在使用RAM账号调用云网管API前，需要主账号通过创建授权策略对RAM账号进行授权。在授权策略中，使用资源描述符（Alibaba Cloud Resource Name, ARN）指定授权资源。

可授权的资源类型

在进行RAM子账号授权时，云网管资源的描述方式如下：

资源类型 授权策略中的资源描述方法
PhysicalSpace acs:cmn:$regionid:$accountid:physicalspace/$physicalspaceid
acs:cmn:$regionid:$accountid:physicalspace/*
DeviceForm acs:cmn:$regionid:$accountid:deviceform/$deviceformid
acs:cmn:$regionid:$accountid:deviceform/*
DeviceProperty acs:cmn:$regionid:$accountid:deviceproperty/$devicepropertyid
acs:cmn:$regionid:$accountid:deviceproperty/*
Device acs:cmn:$regionid:$accountid:device/$deviceid
acs:cmn:$regionid:$accountid:device/*
DedicatedLine acs:cmn:$regionid:$accountid:dedicatedline/$dedicatedlineid
acs:cmn:$regionid:$accountid:dedicatedline/*
MonitorItem acs:cmn:$regionid:$accountid:monitorItem/$monitorItemid
acs:cmn:$regionid:$accountid:inspectiontask/*
InspectionTask acs:cmn:$regionid:$accountid:inspectiontask/$inspectiontaskid

其中$regionid/accoutid/physicalspaceid等 为具体的资源ID，*代表对应的所有资源。

可授权的接口

下表列举了云网管的API及其描述方式：

API 资源描述
ListPhysicalSpaces acs:cmn:$regionid:$accountid:physicalspace/*
CreatePhysicalSpace acs:cmn:$regionid:$accountid:physicalspace/*
UpdatePhysicalSpace acs:cmn:$regionid:$accountid:physicalspace/$physicalspaceid
GetPhysicalSpace acs:cmn:$regionid:$accountid:physicalspace/$physicalspaceid
DeletePhysicalSpace acs:cmn:$regionid:$accountid:physicalspace/$physicalspaceid
ListDeviceForms acs:cmn:$regionid:$accountid:deviceform/*
CreateDeviceForm acs:cmn:$regionid:$accountid:deviceform/*
UpdateDeviceForm acs:cmn:$regionid:$accountid:deviceform/$deviceformid
GetDeviceForm acs:cmn:$regionid:$accountid:deviceform/$deviceformid
DeleteDeviceForm acs:cmn:$regionid:$accountid:deviceform/$deviceformid
ListDeviceProperties acs:cmn:$regionid:$accountid:deviceproperty/*
CreateDeviceProperty acs:cmn:$regionid:$accountid:deviceproperty/*
ListDeviceValues acs:cmn:$regionid:$accountid:deviceproperty/$devicepropertyid
UpdateDeviceProperty acs:cmn:$regionid:$accountid:deviceproperty/$devicepropertyid
GetDeviceProperty acs:cmn:$regionid:$accountid:deviceproperty/$devicepropertyid
DeleteDeviceProperty acs:cmn:$regionid:$accountid:deviceproperty/$devicepropertyid
ListDevices acs:cmn:$regionid:$accountid:device/*
CreateDevice acs:cmn:$regionid:$accountid:device/*
GetDevice acs:cmn:$regionid:$accountid:device/$deviceid
GetDeviceConfig acs:cmn:$regionid:$accountid:device/$deviceid
GetDeviceConfigDiff acs:cmn:$regionid:$accountid:device/$deviceid
UpdateDevice acs:cmn:$regionid:$accountid:device/$deviceid
UpdateDevices acs:cmn:$regionid:$accountid:device/$deviceid
DeleteDevice acs:cmn:$regionid:$accountid:device/$deviceid
ListDedicatedLines acs:cmn:$regionid:$accountid:dedicatedline/*
CreateDedicatedLine acs:cmn:$regionid:$accountid:dedicatedline/*
UpdateDedicatedLine acs:cmn:$regionid:$accountid:dedicatedline/$dedicatedlineid
GetDedicatedLine acs:cmn:$regionid:$accountid:dedicatedline/$dedicatedlineid
DeleteDedicatedLine acs:cmn:$regionid:$accountid:dedicatedline/$dedicatedlineid
ListAlarmStatus acs:cmn:$regionid:$accountid:monitoritem/*
GetAlarmStatus acs:cmn:$regionid:$accountid:monitoritem/$monitoritemid
ListMonitorData acs:cmn:$regionid:$accountid:monitoritem/*
ListNotificationHistories acs:cmn:$regionid:$accountid:monitoritem/*
DisableNotification acs:cmn:$regionid:$accountid:monitoritem/$monitoritemid
EnableNotification acs:cmn:$regionid:$accountid:monitoritem/$monitoritemid
ListAlarmStatusHistories acs:cmn:$regionid:$accountid:monitoritem/*
ListInspectionTasks acs:cmn:$regionid:$accountid:inspectiontask/*
ListTasksHistories acs:cmn:$regionid:$accountid:inspectiontask/$inspectiontaskid
GetInspectionTask acs:cmn:$regionid:$accountid:inspectiontask/$inspectiontaskid
RetryTasks acs:cmn:$regionid:$accountid:inspectiontask/$inspectiontaskid
CreateRealtimeTask acs:cmn:$regionid:$accountid:inspectiontask/*
GetRealtimeTask acs:cmn:$regionid:$accountid:inspectiontask/$inspectiontaskid
DeleteInspectionTask acs:cmn:$regionid:$accountid:inspectiontask/$inspectiontaskid