使用资源组进行精细化资源控制

资源组授权的工作原理

您可以使用资源组（Resource Group）对阿里云账号内的资源进行分组管理。例如，为不同的项目创建对应的资源组，并将资源转移到对应的组中，以便集中管理各项目的资源。更多信息，请参见什么是资源组。

在完成资源分组后，您可以为不同的RAM授权主体（RAM用户、RAM用户组或RAM角色）授予指定资源组范围的权限，从而限定这个授权主体只能管理该资源组内的资源。更多信息，请参见资源分组和授权。

这种授权方式的优点有：

• 权限精细化：确保每个身份能获得最准确的资源访问权限，避免账号下的多个项目的资源混合管理。

• 良好的扩展性：后续新增资源时，只需将其加入该资源组，RAM身份便会自动获得新资源的相应权限，无需再次授权。

为RAM用户授予资源组级别的权限

下面以RAM用户为例，介绍授予指定资源组内应用实时监控服务ARMS资源权限的操作步骤。

支持资源组的资源类型

应用实时监控服务ARMS支持资源组的资源类型如下表所示：

不支持资源组级别授权的操作

应用实时监控服务ARMS中不支持资源组级别授权的操作（Action）如下：

对于不支持资源组授权的操作，授权时资源范围选择资源组级别将无效。如果仍需要RAM用户有上述操作权限，您需要创建自定义权限策略，授权时资源范围选择账号级别。

以下是两个自定义权限策略示例，您可以根据实际需要调整策略内容。

• 允许不支持资源组级别授权的全部只读操作：Action中列举不支持资源组级别授权的所有只读操作。

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "arms:CheckArmsDefaultSLR",
          "arms:CheckCommercialStatus",
          "arms:CheckDataConsistency",
          "arms:CheckGlobalView",
          "arms:CheckIntegrationYaml",
          "arms:CheckServiceLinkedRoleForDeleting",
          "arms:CheckServiceStatus",
          "arms:CheckXtraceDefaultSLR",
          "arms:Describe",
          "arms:DescribeAttacks",
          "arms:DescribeBusinessLocation",
          "arms:DescribeDispatchRule",
          "arms:DescribeGrafanaInstance",
          "arms:DescribeLicenseKey",
          "arms:DescribeMetric",
          "arms:DescribeMetricCardinality",
          "arms:DescribeRaspDependencyInstances",
          "arms:DescribeRegions",
          "arms:DescribeRiskDependencies",
          "arms:DescribeTagsOfDuplicateRemoval",
          "arms:DescribeTraceDatasource",
          "arms:DescribeTraceEndpoint",
          "arms:DescribeTraceLicenseKey",
          "arms:DescribeTraceLocation",
          "arms:DescribeTraceQuality",
          "arms:DescribeTraceResourcesStatus",
          "arms:DescribeXTraceConfig",
          "arms:DescribeXTraceUpgradeStatus",
          "arms:DoInsightsAction",
          "arms:GetATPAccessURL",
          "arms:GetActionForward",
          "arms:GetAgentDownloadUrl",
          "arms:GetAgentInfo",
          "arms:GetAgentInfoByPage",
          "arms:GetAgentUpgradeInfo",
          "arms:GetAlarmHistories",
          "arms:GetAlert",
          "arms:GetAlertRulesByPage",
          "arms:GetAlertsCommercialStatus",
          "arms:GetAppApiPageInfo",
          "arms:GetAppCenterComponent",
          "arms:GetAppJVMConfig",
          "arms:GetAppList",
          "arms:GetAppLogStoreCorrelation",
          "arms:GetApplication",
          "arms:GetArmsInfo",
          "arms:GetAssumeRoleCredentials",
          "arms:GetBubbleUpBrief",
          "arms:GetBubbleUpReport",
          "arms:GetChanelLink",
          "arms:GetChannelLink",
          "arms:GetCloudEnvironmentId",
          "arms:GetCloudMonitorInstallStatus",
          "arms:GetCloudMonitorMetric",
          "arms:GetCloudMonitorThumbnail",
          "arms:GetCloudProductHealthCheckSetting",
          "arms:GetCloudProductHealthStatus",
          "arms:GetClusterInfo",
          "arms:GetClusterState",
          "arms:GetCmsInstallStatus",
          "arms:GetCmsMetric",
          "arms:GetCmsPurchaseStatus",
          "arms:GetCmsThumbnail",
          "arms:GetCommercialConfig",
          "arms:GetCommercialStatus",
          "arms:GetCommercialStatusV2",
          "arms:GetConsistencySnapshot",
          "arms:GetConsoleBaseInfo",
          "arms:GetContactScheduleDetail",
          "arms:GetConvergeConfig",
          "arms:GetCurrentEnv",
          "arms:GetDasEvents",
          "arms:GetDashboardList",
          "arms:GetData",
          "arms:GetDeliverTargetDetail",
          "arms:GetDeliverTask",
          "arms:GetDirectInstallStatus",
          "arms:GetDirectMetric",
          "arms:GetDirectThumbnail",
          "arms:GetEscalationDetail",
          "arms:GetEscalationDispatch",
