AI 助理
备案控制台
官方文档
输入文档关键字查找
首页 云解析DNS 安全合规 使用资源组进行精细化资源控制

使用资源组进行精细化资源控制

更新时间：
产品详情
我的收藏

当您使用资源组对资源进行分组管理时，可以结合访问控制（RAM），在单个阿里云账号内实现资源的隔离和精细化权限管理。本文总结了云解析DNS对资源组的支持情况，以及资源组级别的授权操作步骤。

说明

  • 只有支持资源组的资源类型和支持资源组级别授权的操作，资源组级别授权才能生效。

  • 对于不支持资源组的资源类型，授予资源组范围的权限将无效。在选择资源范围时，请选择账号级别，进行账号级别授权。具体操作，请参见不支持资源组级别授权的操作。

资源组授权的工作原理

您可以使用资源组（Resource Group）对阿里云账号内的资源进行分组管理。例如，为不同的项目创建对应的资源组，并将资源转移到对应的组中，以便集中管理各项目的资源。更多信息，请参见什么是资源组。

在完成资源分组后，您可以为不同的RAM授权主体（RAM用户、RAM用户组或RAM角色）授予指定资源组范围的权限，从而限定这个授权主体只能管理该资源组内的资源。更多信息，请参见资源分组和授权。

这种授权方式的优点有：

  • 权限精细化：确保每个身份能获得最准确的资源访问权限，避免账号下的多个项目的资源混合管理。

  • 良好的扩展性：后续新增资源时，只需将其加入该资源组，RAM身份便会自动获得新资源的相应权限，无需再次授权。

为RAM用户授予资源组级别的权限

下面以RAM用户为例，介绍授予指定资源组内云解析DNS资源权限的操作步骤。

1. 前置步骤

  1. 创建待使用的RAM用户，可参考：创建RAM用户

  2. 创建资源组并将已有资源划分到目标资源组，可参考：创建资源组，资源自动转组及资源手动转组。

2. 进行资源组级别授权

您可以通过以下任一方式进行资源组级别授权。

方式一：在资源管理控制台中授权

通过资源组的权限管理功能为指定 RAM 用户授权。详情操作可参见为RAM身份授予资源组范围的权限。

  • 登录资源组控制台。

  • 在资源组页面，单击目标资源组操作列的权限管理。

  • 在权限管理页签，单击新增授权。

  • 在新增授权面板，设置授权主体和权限策略。

    • 授权主体：选择已有RAM用户。

    • 权限策略：选择系统策略或已创建的自定义策略，参考创建自定义权限策略。

  • 单击确认新增授权。

方式二：在 RAM 控制台中授权

通过RAM控制台为指定 RAM 用户进行资源组级别授权。详细操作可参见为RAM用户授权。

  • 使用阿里云账号（主账号）或RAM管理员登录RAM控制台。

  • 在左侧导航栏，选择身份管理 > 用户。在用户页面，单击目标RAM用户操作列的添加权限。

  • 在新增授权面板，为RAM用户添加权限。

    • 资源范围：选择资源组级别。

    • 授权主体：选择已有 RAM 用户或前面步骤创建的 RAM 用户。

    • 权限策略：选择系统策略或已创建的自定义策略，参考创建自定义权限策略。

  • 单击确认新增授权。

支持资源组的资源类型

云解析DNS支持资源组的资源类型如下表所示：

云服务

云服务代码

资源类型

云解析DNS

alidns

domain : 域名解析
说明

对于暂不支持资源组的资源类型，如有需要，您可以在资源组控制台提交反馈。

image

不支持资源组级别授权的操作

云解析DNS中不支持资源组级别授权的操作（Action）如下：

操作（Action）

操作描述

alidns:AddBatchDomain

-

alidns:AddBatchDomainFromFile

-

alidns:AddBatchRr

-

alidns:AddBatchTempDomains

-

alidns:AddDnsCacheDomain

-

alidns:AddDnsMonitor

-

alidns:AddDnsTemplate

-

alidns:AddDnsTemplateRecord

-

alidns:AddDohUser

-

alidns:AddDomainGroup

-

alidns:AddGateway

-

alidns:AddGtmRecoveryPlan

-

alidns:AddRegistrar

-

alidns:AddRegistrarContact

-

alidns:AddRspDomainServerHoldStatusForGateway

-

alidns:AddSensitiveName

-

alidns:AddUserProductFeedback

-

alidns:BatchDomainRecordOperate

-

alidns:BindInstanceDomains

-

alidns:CancelJob

-

alidns:CancelOrder

-

alidns:ChangeBatchDomainGroup

-

alidns:ChangeDomainOfDnsProduct

-

alidns:ChatAssistantMessage

-

alidns:CheckDomainRecord

-

alidns:CheckEdgeDnsClusterConnection

-

alidns:CheckEdgeDnsClusterDeploymentAppVersion

-

alidns:CheckEdgeDnsDeploymentAppVersion

-

alidns:CheckFusionClientAvailable

-

alidns:CheckGtmInstanceExistence

-

alidns:CheckInstanceAllowSystemAssign

-

alidns:CheckSubDomainRecord4Add

-

alidns:CompleteCommodity

-

alidns:CompleteCommodityWithoutTraffic

-

alidns:CopyGtmConfig

-

alidns:CreateCloudMonitorTask

-

alidns:CreateEdgeDnsCluster

-

alidns:CreateInstance

-

alidns:CreateMultiCommodityOrder

-

alidns:CreatePtrRecordSet

-

alidns:CreateRenewOrder

-

alidns:DeleteAssistantChat

-

alidns:DeleteBatchDomain

-

alidns:DeleteBatchRr

-

alidns:DeleteCloudGtmAddress

-

alidns:DeleteCloudGtmAddressPool

-

alidns:DeleteCloudGtmInstanceConfig

-

alidns:DeleteCloudGtmMonitorTemplate

-

alidns:DeleteCloudMonitorTask

-

alidns:DeleteCloudMonitorTasksJob

-

alidns:DeleteDnsMonitor

-

alidns:DeleteDnsTemplate

-

alidns:DeleteDnsTemplateRecord

-

alidns:DeleteDomainGroup

-

alidns:DeleteEdgeDnsCluster

-

alidns:DeleteFusionClientConfig

-

alidns:DeleteGtmRecoveryPlan

-

alidns:DeletePtrRecord

-

alidns:DescribeAccount

-

alidns:DescribeAlidnsGlobalAlert

-

alidns:DescribeAlidnsInstances

-

alidns:DescribeAlidnsPostBusinessStatus

-

alidns:DescribeAlidnsResolveAnalysisConfig

-

alidns:DescribeBatchLogs

-

alidns:DescribeBatchResultCount

-

alidns:DescribeBatchResultDetail

-

alidns:DescribeBundleRecordTaskResult

-

alidns:DescribeBundleTempDomains

-

alidns:DescribeCanAddMonitorDomainRrs

-

alidns:DescribeCanAddMonitorSubDomainInfo

-

alidns:DescribeChangeLogs

-

alidns:DescribeCloudGtmAddress

-

alidns:DescribeCloudGtmAddressPool

-

alidns:DescribeCloudGtmAddressPoolReference

-

alidns:DescribeCloudGtmAddressReference

-

alidns:DescribeCloudGtmGlobalAlert

-

alidns:DescribeCloudGtmInstanceConfigAlert

-

alidns:DescribeCloudGtmInstanceConfigFullInfo

-

alidns:DescribeCloudGtmMonitorTemplate

-

alidns:DescribeCloudGtmResolveAnalysisConfig

-

alidns:DescribeCloudGtmSummary

-

alidns:DescribeCloudGtmSystemLines

-

alidns:DescribeCloudMonitorDetectCountOverview

-

alidns:DescribeCloudMonitorDetectCountSummary

-

alidns:DescribeCloudMonitorDetectLogs

-

alidns:DescribeCloudMonitorGlobalAlertConfig

-

