在RAM中,可以对一个MongoDB资源进行以下Action的授权。

Action Action
CreateDBInstance ModifyDBInstanceSpec
DeleteDBInstance RenewDBInstance
CreateShardingDBInstance DeleteNode
ModifyNodeSpec CreateNode
RestartDBInstance ModifyDBInstanceMaintainTime
ModifyDBInstanceDescription DescribeDBInstanceAttribute
DescribeReplicaSetRole DescribeShardingNetworkAddress
ModifyDBInstanceNetworkType ModifyDBInstanceNetExpireTime
DescribeAccounts ResetAccountPassword
DescribeSecurityIps ModifySecurityIps
DescribeAuditRecords DescribeAuditFiles
DescribeBackupPolicy ModifyBackupPolicy
CreateBackup DescribeBackups
RestoreDBInstance DescribeDBInstancePerformance
DescribeDBInstances -

其中DescribeDBInstances,授权时必须对该用户全部实例授权。以下接口不需要鉴权:DescribeRegions。