AI 助理
文档备案控制台
官方文档
输入文档关键字查找
首页 云解析DNS 安全合规 使用资源组进行精细化资源控制

使用资源组进行精细化资源控制

更新时间：
复制为 MD 格式
产品详情
我的收藏

当您使用资源组对资源进行分组管理时，可以结合访问控制（RAM），在单个阿里云账号内实现资源的隔离和精细化权限管理。本文总结了云解析DNS对资源组的支持情况，以及资源组级别的授权操作步骤。

说明

  • 只有支持资源组的资源类型和支持资源组级别授权的操作，资源组级别授权才能生效。

  • 对于不支持资源组的资源类型，授予资源组范围的权限将无效。在选择资源范围时，请选择账号级别，进行账号级别授权。具体操作，请参见不支持资源组级别授权的操作。

资源组授权的工作原理

您可以使用资源组（Resource Group）对阿里云账号内的资源进行分组管理。例如，为不同的项目创建对应的资源组，并将资源转移到对应的组中，以便集中管理各项目的资源。更多信息，请参见什么是资源组。

在完成资源分组后，您可以为不同的RAM授权主体（RAM用户、RAM用户组或RAM角色）授予指定资源组范围的权限，从而限定这个授权主体只能管理该资源组内的资源。更多信息，请参见资源分组和授权。

