开通DataV-Note（智能分析）时，系统会自动创建AliyunServiceRoleForDataVNote服务关联角色，该角色拥有AliyunServiceRolePolicyForDataVNote权限策略，以允许服务关联角色代您访问其他云服务。本文为您介绍AliyunServiceRoleForDataVNote服务关联角色的相关权限。
背景信息
服务关联角色是一种可信实体为阿里云服务的RAM角色，旨在解决跨云服务的授权访问问题。更多服务关联角色的介绍，请参见服务关联角色。
使用说明
AliyunServiceRolePolicyForDataVNote策略由对应的阿里云服务按需更新，请勿将本策略授权给AliyunServiceRoleForDataVNote服务关联角色以外的RAM身份使用。
查看AliyunServiceRoleForDataVNote服务关联角色的权限策略
您可登录RAM控制台，按照下图所示步骤进入AliyunServiceRoleForDataVNote服务关联角色的详情页，查看角色名称、创建时间等基本信息。
在AliyunServiceRoleForDataVNote角色详情页的权限管理页签，单击权限策略名称，即可查看该角色被授予的权限策略详情。
策略内容具体如下。
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"rds:DescribeDBInstances",
"rds:DescribeDBInstanceAttribute",
"rds:DescribeDBInstanceNetInfo",
"rds:DescribeDatabases",
"rds:DescribeDBInstanceIPArrayList",
"rds:ModifySecurityIps"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"adb:DescribeDBClusters",
"adb:DescribeDBClusterAttribute",
"adb:DescribeDBClusterNetInfo",
"adb:DescribeSchemas",
"adb:DescribeDBClusterAccessWhiteList",
"adb:ModifyDBClusterAccessWhiteList"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"gpdb:DescribeDBInstances",
"gpdb:DescribeDBInstanceAttribute",
"gpdb:DescribeDBInstanceNetInfo",
"gpdb:DescribeDBInstanceIPArrayList",
"gpdb:ModifySecurityIps"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"polardb:DescribeDBClusters",
"polardb:DescribeDBClusterAttribute",
"polardb:DescribeDBClusterEndpoints",
"polardb:DescribeDatabases",
"polardb:DescribeDBClusterAccessWhitelist",
"polardb:ModifyDBClusterAccessWhitelist"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVSwitchAttributes",
"vpc:DescribeVSwitches",
"ecs:CreateNetworkInterface",
"ecs:DeleteNetworkInterface",
"ecs:DescribeNetworkInterfaces",
"ecs:CreateNetworkInterfacePermission",
"ecs:DescribeNetworkInterfacePermissions",
"ecs:AttachNetworkInterface",
"ecs:DetachNetworkInterface",
"ecs:CreateSecurityGroup",
"ecs:DeleteSecurityGroup",
"ecs:DescribeSecurityGroupAttribute",
"ecs:AuthorizeSecurityGroupEgress",
"ecs:TagResources",
"ecs:ListTagResources"
],
"Resource": "*"
},
{
"Action": [
"slb:AddBackendServers",
"slb:AddTags",
"slb:AddVServerGroupBackendServers",
"slb:CreateLoadBalancer",
"slb:CreateLoadBalancerForCloudService",
"slb:CreateLoadBalancerHTTPListener",
"slb:CreateLoadBalancerHTTPSListener",
"slb:CreateLoadBalancerTCPListener",
"slb:CreateLoadBalancerUDPListener",
"slb:CreateVServerGroup",
"slb:DeleteLoadBalancer",
"slb:DeleteLoadBalancerListener",
"slb:DeleteVServerGroup",
"slb:DescribeLoadBalancerAttribute",
"slb:DescribeLoadBalancerHTTPListenerAttribute",
"slb:DescribeLoadBalancerHTTPSListenerAttribute",
"slb:DescribeLoadBalancerListeners",
"slb:DescribeLoadBalancerTCPListenerAttribute",
"slb:DescribeLoadBalancerUDPListenerAttribute",
"slb:DescribeLoadBalancers",
"slb:DescribeTags",
"slb:DescribeVServerGroupAttribute",
"slb:DescribeVServerGroups",
"slb:ModifyLoadBalancerInstanceSpec",
"slb:ModifyLoadBalancerInternetSpec",
"slb:ModifyVServerGroupBackendServers",
"slb:RemoveBackendServers",
"slb:RemoveTags",
"slb:RemoveVServerGroupBackendServers",
"slb:SetLoadBalancerDeleteProtection",
"slb:SetLoadBalancerHTTPListenerAttribute",
"slb:SetLoadBalancerHTTPSListenerAttribute",
"slb:SetLoadBalancerModificationProtection",
"slb:SetLoadBalancerName",
"slb:SetLoadBalancerTCPListenerAttribute",
"slb:SetLoadBalancerUDPListenerAttribute",
"slb:SetVServerGroupAttribute",
"slb:StartLoadBalancerListener",
"slb:StopLoadBalancerListener",
"vpc:ModifyBypassToaAttribute"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "datavnote.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "eipaccess.slb.aliyuncs.com"
}
}
},
{
"Effect": "Allow",
"Action": [
"ecs:ModifyNetworkInterfaceAttribute",
"ecs:UntagResources",
"ecs:DescribeNetworkInterfaceAttribute",
"ecs:DescribeRegions",
"ecs:DescribeSecurityGroups",
"ecs:CreateSecurityGroup",
"ecs:DeleteSecurityGroup",
"ecs:DescribeZones",
"ecs:DescribeInstanceAttribute",
"ecs:DescribeInstanceStatus",
"ecs:DescribeInstanceTypeFamilies",
"ecs:DescribeInstanceTypes",
"ecs:DescribeInstances",
"ecs:DescribeInstancesFullStatus",
"vpc:TagResources",
"vpc:ListTagResources",
"vpc:UntagResources",
"vpc:DescribeRegions",
"vpc:DescribeVpcAttribute",
"vpc:DescribeVpcs",
"vpc:DescribeZones",
"vpc:ModifyBypassToaAttribute"
],
"Resource": "*"
},
{
"Action": [
"ecs:ModifySecurityGroupPolicy",
"ecs:ModifySecurityGroupAttribute",
"ecs:ModifySecurityGroupRule",
"ecs:ModifySecurityGroupEgressRule",
"ecs:AuthorizeSecurityGroup",
"vpc:CreateVpc",
"vpc:ModifyVpcAttribute",
"vpc:DeleteVpc",
"vpc:CreateVSwitch",
"vpc:ModifyVSwitchAttribute"
],
"Effect": "Allow",
"Resource": "*"
}
]
}如您无需再使用AliyunServiceRoleForDataVNote，可参考删除服务关联角色操作。
文档内容是否对您有帮助？