使用资源组进行精细化资源控制

更新时间:
复制为 MD 格式

当您使用资源组对资源进行分组管理时,可以结合访问控制(RAM),在单个阿里云账号内实现资源的隔离和精细化权限管理。本文总结了ChatApp消息服务对资源组的支持情况,以及资源组级别的授权操作步骤。

说明
  • 只有支持资源组的资源类型和支持资源组级别授权的操作,资源组级别授权才能生效。

  • 对于不支持资源组的资源类型,授予资源组范围的权限将无效。在选择资源范围时,请选择账号级别,进行账号级别授权。具体操作,请参见不支持资源组级别授权的操作

资源组授权的工作原理

您可以使用资源组(Resource Group)对阿里云账号内的资源进行分组管理。例如,为不同的项目创建对应的资源组,并将资源转移到对应的组中,以便集中管理各项目的资源。更多信息,请参见什么是资源组

在完成资源分组后,您可以为不同的RAM授权主体(RAM用户、RAM用户组或RAM角色)授予指定资源组范围的权限,从而限定这个授权主体只能管理该资源组内的资源。更多信息,请参见资源分组和授权

这种授权方式的优点有:

  • 权限精细化:确保每个身份能获得最准确的资源访问权限,避免账号下的多个项目的资源混合管理。

  • 良好的扩展性:后续新增资源时,只需将其加入该资源组,RAM身份便会自动获得新资源的相应权限,无需再次授权。

RAM用户授予资源组级别的权限

下面以RAM用户为例,介绍授予指定资源组内ChatApp消息服务资源权限的操作步骤。

1. 前置步骤

  1. 创建待使用的RAM用户,可参考:创建RAM用户

  2. 创建资源组并将已有资源划分到目标资源组,可参考:创建资源组资源自动转组资源手动转组

2. 进行资源组级别授权

您可以通过以下任一方式进行资源组级别授权。

方式一:在资源管理控制台中授权

通过资源组的权限管理功能为指定 RAM 用户授权。详情操作可参见RAM身份授予资源组范围的权限

  • 登录资源组控制台

  • 在资源组页面,单击目标资源组操作列的权限管理

  • 权限管理页签,单击新增授权

  • 新增授权面板,设置授权主体和权限策略。

    • 授权主体:选择已有RAM用户。

    • 权限策略:选择系统策略或已创建的自定义策略,参考创建自定义权限策略

  • 单击确认新增授权

方式二:在 RAM 控制台中授权

通过RAM控制台为指定 RAM 用户进行资源组级别授权。详细操作可参见RAM用户授权

  • 使用阿里云账号(主账号)或RAM管理员登录RAM控制台

  • 在左侧导航栏,选择身份管理 > 用户用户页面,单击目标RAM用户操作列的添加权限

  • 新增授权面板,为RAM用户添加权限。

    • 资源范围:选择资源组级别

    • 授权主体:选择已有 RAM 用户或前面步骤创建的 RAM 用户。

    • 权限策略:选择系统策略或已创建的自定义策略,参考创建自定义权限策略

  • 单击确认新增授权

支持资源组的资源类型

ChatApp消息服务支持资源组的资源类型如下表所示:

云服务

云服务代码

资源类型

ChatApp消息服务

cams

instance : 实例

说明

对于暂不支持资源组的资源类型,如有需要,您可以在资源组控制台提交反馈。

image

不支持资源组级别授权的操作

ChatApp消息服务中不支持资源组级别授权的操作(Action)如下:

操作(Action)

