AliyunServiceRolePolicyForMaxComputeLakehouse 是專用于服務關聯角色的授權策略，會在創建服務關聯角色 AliyunServiceRoleForMaxComputeLakehouse 時自動授權，以允許服務關聯角色代您訪問其他云服務。本策略由對應的阿里云服務按需更新，請勿將本策略授權給服務關聯角色之外的 RAM 身份使用。

策略詳情

• 類型：系統策略

• 創建時間：2024-09-03 18:22:48

• 更新時間：2024-09-03 18:22:48

• 當前版本：v1

策略內容

{
  "Version": "1",
  "Statement": [
    {
      "Action": [
        "dlf:BatchCreatePartitions",
        "dlf:BatchCreateTables",
        "dlf:BatchDeletePartitions",
        "dlf:BatchDeleteTables",
        "dlf:BatchGetPartitions",
        "dlf:BatchGetTables",
        "dlf:BatchUpdatePartitions",
        "dlf:BatchUpdateTables",
        "dlf:CreateCatalog",
        "dlf:CreateDatabase",
        "dlf:CreateFunction",
        "dlf:CreatePartition",
        "dlf:CreateTable",
        "dlf:DeleteCatalog",
        "dlf:DeleteDatabase",
        "dlf:DeleteFunction",
        "dlf:DeletePartition",
        "dlf:DeleteTable",
        "dlf:GetAsyncTaskStatus",
        "dlf:GetCatalog",
        "dlf:GetCatalogAccessInfo",
        "dlf:GetCatalogByInstanceId",
        "dlf:GetCatalogSettings",
        "dlf:GetDatabase",
        "dlf:GetFunction",
        "dlf:GetPartition",
        "dlf:GetTable",
        "dlf:ListCatalogs",
        "dlf:ListDatabases",
        "dlf:ListFunctionNames",
        "dlf:ListFunctions",
        "dlf:ListPartitionNames",
        "dlf:ListPartitions",
        "dlf:ListPartitionsByExpr",
        "dlf:ListPartitionsByFilter",
        "dlf:ListTableNames",
        "dlf:ListTables",
        "dlf:RenamePartition",
        "dlf:RenameTable",
        "dlf:UpdateCatalog",
        "dlf:UpdateDatabase",
        "dlf:UpdateFunction",
        "dlf:UpdateTable",
        "dlf:BatchGetPartitionColumnStatistics",
        "dlf:DeletePartitionColumnStatistics",
        "dlf:DeleteTableColumnStatistics",
        "dlf:GetPartitionColumnStatistics",
        "dlf:GetTableColumnStatistics",
        "dlf:UpdateTableColumnStatistics",
        "dlf:UpdatePartitionColumnStatistics",
        "dlf:CreateLock",
        "dlf:UnLock",
        "dlf:AbortLock",
        "dlf:RefreshLock",
        "dlf:GetLock"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "lakehouse.odps.aliyuncs.com"
        }
      }
    },
    {
      "Action": [
        "dlf-auth:ActOnBehalfOfAnotherUser"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "dlf:GetCatalogAccessInfo",
        "dlf:GetDataToken",
        "dlf:GetDataTokenByName"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "dlf:GrantPermissions",
        "dlf:RevokePermissions",
        "dlf:BatchGrantPermissions",
        "dlf:BatchRevokePermissions",
        "dlf:UpdatePermissions",
        "dlf:ListPermissions"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
  "Action": [
    "dlf:CreateRole",
    "dlf:UpdateRole",
    "dlf:DeleteRole",
    "dlf:GetRole",
    "dlf:ListRoles",
    "dlf:GrantRolesToUser",
    "dlf:RevokeRolesFromUser",
    "dlf:GrantRoleToUsers",
    "dlf:RevokeRoleFromUsers",
    "dlf:UpdateRoleUsers",
    "dlf:ListRoleUsers",
    "dlf:ListUserRoles",
    "dlf:GrantRolesToPrincipal",
    "dlf:RevokeRolesFromPrincipal",
    "dlf:GrantRoleToPrincipals",
    "dlf:RevokeRoleFromPrincipals",
    "dlf:UpdateRolePrincipals",
    "dlf:BatchDeleteRoles"
  ],
  "Resource": "*",
  "Effect": "Allow"
},{
  "Action": [
    "dlf:CheckPermissions"
  ],
  "Resource": "*",
  "Effect": "Allow"
},{
  "Action": [
    "dlf:GetCatalogStorageStatistics",
    "dlf:GetCatalogStorageIndicatorDetails",
    "dlf:GetCatalogStorageRank",
    "dlf:GetCatalogStorageAnalysis",
    "dlf:GetDatabaseProfile",
    "dlf:GetDatabaseStorageAnalysis",
    "dlf:GetTableProfile",
    "dlf:GetTableStorageAnalysis",
    "dlf:ListPartitionProfiles",
    "dlf:getLatestStorageStatisticsDate"
  ],
  "Resource": "*",
  "Effect": "Allow"
},{
  "Action": [
    "dlf:SubscribeOptimize",
    "dlf:GetOptimizeRegionStatus",
    "dlf:GetOptimizeWorkspaceAuthorization",
    "dlf:AddOptimizeWorkspace",
    "dlf:ListOptimizeWorkspaces",
    "dlf:PreCheckOptimizeWorkspaceConnection",
    "dlf:CheckOptimizeWorkspaceConnection",
    "dlf:DeleteOptimizeWorkspace",
    "dlf:SetOptimizeEnable",
    "dlf:SetOptimizePolicy",
    "dlf:GetOptimizePolicy",
    "dlf:AddOptimizeScheduleRule",
    "dlf:ListOptimizeScheduleRules",
    "dlf:DeleteOptimizeScheduleRule",
    "dlf:RunOptimizeImmediately",
    "dlf:GetOptimizeInfo",
    "dlf:UpdateOptimizeTaskResult"
  ],
  "Resource": "*",
  "Effect": "Allow"
}
  ]
}

相關文檔

• 權限策略基本元素

• 服務關聯角色