What is the permission list feature, how to view the permission list-Account Center(Account)-阿里云帮助中心

The Permission List shows all available permissions in the Account Center.

Permission types

Member type: These permissions apply only to the specific account they are granted to.
Administrator type: These permissions apply to all accounts managed by the authorized account.

View permissions

Log on to the Account Center console. Under My Entity, choose Roles and Permissions, and then click the Permission List tab.

This page lists all permissions for Expenses and Costs and the Account Center.
When creating or modifying a Role, you can associate permissions from this list.

Permission list

Note

Coupon query permission: The coupon query permission (couponmanagement) does not support cross-account management of redemption coupons or coupons, regardless of whether it is assigned through a member or administrator.
Savings plan management permission: Access to purchase recommendations and price discount details for other accounts is not supported under the savings plan management permission (savingplanmanagement).

Costs & budgets

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Description
Cost analysis management	costmanagement	Yes	Member type, administrator type	Manage cost analysis, self-service analytics, reports, cost optimization, and cost bill queries.
Budget management	budgetmanagement	No	Member type, administrator type	Manage budgets. Create, edit, delete, and copy budgets. Subscribe to budget vs. actual analysis. Query budget lists and budget versus actual analysis. Export reports.
Cost optimization management	optimizemanagement	No	Member type, administrator type	Access and use cost optimization features.

Addresses & contacts

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Permissions
Query contacts	contacter.query	Yes	Member type	Query contacts.
Manage contacts	contacter.manage	Yes	Member type	Manage contacts.
Query shipping addresses	address.query	Yes	Member type	Query shipping addresses.
Manage shipping addresses	address.manage	Yes	Member type	Manage shipping addresses.
Query enterprise relationships	enterprise.relation.query	Yes	Member type	Query enterprise relationships.
Manage enterprise addresses	address.shared.manage	Yes	Member type	Manage enterprise addresses.
Manage enterprise contacts	contacter.shared.manage	Yes	Member type	Manage enterprise contacts.
Query enterprise addresses	address.share.query	Yes	Member type	Query enterprise addresses.
Query enterprise contacts	contacter.shared.query	Yes	Member type	Query enterprise contacts.

Order management

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Description
Query orders	queryorder	Yes	Member type, administrator type	Query orders and order details. Export order details.
Cancel Order Permission	cancelorder	No	Member type, administrator type	Cancel unpaid orders in the User Center.
Operate on orders	payorder	No	Member type, administrator type	Pay for orders in the User Center.
Query renewable items	queryrenew	Yes	Member type, administrator type	Query the list of renewable items in Renewal Management of the User Center.
Configure order renewal	configrenew	No	Member type, administrator type	Configure renewal settings, such as auto-renewal or no renewal, in Renewal Management of the User Center.
Unsubscribe from orders	queryrefund	Yes	Member type, administrator type	In Unsubscribe Management, query the list of refundable resources and their cost details.
Manage unsubscribe operations	writerefund	No	Member type, administrator type	Unsubscribe from resources in Unsubscribe Management.
Query order prices	queryprice	Yes	Member type, administrator type	Query prices when placing an order.
Subscription management	subscriptionmanagement	Yes	Member type, administrator type	Query and manage subscriptions. Query subscription lists and details.
Subscription analysis	subscriptionanalysis	Yes	Member type, administrator type	Access features such as subscription usage analysis, subscription usage, subscription coverage analysis, subscription coverage, and subscription purchase method analysis.

Invoice management

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Permissions
Query invoices	queryinvoice	Yes	Member type, administrator type	Query invoice content.
Edit invoicing information	invoiceinformationmanagement	No	Member type, administrator type	Edit master data related to invoicing, such as titles and addresses.
Request invoices	applyinvoice	No	Member type, administrator type	Request invoices. Request invoices for monthly bills.

Contract management

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Permissions
Operate on contracts	operatecontract	No	Member type, administrator type	Manage contracts, including requesting, confirming, and voiding.
Download contracts	downloadcontract	Yes	Member type, administrator type	Permission to Download Contracts
Query contract details	querycontractdetail	Yes	Member type, administrator type	Query contract details.
Query contracts	querycontract	Yes	Member type, administrator type	Query contracts.

Roles & permissions

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Permissions
Role management	role.manage	Yes	Member type	Manage roles.
Query roles	role.query	Yes	Member type	Query roles.