操作描述

cams:AddAddressRecoverSuspend

-

cams:AddAuditViberOpen

-

cams:AddChatGroup

创建IM群。

cams:AddChatGroupInviteLink

-

cams:AddChatappPhoneNumber

增加号码到Waba中。

cams:AddContacts

-

cams:AddCust

-

cams:AddCustomAudienceUser

增加自定义受众

cams:AddFacebookSource

-

cams:AddGroup

-

cams:AddHref

-

cams:AddInstagramContainer

-

cams:AddMarketingFlow

-

cams:AddTemplate

-

cams:AssociateContact

-

cams:AssociateContactWithGroup

-

cams:BatchDeleteTemplate

-

cams:BindAgent

-

cams:BindDmAccount

-

cams:BindInstagramPage

-

cams:BindMessengerPage

-

cams:ChatAppWebPost

-

cams:ChatappBindWaba

北向接口绑定Waba。

cams:ChatappEmbedSignUp

-

cams:ChatappMigrationRegister

迁移号码注册。

cams:ChatappMigrationVerified

迁移号码校验。

cams:ChatappPhoneNumberDeregister

Waba中取消注册号码。

cams:ChatappPhoneNumberRegister

北向接口注册号码。

cams:ChatappSyncPhoneNumber

同步号码信息。

cams:ChatappVerifyAndRegister

北向接口校验验证码并注册。

cams:CheckCust

-

cams:ConsoleQueryChatbotInfo

-

cams:CopyTemplate

-

cams:CpassGetInstagramPages

-

cams:CpassGetMessengerPages

-

cams:CpassInstagramBindPage

-

cams:CpassMessengerBindPage

-

cams:CpassModifyWebhook

-

cams:CreateChatFlow

创建流程。

cams:CreateChatFlowByImport

创建并导入流程。

cams:CreateChatFlowLogSetting

创建流程日志设置。

cams:CreateChatappMigrationInitiate

新增迁移号码。

cams:CreateChatappTemplate

创建消息模板,模板审核通过后可以发送消息。

cams:CreateCustomAudience

-

cams:CreateFlow

创建Flow。

cams:CreateFlowVersion

通过复制流程版本创建新的流程版本。

cams:CreateMassPlanning

-

cams:CreateMessageCampaign

-

cams:CreateMessengerPage

-

cams:CreateMixTemplateAuditOrder

-

cams:CreatePhoneMessageQrdl

创建消息二维码。

cams:CreateWhatsappConversionApi

-

cams:DeleteAgent

-

cams:DeleteChatFlow

删除流程。

cams:DeleteChatGroup

-

cams:DeleteChatGroupInviteLink

-

cams:DeleteChatGroupParticipants

-

cams:DeleteChatParticipants

-

cams:DeleteChatappTemplate

删除消息模板。

cams:DeleteContacts

-

cams:DeleteContactsByIds

-

cams:DeleteFlow

删除Flow(只有在DRAFT状态的Flow才允许删除)。

cams:DeleteFlowVersion

删除流程版本。

cams:DeleteGroupById

-

cams:DeleteInstagramPage

-

cams:DeleteMarketingFlow

-

cams:DeleteMessageCampaign

-

cams:DeleteMessengerPage

-

cams:DeleteMixMessage

-

cams:DeletePhoneMessageQrdl

删除消息二维码。

cams:DeprecateFlow

弃用Flow。

cams:EnableScheduling

-

cams:EnableWhatsappROIMetric

开启Whatsapp相关指标统计。

cams:ExportBlockUsers

-

cams:FacebookDelete

-

cams:FacebookFeed

-

cams:FlowBindPhone

流程绑定号码或商家账号ID。

cams:FlowRebindPhone

流程重新绑定号码或商家账号ID。

cams:FlowUnbindPhone

流程解除绑定号码或商家账号ID。

cams:GenerateBillMonthDownloadTask

-

cams:GeneratePersonalizedBillMonthDownloadTask

-

cams:GeneratePresignedUrl

-

cams:GetAuditRequestByTypeUnAudit

-

cams:GetBillMonthDownloadTaskResult

-

cams:GetBillUpgradeLayerInfo

-

cams:GetBillViewDescription

-

cams:GetBillingDetailDownloadTaskResult

-

cams:GetBindAgentAttribute

-

cams:GetChatFlowMetric

-

cams:GetChatFlowMetricAnalyze

-

cams:GetChatFlowTemplate

查询流程模板详情。

cams:GetChatGroupInfo

-

cams:GetChatOptionInfo

-

cams:GetChatappConversationMetric

-

cams:GetChatappOpenStatus

-

cams:GetChatappPhoneNumberMetric

查询WhatsApp类型通道号码的发送量指标。

cams:GetChatappPhoneNumberSetting

获取Chatapp号码其它控制

cams:GetChatappTemplateDetail

获取消息模板的详细信息。

cams:GetChatappTemplateMetric

获取营销类型模板的相关指标。

cams:GetChatappUploadAuthorization

获取上传文件的鉴权信息。

cams:GetChatappVerifyCode

北向接口获取验证码。

cams:GetCommerceSetting

获取号码商业设置状态。

cams:GetContactsByGroupId

-

cams:GetContactsExcelTemplate

-

cams:GetContactsList

-

cams:GetConversationalAutomation

获取欢迎消息、开场白和命令。

cams:GetCountByPartner

-

cams:GetCountryList

-

cams:GetCurrentRole

-

cams:GetCustAuditLog

-