这种授权方式的优点有：

  • 权限精细化：确保每个身份能获得最准确的资源访问权限，避免账号下的多个项目的资源混合管理。

  • 良好的扩展性：后续新增资源时，只需将其加入该资源组，RAM身份便会自动获得新资源的相应权限，无需再次授权。

为RAM用户授予资源组级别的权限

下面以RAM用户为例，介绍授予指定资源组内云解析DNS资源权限的操作步骤。

1. 前置步骤

  1. 创建待使用的RAM用户，可参考：创建RAM用户

  2. 创建资源组并将已有资源划分到目标资源组，可参考：创建资源组，资源自动转组及资源手动转组。

2. 进行资源组级别授权

您可以通过以下任一方式进行资源组级别授权。

方式一：在资源管理控制台中授权

通过资源组的权限管理功能为指定 RAM 用户授权。详情操作可参见为RAM身份授予资源组范围的权限。

  • 登录资源组控制台。

  • 在资源组页面，单击目标资源组操作列的权限管理。

  • 在权限管理页签，单击新增授权。

  • 在新增授权面板，设置授权主体和权限策略。

    • 授权主体：选择已有RAM用户。

    • 权限策略：选择系统策略或已创建的自定义策略，参考创建自定义权限策略。

  • 单击确认新增授权。

方式二：在 RAM 控制台中授权

通过RAM控制台为指定 RAM 用户进行资源组级别授权。详细操作可参见为RAM用户授权。

  • 使用阿里云账号（主账号）或RAM管理员登录RAM控制台。

  • 在左侧导航栏，选择身份管理 > 用户。在用户页面，单击目标RAM用户操作列的添加权限。

  • 在新增授权面板，为RAM用户添加权限。

    • 资源范围：选择资源组级别。

    • 授权主体：选择已有 RAM 用户或前面步骤创建的 RAM 用户。

    • 权限策略：选择系统策略或已创建的自定义策略，参考创建自定义权限策略。

  • 单击确认新增授权。

支持资源组的资源类型

云解析DNS支持资源组的资源类型如下表所示：

云服务

云服务代码

资源类型

云解析DNS

alidns

domain : 域名解析
说明

对于暂不支持资源组的资源类型，如有需要，您可以在资源组控制台提交反馈。

image

不支持资源组级别授权的操作

云解析DNS中不支持资源组级别授权的操作（Action）如下：

操作（Action）

操作描述

alidns:AddBatchDomain

-

alidns:AddBatchDomainFromFile

-

alidns:AddBatchRr

-

alidns:AddBatchTempDomains

-

alidns:AddDnsCacheDomain

根据传入参数添加 DNS 权威代理域名。

alidns:AddDnsMonitor

-

alidns:AddDnsTemplate

-

alidns:AddDnsTemplateRecord

-

alidns:AddDohUser

-

alidns:AddDomainGroup

根据传入参数添加域名分组。

alidns:AddGateway

-

alidns:AddGtmRecoveryPlan

新增容灾预案。

alidns:AddRegistrar

-

alidns:AddRegistrarContact

-

alidns:AddRspDomainServerHoldStatusForGateway

-

alidns:AddRspDomainServerHoldStatusForGatewayOte

-

alidns:AddRspEppClient

-

alidns:AddSensitiveName

-

alidns:AddUserProductFeedback

-

alidns:BatchDomainRecordOperate

-

alidns:BindInstanceDomains

绑定付费版DNS域名到实例ID。

alidns:CancelJob

-

alidns:CancelOrder

-

alidns:ChangeBatchDomainGroup

-

alidns:ChangeDomainOfDnsProduct

更换云解析产品绑定的域名。

alidns:ChatAssistantMessage

-

alidns:CheckDomainRecord

-

alidns:CheckEdgeDnsClusterConnection

-

alidns:CheckEdgeDnsClusterDeploymentAppVersion

-

alidns:CheckEdgeDnsDeploymentAppVersion

-

alidns:CheckFusionClientAvailable

-

alidns:CheckGtmInstanceExistence

-

alidns:CheckInstanceAllowSystemAssign

-

alidns:CheckSubDomainRecord4Add

-

alidns:CompleteCommodity

-

alidns:CompleteCommodityWithoutTraffic

-

alidns:CopyGtmConfig

复制GTM配置。

alidns:CreateCloudMonitorTask

-

alidns:CreateEdgeDnsCluster

-

alidns:CreateInstance

-

alidns:CreateMultiCommodityOrder

-

alidns:CreatePtrRecordSet

-

alidns:CreateRenewOrder

-

alidns:CreateRspDomainSuperProhibited

-

alidns:CreateRspDomainSuperProhibitedOte

-

alidns:CreateRspEppClient

-

alidns:CreateRspEppClientOte

-

alidns:CreateRspGateway

-

alidns:CreateRspGatewayClientAuthorizedIp

-

alidns:CreateRspGatewayClientAuthorizedIpOte

-

alidns:CreateRspGatewayOte

-

alidns:CreateRspRegistrar

-

alidns:CreateRspRegistrarContact

-

alidns:CreateRspRegistrarContactOte

-

alidns:CreateRspRegistrarOte

-

alidns:CreateRspReservedName

-

alidns:CreateRspReservedNameOte

-

alidns:CreateRspSensitiveName

-

alidns:CreateRspSensitiveNameOte

-

alidns:CreateRspTldGatewayConfig

-

alidns:CreateRspTldGatewayConfigOte

-

alidns:CreateRspTldMeta

-

alidns:CreateRspTldMetaOte

-

alidns:CreateRspTldSuperProhibited

-

alidns:CreateRspTldSuperProhibitedOte

-

alidns:DeleteAssistantChat

-

alidns:DeleteBatchDomain

-

alidns:DeleteBatchRr

-

alidns:DeleteCloudGtmAddress

根据传入参数删除地址。

alidns:DeleteCloudGtmAddressPool

根据传入参数删除地址池。

alidns:DeleteCloudGtmInstanceConfig

根据传入参数删除GTM 3.0实例配置的接入域名。

alidns:DeleteCloudGtmMonitorTemplate

根据传入参数删除健康探测模板。

alidns:DeleteCloudMonitorTask

-

alidns:DeleteCloudMonitorTasksJob

-

alidns:DeleteDnsMonitor

-

alidns:DeleteDnsTemplate

-

alidns:DeleteDnsTemplateRecord

-

alidns:DeleteDomainGroup

删除域名分组，分组下的域名会被移动到默认分组。

alidns:DeleteEdgeDnsCluster

-

alidns:DeleteFusionClientConfig

-

alidns:DeleteGtmRecoveryPlan

删除容灾预案。

alidns:DeletePtrRecord

-

alidns:DeleteRspDomainSuperProhibited

-

alidns:DeleteRspDomainSuperProhibitedOte

-

alidns:DeleteRspEppClient

-

alidns:DeleteRspEppClientOte

-

alidns:DeleteRspGatewayClientAuthorizedIp

-

alidns:DeleteRspGatewayClientAuthorizedIpOte

-

alidns:DeleteRspRegistrar

-

alidns:DeleteRspRegistrarContact

-

alidns:DeleteRspRegistrarContactOte

-

alidns:DeleteRspRegistrarOte

-

alidns:DeleteRspReservedName

-

alidns:DeleteRspReservedNameOte

-

alidns:DeleteRspSensitiveName

-

alidns:DeleteRspSensitiveNameOte

-

alidns:DeleteRspTldGatewayConfig

