RAM authentication

Updated at:

Before a RAM user can call APIs, an Alibaba Cloud account must grant permissions by attaching a policy. A policy specifies the actions a RAM user can perform on specific resources. Policies use an Alibaba Cloud Resource Name (ARN) to specify authorized resources.

Authorizable resource types

RAM authentication for Intelligent Outbound Bot is service-level, meaning the only authorizable resource is the service itself.

The ARN for this resource is: acs:outboundbot:$regionid:$accountid:*

System policies

Intelligent Outbound Bot provides two system policies:

1. AliyunOutboundbotFullAccess - Management permissions for Intelligent Outbound Bot

This policy grants permissions for all actions in Intelligent Outbound Bot.

2. AliyunOutboundbotReadOnlyAccess - Read-only permissions for Intelligent Outbound Bot

This policy grants read-only access to Intelligent Outbound Bot.
// AliyunOutboundbotFullAccess
{
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "outboundbot:*",
            "Resource": "*"
        }
    ],
    "Version": "1"
}

// AliyunOutboundbotReadOnlyAccess
{
    "Statement": [
        {
            "Action": [
                "outboundbot:Get*",
                "outboundbot:List*",
                "outboundbot:Describe*",
                "outboundbot:Query*",
                "outboundbot:Download*",
                "outboundbot:Export*"
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ],
    "Version": "1"
}
                

Custom policies

You can also create a custom policy on the RAM console or by calling the CreatePolicy API operation. When using the script editor, define the policy content in JSON. For Action and Resource parameter values, refer to the API reference and the resource definition in the preceding section. For more information, see access control and Basic elements of a RAM policy.