cams:GetCustByCode

-

cams:GetCustomTask

-

cams:GetCustomerSite

-

cams:GetDefaultLanguage

-

cams:GetDownloadApplicationMaterials

-

cams:GetDownloadExcelList

-

cams:GetFbInstagramPages

-

cams:GetFbMessengerAdInfo

-

cams:GetFbMessengerPages

-

cams:GetFileStringByFileName

-

cams:GetFlow

获取Flow详细信息。

cams:GetFlowJSONAssest

获取FlowJSON格式的内容。

cams:GetFlowPreviewUrl

获取Flow预览URL。

cams:GetGroupExist

-

cams:GetHrefInfo

-

cams:GetMessageCampaignInsights

-

cams:GetMigrationVerifyCode

获取迁移号码的验证码。

cams:GetNLGenChatFlow

-

cams:GetNLGenChatFlowPromptExpansion

-

cams:GetNLGenChatFlowPromptOptimization

-

cams:GetOSSInfoForUploadFile

-

cams:GetOssConfig

-

cams:GetOssInfoForUploadFile

-

cams:GetPermissionByCode

根据嵌入式得到的Code获取授权权限。

cams:GetPersonalizedBillConfig

-

cams:GetPersonalizedBillMonthDownloadTaskResult

-

cams:GetPhoneEncryptionPublicKey

获取号码的加密公钥。

cams:GetPhoneNumberVerificationStatus

获取号码验证状态。

cams:GetPledgeTemplateAddress

-

cams:GetPreValidatePhoneId

预注册号码获取ID,用来在嵌入式中选择,不用重新获取验证码。

cams:GetSearchTreeData

-

cams:GetUserBill

-

cams:GetUserBillLadderSegmentDetail

-

cams:GetUserInstanceBillLadderSegmentDetail

-

cams:GetUserStatus

-

cams:GetViberByRequestNo

-

cams:GetViberPauseTimes

-

cams:GetWhatsappConnectionCatalog

获取Waba关联的目录。

cams:GetWhatsappConversionApi

-

cams:GetWhatsappHealthStatus

获取不同类型的节点发送消息的健康状态。

cams:GetWhatsappInsights

-

cams:GetWhiteList

-

cams:InstagramFeed

-

cams:IsPostPaidCustomer

-

cams:IsvGetAppId

ISV获取App ID。

cams:ListAdvert

-

cams:ListAllAudit

-

cams:ListAllGroups

-

cams:ListAuditAndFailByType

-

cams:ListBaseTemplate

-

cams:ListBindDmAccount

-

cams:ListBindingRelationsForFlowVersion

根据流程编码查询已绑定的手机号码或商家账号ID列表。

cams:ListBlockUsers

-

cams:ListChatFlow

列举流程。

cams:ListChatFlowTemplate

列举流程模板。

cams:ListChatGroup

-

cams:ListChatGroupParticipants

-

cams:ListChatappMessage

查询消息清单。

cams:ListChatappTemplate

获取消息模板列表。

cams:ListCountByBar

-

cams:ListCountByLine

-

cams:ListCountry

-

cams:ListCust

-

cams:ListCustomAudience

-

cams:ListCustomBillTab

-

cams:ListCustomTask

-

cams:ListDayUseDetail

-

cams:ListDict

-

cams:ListDmAccount

-

cams:ListDmTag

-

cams:ListFacebookPosts

-

cams:ListFlow

查询Flow列表。

cams:ListFlowNodeGroup

-

cams:ListFlowNodePrototypeV2

列举流程组件原型。

cams:ListFlowVersion

列举流程版本。

cams:ListHref

-

cams:ListInstagramPage

-

cams:ListInstagramPosts

-

cams:ListIntent

-

cams:ListLanguage

-

cams:ListMarketingFlow

-

cams:ListMessageCampaign

-

cams:ListMessageType

-

cams:ListMessengerPage

-

cams:ListMessengerSubscriptionToken

-

cams:ListMixMessage

-

cams:ListOwnViberAudit

-

cams:ListOwnViberChangeDest

-

cams:ListPageAdAccount

-

cams:ListPhoneMessageQrdl

查询消息二维码列表数据。

cams:ListProduct

查询目录下的商品列表。

cams:ListProductCatalog

查询Meta Business平台的目录列表。

cams:ListReleaseRecords

-

cams:ListSenderIdReport

-

cams:ListSwitchVariable

-

cams:ListTemplateLanguage

-

cams:ListTemplateParam

-

cams:ListUserBillDetail

-

cams:ListUserBillingInstanceBillDetail

-

cams:ListVariableType

-

cams:ListViberServiceMessage

-

cams:ListWabaIdByInputToken

-

cams:ModifyBlockUsers

-

cams:ModifyChatappPhoneNumber

-

cams:ModifyChatappTemplate

修改消息模板。只能修改未审核以及审核不通过的模板。

cams:ModifyChatappTemplateProperties

-

cams:ModifyFlow

修改Flow基础信息。

cams:ModifyPhoneBusinessProfile

修改号码商业信息。

cams:ModifyWebhook

-

cams:MoveContactToGroup

-

cams:OfflineFlowVersion

下线的流程版本。

cams:OnlineFlowVersion

上线流程版本。

cams:OpenChatappService

-

cams:OpenProduct

-

cams:PagePersonalizedBill

-

cams:PauseMarketingFLow

-

cams:PublishFlow