-

alidns:DeleteRspTldGatewayConfigOte

-

alidns:DeleteRspTldSuperProhibited

-

alidns:DeleteRspTldSuperProhibitedOte

-

alidns:DescribeAccount

-

alidns:DescribeAlidnsGlobalAlert

-

alidns:DescribeAlidnsInstances

-

alidns:DescribeAlidnsPostBusinessStatus

-

alidns:DescribeAlidnsResolveAnalysisConfig

-

alidns:DescribeBatchLogs

-

alidns:DescribeBatchResultCount

根据任务ID查询其批量操作任务的执行结果，如果任务ID为空，返回最后一次批量操作任务的执行结果。

alidns:DescribeBatchResultDetail

查询批量处理结果的详细信息。

alidns:DescribeBundleRecordTaskResult

-

alidns:DescribeBundleTempDomains

-

alidns:DescribeCanAddMonitorDomainRrs

-

alidns:DescribeCanAddMonitorSubDomainInfo

-

alidns:DescribeChangeLogs

-

alidns:DescribeCloudGtmAddress

根据传入参数获取地址配置信息。

alidns:DescribeCloudGtmAddressPool

根据传入参数获取指定地址池配置信息。

alidns:DescribeCloudGtmAddressPoolReference

根据传入参数获取地址池被实例引用的信息。

alidns:DescribeCloudGtmAddressReference

根据传入参数获取地址被引用的地址池、GTM3.0实例信息。

alidns:DescribeCloudGtmGlobalAlert

-

alidns:DescribeCloudGtmInstanceConfigAlert

获取实例配置的告警配置

alidns:DescribeCloudGtmInstanceConfigFullInfo

获取全局流量管理实例配置的完整信息，包括接入域名、告警通知、地址池、地址详细信息等。

alidns:DescribeCloudGtmMonitorTemplate

根据传入参数获取指定健康探测模板配置。

alidns:DescribeCloudGtmResolveAnalysisConfig

-

alidns:DescribeCloudGtmSummary

-

alidns:DescribeCloudGtmSystemLines

查询GTM支持的系统线路

alidns:DescribeCloudMonitorDetectCountOverview

-

alidns:DescribeCloudMonitorDetectCountSummary

-

alidns:DescribeCloudMonitorDetectLogs

-

alidns:DescribeCloudMonitorGlobalAlertConfig

-

alidns:DescribeCloudMonitorLatestDetectLogOverview

-

alidns:DescribeCloudMonitorLatestDetectLogs

-

alidns:DescribeCloudMonitorTask

-

alidns:DescribeCloudMonitorTaskAlertConfig

-

alidns:DescribeCloudMonitorTaskDetectSummary

-

alidns:DescribeCloudMonitorTaskOverview

-

alidns:DescribeDnsCacheDomains

根据传入参数查询该用户的权威代理域名列表。

alidns:DescribeDnsGtmAddrAttributeInfo

查询地址归属区域。

alidns:DescribeDnsGtmAvailableAlertGroup

获取可设置的报警组。

alidns:DescribeDnsGtmMonitorAvailableConfig

获取 DNS 健康检查可设置的配置。

alidns:DescribeDnsMonitor

-

alidns:DescribeDnsMonitorAvailableNodes

-

alidns:DescribeDnsMonitorTaskConfig

-

alidns:DescribeDnsMonitors

-

alidns:DescribeDnsProductInstance

根据实例ID获取云解析收费版本产品实例的详情信息。

alidns:DescribeDnsProductInstanceSummary

-

alidns:DescribeDnsProductInstances

根据传入参数获取付费版DNS产品实例列表。

alidns:DescribeDnsTemplateInfo

-

alidns:DescribeDnsTemplates

-

alidns:DescribeDnsUserInstancesInfo

-

alidns:DescribeDohAccountStatistics

获取DoH账户请求量统计概览。

alidns:DescribeDohDomainStatistics

获取DoH域名请求量统计概览。

alidns:DescribeDohDomainStatisticsSummary

获取DoH域名的请求量统计列表。

alidns:DescribeDohSdkList

-

alidns:DescribeDohSubDomainStatistics

获取DoH子域名请求量统计。

alidns:DescribeDohSubDomainStatisticsSummary

获取DoH子域名的请求量统计列表。

alidns:DescribeDohUserInfo

获取DoH用户基本信息。

alidns:DescribeDomainBackups

-

alidns:DescribeDomainGroups

根据传入参数获取域名分组的列表。

alidns:DescribeDomainLogs

根据传入参数获取域名的操作日志。

alidns:DescribeDomainResolveStatisticsSummary

查询用户账号下所有付费域名的请求量列表。

alidns:DescribeDomainStatisticsSummary

查询用户账号下所有付费域名的请求量列表。

alidns:DescribeEdgeDnsAppAgentInfo

-

alidns:DescribeEdgeDnsAppLatestVersion

-

alidns:DescribeEdgeDnsClusterFullInfo

-

alidns:DescribeEdgeDnsClusterNodeContainers

-

alidns:DescribeEdgeDnsClusterNodeServiceStatus

-

alidns:DescribeEdgeDnsClusterResource

-

alidns:DescribeEdgeDnsClusterResourceOverview

-

alidns:DescribeEdgeDnsDeployNotFinalStatusTask

-

alidns:DescribeEdgeDnsDeployOptionalIp

-

alidns:DescribeEdgeDnsDeployOptionalVersion

-

alidns:DescribeEdgeDnsDeployTask

-

alidns:DescribeEdgeDnsDeploymentInfo

-

alidns:DescribeEdgeDnsDeploymentStatistics

-

alidns:DescribeEdgeDnsNodeConnectionToken

-

alidns:DescribeEdgeDnsNodeFullInfo

-

alidns:DescribeFusionOnPremisesInstances

-

alidns:DescribeFusionResources

-

alidns:DescribeGtmAvailableAlertGroup

获取GTM实例可用的报警组列表。

alidns:DescribeGtmMonitorAvailableConfig

获取健康检查可设置的配置。

alidns:DescribeGtmRecoveryPlan

获取容灾预案详情。

alidns:DescribeGtmRecoveryPlanAvailableConfig

获取容灾预案可设置的配置。

alidns:DescribeGtmRecoveryPlans

获取容灾预案列表。

alidns:DescribeImportDomainRecordsResult

-

alidns:DescribeImportDomainsResult

-

alidns:DescribeInstanceDomains

获取实例绑定域名列表。

alidns:DescribeInstanceExtendStatus

-

alidns:DescribeInternetDnsLogs

查询解析日志

alidns:DescribeIntranetFirewallProtectionDetail

-

alidns:DescribeIntranetFirewallProtectionDetails

-

alidns:DescribeIntranetFirewallProtectionHistory

-

alidns:DescribeIntranetFirewallProtectionLogs

-