alidns:DescribeCloudMonitorLatestDetectLogOverview

-

alidns:DescribeCloudMonitorLatestDetectLogs

-

alidns:DescribeCloudMonitorTask

-

alidns:DescribeCloudMonitorTaskAlertConfig

-

alidns:DescribeCloudMonitorTaskDetectSummary

-

alidns:DescribeCloudMonitorTaskOverview

-

alidns:DescribeDnsCacheDomains

-

alidns:DescribeDnsGtmAddrAttributeInfo

-

alidns:DescribeDnsGtmAvailableAlertGroup

-

alidns:DescribeDnsGtmMonitorAvailableConfig

-

alidns:DescribeDnsMonitor

-

alidns:DescribeDnsMonitorAvailableNodes

-

alidns:DescribeDnsMonitorTaskConfig

-

alidns:DescribeDnsMonitors

-

alidns:DescribeDnsProductInstance

-

alidns:DescribeDnsProductInstanceSummary

-

alidns:DescribeDnsProductInstances

-

alidns:DescribeDnsTemplateInfo

-

alidns:DescribeDnsTemplates

-

alidns:DescribeDnsUserInstancesInfo

-

alidns:DescribeDohAccountStatistics

-

alidns:DescribeDohDomainStatistics

-

alidns:DescribeDohDomainStatisticsSummary

-

alidns:DescribeDohSdkList

-

alidns:DescribeDohSubDomainStatistics

-

alidns:DescribeDohSubDomainStatisticsSummary

-

alidns:DescribeDohUserInfo

-

alidns:DescribeDomainBackups

-

alidns:DescribeDomainGroups

-

alidns:DescribeDomainLogs

-

alidns:DescribeDomainResolveStatisticsSummary

-

alidns:DescribeDomainStatisticsSummary

-

alidns:DescribeEdgeDnsAppAgentInfo

-

alidns:DescribeEdgeDnsAppLatestVersion

-

alidns:DescribeEdgeDnsClusterFullInfo

-

alidns:DescribeEdgeDnsClusterNodeContainers

-

alidns:DescribeEdgeDnsClusterNodeServiceStatus

-

alidns:DescribeEdgeDnsClusterResource

-

alidns:DescribeEdgeDnsClusterResourceOverview

-

alidns:DescribeEdgeDnsDeployNotFinalStatusTask

-

alidns:DescribeEdgeDnsDeployOptionalIp

-

alidns:DescribeEdgeDnsDeployOptionalVersion

-

alidns:DescribeEdgeDnsDeployTask

-

alidns:DescribeEdgeDnsDeploymentInfo

-

alidns:DescribeEdgeDnsDeploymentStatistics

-

alidns:DescribeEdgeDnsNodeConnectionToken

-

alidns:DescribeEdgeDnsNodeFullInfo

-

alidns:DescribeFusionOnPremisesInstances

-

alidns:DescribeFusionResources

-

alidns:DescribeGtmAvailableAlertGroup

-

alidns:DescribeGtmMonitorAvailableConfig

-

alidns:DescribeGtmRecoveryPlan

-

alidns:DescribeGtmRecoveryPlanAvailableConfig

-

alidns:DescribeGtmRecoveryPlans

-

alidns:DescribeImportDomainRecordsResult

-

alidns:DescribeImportDomainsResult

-

alidns:DescribeInstanceDomains

-

alidns:DescribeInstanceExtendStatus

-

alidns:DescribeInternetDnsLogs

-

alidns:DescribeIntranetFirewallProtectionDetail

-

alidns:DescribeIntranetFirewallProtectionDetails

-

alidns:DescribeIntranetFirewallProtectionHistory

-

alidns:DescribeIntranetFirewallProtectionLogs

-

alidns:DescribeIntranetFirewallProtectionOverview

-

alidns:DescribeIntranetFirewallProtectionRankings

-

alidns:DescribeInvalidDomains

-

alidns:DescribeIspFlushCacheInstances

-

alidns:DescribeIspFlushCacheRemainQuota

-

alidns:DescribeIspFlushCacheTask

-

alidns:DescribeIspFlushCacheTasks

-

alidns:DescribeJobOverview

-

alidns:DescribeJobs

-

alidns:DescribePostBusinessServiceStatus

-

alidns:DescribePtrRecordSet

-

alidns:DescribePtrRecords

-

alidns:DescribeRecommendCommodities

-

alidns:DescribeRecursionFirewallProtectionDetail

-

alidns:DescribeRecursionFirewallProtectionDetails

-

alidns:DescribeRecursionFirewallProtectionHistory

-

alidns:DescribeRecursionFirewallProtectionLogs

-

alidns:DescribeRecursionFirewallProtectionOverview

-

alidns:DescribeRecursionFirewallProtectionRankings

-

alidns:DescribeResolveAndOperatorClusterAssociationOverview

-

alidns:DescribeResolveSummary

-

alidns:DescribeRestoreDomainResults

-

alidns:DescribeRestoringDomainTasks

-

alidns:DescribeSiteMonitor

-

alidns:DescribeSiteMonitorIspCityInfos

-

alidns:DescribeSiteMonitorIspInfos

-

alidns:DescribeSlaveDnsDomains

-

alidns:DescribeSubJobs

-

alidns:DescribeSubdomainRecords

-

alidns:DescribeSupportLines

-

alidns:DescribeTags

-

alidns:DescribeTransferDomains

-

alidns:DescribeUserContactInfo

-

alidns:DescribeUserGrayStatus

-

alidns:DescribleMultiCommodityPrices

-

alidns:ExecuteGtmRecoveryPlan

-

alidns:ExportDomainJob

-

alidns:ExportResolveSummaryJob

-

alidns:FetchFusionFirewallThreatDownloadUrl

-

alidns:FinishEdgeDnsDeployTask

-

alidns:GetMainDomainName

-

alidns:GetTxtRecordForRetrievalDomainName

-

alidns:GetTxtRecordForVerify

-

alidns:ListAlidnsAlertLogs

-

alidns:ListAssistantChat

-

alidns:ListAssistantMessage

-

alidns:ListAssistantQuestionGuide

-

alidns:ListAssociatedResolveClusters

-

alidns:ListAvailableAlertGroups

-

alidns:ListCloudGtmAddressPools

-

alidns:ListCloudGtmAddresses