发布Flow。

cams:QueryChatappBindWaba

查询客户绑定的WABA。

cams:QueryChatappPhoneNumbers

查询客户下的所有发送号码及号码状态。

cams:QueryMMLActive

-

cams:QueryPackageDetail

-

cams:QueryPackageSummary

-

cams:QueryPackageType

-

cams:QueryPhoneBusinessProfile

查询号码商业信息。

cams:QueryProductOpenStatus

-

cams:QueryThreshold

-

cams:QueryTokenForMnsQueue

-

cams:QueryWabaBusinessInfo

获取Waba账号Business平台信息。

cams:QueryWabaByEmbedSignUp

-

cams:RamUserIsOpen

-

cams:RamUserOpen

-

cams:ReadChatFlow

获取流程详情。

cams:ReadChatFlowLogSetting

查看流程日志设置。

cams:ReadFlowVersion

获取流程版本。

cams:RemoveContactById

-

cams:RemoveContacts

-

cams:RequestWhatsappConversionApi

-

cams:SendChatappMassMessage

批量发送ChatApp消息。

cams:SendChatappMessage

发送ChatApp消息。

cams:SubmitIsvCustomerTerms

-

cams:SyncBusinessAppHistory

-

cams:SyncMessageCampaign

-

cams:SyncMessengerSubscriptionToken

-

cams:TranslateCustToIsv

-

cams:TriggerChatFlow

触发已上线且触发器类型为手动的流程版本。

cams:UnbindDmAccount

-

cams:UpdateAccountWebhook

修改账号回调地址信息。

cams:UpdateAuditRequest

-

cams:UpdateChatFlow

根据流程编码更新流程基础信息。

cams:UpdateChatFlowLogSetting

更新流程日志设置。

cams:UpdateChatGroup

-

cams:UpdateChatappPhoneNumberSetting

-

cams:UpdateCheckCode

-

cams:UpdateCommerceSetting

修改号码商业设置状态。

cams:UpdateContactById

修改联系人

cams:UpdateConversationalAutomation

修改号码欢迎消息、开场白和命令。

cams:UpdateCust

-

cams:UpdateFlowJSONAsset

使用JSON更新Flow内容。

cams:UpdateFlowVersion

更新流程版本DSL数据,用于画布更新流程版本。

cams:UpdateGroupName

-

cams:UpdateHref

-

cams:UpdateMarketingFLow

-

cams:UpdatePackageRemainAlarmThreshold

-

cams:UpdatePackgeRemainAlarmThreshold

-

cams:UpdatePersonalizedBillConfig

-

cams:UpdatePhoneEncryptionPublicKey

更新号码的加密公钥。

cams:UpdatePhoneMessageQrdl

修改消息二维码。

cams:UpdatePhoneWebhook

修改号码回调地址信息。

cams:UpdateViberWebhook

-

cams:UpdateWabaMmlStatus

-

对于不支持资源组授权的操作,授权时资源范围选择资源组级别将无效。如果仍需要RAM用户有上述操作权限,您需要创建自定义权限策略,授权时资源范围选择账号级别

image.png以下是两个自定义权限策略示例,您可以根据实际需要调整策略内容。

  • 允许不支持资源组级别授权的全部只读操作:Action中列举不支持资源组级别授权的所有只读操作。

    {
      "Version": "1",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cams:GetAuditRequestByTypeUnAudit",
            "cams:GetBillMonthDownloadTaskResult",
            "cams:GetBillUpgradeLayerInfo",
            "cams:GetBillViewDescription",
            "cams:GetBillingDetailDownloadTaskResult",
            "cams:GetBindAgentAttribute",
            "cams:GetChatFlowMetric",
            "cams:GetChatFlowMetricAnalyze",
            "cams:GetChatFlowTemplate",
            "cams:GetChatGroupInfo",
            "cams:GetChatOptionInfo",
            "cams:GetChatappConversationMetric",
            "cams:GetChatappOpenStatus",
            "cams:GetChatappPhoneNumberMetric",
            "cams:GetChatappPhoneNumberSetting",
            "cams:GetChatappTemplateDetail",
            "cams:GetChatappTemplateMetric",
            "cams:GetChatappUploadAuthorization",
            "cams:GetChatappVerifyCode",
            "cams:GetCommerceSetting",
            "cams:GetContactsByGroupId",
            "cams:GetContactsExcelTemplate",
            "cams:GetContactsList",
            "cams:GetConversationalAutomation",
            "cams:GetCountByPartner",
            "cams:GetCountryList",
            "cams:GetCurrentRole",
            "cams:GetCustAuditLog",
            "cams:GetCustByCode",
            "cams:GetCustomTask",
            "cams:GetCustomerSite",
            "cams:GetDefaultLanguage",
            "cams:GetDownloadApplicationMaterials",
            "cams:GetDownloadExcelList",
            "cams:GetFbInstagramPages",
            "cams:GetFbMessengerAdInfo",
            "cams:GetFbMessengerPages",