alidns:DescribeIntranetFirewallProtectionOverview

-

alidns:DescribeIntranetFirewallProtectionRankings

-

alidns:DescribeInvalidDomains

-

alidns:DescribeIspFlushCacheInstances

-

alidns:DescribeIspFlushCacheRemainQuota

获取剩余可缓存刷新次数

alidns:DescribeIspFlushCacheTask

获取缓存刷新任务详情

alidns:DescribeIspFlushCacheTasks

-

alidns:DescribeJobOverview

-

alidns:DescribeJobs

-

alidns:DescribePostBusinessServiceStatus

-

alidns:DescribePtrRecordSet

-

alidns:DescribePtrRecords

-

alidns:DescribeRecommendCommodities

-

alidns:DescribeRecursionFirewallProtectionDetail

-

alidns:DescribeRecursionFirewallProtectionDetails

-

alidns:DescribeRecursionFirewallProtectionHistory

-

alidns:DescribeRecursionFirewallProtectionLogs

-

alidns:DescribeRecursionFirewallProtectionOverview

-

alidns:DescribeRecursionFirewallProtectionRankings

-

alidns:DescribeResolveAndOperatorClusterAssociationOverview

-

alidns:DescribeResolveSummary

-

alidns:DescribeRestoreDomainResults

-

alidns:DescribeRestoringDomainTasks

-

alidns:DescribeRspDomainStatus

-

alidns:DescribeRspDomainStatusOte

-

alidns:DescribeRspGateway

-

alidns:DescribeRspGatewayOte

-

alidns:DescribeRspRegistrarForRegistrar

-

alidns:DescribeRspRegistrarForRegistrarOte

-

alidns:DescribeRspRegistrarForRegistry

-

alidns:DescribeRspRegistrarForRegistryOte

-

alidns:DescribeRspTld

-

alidns:DescribeRspTldMeta

-

alidns:DescribeRspTldMetaOte

-

alidns:DescribeRspTldOte

-

alidns:DescribeSiteMonitor

-

alidns:DescribeSiteMonitorIspCityInfos

-

alidns:DescribeSiteMonitorIspInfos

-

alidns:DescribeSlaveDnsDomains

-

alidns:DescribeSubJobs

-

alidns:DescribeSubdomainRecords

-

alidns:DescribeSupportLines

查询云解析支持的所有线路列表。

alidns:DescribeTags

查询已有标签。

alidns:DescribeTransferDomains

根据传入参数获取跨账号转移DNS列表。

alidns:DescribeUserContactInfo

-

alidns:DescribeUserGrayStatus

-

alidns:DescribleMultiCommodityPrices

-

alidns:ExecuteGtmRecoveryPlan

执行容灾预案。

alidns:ExportDomainJob

-

alidns:ExportResolveSummaryJob

-

alidns:FetchFusionFirewallThreatDownloadUrl

-

alidns:FinishEdgeDnsDeployTask

-

alidns:GetMainDomainName

通过输入的参数，获取主域名名称。

alidns:GetTxtRecordForRetrievalDomainName

-

alidns:GetTxtRecordForVerify

生成txt记录。用于域名、子域名找回、添加子域名验证、批量找回等功能。

alidns:ListAlidnsAlertLogs

-

alidns:ListAssistantChat

-

alidns:ListAssistantMessage

-

alidns:ListAssistantQuestionGuide

-

alidns:ListAssociatedResolveClusters

-

alidns:ListAvailableAlertGroups

-

alidns:ListCloudGtmAddressPools

获取地址池列表。

alidns:ListCloudGtmAddresses

根据传入参数获取地址列表。

alidns:ListCloudGtmAlertLogs

获取告警日志列表

alidns:ListCloudGtmAvailableAlertGroups

-

alidns:ListCloudGtmInstanceConfigs

获取实例配置列表，包括接入域名、地址池信息等。

alidns:ListCloudGtmInstances

根据传入参数获取GTM 3.0实例列表。

alidns:ListCloudGtmMonitorNodes

根据传入参数获取健康探测检查探点列表。

alidns:ListCloudGtmMonitorTemplates

根据传入参数获取健康探测模板列表。

alidns:ListCloudMonitorAlertLogs

-

alidns:ListCloudMonitorProbes

-

alidns:ListCloudMonitorTasks

-

alidns:ListEdgeDnsAlertLogs

-

alidns:ListEdgeDnsClusters

-

alidns:ListEdgeDnsNodes

-

alidns:ListEdgeDnsNotifyConfigs

-

alidns:ListEdgeDnsNotifyGatewayConfigs

-

alidns:ListEdgeDnsResolveLogs

-

alidns:ListEppClient

-

alidns:ListRspContacts

-

alidns:ListRspContactsOte

-

alidns:ListRspDomainSuperProhibited

-

alidns:ListRspDomainSuperProhibitedOte

-

alidns:ListRspDomains

-

alidns:ListRspDomainsOte

-

alidns:ListRspEppClient

-

alidns:ListRspEppClientOte

-

alidns:ListRspEppClients

-

alidns:ListRspEppClientsOte

-

alidns:ListRspGateway

-

alidns:ListRspGatewayClientAuthorizedIp

-

alidns:ListRspGatewayClientAuthorizedIpOte

-

alidns:ListRspGatewayOte

-

alidns:ListRspHosts

-

alidns:ListRspHostsOte

-

alidns:ListRspInternalRegistrars

-

alidns:ListRspInternalRegistrarsOte

-

alidns:ListRspOperator

-

alidns:ListRspOperatorOte

-

alidns:ListRspRegistrarContact

-

alidns:ListRspRegistrarContactOte

-

alidns:ListRspRegistrars

-

alidns:ListRspRegistrarsOte

-

alidns:ListRspReservedName

-

alidns:ListRspReservedNameOte

-

alidns:ListRspSensitiveName

-

alidns:ListRspSensitiveNameOte

-

alidns:ListRspTld

-

alidns:ListRspTldGatewayConfig

-

alidns:ListRspTldGatewayConfigOte

-

alidns:ListRspTldOte

-

alidns:ListRspTldSuperProhibited

-

alidns:ListRspTldSuperProhibitedOte

-

alidns:ListTagResources

按照标签查询资源。

alidns:ListTld

-

alidns:ManuallyRetryEdgeDnsClusterDispatchDataJob

-

alidns:OpenPostBusinessService

-

alidns:OperateBatchDomain

进行批量操作以添加或删除域名和解析记录。

alidns:OperateRspRegistration

