuthorized
CreateShardingDBInstance UpgradeDBInstanceEngineVersion DescribeUserEncryptionKeyList
ModifyNodeSpec UpgradeDBInstanceKernelVersion DescribeDBInstanceEncryptionKey
RestartDBInstance SwitchDBInstanceHA DescribeDBInstanceTDEInfo
ModifyDBInstanceDescription DestroyInstance ModifyDBInstanceTDE
DescribeReplicaSetRole DescribeDBInstancesOverview ModifyDBInstanceSSL
ModifyDBInstanceNetworkType DescribeAvailableEngineVersion DescribeDBInstanceSSL
DescribeAccounts DescribeRoleZoneInfo DescribeAuditPolicy
DescribeSecurityIps DescribeInstanceAutoRenewalAttribute ModifyAuditLogFilter
DescribeAuditRecords DescribeActiveOperationTaskCount DescribeAuditLogFilter
DescribeBackupPolicy DescribeActiveOperationTaskType ModifyAuditPolicy
CreateBackup EvaluateResource DescribeMongoDBLogConfig
RestoreDBInstance DescribeAvailableResource DescribeSlowLogRecords
DescribeDBInstances ModifyResourceGroup DescribeErrorLogRecords
ModifyDBInstanceSpec MigrateToOtherZone DescribeRunningLogRecords
RenewDBInstance MigrateAvailableZone ModifyDBInstanceMonitor
DeleteNode AllocatePublicNetworkAddress DescribeDBInstanceMonitor
CreateNode ReleasePublicNetworkAddress DescribeParameterModificationHistory
ModifyDBInstanceMaintainTime ModifyInstanceVpcAuthMode DescribeParameters
DescribeDBInstanceAttribute ModifyDBInstanceConnectionString CheckRecoveryCondition
DescribeShardingNetworkAddress ReleaseNodePrivateNetworkAddress ModifyInstanceAutoRenewalAttribute
ModifyDBInstanceNetExpireTime AllocateNodePrivateNetworkAddress TransformToPrePaid
ResetAccountPassword TagResources RenewDBInstance
ModifySecurityIps ListTagResources DescribeRenewalPrice
DescribeAuditFiles DescribeTags DescribeDBInstancePerformance
ModifyBackupPolicy UntagResources DescribeSecurityGroupConfiguration
DescribeBackups ModifyAccountDescription -

其中DescribeDBInstances,授权时必须对该用户全部实例授权。不需要鉴权的接口为DescribeRegions