          "arms:GetEvent",
          "arms:GetExceptionMetadata",
          "arms:GetExporterListByIntegration",
          "arms:GetGlobalViewUrl",
          "arms:GetGrafanaDatasource",
          "arms:GetGraphResourceStatus",
          "arms:GetHeapDumpList",
          "arms:GetImmediateSyntheticTask",
          "arms:GetInnerCallChain",
          "arms:GetIntegrationCluster",
          "arms:GetIntegrationInfo",
          "arms:GetIntegrationState",
          "arms:GetIntegrationToken",
          "arms:GetJaegerServiceOperations",
          "arms:GetJaegerServices",
          "arms:GetJaegerTrace",
          "arms:GetJavaAgentDownloadUrl",
          "arms:GetLokiCluster",
          "arms:GetMetricDatas",
          "arms:GetMetricQuantity",
          "arms:GetMetricStatistics",
          "arms:GetModuleConfig",
          "arms:GetMultipleTrace",
          "arms:GetOTTraceBriefInfos",
          "arms:GetOTTraceCallstack",
          "arms:GetOTTraceCallstackOverview",
          "arms:GetOTTraceDetails",
          "arms:GetOldPrometheusRuleCount",
          "arms:GetOnCallSchedulesDetail",
          "arms:GetPodAnnotation",
          "arms:GetProfilingData",
          "arms:GetPromUrl",
          "arms:GetPromUserPref",
          "arms:GetPrometheusAgentInfoAll",
          "arms:GetPrometheusApiToken",
          "arms:GetPrometheusRemoteWrite",
          "arms:GetProxiedContent",
          "arms:GetPubInfo",
          "arms:GetRAMStatus",
          "arms:GetRemoteUrl",
          "arms:GetRepSize",
          "arms:GetResourceConsumptionDashboardUrl",
          "arms:GetRetcodeDataByQuery",
          "arms:GetRetcodeDatas",
          "arms:GetRetcodeLogstore",
          "arms:GetRetcodeShareUrl",
          "arms:GetRumExceptionStack",
          "arms:GetRumGroups",
          "arms:GetRumOcuStatisticData",
          "arms:GetRumUploadFilePolicyStatus",
          "arms:GetRumUploadFiles",
          "arms:GetSLSStatus",
          "arms:GetServices",
          "arms:GetSlsProjectInfo",
          "arms:GetSourceMapInfo",
          "arms:GetSpanNames",
          "arms:GetSqlMetadata",
          "arms:GetStack",
          "arms:GetStsCreDential",
          "arms:GetSupportEnv",
          "arms:GetSyntheticCommercialDetailAndUsageEstimate",
          "arms:GetSyntheticCommercialStatus",
          "arms:GetSyntheticGrafanaDashboardUrl",
          "arms:GetSyntheticMonitors",
          "arms:GetSyntheticPrometheusCluster",
          "arms:GetSyntheticTaskDetail",
          "arms:GetSyntheticTaskList",
          "arms:GetTProfInteractionSnapshot",
          "arms:GetTagKey",
          "arms:GetTagResourceSystemTags",
          "arms:GetTagVal",
          "arms:GetThumbnailUrlListByIntegration",
          "arms:GetToCheckArmsDefaultSLR",
          "arms:GetTrace",
          "arms:GetTraceAggr",
          "arms:GetTraceAppConfigTemplate",
          "arms:GetTraceApps",
          "arms:GetTraceChain",
          "arms:GetTraceExplorerStatus",
          "arms:GetTraceGroupBy",
          "arms:GetTraceInfoList",
          "arms:GetTraceRegions",
          "arms:GetTraces",
          "arms:GetUserArmsPromClusterList",
          "arms:GetUserDatasourceConfig4Sls",
          "arms:GetUserInfo",
          "arms:GetUserList",
          "arms:GetUserWhiteListStatus",
          "arms:ListActivatedAlerts",
          "arms:ListAlertContact",
          "arms:ListAlertContactGroup",
          "arms:ListAlertContactGroupOption",
          "arms:ListAlertEvents",
          "arms:ListAlertTemplates",
          "arms:ListAlertWebhookContact",
          "arms:ListAllAlertContact",
          "arms:ListAllIMRobot",
          "arms:ListApplicationInstance",
          "arms:ListCloudMonitorCluster",
          "arms:ListCloudMonitorClusterMetric",
