本文介紹如何授予RAM用戶操作自助分析的權限。
前提條件
已創建RAM用戶。具體操作,請參見創建RAM用戶。
操作步驟
使用阿里云賬號登錄RAM控制臺。
創建權限策略。
在左側導航欄中,選擇
。單擊創建權限策略。
在創建權限策略頁面的腳本編輯頁簽中,將配置框中的原有腳本替換為如下內容,然后單擊繼續編輯基本信息。
每個動作的具體說明請參見動作列表。
{ "Version": "1", "Statement": [ { "Action": "log:CreateLogStore", "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/*", "Effect": "Allow" }, { "Action": "log:CreateIndex", "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/aliyun_bill", "Effect": "Allow" }, { "Action": "log:UpdateIndex", "Resource": "acs:log:*:*:project/bill-analysis-*/logstore/aliyun_bill", "Effect": "Allow" }, { "Action": "log:CreateDashboard", "Resource": "acs:log:*:*:project/bill-analysis-*/dashboard/*", "Effect": "Allow" }, { "Action": "log:UpdateDashboard", "Resource": "acs:log:*:*:project/bill-analysis-*/dashboard/*", "Effect": "Allow" }, { "Action": "log:CreateSavedSearch", "Resource": "acs:log:*:*:project/bill-analysis-*/savedsearch/*", "Effect": "Allow" }, { "Action": "log:UpdateSavedSearch", "Resource": "acs:log:*:*:project/bill-analysis-*/savedsearch/*", "Effect": "Allow" }, { "Action": "log:CreateJob", "Resource": "acs:log:*:*:project/bill-analysis-*/job/*", "Effect": "Allow" }, { "Action": "log:UpdateJob", "Resource": "acs:log:*:*:project/bill-analysis-*/job/*", "Effect": "Allow" }, { "Action": "log:CreateApp", "Resource": "acs:log:*:*:app/bill", "Effect": "Allow" }, { "Action": "log:UpdateApp", "Resource": "acs:log:*:*:app/bill", "Effect": "Allow" }, { "Action": "log:GetApp", "Resource": "acs:log:*:*:app/bill", "Effect": "Allow" }, { "Action": "log:DeleteApp", "Resource": "acs:log:*:*:app/bill", "Effect": "Allow" } ] }
設置名稱,然后單擊確定。
為RAM用戶授權。
在左側導航欄中,選擇
。找到目標RAM用戶,單擊添加權限。
在新增授權面板的權限策略區域,在下拉列表選擇自定義策略,然后選中您在步驟2中創建的權限策略,然后單擊確認新增授權。
文檔內容是否對您有幫助?