-

alidns:OperateRspRegistrationOte

-

alidns:OrderPaidNotice

-

alidns:PreviewGtmRecoveryPlan

预览容灾预案。

alidns:QueryAllowRenewPeriodList

-

alidns:QueryDnsMonitorErrorEvent

-

alidns:QueryDnsMonitorFailureRate

-

alidns:QueryDnsMonitorHistory

-

alidns:QueryDnsMonitorLast

-

alidns:QueryDnsMonitorNodeResponseTime

-

alidns:QueryDnsMonitorStatistics

-

alidns:QueryEdgeDnsMonitors

-

alidns:QueryEdgeDnsResolveQps

-

alidns:QueryEdgeDnsTopData

-

alidns:QueryEdgeDnsTopDomain

-

alidns:QueryEdgeDnsTopRCode

-

alidns:QueryInstanceUnpaidOrder

-

alidns:QueryRenewPrice

-

alidns:RecheckInvalidDomain

-

alidns:ReclaimDomain

-

alidns:RefundOrder

-

alidns:RemoveRspDomainServerHoldStatusForGateway

-

alidns:RemoveRspDomainServerHoldStatusForGatewayOte

-

alidns:ReplaceAlidnsResolveAnalysisConfig

-

alidns:ReplaceCloudGtmResolveAnalysisConfig

-

alidns:ReplacePtrRecordSet

-

alidns:ResetBatchResult

-

alidns:ResetImportDomainsResult

-

alidns:ResetRspEppClientPassword

-

alidns:ResetRspEppClientPasswordOTE

-

alidns:RetrieveBatchDomain

-

alidns:RetrieveDomain

执行找回域名操作。

alidns:RollbackGtmRecoveryPlan

回滚容灾预案。

alidns:SaveResolveClustersAssociation

-

alidns:ScanSubdomainRecords

-

alidns:SearchCloudGtmAddressPools

根据传入参数搜索地址池列表。

alidns:SearchCloudGtmAddresses

按照地址名称、备注信息、地址引用的探测模板或地址DI等信息搜索地址列表。

alidns:SearchCloudGtmInstanceConfigs

根据传入参数搜索实例配置列表。

alidns:SearchCloudGtmInstances

根据传入参数搜索实例列表。

alidns:SearchCloudGtmMonitorTemplates

查询健康检查模板列表信息。

alidns:SearchCloudMonitorTasks

-

alidns:SearchEdgeDnsClusters

-

alidns:SearchEdgeDnsNodes

-

alidns:SendVerifyCode

-

alidns:SetCloudGtmInstanceConfigLogSwitch

-

alidns:SetCloudMonitorTaskStatus

-

alidns:SetDomainAuthLogConfig

-

alidns:SetEdgeDnsClusterRecurseEnableStatus

-

alidns:SetInstanceRenewalStatus

-

alidns:SetPtrRecordStatus

-

alidns:SubmitEdgeDnsDeployRetryTask

-

alidns:SubmitEdgeDnsDeployTask

-

alidns:SubmitImportDomainRecordsFile

-

alidns:SubmitIspFlushCacheTask

-

alidns:TagResources

通过进行添加、修改资源的标签。

alidns:TemporaryCancelFusionResource

-

alidns:TransferBatchDomain

-

alidns:UnbindInstanceDomains

根据实例ID解绑付费版DNS的域名。

alidns:UntagResources

进行删除资源的标签。

alidns:UpdateAlidnsGlobalAlert

-

alidns:UpdateAlidnsLineRecordSet

-

alidns:UpdateAlidnsResolveAnalysisConfig

-

alidns:UpdateAssistantChatName

-

alidns:UpdateAssistantMessageFeedback

-

alidns:UpdateBatchRr

-

alidns:UpdateCloudGtmAddressEnableStatus

根据传入参数修改地址启用状态。

alidns:UpdateCloudGtmAddressManualAvailableStatus

根据传入参数修改地址探测异常切换方式。

alidns:UpdateCloudGtmAddressPoolEnableStatus

根据传入参数修改地址池启用状态。

alidns:UpdateCloudGtmAddressPoolRemark

根据传入参数修改地址池备注信息。

alidns:UpdateCloudGtmAddressRemark

通过地址的 ID修改地址备注信息。

alidns:UpdateCloudGtmGlobalAlert

-

alidns:UpdateCloudGtmInstanceConfigBasic

根据传入参数更新GTM3.0 实例全局TTL配置。

alidns:UpdateCloudGtmInstanceConfigRemark

根据传入的参数更新实例备注信息。

alidns:UpdateCloudGtmInstanceName

-

alidns:UpdateCloudGtmMonitorTemplateRemark

-

alidns:UpdateCloudGtmResolveAnalysisConfig

-

alidns:UpdateCloudMonitorGlobalAlertConfig

-

alidns:UpdateCloudMonitorTask

-

alidns:UpdateCloudMonitorTaskAlertConfig

-

alidns:UpdateCloudMonitorTaskRemark

-

alidns:UpdateDnsMonitor

-

alidns:UpdateDnsTemplateName

-

alidns:UpdateDnsTemplateRecord

-

alidns:UpdateDomainGroup

根据传入参数修改域名分组名称。

alidns:UpdateDomainServerHoldStatus

-

alidns:UpdateDomainStatus

-

alidns:UpdateEdgeDnsCluster

-

alidns:UpdateEdgeDnsClusterRecurseRemark

-

alidns:UpdateEdgeDnsNodeName

-

alidns:UpdateEdgeDnsNodeOperationIp

-

alidns:UpdateEdgeDnsNodeRemark

-

alidns:UpdateEdgeDnsNotifyConfig

-

alidns:UpdateEdgeDnsNotifyGatewayConfig

-

alidns:UpdateEdgeDnsSyslogDnsLogNotifyConfig

-

alidns:UpdateFusionClientConfig

-

alidns:UpdateFusionClientNodeEscapeConfig

-

alidns:UpdateFusionFirewallSubscriptionConfig

-

alidns:UpdateGtmRecoveryPlan

修改容灾预案。

alidns:UpdateIspFlushCacheInstanceConfig

-

alidns:UpdatePtrRecordRemark

-

alidns:UpdateRspDomainServerHoldStatus

-

alidns:UpdateRspDomainServerHoldStatusOte

-

alidns:UpdateRspDomainServerProhibitStatus

-

alidns:UpdateRspDomainServerProhibitStatusForGateway

-

alidns:UpdateRspDomainServerProhibitStatusForGatewayOte

-

alidns:UpdateRspDomainServerProhibitStatusOte

-

alidns:UpdateRspDomainStatus

-

alidns:UpdateRspDomainStatusOte

-

alidns:UpdateRspEppClient

-

alidns:UpdateRspEppClientAllowedTlds

-

alidns:UpdateRspEppClientAllowedTldsOte

-

alidns:UpdateRspEppClientGatewayId