          "arms:ListCloudMonitorClusterProduct",
          "arms:ListCloudMonitorClusterThumbnail",
          "arms:ListCloudMonitorMigrateProduct",
          "arms:ListCluster",
          "arms:ListClusterApmWorkload",
          "arms:ListClusterFromGrafana",
          "arms:ListContactSchedule",
          "arms:ListDashBoardsByIntegrationType",
          "arms:ListDashboardsByName",
          "arms:ListDeliverTask",
          "arms:ListDispatchRule",
          "arms:ListEntityDashboard",
          "arms:ListEntityForPage",
          "arms:ListEntityTypeAndCount",
          "arms:ListEnvironmentResources",
          "arms:ListEventBridgeIntegrations",
          "arms:ListExporterMetrics",
          "arms:ListFeatureFlags",
          "arms:ListGrafanaInstance",
          "arms:ListGrafarmsDashboard",
          "arms:ListIMRobot",
          "arms:ListImmediateSyntheticTasks",
          "arms:ListIntegration",
          "arms:ListLLMSessions",
          "arms:ListLLMTraces",
          "arms:ListMetricLabelValues",
          "arms:ListMetricNames",
          "arms:ListMetrics",
          "arms:ListNotInstallCluster",
          "arms:ListPromAlertCluster",
          "arms:ListPromCluster",
          "arms:ListPromClusters",
          "arms:ListPromFrontVars",
          "arms:ListPrometheusAlertMetrics",
          "arms:ListPrometheusAlertTemplates",
          "arms:ListPrometheusDeliverCluster",
          "arms:ListPrometheusGlobalView",
          "arms:ListPrometheusInstance",
          "arms:ListPrometheusInstances",
          "arms:ListPrometheusRemoteWrites",
          "arms:ListRaspApps",
          "arms:ListResource",
          "arms:ListScenario",
          "arms:ListServerlessTopNApps",
          "arms:ListSyntheticCloudProduct",
          "arms:ListSyntheticDetail",
          "arms:ListSyntheticMonitorGroups",
          "arms:ListSyntheticTags",
          "arms:ListUserLogProjects",
          "arms:ListUserLogSavedSearches",
          "arms:ListUserLogstoreIndexes",
          "arms:ListUserLogstores",
          "arms:ListVpcClusterPage",
          "arms:ListVpcSecurityGroupIds",
          "arms:OpenArmsServiceSecondVersion",
          "arms:QueryAPMMetrics",
          "arms:QueryAhasMachineMetric",
          "arms:QueryAppMetadata",
          "arms:QueryAuditLogs",
          "arms:QueryCMonitorAgentInfo",
          "arms:QueryCommercialFeeData",
          "arms:QueryCommercialResourcePackage",
          "arms:QueryCommercialUsage",
          "arms:QueryCommercialUsageLimit",
          "arms:QueryConfig",
          "arms:QueryDataSet",
          "arms:QueryEvents",
          "arms:QueryHotSpotData",
          "arms:QueryLLMSessionDetail",
          "arms:QueryLLMTraceDetail",
          "arms:QueryMetric",
          "arms:QueryMetricByPage",
          "arms:QueryProductConfig",
          "arms:QueryProfilingData",
          "arms:QueryProfilingWhitelist",
          "arms:QueryPromInstallStatus",
          "arms:QueryPrometheusFeeData",
          "arms:QueryReleaseMetric",
          "arms:QueryServiceDetailConsoleInfo",
          "arms:QuerySyntheticAlertEventCount",
          "arms:QuerySyntheticMetricData",
          "arms:QueryTopology",
          "arms:QueryTraces",
          "arms:SearchAlarmHistories",
          "arms:SearchAlertContact",
          "arms:SearchAlertContactGroup",
          "arms:SearchAlertHistories",
          "arms:SearchAlertRuleTemplate",
          "arms:SearchAlertRules",
          "arms:SearchContact",
          "arms:SearchContactGroup",
          "arms:SearchEvents",
          "arms:SearchRetcodeAppByPage",
          "arms:SearchTagNames",
          "arms:SearchTagValues",
          "arms:SearchTraces",
          "arms:SearchTracesByPage"
        ],
        "Resource": "*"
      }
    ]
  }
  