            "cams:GetFileStringByFileName",
            "cams:GetFlow",
            "cams:GetFlowJSONAssest",
            "cams:GetFlowPreviewUrl",
            "cams:GetGroupExist",
            "cams:GetHrefInfo",
            "cams:GetMessageCampaignInsights",
            "cams:GetMigrationVerifyCode",
            "cams:GetNLGenChatFlow",
            "cams:GetNLGenChatFlowPromptExpansion",
            "cams:GetNLGenChatFlowPromptOptimization",
            "cams:GetOSSInfoForUploadFile",
            "cams:GetOssConfig",
            "cams:GetOssInfoForUploadFile",
            "cams:GetPermissionByCode",
            "cams:GetPersonalizedBillConfig",
            "cams:GetPersonalizedBillMonthDownloadTaskResult",
            "cams:GetPhoneEncryptionPublicKey",
            "cams:GetPhoneNumberVerificationStatus",
            "cams:GetPledgeTemplateAddress",
            "cams:GetPreValidatePhoneId",
            "cams:GetSearchTreeData",
            "cams:GetUserBill",
            "cams:GetUserBillLadderSegmentDetail",
            "cams:GetUserInstanceBillLadderSegmentDetail",
            "cams:GetUserStatus",
            "cams:GetViberByRequestNo",
            "cams:GetViberPauseTimes",
            "cams:GetWhatsappConnectionCatalog",
            "cams:GetWhatsappConversionApi",
            "cams:GetWhatsappHealthStatus",
            "cams:GetWhatsappInsights",
            "cams:GetWhiteList",
            "cams:ListAdvert",
            "cams:ListAllAudit",
            "cams:ListAllGroups",
            "cams:ListAuditAndFailByType",
            "cams:ListBaseTemplate",
            "cams:ListBindDmAccount",
            "cams:ListBindingRelationsForFlowVersion",
            "cams:ListBlockUsers",
            "cams:ListChatFlow",
            "cams:ListChatFlowTemplate",
            "cams:ListChatGroup",
            "cams:ListChatGroupParticipants",
            "cams:ListChatappMessage",
            "cams:ListChatappTemplate",
            "cams:ListCountByBar",
            "cams:ListCountByLine",
            "cams:ListCountry",
            "cams:ListCust",
            "cams:ListCustomAudience",
            "cams:ListCustomBillTab",
            "cams:ListCustomTask",
            "cams:ListDayUseDetail",
            "cams:ListDict",
            "cams:ListDmAccount",
            "cams:ListDmTag",
            "cams:ListFacebookPosts",
            "cams:ListFlow",
            "cams:ListFlowNodeGroup",
            "cams:ListFlowNodePrototypeV2",
            "cams:ListFlowVersion",
            "cams:ListHref",
            "cams:ListInstagramPage",
            "cams:ListInstagramPosts",
            "cams:ListIntent",
            "cams:ListLanguage",
            "cams:ListMarketingFlow",
            "cams:ListMessageCampaign",
            "cams:ListMessageType",
            "cams:ListMessengerPage",
            "cams:ListMessengerSubscriptionToken",
            "cams:ListMixMessage",
            "cams:ListOwnViberAudit",
            "cams:ListOwnViberChangeDest",
            "cams:ListPageAdAccount",
            "cams:ListPhoneMessageQrdl",
            "cams:ListProduct",
            "cams:ListProductCatalog",
            "cams:ListReleaseRecords",
            "cams:ListSenderIdReport",
            "cams:ListSwitchVariable",
            "cams:ListTemplateLanguage",
            "cams:ListTemplateParam",
            "cams:ListUserBillDetail",
            "cams:ListUserBillingInstanceBillDetail",
            "cams:ListVariableType",
            "cams:ListViberServiceMessage",
            "cams:ListWabaIdByInputToken"
          ],
          "Resource": "*"
        }
      ]
    }
    