-

alidns:ListCloudGtmAlertLogs

-

alidns:ListCloudGtmAvailableAlertGroups

-

alidns:ListCloudGtmInstanceConfigs

-

alidns:ListCloudGtmInstances

-

alidns:ListCloudGtmMonitorNodes

-

alidns:ListCloudGtmMonitorTemplates

-

alidns:ListCloudMonitorAlertLogs

-

alidns:ListCloudMonitorProbes

-

alidns:ListCloudMonitorTasks

-

alidns:ListEdgeDnsAlertLogs

-

alidns:ListEdgeDnsClusters

-

alidns:ListEdgeDnsNodes

-

alidns:ListEdgeDnsNotifyConfigs

-

alidns:ListEdgeDnsNotifyGatewayConfigs

-

alidns:ListEdgeDnsResolveLogs

-

alidns:ListEppClient

-

alidns:ListTagResources

-

alidns:ListTld

-

alidns:ManuallyRetryEdgeDnsClusterDispatchDataJob

-

alidns:OpenPostBusinessService

-

alidns:OperateBatchDomain

-

alidns:OrderPaidNotice

-

alidns:PreviewGtmRecoveryPlan

-

alidns:QueryAllowRenewPeriodList

-

alidns:QueryDnsMonitorErrorEvent

-

alidns:QueryDnsMonitorFailureRate

-

alidns:QueryDnsMonitorHistory

-

alidns:QueryDnsMonitorLast

-

alidns:QueryDnsMonitorNodeResponseTime

-

alidns:QueryDnsMonitorStatistics

-

alidns:QueryEdgeDnsMonitors

-

alidns:QueryEdgeDnsResolveQps

-

alidns:QueryEdgeDnsTopData

-

alidns:QueryEdgeDnsTopDomain

-

alidns:QueryEdgeDnsTopRCode

-

alidns:QueryInstanceUnpaidOrder

-

alidns:QueryRenewPrice

-

alidns:RecheckInvalidDomain

-

alidns:ReclaimDomain

-

alidns:RefundOrder

-

alidns:RemoveRspDomainServerHoldStatusForGateway

-

alidns:ReplacePtrRecordSet

-

alidns:ResetBatchResult

-

alidns:ResetImportDomainsResult

-

alidns:RetrieveBatchDomain

-

alidns:RetrieveDomain

-

alidns:RollbackGtmRecoveryPlan

-

alidns:SaveResolveClustersAssociation

-

alidns:ScanSubdomainRecords

-

alidns:SearchCloudGtmAddressPools

-

alidns:SearchCloudGtmAddresses

-

alidns:SearchCloudGtmInstanceConfigs

-

alidns:SearchCloudGtmInstances

-

alidns:SearchCloudGtmMonitorTemplates

-

alidns:SearchCloudMonitorTasks

-

alidns:SearchEdgeDnsClusters

-

alidns:SearchEdgeDnsNodes

-

alidns:SendVerifyCode

-

alidns:SetCloudGtmInstanceConfigLogSwitch

-

alidns:SetCloudMonitorTaskStatus

-

alidns:SetDomainAuthLogConfig

-

alidns:SetEdgeDnsClusterRecurseEnableStatus

-

alidns:SetInstanceRenewalStatus

-

alidns:SetPtrRecordStatus

-

alidns:SubmitEdgeDnsDeployRetryTask

-

alidns:SubmitEdgeDnsDeployTask

-

alidns:SubmitImportDomainRecordsFile

-

alidns:SubmitIspFlushCacheTask

-

alidns:TagResources

-

alidns:TemporaryCancelFusionResource

-

alidns:TransferBatchDomain

-

alidns:UnbindInstanceDomains

-

alidns:UntagResources

-

alidns:UpdateAlidnsGlobalAlert

-

alidns:UpdateAlidnsLineRecordSet

-

alidns:UpdateAlidnsResolveAnalysisConfig

-

alidns:UpdateAssistantChatName

-

alidns:UpdateAssistantMessageFeedback

-

alidns:UpdateBatchRr

-

alidns:UpdateCloudGtmAddressEnableStatus

-

alidns:UpdateCloudGtmAddressManualAvailableStatus

-

alidns:UpdateCloudGtmAddressPoolEnableStatus

-

alidns:UpdateCloudGtmAddressPoolRemark

-

alidns:UpdateCloudGtmAddressRemark

-

alidns:UpdateCloudGtmGlobalAlert

-

alidns:UpdateCloudGtmInstanceConfigBasic

-

alidns:UpdateCloudGtmInstanceConfigRemark

-

alidns:UpdateCloudGtmInstanceName

-

alidns:UpdateCloudGtmMonitorTemplateRemark

-

alidns:UpdateCloudGtmResolveAnalysisConfig

-

alidns:UpdateCloudMonitorGlobalAlertConfig

-

alidns:UpdateCloudMonitorTask

-

alidns:UpdateCloudMonitorTaskAlertConfig

-

alidns:UpdateCloudMonitorTaskRemark

-

alidns:UpdateDnsMonitor

-

alidns:UpdateDnsTemplateName

-

alidns:UpdateDnsTemplateRecord

-

alidns:UpdateDomainGroup

-

alidns:UpdateDomainServerHoldStatus

-

alidns:UpdateDomainStatus

-

alidns:UpdateEdgeDnsCluster

-

alidns:UpdateEdgeDnsClusterRecurseRemark

-

alidns:UpdateEdgeDnsNodeName

-

alidns:UpdateEdgeDnsNodeOperationIp

-

alidns:UpdateEdgeDnsNodeRemark

-

alidns:UpdateEdgeDnsNotifyConfig

-

alidns:UpdateEdgeDnsNotifyGatewayConfig

-

alidns:UpdateEdgeDnsSyslogDnsLogNotifyConfig

-

alidns:UpdateFusionClientConfig

-

alidns:UpdateFusionClientNodeEscapeConfig

-

alidns:UpdateFusionFirewallSubscriptionConfig

-

alidns:UpdateGtmRecoveryPlan

-

alidns:UpdateIspFlushCacheInstanceConfig

-

alidns:UpdatePtrRecordRemark

-

alidns:UpdateRspDomainServerHoldStatus

-

alidns:UpdateRspDomainServerHoldStatusOte

-

alidns:UpdateRspDomainServerProhibitStatus

-

alidns:UpdateRspDomainServerProhibitStatusForGateway

-

alidns:UpdateRspDomainStatus

-

alidns:UpdateRspDomainStatusOte

-

alidns:UpdateRspEppClientStatusOte

-

alidns:UpdateUserProductFeedback

-

alidns:ValidateDomainCanAdd

-

alidns:ValidateDomainCanAdd

-

alidns:ValidateVerifyCode

-

alidns:VerifyAccount