• 允许不支持资源组级别授权的全部操作：Action中列举不支持资源组级别授权的全部操作。

  {
    "Version": "1",
    "Statement": [
      {
        "Effect": "Allow",
        "Action": [
          "arms:AddArmsUser",
          "arms:AddBlackboxTask",
          "arms:AddCmsProduct",
          "arms:AddGrafana",
          "arms:AddIntegration",
          "arms:AddRecordingRule",
          "arms:AddTask",
          "arms:AddUser",
          "arms:AlarmInsightsFeedback",
          "arms:AllTagResources",
          "arms:AppendInstancesToPrometheusGlobalView",
          "arms:ApplyScenario",
          "arms:BatchEmailVerifyLink",
          "arms:BatchUpdateConvergeConfig",
          "arms:BatchVerifyLink",
          "arms:BlockAlarmNotification",
          "arms:CMonitorCloudInstances",
          "arms:CMonitorRegister",
          "arms:ChangeAlarmSeverity",
          "arms:CheckArmsDefaultSLR",
          "arms:CheckCommercialStatus",
          "arms:CheckDataConsistency",
          "arms:CheckGlobalView",
          "arms:CheckIntegrationYaml",
          "arms:CheckServiceLinkedRoleForDeleting",
          "arms:CheckServiceStatus",
          "arms:CheckXtraceDefaultSLR",
          "arms:ClaimAlarm",
          "arms:CloseAlarm",
          "arms:ConfigAgentLabel",
          "arms:ConfigApp",
          "arms:ContactSendNocMessage",
          "arms:CreateAlertContact",
          "arms:CreateAlertContactGroup",
          "arms:CreateAlertTemplate",
          "arms:CreateContact",
          "arms:CreateContactGroup",
          "arms:CreateContactSchedule",
          "arms:CreateDispatchRule",
          "arms:CreateDump",
          "arms:CreateEscalation",
          "arms:CreateEscalationPolicy",
          "arms:CreateEvent",
          "arms:CreateHeapDump",
          "arms:CreateImmediateSyntheticTask",
          "arms:CreateIncidentWorkFlow",
          "arms:CreateIntegration",
          "arms:CreateNotificationPolicy",
          "arms:CreateOnCallSchedule",
          "arms:CreateOrUpdateAlertTemplate",
          "arms:CreateOrUpdateEventBridgeIntegration",
          "arms:CreateProm",
          "arms:CreateRumAppGroup",
          "arms:CreateRumUploadFileUrl",
          "arms:CreateSecurityAuth",
          "arms:CreateServiceDiscoveryConfig",
          "arms:CreateSyntheticTask",
          "arms:CreateTemplatesByAlertRules",
          "arms:CreateWebhook",
          "arms:DelResourcesByAccountId",
          "arms:DeleteAlert",
          "arms:DeleteAlertContact",
          "arms:DeleteAlertContactGroup",
          "arms:DeleteAlertTemplate",
          "arms:DeleteAlertTemplates",
          "arms:DeleteApp",
          "arms:DeleteCmsExporter",
          "arms:DeleteCmsProduct",
          "arms:DeleteConfig",
          "arms:DeleteContact",
          "arms:DeleteContactGroup",
          "arms:DeleteContactLink",
          "arms:DeleteContactMember",
          "arms:DeleteContactSchedule",
          "arms:DeleteDeliverTask",
          "arms:DeleteDispatchRule",
          "arms:DeleteDump",
          "arms:DeleteEscalation",
          "arms:DeleteEscalationPolicy",
          "arms:DeleteEventBridgeIntegration",
          "arms:DeleteHeapDump",
          "arms:DeleteIncidentWorkFlow",
          "arms:DeleteIntegration",
          "arms:DeleteIntegrationCustomJob",
          "arms:DeleteInteractiveDashboard",
          "arms:DeleteNotificationPolicy",
          "arms:DeleteOnCallSchedule",
          "arms:DeleteRumUploadFile",
          "arms:DeleteScenario",
          "arms:DeleteSilencePolicy",
          "arms:DeleteSourceMap",
          "arms:DeleteSyntheticMonitorGroup",
          "arms:DeleteSyntheticTask",
          "arms:DeleteTask",
          "arms:DeleteTraceAppUserMethod",
          "arms:Describe",
          "arms:DescribeAttacks",
          "arms:DescribeBusinessLocation",