  • 允许不支持资源组级别授权的全部操作:Action中列举不支持资源组级别授权的全部操作。

    {
      "Version": "1",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": [
            "cams:AddAddressRecoverSuspend",
            "cams:AddAuditViberOpen",
            "cams:AddChatGroup",
            "cams:AddChatGroupInviteLink",
            "cams:AddChatappPhoneNumber",
            "cams:AddContacts",
            "cams:AddCust",
            "cams:AddCustomAudienceUser",
            "cams:AddFacebookSource",
            "cams:AddGroup",
            "cams:AddHref",
            "cams:AddInstagramContainer",
            "cams:AddMarketingFlow",
            "cams:AddTemplate",
            "cams:AssociateContact",
            "cams:AssociateContactWithGroup",
            "cams:BatchDeleteTemplate",
            "cams:BindAgent",
            "cams:BindDmAccount",
            "cams:BindInstagramPage",
            "cams:BindMessengerPage",
            "cams:ChatAppWebPost",
            "cams:ChatappBindWaba",
            "cams:ChatappEmbedSignUp",
            "cams:ChatappMigrationRegister",
            "cams:ChatappMigrationVerified",
            "cams:ChatappPhoneNumberDeregister",
            "cams:ChatappPhoneNumberRegister",
            "cams:ChatappSyncPhoneNumber",
            "cams:ChatappVerifyAndRegister",
            "cams:CheckCust",
            "cams:ConsoleQueryChatbotInfo",
            "cams:CopyTemplate",
            "cams:CpassGetInstagramPages",
            "cams:CpassGetMessengerPages",
            "cams:CpassInstagramBindPage",
            "cams:CpassMessengerBindPage",
            "cams:CpassModifyWebhook",
            "cams:CreateChatFlow",
            "cams:CreateChatFlowByImport",
            "cams:CreateChatFlowLogSetting",
            "cams:CreateChatappMigrationInitiate",
            "cams:CreateChatappTemplate",
            "cams:CreateCustomAudience",
            "cams:CreateFlow",
            "cams:CreateFlowVersion",
            "cams:CreateMassPlanning",
            "cams:CreateMessageCampaign",
            "cams:CreateMessengerPage",
            "cams:CreateMixTemplateAuditOrder",
            "cams:CreatePhoneMessageQrdl",
            "cams:CreateWhatsappConversionApi",
            "cams:DeleteAgent",
            "cams:DeleteChatFlow",
            "cams:DeleteChatGroup",
            "cams:DeleteChatGroupInviteLink",
            "cams:DeleteChatGroupParticipants",
            "cams:DeleteChatParticipants",
            "cams:DeleteChatappTemplate",
            "cams:DeleteContacts",
            "cams:DeleteContactsByIds",
            "cams:DeleteFlow",
            "cams:DeleteFlowVersion",
            "cams:DeleteGroupById",
            "cams:DeleteInstagramPage",
            "cams:DeleteMarketingFlow",
            "cams:DeleteMessageCampaign",
            "cams:DeleteMessengerPage",
            "cams:DeleteMixMessage",
            "cams:DeletePhoneMessageQrdl",
            "cams:DeprecateFlow",
            "cams:EnableScheduling",
            "cams:EnableWhatsappROIMetric",
            "cams:ExportBlockUsers",
            "cams:FacebookDelete",
            "cams:FacebookFeed",
            "cams:FlowBindPhone",
            "cams:FlowRebindPhone",
            "cams:FlowUnbindPhone",
            "cams:GenerateBillMonthDownloadTask",
            "cams:GeneratePersonalizedBillMonthDownloadTask",
            "cams:GeneratePresignedUrl",
            "cams:GetAuditRequestByTypeUnAudit",
            "cams:GetBillMonthDownloadTaskResult",
            "cams:GetBillUpgradeLayerInfo",
            "cams:GetBillViewDescription",
            "cams:GetBillingDetailDownloadTaskResult",
            "cams:GetBindAgentAttribute",
            "cams:GetChatFlowMetric",
            "cams:GetChatFlowMetricAnalyze",
            "cams:GetChatFlowTemplate",
            "cams:GetChatGroupInfo",
            "cams:GetChatOptionInfo",
            "cams:GetChatappConversationMetric",
            "cams:GetChatappOpenStatus",
            "cams:GetChatappPhoneNumberMetric",
            "cams:GetChatappPhoneNumberSetting",
            "cams:GetChatappTemplateDetail",
            "cams:GetChatappTemplateMetric",
            "cams:GetChatappUploadAuthorization",
            "cams:GetChatappVerifyCode",
            "cams:GetCommerceSetting",
            "cams:GetContactsByGroupId",
            "cams:GetContactsExcelTemplate",
            "cams:GetContactsList",
            "cams:GetConversationalAutomation",
            "cams:GetCountByPartner",
            "cams:GetCountryList",
            "cams:GetCurrentRole",
            "cams:GetCustAuditLog",
            "cams:GetCustByCode",
            "cams:GetCustomTask",
            "cams:GetCustomerSite",
            "cams:GetDefaultLanguage",
            "cams:GetDownloadApplicationMaterials",
            "cams:GetDownloadExcelList",
            "cams:GetFbInstagramPages",
            "cams:GetFbMessengerAdInfo",
            "cams:GetFbMessengerPages",
            "cams:GetFileStringByFileName",
            "cams:GetFlow",
            "cams:GetFlowJSONAssest",
            "cams:GetFlowPreviewUrl",
            "cams:GetGroupExist",
            "cams:GetHrefInfo",
            "cams:GetMessageCampaignInsights",
            "cams:GetMigrationVerifyCode",
            "cams:GetNLGenChatFlow",
            "cams:GetNLGenChatFlowPromptExpansion",
            "cams:GetNLGenChatFlowPromptOptimization",
            "cams:GetOSSInfoForUploadFile",
            "cams:GetOssConfig",
            "cams:GetOssInfoForUploadFile",
            "cams:GetPermissionByCode",
            "cams:GetPersonalizedBillConfig",
            "cams:GetPersonalizedBillMonthDownloadTaskResult",
            "cams:GetPhoneEncryptionPublicKey",