-

alidns:VerifyTxtRecord

-

alidns:VerifyTxtRecordForRetrievalDomainName

-

alidns:addDomainRecord

-

alidns:createTldMeta

-

alidns:deleteDomainRecord

-

alidns:null

-

alidns:read

-

alidns:setDomainRecordStatus

-

alidns:update

-

alidns:updateDomainRecord

-

alidns:updateDomainRecordRemark

-

对于不支持资源组授权的操作，授权时资源范围选择资源组级别将无效。如果仍需要RAM用户有上述操作权限，您需要创建自定义权限策略，授权时资源范围选择账号级别。

image.png以下是两个自定义权限策略示例，您可以根据实际需要调整策略内容。

  • 允许不支持资源组级别授权的全部只读操作：Action中列举不支持资源组级别授权的所有只读操作。

    {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "alidns:CheckDomainRecord",
        "alidns:CheckEdgeDnsClusterConnection",
        "alidns:CheckEdgeDnsClusterDeploymentAppVersion",
        "alidns:CheckEdgeDnsDeploymentAppVersion",
        "alidns:CheckFusionClientAvailable",
        "alidns:CheckGtmInstanceExistence",
        "alidns:CheckInstanceAllowSystemAssign",
        "alidns:CheckSubDomainRecord4Add",
        "alidns:DescribeAccount",
        "alidns:DescribeAlidnsGlobalAlert",
        "alidns:DescribeAlidnsInstances",
        "alidns:DescribeAlidnsPostBusinessStatus",
        "alidns:DescribeAlidnsResolveAnalysisConfig",
        "alidns:DescribeBatchLogs",
        "alidns:DescribeBatchResultCount",
        "alidns:DescribeBatchResultDetail",
        "alidns:DescribeBundleRecordTaskResult",
        "alidns:DescribeBundleTempDomains",
        "alidns:DescribeCanAddMonitorDomainRrs",
        "alidns:DescribeCanAddMonitorSubDomainInfo",
        "alidns:DescribeChangeLogs",
        "alidns:DescribeCloudGtmAddress",
        "alidns:DescribeCloudGtmAddressPool",
        "alidns:DescribeCloudGtmAddressPoolReference",
        "alidns:DescribeCloudGtmAddressReference",
        "alidns:DescribeCloudGtmGlobalAlert",
        "alidns:DescribeCloudGtmInstanceConfigAlert",
        "alidns:DescribeCloudGtmInstanceConfigFullInfo",
        "alidns:DescribeCloudGtmMonitorTemplate",
        "alidns:DescribeCloudGtmResolveAnalysisConfig",
        "alidns:DescribeCloudGtmSummary",
        "alidns:DescribeCloudGtmSystemLines",
        "alidns:DescribeCloudMonitorDetectCountOverview",
        "alidns:DescribeCloudMonitorDetectCountSummary",
        "alidns:DescribeCloudMonitorDetectLogs",
        "alidns:DescribeCloudMonitorGlobalAlertConfig",
        "alidns:DescribeCloudMonitorLatestDetectLogOverview",
        "alidns:DescribeCloudMonitorLatestDetectLogs",
        "alidns:DescribeCloudMonitorTask",
        "alidns:DescribeCloudMonitorTaskAlertConfig",
        "alidns:DescribeCloudMonitorTaskDetectSummary",
        "alidns:DescribeCloudMonitorTaskOverview",
        "alidns:DescribeDnsCacheDomains",
        "alidns:DescribeDnsGtmAddrAttributeInfo",
        "alidns:DescribeDnsGtmAvailableAlertGroup",
        "alidns:DescribeDnsGtmMonitorAvailableConfig",
        "alidns:DescribeDnsMonitor",
        "alidns:DescribeDnsMonitorAvailableNodes",
        "alidns:DescribeDnsMonitorTaskConfig",
        "alidns:DescribeDnsMonitors",
        "alidns:DescribeDnsProductInstance",
        "alidns:DescribeDnsProductInstanceSummary",
        "alidns:DescribeDnsProductInstances",
        "alidns:DescribeDnsTemplateInfo",
        "alidns:DescribeDnsTemplates",
        "alidns:DescribeDnsUserInstancesInfo",
        "alidns:DescribeDohAccountStatistics",
        "alidns:DescribeDohDomainStatistics",
        "alidns:DescribeDohDomainStatisticsSummary",
        "alidns:DescribeDohSdkList",
        "alidns:DescribeDohSubDomainStatistics",
        "alidns:DescribeDohSubDomainStatisticsSummary",
        "alidns:DescribeDohUserInfo",
        "alidns:DescribeDomainBackups",
        "alidns:DescribeDomainGroups",
        "alidns:DescribeDomainLogs",
        "alidns:DescribeDomainResolveStatisticsSummary",
        "alidns:DescribeDomainStatisticsSummary",
        "alidns:DescribeEdgeDnsAppAgentInfo",
        "alidns:DescribeEdgeDnsAppLatestVersion",
        "alidns:DescribeEdgeDnsClusterFullInfo",
        "alidns:DescribeEdgeDnsClusterNodeContainers",
        "alidns:DescribeEdgeDnsClusterNodeServiceStatus",
        "alidns:DescribeEdgeDnsClusterResource",
        "alidns:DescribeEdgeDnsClusterResourceOverview",
        "alidns:DescribeEdgeDnsDeployNotFinalStatusTask",
        "alidns:DescribeEdgeDnsDeployOptionalIp",
        "alidns:DescribeEdgeDnsDeployOptionalVersion",
        "alidns:DescribeEdgeDnsDeployTask",
        "alidns:DescribeEdgeDnsDeploymentInfo",
        "alidns:DescribeEdgeDnsDeploymentStatistics",
        "alidns:DescribeEdgeDnsNodeConnectionToken",
        "alidns:DescribeEdgeDnsNodeFullInfo",
        "alidns:DescribeFusionOnPremisesInstances",