          "arms:DescribeDispatchRule",
          "arms:DescribeGrafanaInstance",
          "arms:DescribeLicenseKey",
          "arms:DescribeMetric",
          "arms:DescribeMetricCardinality",
          "arms:DescribeRaspDependencyInstances",
          "arms:DescribeRegions",
          "arms:DescribeRiskDependencies",
          "arms:DescribeTagsOfDuplicateRemoval",
          "arms:DescribeTraceDatasource",
          "arms:DescribeTraceEndpoint",
          "arms:DescribeTraceLicenseKey",
          "arms:DescribeTraceLocation",
          "arms:DescribeTraceQuality",
          "arms:DescribeTraceResourcesStatus",
          "arms:DescribeXTraceConfig",
          "arms:DescribeXTraceUpgradeStatus",
          "arms:DiagnoseTask",
          "arms:DisableAlertTemplate",
          "arms:DisableDeliverTask",
          "arms:DoConvergeAction",
          "arms:DoInsightsAction",
          "arms:EmailVerifyLink",
          "arms:EnableAlertTemplate",
          "arms:EnableDeliverTask",
          "arms:EnableGraphResource",
          "arms:EnableServiceAccessForPrometheus",
          "arms:ExportAlertTemplates",
          "arms:ExportPrometheusRules",
          "arms:GeneralQuery",
          "arms:GetATPAccessURL",
          "arms:GetActionForward",
          "arms:GetAgentDownloadUrl",
          "arms:GetAgentInfo",
          "arms:GetAgentInfoByPage",
          "arms:GetAgentUpgradeInfo",
          "arms:GetAlarmHistories",
          "arms:GetAlert",
          "arms:GetAlertRulesByPage",
          "arms:GetAlertsCommercialStatus",
          "arms:GetAppApiPageInfo",
          "arms:GetAppCenterComponent",
          "arms:GetAppJVMConfig",
          "arms:GetAppList",
          "arms:GetAppLogStoreCorrelation",
          "arms:GetApplication",
          "arms:GetArmsInfo",
          "arms:GetAssumeRoleCredentials",
          "arms:GetBubbleUpBrief",
          "arms:GetBubbleUpReport",
          "arms:GetChanelLink",
          "arms:GetChannelLink",
          "arms:GetCloudEnvironmentId",
          "arms:GetCloudMonitorInstallStatus",
          "arms:GetCloudMonitorMetric",
          "arms:GetCloudMonitorThumbnail",
          "arms:GetCloudProductHealthCheckSetting",
          "arms:GetCloudProductHealthStatus",
          "arms:GetClusterInfo",
          "arms:GetClusterState",
          "arms:GetCmsInstallStatus",
          "arms:GetCmsMetric",
          "arms:GetCmsPurchaseStatus",
          "arms:GetCmsThumbnail",
          "arms:GetCommercialConfig",
          "arms:GetCommercialStatus",
          "arms:GetCommercialStatusV2",
          "arms:GetConsistencySnapshot",
          "arms:GetConsoleBaseInfo",
          "arms:GetContactScheduleDetail",
          "arms:GetConvergeConfig",
          "arms:GetCurrentEnv",
          "arms:GetDasEvents",
          "arms:GetDashboardList",
          "arms:GetData",
          "arms:GetDeliverTargetDetail",
          "arms:GetDeliverTask",
          "arms:GetDirectInstallStatus",
          "arms:GetDirectMetric",
          "arms:GetDirectThumbnail",
          "arms:GetEscalationDetail",
          "arms:GetEscalationDispatch",
          "arms:GetEvent",
          "arms:GetExceptionMetadata",
          "arms:GetExporterListByIntegration",
          "arms:GetGlobalViewUrl",
          "arms:GetGrafanaDatasource",
          "arms:GetGraphResourceStatus",
          "arms:GetHeapDumpList",
          "arms:GetImmediateSyntheticTask",
          "arms:GetInnerCallChain",
          "arms:GetIntegrationCluster",
          "arms:GetIntegrationInfo",
          "arms:GetIntegrationState",
          "arms:GetIntegrationToken",
          "arms:GetJaegerServiceOperations",
          "arms:GetJaegerServices",
          "arms:GetJaegerTrace",
          "arms:GetJavaAgentDownloadUrl",
          "arms:GetLokiCluster",
          "arms:GetMetricDatas",
