Resource sharing permissions define the operations that principals can perform on shared resources. Each shareable resource type has at least one permission.
Permission library
Each Alibaba Cloud service defines the permissions available for its resource types. Resource owners can select these permissions when creating resource shares. The following table lists the default permissions for each resource type.
|
Alibaba Cloud service |
Resource type |
Permission name |
|
Virtual Private Cloud (VPC) |
vSwitch |
AliyunRSDefaultPermissionVSwitch |
|
Prefix list |
AliyunRSDefaultPermissionPrefixList |
|
|
IP address pool |
AliyunRSDefaultPermissionPublicIpAddressPool |
|
|
IP Address Manager (IPAM) pool |
AliyunRSDefaultPermissionIpamPool |
|
|
Resource Orchestration Service (ROS) |
Template |
AliyunRSDefaultPermissionROSTemplate |
|
Service Catalog |
Product portfolio |
AliyunRSDefaultPermissionServiceCatalogPortfolio |
|
Elastic Compute Service (ECS) |
Image |
AliyunRSDefaultPermissionImage |
|
Snapshot |
AliyunRSDefaultPermissionSnapshot |
|
|
Capacity reservation |
AliyunRSDefaultPermissionCapacityReservation |
|
|
Elasticity assurance |
AliyunRSDefaultPermissionElasticityAssurance |
|
|
Key Management Service (KMS) |
Instance |
|
To view details of each permission, go to the Permission Library page of the Resource Management console.
View the details of a permission
-
Log on to the Resource Management console.
-
In the left-side navigation pane, choose .
-
On the Permission Library page, click the target permission.
-
View the details of the permission.
-
Basic Information
In the Basic Information section, view the permission name, version, resource type, and creation time.
-
Permission Details
On the Permission Details tab, view the specific actions allowed on the resource type.
-
Version Management
On the Version Management tab, view the permission versions. Each permission has a single default version.
-
Associated Resource Shares
On the Associated Resource Shares tab, view the resource shares associated with the permission.
-
Add permissions
Resource owners can add resource type permissions when creating or modifying resource shares. If a resource type has multiple permissions, only one can be added to a resource share. For more information, see Create a resource share or Modify a resource share.