        "alidns:DescribeFusionResources",
        "alidns:DescribeGtmAvailableAlertGroup",
        "alidns:DescribeGtmMonitorAvailableConfig",
        "alidns:DescribeGtmRecoveryPlan",
        "alidns:DescribeGtmRecoveryPlanAvailableConfig",
        "alidns:DescribeGtmRecoveryPlans",
        "alidns:DescribeImportDomainRecordsResult",
        "alidns:DescribeImportDomainsResult",
        "alidns:DescribeInstanceDomains",
        "alidns:DescribeInstanceExtendStatus",
        "alidns:DescribeInternetDnsLogs",
        "alidns:DescribeIntranetFirewallProtectionDetail",
        "alidns:DescribeIntranetFirewallProtectionDetails",
        "alidns:DescribeIntranetFirewallProtectionHistory",
        "alidns:DescribeIntranetFirewallProtectionLogs",
        "alidns:DescribeIntranetFirewallProtectionOverview",
        "alidns:DescribeIntranetFirewallProtectionRankings",
        "alidns:DescribeInvalidDomains",
        "alidns:DescribeIspFlushCacheInstances",
        "alidns:DescribeIspFlushCacheRemainQuota",
        "alidns:DescribeIspFlushCacheTask",
        "alidns:DescribeIspFlushCacheTasks",
        "alidns:DescribeJobOverview",
        "alidns:DescribeJobs",
        "alidns:DescribePostBusinessServiceStatus",
        "alidns:DescribePtrRecordSet",
        "alidns:DescribePtrRecords",
        "alidns:DescribeRecommendCommodities",
        "alidns:DescribeRecursionFirewallProtectionDetail",
        "alidns:DescribeRecursionFirewallProtectionDetails",
        "alidns:DescribeRecursionFirewallProtectionHistory",
        "alidns:DescribeRecursionFirewallProtectionLogs",
        "alidns:DescribeRecursionFirewallProtectionOverview",
        "alidns:DescribeRecursionFirewallProtectionRankings",
        "alidns:DescribeResolveAndOperatorClusterAssociationOverview",
        "alidns:DescribeResolveSummary",
        "alidns:DescribeRestoreDomainResults",
        "alidns:DescribeRestoringDomainTasks",
        "alidns:DescribeSiteMonitor",
        "alidns:DescribeSiteMonitorIspCityInfos",
        "alidns:DescribeSiteMonitorIspInfos",
        "alidns:DescribeSlaveDnsDomains",
        "alidns:DescribeSubJobs",
        "alidns:DescribeSubdomainRecords",
        "alidns:DescribeSupportLines",
        "alidns:DescribeTags",
        "alidns:DescribeTransferDomains",
        "alidns:DescribeUserContactInfo",
        "alidns:DescribeUserGrayStatus",
        "alidns:GetMainDomainName",
        "alidns:GetTxtRecordForRetrievalDomainName",
        "alidns:GetTxtRecordForVerify",
        "alidns:ListAlidnsAlertLogs",
        "alidns:ListAssistantChat",
        "alidns:ListAssistantMessage",
        "alidns:ListAssistantQuestionGuide",
        "alidns:ListAssociatedResolveClusters",
        "alidns:ListAvailableAlertGroups",
        "alidns:ListCloudGtmAddressPools",
        "alidns:ListCloudGtmAddresses",
        "alidns:ListCloudGtmAlertLogs",
        "alidns:ListCloudGtmAvailableAlertGroups",
        "alidns:ListCloudGtmInstanceConfigs",
        "alidns:ListCloudGtmInstances",
        "alidns:ListCloudGtmMonitorNodes",
        "alidns:ListCloudGtmMonitorTemplates",
        "alidns:ListCloudMonitorAlertLogs",
        "alidns:ListCloudMonitorProbes",
        "alidns:ListCloudMonitorTasks",
        "alidns:ListEdgeDnsAlertLogs",
        "alidns:ListEdgeDnsClusters",
        "alidns:ListEdgeDnsNodes",
        "alidns:ListEdgeDnsNotifyConfigs",
        "alidns:ListEdgeDnsNotifyGatewayConfigs",
        "alidns:ListEdgeDnsResolveLogs",
        "alidns:ListEppClient",
        "alidns:ListTagResources",
        "alidns:ListTld",
        "alidns:QueryAllowRenewPeriodList",
        "alidns:QueryDnsMonitorErrorEvent",
        "alidns:QueryDnsMonitorFailureRate",
        "alidns:QueryDnsMonitorHistory",
        "alidns:QueryDnsMonitorLast",
        "alidns:QueryDnsMonitorNodeResponseTime",
        "alidns:QueryDnsMonitorStatistics",
        "alidns:QueryEdgeDnsMonitors",
        "alidns:QueryEdgeDnsResolveQps",
        "alidns:QueryEdgeDnsTopData",
        "alidns:QueryEdgeDnsTopDomain",
        "alidns:QueryEdgeDnsTopRCode",
        "alidns:QueryInstanceUnpaidOrder",
        "alidns:QueryRenewPrice",
        "alidns:SearchCloudGtmAddressPools",
        "alidns:SearchCloudGtmAddresses",
        "alidns:SearchCloudGtmInstanceConfigs",
        "alidns:SearchCloudGtmInstances",
        "alidns:SearchCloudGtmMonitorTemplates",
        "alidns:SearchCloudMonitorTasks",
        "alidns:SearchEdgeDnsClusters",
        "alidns:SearchEdgeDnsNodes",
        "alidns:ValidateDomainCanAdd",
        "alidns:ValidateDomainCanAdd"
      ],
      "Resource": "*"
    }
  ]
}