          "arms:GetMetricQuantity",
          "arms:GetMetricStatistics",
          "arms:GetModuleConfig",
          "arms:GetMultipleTrace",
          "arms:GetOTTraceBriefInfos",
          "arms:GetOTTraceCallstack",
          "arms:GetOTTraceCallstackOverview",
          "arms:GetOTTraceDetails",
          "arms:GetOldPrometheusRuleCount",
          "arms:GetOnCallSchedulesDetail",
          "arms:GetPodAnnotation",
          "arms:GetProfilingData",
          "arms:GetPromUrl",
          "arms:GetPromUserPref",
          "arms:GetPrometheusAgentInfoAll",
          "arms:GetPrometheusApiToken",
          "arms:GetPrometheusRemoteWrite",
          "arms:GetProxiedContent",
          "arms:GetPubInfo",
          "arms:GetRAMStatus",
          "arms:GetRemoteUrl",
          "arms:GetRepSize",
          "arms:GetResourceConsumptionDashboardUrl",
          "arms:GetRetcodeDataByQuery",
          "arms:GetRetcodeDatas",
          "arms:GetRetcodeLogstore",
          "arms:GetRetcodeShareUrl",
          "arms:GetRumExceptionStack",
          "arms:GetRumGroups",
          "arms:GetRumOcuStatisticData",
          "arms:GetRumUploadFilePolicyStatus",
          "arms:GetRumUploadFiles",
          "arms:GetSLSStatus",
          "arms:GetServices",
          "arms:GetSlsProjectInfo",
          "arms:GetSourceMapInfo",
          "arms:GetSpanNames",
          "arms:GetSqlMetadata",
          "arms:GetStack",
          "arms:GetStsCreDential",
          "arms:GetSupportEnv",
          "arms:GetSyntheticCommercialDetailAndUsageEstimate",
          "arms:GetSyntheticCommercialStatus",
          "arms:GetSyntheticGrafanaDashboardUrl",
          "arms:GetSyntheticMonitors",
          "arms:GetSyntheticPrometheusCluster",
          "arms:GetSyntheticTaskDetail",
          "arms:GetSyntheticTaskList",
          "arms:GetTProfInteractionSnapshot",
          "arms:GetTagKey",
          "arms:GetTagResourceSystemTags",
          "arms:GetTagVal",
          "arms:GetThumbnailUrlListByIntegration",
          "arms:GetToCheckArmsDefaultSLR",
          "arms:GetTrace",
          "arms:GetTraceAggr",
          "arms:GetTraceAppConfigTemplate",
          "arms:GetTraceApps",
          "arms:GetTraceChain",
          "arms:GetTraceExplorerStatus",
          "arms:GetTraceGroupBy",
          "arms:GetTraceInfoList",
          "arms:GetTraceRegions",
          "arms:GetTraces",
          "arms:GetUserArmsPromClusterList",
          "arms:GetUserDatasourceConfig4Sls",
          "arms:GetUserInfo",
          "arms:GetUserList",
          "arms:GetUserWhiteListStatus",
          "arms:HealthCheck",
          "arms:HighPriorityAlertClearRatio",
          "arms:ImportAlertTemplates",
          "arms:InitCloudProductHealthInspectionTasks",
          "arms:InitTraceResource",
          "arms:InnerDeleteContactGroup",
          "arms:InnerDeleteIMRobot",
          "arms:InnerDispatchContactOptions",
          "arms:InnerDispatchDetail",
          "arms:InnerDispatchRuleCreate",
          "arms:InnerFetchContactByArmsContactId",
          "arms:InnerFetchContactGroupByArmsContactGroupId",
          "arms:InnerGetUserTTSReissue",
          "arms:InnerNotifyObjectContactList",
          "arms:InnerUpdateAlertContact",
          "arms:InnerUpdateAlertContactInformation",
          "arms:InnerUpdateAlertWebhook",
          "arms:InnerUpdateContactGroup",
          "arms:InnerUpdateDispatch",
          "arms:InnerUpdateIMRobot",
          "arms:InnerUpdateTTSReissue",
          "arms:InsertConfig",
          "arms:InsightsCreateInspectJob",
          "arms:InsightsFeedbackJobReport",
          "arms:InsightsGetInspectJobReport",
          "arms:InsightsStopInspectJob",
          "arms:InstallCloudMonitorProduct",
          "arms:InstallCmsExporter",
          "arms:InstallEventer",