-

alidns:UpdateRspEppClientGatewayIdOte

-

alidns:UpdateRspEppClientIpWhiteList

-

alidns:UpdateRspEppClientIpWhiteListOte

-

alidns:UpdateRspEppClientMaxConnection

-

alidns:UpdateRspEppClientMaxConnectionOte

-

alidns:UpdateRspEppClientOte

-

alidns:UpdateRspEppClientRemark

-

alidns:UpdateRspEppClientRemarkOte

-

alidns:UpdateRspEppClientStatus

-

alidns:UpdateRspEppClientStatusOte

-

alidns:UpdateRspEppClientTld

-

alidns:UpdateRspEppClientTldOte

-

alidns:UpdateRspGateway

-

alidns:UpdateRspGatewayClientAuthorizedIp

-

alidns:UpdateRspGatewayClientAuthorizedIpOte

-

alidns:UpdateRspGatewayOte

-

alidns:UpdateRspGatewayStatus

-

alidns:UpdateRspGatewayStatusOte

-

alidns:UpdateRspRegistrar

-

alidns:UpdateRspRegistrarContact

-

alidns:UpdateRspRegistrarContactOte

-

alidns:UpdateRspRegistrarOte

-

alidns:UpdateRspRegistrarStatus

-

alidns:UpdateRspRegistrarStatusOte

-

alidns:UpdateRspReservedName

-

alidns:UpdateRspReservedNameOte

-

alidns:UpdateRspSensitiveName

-

alidns:UpdateRspSensitiveNameOte

-

alidns:UpdateRspTld

-

alidns:UpdateRspTldDisableCommand

-

alidns:UpdateRspTldDisableCommandOte

-

alidns:UpdateRspTldGatewayConfig

-

alidns:UpdateRspTldGatewayConfigOte

-

alidns:UpdateRspTldOte

-

alidns:UpdateRspTldPrice

-

alidns:UpdateRspTldPriceOte

-

alidns:UpdateRspTldStatus

-

alidns:UpdateRspTldStatusOte

-

alidns:UpdateUserProductFeedback

-

alidns:ValidateDomainCanAdd

-

alidns:ValidateVerifyCode

-

alidns:VerifyAccount

-

alidns:VerifyTxtRecord

-

alidns:VerifyTxtRecordForRetrievalDomainName

-

alidns:addDomainRecord

-

alidns:createTldMeta

-

alidns:deleteDomainRecord

-

alidns:null

-

alidns:read

-

alidns:setDomainRecordStatus

-

alidns:update

-

alidns:updateDomainRecord

-

alidns:updateDomainRecordRemark

-

对于不支持资源组授权的操作，授权时资源范围选择资源组级别将无效。如果仍需要RAM用户有上述操作权限，您需要创建自定义权限策略，授权时资源范围选择账号级别。

image.png以下是两个自定义权限策略示例，您可以根据实际需要调整策略内容。

  • 允许不支持资源组级别授权的全部只读操作：Action中列举不支持资源组级别授权的所有只读操作。

    {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "alidns:CheckDomainRecord",
        "alidns:CheckEdgeDnsClusterConnection",
        "alidns:CheckEdgeDnsClusterDeploymentAppVersion",
        "alidns:CheckEdgeDnsDeploymentAppVersion",
        "alidns:CheckFusionClientAvailable",
        "alidns:CheckGtmInstanceExistence",
        "alidns:CheckInstanceAllowSystemAssign",
        "alidns:CheckSubDomainRecord4Add",
        "alidns:DescribeAccount",
        "alidns:DescribeAlidnsGlobalAlert",
        "alidns:DescribeAlidnsInstances",
        "alidns:DescribeAlidnsPostBusinessStatus",
        "alidns:DescribeAlidnsResolveAnalysisConfig",
        "alidns:DescribeBatchLogs",
        "alidns:DescribeBatchResultCount",
        "alidns:DescribeBatchResultDetail",
        "alidns:DescribeBundleRecordTaskResult",
        "alidns:DescribeBundleTempDomains",
        "alidns:DescribeCanAddMonitorDomainRrs",
        "alidns:DescribeCanAddMonitorSubDomainInfo",
        "alidns:DescribeChangeLogs",
        "alidns:DescribeCloudGtmAddress",
        "alidns:DescribeCloudGtmAddressPool",
        "alidns:DescribeCloudGtmAddressPoolReference",
        "alidns:DescribeCloudGtmAddressReference",
        "alidns:DescribeCloudGtmGlobalAlert",
        "alidns:DescribeCloudGtmInstanceConfigAlert",
        "alidns:DescribeCloudGtmInstanceConfigFullInfo",
        "alidns:DescribeCloudGtmMonitorTemplate",
        "alidns:DescribeCloudGtmResolveAnalysisConfig",
        "alidns:DescribeCloudGtmSummary",
        "alidns:DescribeCloudGtmSystemLines",
        "alidns:DescribeCloudMonitorDetectCountOverview",
        "alidns:DescribeCloudMonitorDetectCountSummary",
        "alidns:DescribeCloudMonitorDetectLogs",
        "alidns:DescribeCloudMonitorGlobalAlertConfig",
        "alidns:DescribeCloudMonitorLatestDetectLogOverview",
        "alidns:DescribeCloudMonitorLatestDetectLogs",
        "alidns:DescribeCloudMonitorTask",
        "alidns:DescribeCloudMonitorTaskAlertConfig",
        "alidns:DescribeCloudMonitorTaskDetectSummary",
        "alidns:DescribeCloudMonitorTaskOverview",
        "alidns:DescribeDnsCacheDomains",
        "alidns:DescribeDnsGtmAddrAttributeInfo",
        "alidns:DescribeDnsGtmAvailableAlertGroup",
        "alidns:DescribeDnsGtmMonitorAvailableConfig",
        "alidns:DescribeDnsMonitor",
        "alidns:DescribeDnsMonitorAvailableNodes",
        "alidns:DescribeDnsMonitorTaskConfig",
        "alidns:DescribeDnsMonitors",
        "alidns:DescribeDnsProductInstance",
