RAM authentication
Before a RAM user can call APIs, an Alibaba Cloud account must grant permissions by attaching a policy. A policy specifies the actions a RAM user can perform on specific resources. Policies use an Alibaba Cloud Resource Name (ARN) to specify authorized resources.
Authorizable resource types
RAM authentication for Intelligent Outbound Bot is service-level, meaning the only authorizable resource is the service itself.
The ARN for this resource is: acs:outboundbot:$regionid:$accountid:*
System policies
Intelligent Outbound Bot provides two system policies:
1. AliyunOutboundbotFullAccess - Management permissions for Intelligent Outbound Bot
This policy grants permissions for all actions in Intelligent Outbound Bot.
2. AliyunOutboundbotReadOnlyAccess - Read-only permissions for Intelligent Outbound Bot
// AliyunOutboundbotFullAccess
{
"Statement": [
{
"Effect": "Allow",
"Action": "outboundbot:*",
"Resource": "*"
}
],
"Version": "1"
}
// AliyunOutboundbotReadOnlyAccess
{
"Statement": [
{
"Action": [
"outboundbot:Get*",
"outboundbot:List*",
"outboundbot:Describe*",
"outboundbot:Query*",
"outboundbot:Download*",
"outboundbot:Export*"
],
"Effect": "Allow",
"Resource": "*"
}
],
"Version": "1"
}
Custom policies
You can also create a custom policy on the RAM console or by calling the CreatePolicy API operation. When using the script editor, define the policy content in JSON. For Action and Resource parameter values, refer to the API reference and the resource definition in the preceding section. For more information, see access control and Basic elements of a RAM policy.