Resource sharing permissions

更新时间:
复制 MD 格式

Resource sharing permissions define the operations that principals can perform on shared resources. Each shareable resource type has at least one permission.

Permission library

Each Alibaba Cloud service defines the permissions available for its resource types. Resource owners can select these permissions when creating resource shares. The following table lists the default permissions for each resource type.

Alibaba Cloud service

Resource type

Permission name

Virtual Private Cloud (VPC)

vSwitch

AliyunRSDefaultPermissionVSwitch

Prefix list

AliyunRSDefaultPermissionPrefixList

IP address pool

AliyunRSDefaultPermissionPublicIpAddressPool

IP Address Manager (IPAM) pool

AliyunRSDefaultPermissionIpamPool

Resource Orchestration Service (ROS)

Template

AliyunRSDefaultPermissionROSTemplate

Service Catalog

Product portfolio

AliyunRSDefaultPermissionServiceCatalogPortfolio

Elastic Compute Service (ECS)

Image

AliyunRSDefaultPermissionImage

Snapshot

AliyunRSDefaultPermissionSnapshot

Capacity reservation

AliyunRSDefaultPermissionCapacityReservation

Elasticity assurance

AliyunRSDefaultPermissionElasticityAssurance

Key Management Service (KMS)

Instance

  • AliyunRSDefaultPermissionKMSInstance

  • AliyunRSPermissionKMSInstanceReadWrite

To view details of each permission, go to the Permission Library page of the Resource Management console.

View the details of a permission

  1. Log on to the Resource Management console.

  2. In the left-side navigation pane, choose Resource Sharing > Permission Library.

  3. On the Permission Library page, click the target permission.

  4. View the details of the permission.

    • Basic Information

      In the Basic Information section, view the permission name, version, resource type, and creation time.

    • Permission Details

      On the Permission Details tab, view the specific actions allowed on the resource type.

    • Version Management

      On the Version Management tab, view the permission versions. Each permission has a single default version.

    • Associated Resource Shares

      On the Associated Resource Shares tab, view the resource shares associated with the permission.

Add permissions

Resource owners can add resource type permissions when creating or modifying resource shares. If a resource type has multiple permissions, only one can be added to a resource share. For more information, see Create a resource share or Modify a resource share.