          "arms:InstallExporterByIntegration",
          "arms:InstallMysqlExporter",
          "arms:InvokeCenterPop",
          "arms:InvokeRulerManager",
          "arms:KeepAllCommercialTrace",
          "arms:ListActivatedAlerts",
          "arms:ListAlertContact",
          "arms:ListAlertContactGroup",
          "arms:ListAlertContactGroupOption",
          "arms:ListAlertEvents",
          "arms:ListAlertTemplates",
          "arms:ListAlertWebhookContact",
          "arms:ListAllAlertContact",
          "arms:ListAllIMRobot",
          "arms:ListApplicationInstance",
          "arms:ListCloudMonitorCluster",
          "arms:ListCloudMonitorClusterMetric",
          "arms:ListCloudMonitorClusterProduct",
          "arms:ListCloudMonitorClusterThumbnail",
          "arms:ListCloudMonitorMigrateProduct",
          "arms:ListCluster",
          "arms:ListClusterApmWorkload",
          "arms:ListClusterFromGrafana",
          "arms:ListContactSchedule",
          "arms:ListDashBoardsByIntegrationType",
          "arms:ListDashboardsByName",
          "arms:ListDeliverTask",
          "arms:ListDispatchRule",
          "arms:ListEntityDashboard",
          "arms:ListEntityForPage",
          "arms:ListEntityTypeAndCount",
          "arms:ListEnvironmentResources",
          "arms:ListEventBridgeIntegrations",
          "arms:ListExporterMetrics",
          "arms:ListFeatureFlags",
          "arms:ListGrafanaInstance",
          "arms:ListGrafarmsDashboard",
          "arms:ListIMRobot",
          "arms:ListImmediateSyntheticTasks",
          "arms:ListIntegration",
          "arms:ListLLMSessions",
          "arms:ListLLMTraces",
          "arms:ListMetricLabelValues",
          "arms:ListMetricNames",
          "arms:ListMetrics",
          "arms:ListNotInstallCluster",
          "arms:ListPromAlertCluster",
          "arms:ListPromCluster",
          "arms:ListPromClusters",
          "arms:ListPromFrontVars",
          "arms:ListPrometheusAlertMetrics",
          "arms:ListPrometheusAlertTemplates",
          "arms:ListPrometheusDeliverCluster",
          "arms:ListPrometheusGlobalView",
          "arms:ListPrometheusInstance",
          "arms:ListPrometheusInstances",
          "arms:ListPrometheusRemoteWrites",
          "arms:ListRaspApps",
          "arms:ListResource",
          "arms:ListScenario",
          "arms:ListServerlessTopNApps",
          "arms:ListSyntheticCloudProduct",
          "arms:ListSyntheticDetail",
          "arms:ListSyntheticMonitorGroups",
          "arms:ListSyntheticTags",
          "arms:ListUserLogProjects",
          "arms:ListUserLogSavedSearches",
          "arms:ListUserLogstoreIndexes",
          "arms:ListUserLogstores",
          "arms:ListVpcClusterPage",
          "arms:ListVpcSecurityGroupIds",
          "arms:OpenArmsDefaultSLR",
          "arms:OpenArmsService",
          "arms:OpenArmsServiceSecondVersion",
          "arms:OpenVCluster",
          "arms:OpenXtraceDefaultSLR",
          "arms:PreviewContactSchedule",
          "arms:QueryAPMMetrics",
          "arms:QueryAhasMachineMetric",
          "arms:QueryAppMetadata",
          "arms:QueryAuditLogs",
          "arms:QueryCMonitorAgentInfo",
          "arms:QueryCommercialFeeData",
          "arms:QueryCommercialResourcePackage",
          "arms:QueryCommercialUsage",
          "arms:QueryCommercialUsageLimit",
          "arms:QueryConfig",
          "arms:QueryDataSet",
          "arms:QueryEvents",
          "arms:QueryHotSpotData",
          "arms:QueryLLMSessionDetail",
          "arms:QueryLLMTraceDetail",
          "arms:QueryMetric",
          "arms:QueryMetricByPage",
          "arms:QueryProductConfig",
          "arms:QueryProfilingData",
          "arms:QueryProfilingWhitelist",
          "arms:QueryPromInstallStatus",
          "arms:QueryPrometheusFeeData",