Benefits management

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Description
Query coupon permissions	couponmanagement	No	Member type, administrator type	Query coupon permissions.
Savings plan management	savingplanmanagement	No	Member type, administrator type	Manage savings plans.
Resource plan management	resourcemanagement	No	Member type, administrator type	Manage, query, and operate resource plans.
Configure asset sharing	assetsharing	No	Administrator type	Configure asset sharing.

Billing management

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Permissions
Query bills and settlement bills	querybill	Yes	Member type, administrator type	Query monthly bills, query bill details, export bill details, and export usage details for selected products.
Permission for manual write-offs	payforbill	No	Member type, administrator type	Permissions for manual write-offs
Configure cost allocation	setcostallocation	No	Member type, administrator type	Configure cost allocation. Query, create, edit, and delete cost centers.
Export renewal list	expotrenew	No	Member type, administrator type	Export the list of items pending renewal from Renewal Management in the User Center.
Manage renewal operations	writerenew	No	Member type, administrator type	Perform renewals in Renewal Management of the User Center.
Cost bill management	gaapbillmanagement	Yes	Member type, administrator type	Access and use cost bill features.

Funds & credit control

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Description
Configure available credit alerts	setavailablecreditwarning	No	Member type, administrator type	Set and modify alerts for available credit.
Configure automatic bill payment	setautopay	No	Member type, administrator type	Enable or disable automatic bill payment.
Permission to configure postponed shutdown settings	setextendedsuspensionservice	No	Member type, administrator type	Enable or disable the extended suspension service.
Top-up	chargefund	No	Member type, administrator type	Top up an account balance. With this permission, you can top up through bank transfer, Alipay, or corporate online banking in the User Center or the Alibaba Cloud app.
Withdraw funds	withdrawfund	No	Member type, administrator type	Withdraw funds. This includes initiating withdrawals and querying withdrawal records.
Query fund records	queryfund	Yes	Member type, administrator type	Query and export fund transaction records. Query enterprise assets.
Unified settlement	unifiedsettlement	No	Administrator type	Manage unified settlement.
Configure credit limit	setcredit	No	Administrator type	Set and modify the credit limits for managed accounts.
Transfer funds	fundtransfer	No	Administrator type	Transfer and revoke funds for managed accounts.
Query UID credit information	queryusercredit	Yes	Member type, administrator type	Query the change history of credit limits for managed accounts.
Configure UID credit	setusercredit	No	Administrator type	Set and modify the credit limits for managed accounts.
Query enterprise credit information	queryenterprisecredit	Yes	Administrator type	Query the change history of credit limits for managed enterprise entities.
Configure enterprise credit information	setenterprisecredit	No	Administrator type	Set and modify the credit limits for managed enterprise entities.
Modify billing account name	ModifyBillingAccount	No	Member type, administrator type	Modify the billing account name.
Modify billing account settlement currency	ModifyCurrency	No	Member type, administrator type	Modify the settlement currency of the billing account.
Modify payment method attached to billing account	ModifyPaymentMethods	No	Member type, administrator type	Modify the payment method attached to the billing account.
Modify the billing account associated with an account for payment	ModifyPaymentRelationship	No	Administrator type	Modify the billing account associated with an account for payment.
Modify the administrator of a billing account	ModifyBillingAccountAdministrator	No	Administrator type	Modify the administrator of the billing account.
Transfer resources	TransferResources	No	Member type, administrator type	Transfer cloud resources from one Alibaba Cloud account to another.

Organizations & accounts

Permission Name	Permission ID	Supports cross-enterprise authorization	Permission Type	Description
Organization management	organization.manage	Yes	Administrator type	Manage organizations.
Uninvited directory	uninvite.directory	Yes	Member type	Uninvited directory.
Default directory	default.directory	Yes	Member type	Default directory.
Create accounts	account.create	Yes	Member type	Create accounts.
Account management	account.manage	Yes	Administrator type	Manage accounts.
Manage enterprise relationships	enterprise.relation.manage	Yes	Member type	Manage enterprise relationships.
View organization directory	organization.query	Yes	Administrator type	View the organization directory. You cannot add, delete, drag, or rename.
Query accounts	account.query	Yes	Administrator type	Query accounts.
Set account settlement policy	settlement.manage	No	Administrator type	Set the settlement policy for an account to Financial Management or Finance Trusteeship.
Detach account management relationship	account.separate	Yes	Administrator type	Detach the management relationship from an account.
View uninvited accounts	uninvite.directory.query	Yes	Member type	View uninvited accounts.
View accounts in default directory	default.directory.query	Yes	Member type	View accounts in the default directory. You cannot move them.

上一篇: Predefined roles 下一篇: Add enterprise addresses and contacts