            "cams:GetPhoneNumberVerificationStatus",
            "cams:GetPledgeTemplateAddress",
            "cams:GetPreValidatePhoneId",
            "cams:GetSearchTreeData",
            "cams:GetUserBill",
            "cams:GetUserBillLadderSegmentDetail",
            "cams:GetUserInstanceBillLadderSegmentDetail",
            "cams:GetUserStatus",
            "cams:GetViberByRequestNo",
            "cams:GetViberPauseTimes",
            "cams:GetWhatsappConnectionCatalog",
            "cams:GetWhatsappConversionApi",
            "cams:GetWhatsappHealthStatus",
            "cams:GetWhatsappInsights",
            "cams:GetWhiteList",
            "cams:InstagramFeed",
            "cams:IsPostPaidCustomer",
            "cams:IsvGetAppId",
            "cams:ListAdvert",
            "cams:ListAllAudit",
            "cams:ListAllGroups",
            "cams:ListAuditAndFailByType",
            "cams:ListBaseTemplate",
            "cams:ListBindDmAccount",
            "cams:ListBindingRelationsForFlowVersion",
            "cams:ListBlockUsers",
            "cams:ListChatFlow",
            "cams:ListChatFlowTemplate",
            "cams:ListChatGroup",
            "cams:ListChatGroupParticipants",
            "cams:ListChatappMessage",
            "cams:ListChatappTemplate",
            "cams:ListCountByBar",
            "cams:ListCountByLine",
            "cams:ListCountry",
            "cams:ListCust",
            "cams:ListCustomAudience",
            "cams:ListCustomBillTab",
            "cams:ListCustomTask",
            "cams:ListDayUseDetail",
            "cams:ListDict",
            "cams:ListDmAccount",
            "cams:ListDmTag",
            "cams:ListFacebookPosts",
            "cams:ListFlow",
            "cams:ListFlowNodeGroup",
            "cams:ListFlowNodePrototypeV2",
            "cams:ListFlowVersion",
            "cams:ListHref",
            "cams:ListInstagramPage",
            "cams:ListInstagramPosts",
            "cams:ListIntent",
            "cams:ListLanguage",
            "cams:ListMarketingFlow",
            "cams:ListMessageCampaign",
            "cams:ListMessageType",
            "cams:ListMessengerPage",
            "cams:ListMessengerSubscriptionToken",
            "cams:ListMixMessage",
            "cams:ListOwnViberAudit",
            "cams:ListOwnViberChangeDest",
            "cams:ListPageAdAccount",
            "cams:ListPhoneMessageQrdl",
            "cams:ListProduct",
            "cams:ListProductCatalog",
            "cams:ListReleaseRecords",
            "cams:ListSenderIdReport",
            "cams:ListSwitchVariable",
            "cams:ListTemplateLanguage",
            "cams:ListTemplateParam",
            "cams:ListUserBillDetail",
            "cams:ListUserBillingInstanceBillDetail",
            "cams:ListVariableType",
            "cams:ListViberServiceMessage",
            "cams:ListWabaIdByInputToken",
            "cams:ModifyBlockUsers",
            "cams:ModifyChatappPhoneNumber",
            "cams:ModifyChatappTemplate",
            "cams:ModifyChatappTemplateProperties",
            "cams:ModifyFlow",
            "cams:ModifyPhoneBusinessProfile",
            "cams:ModifyWebhook",
            "cams:MoveContactToGroup",
            "cams:OfflineFlowVersion",
            "cams:OnlineFlowVersion",
            "cams:OpenChatappService",
            "cams:OpenProduct",
            "cams:PagePersonalizedBill",
            "cams:PauseMarketingFLow",
            "cams:PublishFlow",
            "cams:QueryChatappBindWaba",
            "cams:QueryChatappPhoneNumbers",
            "cams:QueryMMLActive",
            "cams:QueryPackageDetail",
            "cams:QueryPackageSummary",
            "cams:QueryPackageType",
            "cams:QueryPhoneBusinessProfile",
            "cams:QueryProductOpenStatus",
            "cams:QueryThreshold",
            "cams:QueryTokenForMnsQueue",
            "cams:QueryWabaBusinessInfo",
            "cams:QueryWabaByEmbedSignUp",
            "cams:RamUserIsOpen",
            "cams:RamUserOpen",
            "cams:ReadChatFlow",
            "cams:ReadChatFlowLogSetting",
            "cams:ReadFlowVersion",
            "cams:RemoveContactById",
            "cams:RemoveContacts",
            "cams:RequestWhatsappConversionApi",
            "cams:SendChatappMassMessage",
            "cams:SendChatappMessage",
            "cams:SubmitIsvCustomerTerms",
            "cams:SyncBusinessAppHistory",
            "cams:SyncMessageCampaign",
            "cams:SyncMessengerSubscriptionToken",
            "cams:TranslateCustToIsv",
            "cams:TriggerChatFlow",
            "cams:UnbindDmAccount",
            "cams:UpdateAccountWebhook",
            "cams:UpdateAuditRequest",
            "cams:UpdateChatFlow",
            "cams:UpdateChatFlowLogSetting",
            "cams:UpdateChatGroup",
            "cams:UpdateChatappPhoneNumberSetting",
            "cams:UpdateCheckCode",
            "cams:UpdateCommerceSetting",
            "cams:UpdateContactById",
            "cams:UpdateConversationalAutomation",
            "cams:UpdateCust",
            "cams:UpdateFlowJSONAsset",
            "cams:UpdateFlowVersion",
            "cams:UpdateGroupName",
            "cams:UpdateHref",
            "cams:UpdateMarketingFLow",
            "cams:UpdatePackageRemainAlarmThreshold",
            "cams:UpdatePackgeRemainAlarmThreshold",
            "cams:UpdatePersonalizedBillConfig",
            "cams:UpdatePhoneEncryptionPublicKey",
            "cams:UpdatePhoneMessageQrdl",
            "cams:UpdatePhoneWebhook",
            "cams:UpdateViberWebhook",
            "cams:UpdateWabaMmlStatus"
          ],
          "Resource": "*"
        }
      ]
    }
    