          "arms:QueryReleaseMetric",
          "arms:QueryServiceDetailConsoleInfo",
          "arms:QuerySyntheticAlertEventCount",
          "arms:QuerySyntheticMetricData",
          "arms:QueryTopology",
          "arms:QueryTraces",
          "arms:RefreshDashboardCluster",
          "arms:RegisterCloudProduct",
          "arms:ReinstallFlinkCluster",
          "arms:RemoveSourcesFromPrometheusGlobalView",
          "arms:ReportAgentDaemonStatus",
          "arms:ReportEvent",
          "arms:ReportJavaAttachStatus",
          "arms:ResetConvergeConfig",
          "arms:RestartPrometheusAgent",
          "arms:SaveAlert",
          "arms:SaveAlertTemplate",
          "arms:SaveCommercialFeeChange",
          "arms:SaveCommercialUsageLimit",
          "arms:SaveContactGroup",
          "arms:SaveContactMember",
          "arms:SaveDataset",
          "arms:SaveInteractiveDashboard",
          "arms:SaveModuleConfig",
          "arms:SaveProductConfig",
          "arms:SaveSatelliteConfig",
          "arms:SaveSyntheticMonitorGroup",
          "arms:SaveTraceAppUserMethod",
          "arms:SaveXTraceConfig",
          "arms:SearchAlarmHistories",
          "arms:SearchAlertContact",
          "arms:SearchAlertContactGroup",
          "arms:SearchAlertHistories",
          "arms:SearchAlertRuleTemplate",
          "arms:SearchAlertRules",
          "arms:SearchContact",
          "arms:SearchContactGroup",
          "arms:SearchEvents",
          "arms:SearchRetcodeAppByPage",
          "arms:SearchTagNames",
          "arms:SearchTagValues",
          "arms:SearchTraces",
          "arms:SearchTracesByPage",
          "arms:SendCustomIncidents",
          "arms:SendMseIncident",
          "arms:SetPromUserPref",
          "arms:ShowGlobalView",
          "arms:ShowGlobalViewWithCustomAuthorization",
          "arms:ShowGlobalViewWithSubAccountInResourceDirectory",
          "arms:StartAllCommercialRetcode",
          "arms:StatisticsSyntheticUsage",
          "arms:StopAllCommercialRetcode",
          "arms:SyncRecordingRules",
          "arms:TurnOnSecondSwitch",
          "arms:UnBlockAlarmNotification",
          "arms:UnInstallExporterByIntegration",
          "arms:UnInstallGlobalView",
          "arms:UninstallCloudMonitorCluster",
          "arms:UninstallCloudMonitorProduct",
          "arms:UpdateAlertContact",
          "arms:UpdateAlertContactGroup",
          "arms:UpdateAlertTemplate",
          "arms:UpdateAlertsCommercialLimit",
          "arms:UpdateAppConvergeConfig",
          "arms:UpdateCloudMonitorCluster",
          "arms:UpdateCloudProductHealthCheckSetting",
          "arms:UpdateCmsProduct",
          "arms:UpdateCommercialConfig",
          "arms:UpdateConfig",
          "arms:UpdateContact",
          "arms:UpdateContactGroup",
          "arms:UpdateContactMember",
          "arms:UpdateContactSchedule",
          "arms:UpdateDispatchRule",
          "arms:UpdateEscalation",
          "arms:UpdateEscalationPolicy",
          "arms:UpdateGrafanaInstance",
          "arms:UpdateIncidentWorkFlow",
          "arms:UpdateIntegration",
          "arms:UpdateInteractiveDashboard",
          "arms:UpdateNotificationPolicy",
          "arms:UpdateOnCallSchedule",
          "arms:UpdatePrometheusAgentSize",
          "arms:UpdateRumUploadFilePolicy",
          "arms:UpdateShareLink",
          "arms:UpdateShareStatus",
          "arms:UpdateSourceMap",
          "arms:UpdateTraceAppTags",
          "arms:UpdateTraceAppUserMethod",
          "arms:UpdateTraceEndpoint",
          "arms:UpdateWebhook",
          "arms:UpgradeOldXTraceAppLabelsToNewTags",
          "arms:UpgradeXTrace",
          "arms:UpsertRumMetadata",
          "arms:UseHighPriorityAlert"
        ],
        "Resource": "*"
      }
    ]
  }
  

常见问题