  • 允许不支持资源组级别授权的全部操作：Action中列举不支持资源组级别授权的全部操作。

    {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "alidns:AddBatchDomain",
        "alidns:AddBatchDomainFromFile",
        "alidns:AddBatchRr",
        "alidns:AddBatchTempDomains",
        "alidns:AddDnsCacheDomain",
        "alidns:AddDnsMonitor",
        "alidns:AddDnsTemplate",
        "alidns:AddDnsTemplateRecord",
        "alidns:AddDohUser",
        "alidns:AddDomainGroup",
        "alidns:AddGateway",
        "alidns:AddGtmRecoveryPlan",
        "alidns:AddRegistrar",
        "alidns:AddRegistrarContact",
        "alidns:AddRspDomainServerHoldStatusForGateway",
        "alidns:AddSensitiveName",
        "alidns:AddUserProductFeedback",
        "alidns:BatchDomainRecordOperate",
        "alidns:BindInstanceDomains",
        "alidns:CancelJob",
        "alidns:CancelOrder",
        "alidns:ChangeBatchDomainGroup",
        "alidns:ChangeDomainOfDnsProduct",
        "alidns:ChatAssistantMessage",
        "alidns:CheckDomainRecord",
        "alidns:CheckEdgeDnsClusterConnection",
        "alidns:CheckEdgeDnsClusterDeploymentAppVersion",
        "alidns:CheckEdgeDnsDeploymentAppVersion",
        "alidns:CheckFusionClientAvailable",
        "alidns:CheckGtmInstanceExistence",
        "alidns:CheckInstanceAllowSystemAssign",
        "alidns:CheckSubDomainRecord4Add",
        "alidns:CompleteCommodity",
        "alidns:CompleteCommodityWithoutTraffic",
        "alidns:CopyGtmConfig",
        "alidns:CreateCloudMonitorTask",
        "alidns:CreateEdgeDnsCluster",
        "alidns:CreateInstance",
        "alidns:CreateMultiCommodityOrder",
        "alidns:CreatePtrRecordSet",
        "alidns:CreateRenewOrder",
        "alidns:DeleteAssistantChat",
        "alidns:DeleteBatchDomain",
        "alidns:DeleteBatchRr",
        "alidns:DeleteCloudGtmAddress",
        "alidns:DeleteCloudGtmAddressPool",
        "alidns:DeleteCloudGtmInstanceConfig",
        "alidns:DeleteCloudGtmMonitorTemplate",
        "alidns:DeleteCloudMonitorTask",
        "alidns:DeleteCloudMonitorTasksJob",
        "alidns:DeleteDnsMonitor",
        "alidns:DeleteDnsTemplate",
        "alidns:DeleteDnsTemplateRecord",
        "alidns:DeleteDomainGroup",
        "alidns:DeleteEdgeDnsCluster",
        "alidns:DeleteFusionClientConfig",
        "alidns:DeleteGtmRecoveryPlan",
        "alidns:DeletePtrRecord",
        "alidns:DescribeAccount",
        "alidns:DescribeAlidnsGlobalAlert",
        "alidns:DescribeAlidnsInstances",
        "alidns:DescribeAlidnsPostBusinessStatus",
        "alidns:DescribeAlidnsResolveAnalysisConfig",
        "alidns:DescribeBatchLogs",
        "alidns:DescribeBatchResultCount",
        "alidns:DescribeBatchResultDetail",
        "alidns:DescribeBundleRecordTaskResult",
        "alidns:DescribeBundleTempDomains",
        "alidns:DescribeCanAddMonitorDomainRrs",
        "alidns:DescribeCanAddMonitorSubDomainInfo",
        "alidns:DescribeChangeLogs",
        "alidns:DescribeCloudGtmAddress",
        "alidns:DescribeCloudGtmAddressPool",
        "alidns:DescribeCloudGtmAddressPoolReference",
        "alidns:DescribeCloudGtmAddressReference",
        "alidns:DescribeCloudGtmGlobalAlert",
        "alidns:DescribeCloudGtmInstanceConfigAlert",
        "alidns:DescribeCloudGtmInstanceConfigFullInfo",
        "alidns:DescribeCloudGtmMonitorTemplate",
        "alidns:DescribeCloudGtmResolveAnalysisConfig",
        "alidns:DescribeCloudGtmSummary",
        "alidns:DescribeCloudGtmSystemLines",
        "alidns:DescribeCloudMonitorDetectCountOverview",
        "alidns:DescribeCloudMonitorDetectCountSummary",
        "alidns:DescribeCloudMonitorDetectLogs",
        "alidns:DescribeCloudMonitorGlobalAlertConfig",
        "alidns:DescribeCloudMonitorLatestDetectLogOverview",
        "alidns:DescribeCloudMonitorLatestDetectLogs",
        "alidns:DescribeCloudMonitorTask",
        "alidns:DescribeCloudMonitorTaskAlertConfig",
        "alidns:DescribeCloudMonitorTaskDetectSummary",
        "alidns:DescribeCloudMonitorTaskOverview",
        "alidns:DescribeDnsCacheDomains",
        "alidns:DescribeDnsGtmAddrAttributeInfo",
        "alidns:DescribeDnsGtmAvailableAlertGroup",
        "alidns:DescribeDnsGtmMonitorAvailableConfig",
        "alidns:DescribeDnsMonitor",
        "alidns:DescribeDnsMonitorAvailableNodes",
        "alidns:DescribeDnsMonitorTaskConfig",
        "alidns:DescribeDnsMonitors",
        "alidns:DescribeDnsProductInstance",
        "alidns:DescribeDnsProductInstanceSummary",
        "alidns:DescribeDnsProductInstances",
        "alidns:DescribeDnsTemplateInfo",
        "alidns:DescribeDnsTemplates",
        "alidns:DescribeDnsUserInstancesInfo",
        "alidns:DescribeDohAccountStatistics",
        "alidns:DescribeDohDomainStatistics",
        "alidns:DescribeDohDomainStatisticsSummary",
        "alidns:DescribeDohSdkList",
        "alidns:DescribeDohSubDomainStatistics",
        "alidns:DescribeDohSubDomainStatisticsSummary",
        "alidns:DescribeDohUserInfo",
        "alidns:DescribeDomainBackups",
        "alidns:DescribeDomainGroups",
        "alidns:DescribeDomainLogs",
        "alidns:DescribeDomainResolveStatisticsSummary",
        "alidns:DescribeDomainStatisticsSummary",
        "alidns:DescribeEdgeDnsAppAgentInfo",
        "alidns:DescribeEdgeDnsAppLatestVersion",
        "alidns:DescribeEdgeDnsClusterFullInfo",
        "alidns:DescribeEdgeDnsClusterNodeContainers",
        "alidns:DescribeEdgeDnsClusterNodeServiceStatus",
        "alidns:DescribeEdgeDnsClusterResource",
        "alidns:DescribeEdgeDnsClusterResourceOverview",
        "alidns:DescribeEdgeDnsDeployNotFinalStatusTask",
        "alidns:DescribeEdgeDnsDeployOptionalIp",
        "alidns:DescribeEdgeDnsDeployOptionalVersion",
        "alidns:DescribeEdgeDnsDeployTask",
        "alidns:DescribeEdgeDnsDeploymentInfo",
        "alidns:DescribeEdgeDnsDeploymentStatistics",
        "alidns:DescribeEdgeDnsNodeConnectionToken",
        "alidns:DescribeEdgeDnsNodeFullInfo",
        "alidns:DescribeFusionOnPremisesInstances",
        "alidns:DescribeFusionResources",
        "alidns:DescribeGtmAvailableAlertGroup",
        "alidns:DescribeGtmMonitorAvailableConfig",
        "alidns:DescribeGtmRecoveryPlan",
        "alidns:DescribeGtmRecoveryPlanAvailableConfig",
        "alidns:DescribeGtmRecoveryPlans",
        "alidns:DescribeImportDomainRecordsResult",
        "alidns:DescribeImportDomainsResult",
        "alidns:DescribeInstanceDomains",
        "alidns:DescribeInstanceExtendStatus",
        "alidns:DescribeInternetDnsLogs",
        "alidns:DescribeIntranetFirewallProtectionDetail",
        "alidns:DescribeIntranetFirewallProtectionDetails",
        "alidns:DescribeIntranetFirewallProtectionHistory",
        "alidns:DescribeIntranetFirewallProtectionLogs",
        "alidns:DescribeIntranetFirewallProtectionOverview",
        "alidns:DescribeIntranetFirewallProtectionRankings",
        "alidns:DescribeInvalidDomains",
        "alidns:DescribeIspFlushCacheInstances",
        "alidns:DescribeIspFlushCacheRemainQuota",
        "alidns:DescribeIspFlushCacheTask",
        "alidns:DescribeIspFlushCacheTasks",
        "alidns:DescribeJobOverview",
        "alidns:DescribeJobs",
        "alidns:DescribePostBusinessServiceStatus",
        "alidns:DescribePtrRecordSet",
        "alidns:DescribePtrRecords",
        "alidns:DescribeRecommendCommodities",
        "alidns:DescribeRecursionFirewallProtectionDetail",
        "alidns:DescribeRecursionFirewallProtectionDetails",