重要

获得账号级别权限的RAM用户或RAM角色,能够操作整个账号范围内的相关资源。请务必确认所授予的权限是否符合预期,遵从最小授权原则谨慎分配权限。

常见问题

如何查看当前资源属于哪个资源组?

  • 方式一:单击资源名称,进入资源的详情页面,即可查看到当前资源的资源组。

  • 方式二:登录资源管理控制台,单击资源中心 > 资源搜索,在左侧选择目标资源所属账号(默认为当前账号),通过筛选条件定位目标资源,即可查看其所属资源组。

如何查看当前产品在某个资源组下的所有资源?

  • 方式一:登录资源管理控制台,单击资源中心 > 资源搜索,然后在左侧的资源所属账号(默认为当前账号)下选择单击目标资源组名称,最后在右侧的选择资源类型中选择当前产品,即可查看当前产品在某个资源组下的所有资源。

  • 方式二:登录资源管理控制台,单击资源组 > 资源组,然后找到目标资源组,单击其所在行的操作列下的资源管理,最后在资源管理页面上方的产品下拉框中选择当前产品,即可查看当前产品在某个资源组下的所有资源。

如何批量修改多个资源的资源组?

登录资源管理控制台,单击资源组 > 资源组,在目标资源组所在行的操作列下,单击资源管理以进入资源管理页面。通过筛选条件定位多个目标资源,批量勾选第一列的复选框后单击下方转移资源组,并按页面提示完成资源组修改。