AliyunAgentIdentityFullAccess

AliyunAgentIdentityFullAccess is an Alibaba Cloud managed service system policy that provides full access to AgentIdentity. You can attach this policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, or RAM role.

Policy details

• Type: service system policy

• Creation time: 11:48:37 on December 18, 2025

• Update time: 11:48:37 on December 18, 2025

• Current version: v1

Policy content

{
	"Version": "1",
	"Statement": [{
		"Effect": "Allow",
		"Action": ["agentidentity:*"],
		"Resource": "*"
	}, {
		"Action": "ram:CreateServiceLinkedRole",
		"Resource": "*",
		"Effect": "Allow",
		"Condition": {
			"StringEquals": {
				"ram:ServiceName": "agentidentity.aliyuncs.com"
			}
		}
	}, {
		"Action": "ram:PassRole",
		"Resource": "*",
		"Effect": "Allow",
		"Condition": {
			"StringEquals": {
				"acs:Service": "workload.agentidentity.aliyuncs.com"
			}
		}
	}]
}

References

• Permission policy elements

• Manage RAM user permissions

• Grant permissions to a RAM user group

• Manage permissions for a RAM role