        "alidns:DescribeDnsProductInstanceSummary",
        "alidns:DescribeDnsProductInstances",
        "alidns:DescribeDnsTemplateInfo",
        "alidns:DescribeDnsTemplates",
        "alidns:DescribeDnsUserInstancesInfo",
        "alidns:DescribeDohAccountStatistics",
        "alidns:DescribeDohDomainStatistics",
        "alidns:DescribeDohDomainStatisticsSummary",
        "alidns:DescribeDohSdkList",
        "alidns:DescribeDohSubDomainStatistics",
        "alidns:DescribeDohSubDomainStatisticsSummary",
        "alidns:DescribeDohUserInfo",
        "alidns:DescribeDomainBackups",
        "alidns:DescribeDomainGroups",
        "alidns:DescribeDomainLogs",
        "alidns:DescribeDomainResolveStatisticsSummary",
        "alidns:DescribeDomainStatisticsSummary",
        "alidns:DescribeEdgeDnsAppAgentInfo",
        "alidns:DescribeEdgeDnsAppLatestVersion",
        "alidns:DescribeEdgeDnsClusterFullInfo",
        "alidns:DescribeEdgeDnsClusterNodeContainers",
        "alidns:DescribeEdgeDnsClusterNodeServiceStatus",
        "alidns:DescribeEdgeDnsClusterResource",
        "alidns:DescribeEdgeDnsClusterResourceOverview",
        "alidns:DescribeEdgeDnsDeployNotFinalStatusTask",
        "alidns:DescribeEdgeDnsDeployOptionalIp",
        "alidns:DescribeEdgeDnsDeployOptionalVersion",
        "alidns:DescribeEdgeDnsDeployTask",
        "alidns:DescribeEdgeDnsDeploymentInfo",
        "alidns:DescribeEdgeDnsDeploymentStatistics",
        "alidns:DescribeEdgeDnsNodeConnectionToken",
        "alidns:DescribeEdgeDnsNodeFullInfo",
        "alidns:DescribeFusionOnPremisesInstances",
        "alidns:DescribeFusionResources",
        "alidns:DescribeGtmAvailableAlertGroup",
        "alidns:DescribeGtmMonitorAvailableConfig",
        "alidns:DescribeGtmRecoveryPlan",
        "alidns:DescribeGtmRecoveryPlanAvailableConfig",
        "alidns:DescribeGtmRecoveryPlans",
        "alidns:DescribeImportDomainRecordsResult",
        "alidns:DescribeImportDomainsResult",
        "alidns:DescribeInstanceDomains",
        "alidns:DescribeInstanceExtendStatus",
        "alidns:DescribeInternetDnsLogs",
        "alidns:DescribeIntranetFirewallProtectionDetail",
        "alidns:DescribeIntranetFirewallProtectionDetails",
        "alidns:DescribeIntranetFirewallProtectionHistory",
        "alidns:DescribeIntranetFirewallProtectionLogs",
        "alidns:DescribeIntranetFirewallProtectionOverview",
        "alidns:DescribeIntranetFirewallProtectionRankings",
        "alidns:DescribeInvalidDomains",
        "alidns:DescribeIspFlushCacheInstances",
        "alidns:DescribeIspFlushCacheRemainQuota",
        "alidns:DescribeIspFlushCacheTask",
        "alidns:DescribeIspFlushCacheTasks",
        "alidns:DescribeJobOverview",
        "alidns:DescribeJobs",
        "alidns:DescribePostBusinessServiceStatus",
        "alidns:DescribePtrRecordSet",
        "alidns:DescribePtrRecords",
        "alidns:DescribeRecommendCommodities",
        "alidns:DescribeRecursionFirewallProtectionDetail",
        "alidns:DescribeRecursionFirewallProtectionDetails",
        "alidns:DescribeRecursionFirewallProtectionHistory",
        "alidns:DescribeRecursionFirewallProtectionLogs",
        "alidns:DescribeRecursionFirewallProtectionOverview",
        "alidns:DescribeRecursionFirewallProtectionRankings",
        "alidns:DescribeResolveAndOperatorClusterAssociationOverview",
        "alidns:DescribeResolveSummary",
        "alidns:DescribeRestoreDomainResults",
        "alidns:DescribeRestoringDomainTasks",
        "alidns:DescribeRspDomainStatus",
        "alidns:DescribeRspDomainStatusOte",
        "alidns:DescribeRspGateway",
        "alidns:DescribeRspGatewayOte",
        "alidns:DescribeRspRegistrarForRegistrar",
        "alidns:DescribeRspRegistrarForRegistrarOte",
        "alidns:DescribeRspRegistrarForRegistry",
        "alidns:DescribeRspRegistrarForRegistryOte",
        "alidns:DescribeRspTld",
        "alidns:DescribeRspTldMeta",
        "alidns:DescribeRspTldMetaOte",
        "alidns:DescribeRspTldOte",
        "alidns:DescribeSiteMonitor",
        "alidns:DescribeSiteMonitorIspCityInfos",
        "alidns:DescribeSiteMonitorIspInfos",
        "alidns:DescribeSlaveDnsDomains",
        "alidns:DescribeSubJobs",
        "alidns:DescribeSubdomainRecords",
        "alidns:DescribeSupportLines",
        "alidns:DescribeTags",
        "alidns:DescribeTransferDomains",
        "alidns:DescribeUserContactInfo",
        "alidns:DescribeUserGrayStatus",