        "alidns:DescribeRecursionFirewallProtectionHistory",
        "alidns:DescribeRecursionFirewallProtectionLogs",
        "alidns:DescribeRecursionFirewallProtectionOverview",
        "alidns:DescribeRecursionFirewallProtectionRankings",
        "alidns:DescribeResolveAndOperatorClusterAssociationOverview",
        "alidns:DescribeResolveSummary",
        "alidns:DescribeRestoreDomainResults",
        "alidns:DescribeRestoringDomainTasks",
        "alidns:DescribeSiteMonitor",
        "alidns:DescribeSiteMonitorIspCityInfos",
        "alidns:DescribeSiteMonitorIspInfos",
        "alidns:DescribeSlaveDnsDomains",
        "alidns:DescribeSubJobs",
        "alidns:DescribeSubdomainRecords",
        "alidns:DescribeSupportLines",
        "alidns:DescribeTags",
        "alidns:DescribeTransferDomains",
        "alidns:DescribeUserContactInfo",
        "alidns:DescribeUserGrayStatus",
        "alidns:DescribleMultiCommodityPrices",
        "alidns:ExecuteGtmRecoveryPlan",
        "alidns:ExportDomainJob",
        "alidns:ExportResolveSummaryJob",
        "alidns:FetchFusionFirewallThreatDownloadUrl",
        "alidns:FinishEdgeDnsDeployTask",
        "alidns:GetMainDomainName",
        "alidns:GetTxtRecordForRetrievalDomainName",
        "alidns:GetTxtRecordForVerify",
        "alidns:ListAlidnsAlertLogs",
        "alidns:ListAssistantChat",
        "alidns:ListAssistantMessage",
        "alidns:ListAssistantQuestionGuide",
        "alidns:ListAssociatedResolveClusters",
        "alidns:ListAvailableAlertGroups",
        "alidns:ListCloudGtmAddressPools",
        "alidns:ListCloudGtmAddresses",
        "alidns:ListCloudGtmAlertLogs",
        "alidns:ListCloudGtmAvailableAlertGroups",
        "alidns:ListCloudGtmInstanceConfigs",
        "alidns:ListCloudGtmInstances",
        "alidns:ListCloudGtmMonitorNodes",
        "alidns:ListCloudGtmMonitorTemplates",
        "alidns:ListCloudMonitorAlertLogs",
        "alidns:ListCloudMonitorProbes",
        "alidns:ListCloudMonitorTasks",
        "alidns:ListEdgeDnsAlertLogs",
        "alidns:ListEdgeDnsClusters",
        "alidns:ListEdgeDnsNodes",
        "alidns:ListEdgeDnsNotifyConfigs",
        "alidns:ListEdgeDnsNotifyGatewayConfigs",
        "alidns:ListEdgeDnsResolveLogs",
        "alidns:ListEppClient",
        "alidns:ListTagResources",
        "alidns:ListTld",
        "alidns:ManuallyRetryEdgeDnsClusterDispatchDataJob",
        "alidns:OpenPostBusinessService",
        "alidns:OperateBatchDomain",
        "alidns:OrderPaidNotice",
        "alidns:PreviewGtmRecoveryPlan",
        "alidns:QueryAllowRenewPeriodList",
        "alidns:QueryDnsMonitorErrorEvent",
        "alidns:QueryDnsMonitorFailureRate",
        "alidns:QueryDnsMonitorHistory",
        "alidns:QueryDnsMonitorLast",
        "alidns:QueryDnsMonitorNodeResponseTime",
        "alidns:QueryDnsMonitorStatistics",
        "alidns:QueryEdgeDnsMonitors",
        "alidns:QueryEdgeDnsResolveQps",
        "alidns:QueryEdgeDnsTopData",
        "alidns:QueryEdgeDnsTopDomain",
        "alidns:QueryEdgeDnsTopRCode",
        "alidns:QueryInstanceUnpaidOrder",
        "alidns:QueryRenewPrice",
        "alidns:RecheckInvalidDomain",
        "alidns:ReclaimDomain",
        "alidns:RefundOrder",
        "alidns:RemoveRspDomainServerHoldStatusForGateway",
        "alidns:ReplacePtrRecordSet",
        "alidns:ResetBatchResult",
        "alidns:ResetImportDomainsResult",
        "alidns:RetrieveBatchDomain",
        "alidns:RetrieveDomain",
        "alidns:RollbackGtmRecoveryPlan",
        "alidns:SaveResolveClustersAssociation",
        "alidns:ScanSubdomainRecords",
        "alidns:SearchCloudGtmAddressPools",
        "alidns:SearchCloudGtmAddresses",
        "alidns:SearchCloudGtmInstanceConfigs",
        "alidns:SearchCloudGtmInstances",
        "alidns:SearchCloudGtmMonitorTemplates",
        "alidns:SearchCloudMonitorTasks",
        "alidns:SearchEdgeDnsClusters",
        "alidns:SearchEdgeDnsNodes",
        "alidns:SendVerifyCode",
        "alidns:SetCloudGtmInstanceConfigLogSwitch",
        "alidns:SetCloudMonitorTaskStatus",
        "alidns:SetDomainAuthLogConfig",
        "alidns:SetEdgeDnsClusterRecurseEnableStatus",
        "alidns:SetInstanceRenewalStatus",
        "alidns:SetPtrRecordStatus",
        "alidns:SubmitEdgeDnsDeployRetryTask",
        "alidns:SubmitEdgeDnsDeployTask",
        "alidns:SubmitImportDomainRecordsFile",
        "alidns:SubmitIspFlushCacheTask",
        "alidns:TagResources",
        "alidns:TemporaryCancelFusionResource",
        "alidns:TransferBatchDomain",
        "alidns:UnbindInstanceDomains",
        "alidns:UntagResources",
        "alidns:UpdateAlidnsGlobalAlert",
        "alidns:UpdateAlidnsLineRecordSet",
        "alidns:UpdateAlidnsResolveAnalysisConfig",
        "alidns:UpdateAssistantChatName",
        "alidns:UpdateAssistantMessageFeedback",
        "alidns:UpdateBatchRr",
        "alidns:UpdateCloudGtmAddressEnableStatus",
        "alidns:UpdateCloudGtmAddressManualAvailableStatus",
        "alidns:UpdateCloudGtmAddressPoolEnableStatus",
        "alidns:UpdateCloudGtmAddressPoolRemark",
        "alidns:UpdateCloudGtmAddressRemark",
        "alidns:UpdateCloudGtmGlobalAlert",
        "alidns:UpdateCloudGtmInstanceConfigBasic",
        "alidns:UpdateCloudGtmInstanceConfigRemark",
        "alidns:UpdateCloudGtmInstanceName",
        "alidns:UpdateCloudGtmMonitorTemplateRemark",
        "alidns:UpdateCloudGtmResolveAnalysisConfig",
        "alidns:UpdateCloudMonitorGlobalAlertConfig",
        "alidns:UpdateCloudMonitorTask",
        "alidns:UpdateCloudMonitorTaskAlertConfig",
        "alidns:UpdateCloudMonitorTaskRemark",
        "alidns:UpdateDnsMonitor",
        "alidns:UpdateDnsTemplateName",
        "alidns:UpdateDnsTemplateRecord",
        "alidns:UpdateDomainGroup",
        "alidns:UpdateDomainServerHoldStatus",
        "alidns:UpdateDomainStatus",
        "alidns:UpdateEdgeDnsCluster",
        "alidns:UpdateEdgeDnsClusterRecurseRemark",
        "alidns:UpdateEdgeDnsNodeName",
        "alidns:UpdateEdgeDnsNodeOperationIp",
        "alidns:UpdateEdgeDnsNodeRemark",
        "alidns:UpdateEdgeDnsNotifyConfig",
        "alidns:UpdateEdgeDnsNotifyGatewayConfig",
        "alidns:UpdateEdgeDnsSyslogDnsLogNotifyConfig",
        "alidns:UpdateFusionClientConfig",
        "alidns:UpdateFusionClientNodeEscapeConfig",
        "alidns:UpdateFusionFirewallSubscriptionConfig",
        "alidns:UpdateGtmRecoveryPlan",
        "alidns:UpdateIspFlushCacheInstanceConfig",
        "alidns:UpdatePtrRecordRemark",
        "alidns:UpdateRspDomainServerHoldStatus",
        "alidns:UpdateRspDomainServerHoldStatusOte",
        "alidns:UpdateRspDomainServerProhibitStatus",
        "alidns:UpdateRspDomainServerProhibitStatusForGateway",
        "alidns:UpdateRspDomainStatus",
        "alidns:UpdateRspDomainStatusOte",
        "alidns:UpdateRspEppClientStatusOte",
        "alidns:UpdateUserProductFeedback",
        "alidns:ValidateDomainCanAdd",
        "alidns:ValidateDomainCanAdd",
        "alidns:ValidateVerifyCode",
        "alidns:VerifyAccount",
        "alidns:VerifyTxtRecord",
        "alidns:VerifyTxtRecordForRetrievalDomainName",
        "alidns:addDomainRecord",
        "alidns:createTldMeta",
        "alidns:deleteDomainRecord",
        "alidns:null",
        "alidns:read",
        "alidns:setDomainRecordStatus",
        "alidns:update",
        "alidns:updateDomainRecord",
        "alidns:updateDomainRecordRemark"
      ],
      "Resource": "*"
    }
  ]
}
重要

获得账号级别权限的RAM用户或RAM角色，能够操作整个账号范围内的相关资源。请务必确认所授予的权限是否符合预期，遵从最小授权原则谨慎分配权限。

常见问题

如何查看当前资源属于哪个资源组？

  • 方式一：单击资源名称，进入资源的详情页面，即可查看到当前资源的资源组。

  • 方式二：登录资源管理控制台，单击资源中心 > 资源搜索，在左侧选择目标资源所属账号（默认为当前账号），通过筛选条件定位目标资源，即可查看其所属资源组。

如何查看当前产品在某个资源组下的所有资源？

  • 方式一：登录资源管理控制台，单击资源中心 > 资源搜索，然后在左侧的资源所属账号（默认为当前账号）下选择单击目标资源组名称，最后在右侧的选择资源类型中选择当前产品，即可查看当前产品在某个资源组下的所有资源。

  • 方式二：登录资源管理控制台，单击资源组 > 资源组，然后找到目标资源组，单击其所在行的操作列下的资源管理，最后在资源管理页面上方的产品下拉框中选择当前产品，即可查看当前产品在某个资源组下的所有资源。

如何批量修改多个资源的资源组？

登录资源管理控制台，单击资源组 > 资源组，在目标资源组所在行的操作列下，单击资源管理以进入资源管理页面。通过筛选条件定位多个目标资源，批量勾选第一列的复选框后单击下方转移资源组，并按页面提示完成资源组修改。

上一篇：内网域名解析（PrivateZone）自定义权限策略参考下一篇：开发参考