        "alidns:GetMainDomainName",
        "alidns:GetTxtRecordForRetrievalDomainName",
        "alidns:GetTxtRecordForVerify",
        "alidns:ListAlidnsAlertLogs",
        "alidns:ListAssistantChat",
        "alidns:ListAssistantMessage",
        "alidns:ListAssistantQuestionGuide",
        "alidns:ListAssociatedResolveClusters",
        "alidns:ListAvailableAlertGroups",
        "alidns:ListCloudGtmAddressPools",
        "alidns:ListCloudGtmAddresses",
        "alidns:ListCloudGtmAlertLogs",
        "alidns:ListCloudGtmAvailableAlertGroups",
        "alidns:ListCloudGtmInstanceConfigs",
        "alidns:ListCloudGtmInstances",
        "alidns:ListCloudGtmMonitorNodes",
        "alidns:ListCloudGtmMonitorTemplates",
        "alidns:ListCloudMonitorAlertLogs",
        "alidns:ListCloudMonitorProbes",
        "alidns:ListCloudMonitorTasks",
        "alidns:ListEdgeDnsAlertLogs",
        "alidns:ListEdgeDnsClusters",
        "alidns:ListEdgeDnsNodes",
        "alidns:ListEdgeDnsNotifyConfigs",
        "alidns:ListEdgeDnsNotifyGatewayConfigs",
        "alidns:ListEdgeDnsResolveLogs",
        "alidns:ListEppClient",
        "alidns:ListRspContacts",
        "alidns:ListRspContactsOte",
        "alidns:ListRspDomainSuperProhibited",
        "alidns:ListRspDomainSuperProhibitedOte",
        "alidns:ListRspDomains",
        "alidns:ListRspDomainsOte",
        "alidns:ListRspEppClient",
        "alidns:ListRspEppClientOte",
        "alidns:ListRspEppClients",
        "alidns:ListRspEppClientsOte",
        "alidns:ListRspGateway",
        "alidns:ListRspGatewayClientAuthorizedIp",
        "alidns:ListRspGatewayClientAuthorizedIpOte",
        "alidns:ListRspGatewayOte",
        "alidns:ListRspHosts",
        "alidns:ListRspHostsOte",
        "alidns:ListRspInternalRegistrars",
        "alidns:ListRspInternalRegistrarsOte",
        "alidns:ListRspOperator",
        "alidns:ListRspOperatorOte",
        "alidns:ListRspRegistrarContact",
        "alidns:ListRspRegistrarContactOte",
        "alidns:ListRspRegistrars",
        "alidns:ListRspRegistrarsOte",
        "alidns:ListRspReservedName",
        "alidns:ListRspReservedNameOte",
        "alidns:ListRspSensitiveName",
        "alidns:ListRspSensitiveNameOte",
        "alidns:ListRspTld",
        "alidns:ListRspTldGatewayConfig",
        "alidns:ListRspTldGatewayConfigOte",
        "alidns:ListRspTldOte",
        "alidns:ListRspTldSuperProhibited",
        "alidns:ListRspTldSuperProhibitedOte",
        "alidns:ListTagResources",
        "alidns:ListTld",
        "alidns:QueryAllowRenewPeriodList",
        "alidns:QueryDnsMonitorErrorEvent",
        "alidns:QueryDnsMonitorFailureRate",
        "alidns:QueryDnsMonitorHistory",
        "alidns:QueryDnsMonitorLast",
        "alidns:QueryDnsMonitorNodeResponseTime",
        "alidns:QueryDnsMonitorStatistics",
        "alidns:QueryEdgeDnsMonitors",
        "alidns:QueryEdgeDnsResolveQps",
        "alidns:QueryEdgeDnsTopData",
        "alidns:QueryEdgeDnsTopDomain",
        "alidns:QueryEdgeDnsTopRCode",
        "alidns:QueryInstanceUnpaidOrder",
        "alidns:QueryRenewPrice",
        "alidns:SearchCloudGtmAddressPools",
        "alidns:SearchCloudGtmAddresses",
        "alidns:SearchCloudGtmInstanceConfigs",
        "alidns:SearchCloudGtmInstances",
        "alidns:SearchCloudGtmMonitorTemplates",
        "alidns:SearchCloudMonitorTasks",
        "alidns:SearchEdgeDnsClusters",
        "alidns:SearchEdgeDnsNodes",
        "alidns:ValidateDomainCanAdd"
      ],
      "Resource": "*"
    }
  ]
}

  • 允许不支持资源组级别授权的全部操作：Action中列举不支持资源组级别授权的全部操作。

    {
  "Version": "1",
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "alidns:AddBatchDomain",
        "alidns:AddBatchDomainFromFile",
        "alidns:AddBatchRr",
        "alidns:AddBatchTempDomains",
        "alidns:AddDnsCacheDomain",
        "alidns:AddDnsMonitor",
        "alidns:AddDnsTemplate",
        "alidns:AddDnsTemplateRecord",
        "alidns:AddDohUser",
        "alidns:AddDomainGroup",
        "alidns:AddGateway",
        "alidns:AddGtmRecoveryPlan",
        "alidns:AddRegistrar",
        "alidns:AddRegistrarContact",
        "alidns:AddRspDomainServerHoldStatusForGateway",
        "alidns:AddRspDomainServerHoldStatusForGatewayOte",
        "alidns:AddRspEppClient",
        "alidns:AddSensitiveName",
        "alidns:AddUserProductFeedback",
        "alidns:BatchDomainRecordOperate",
        "alidns:BindInstanceDomains",
        "alidns:CancelJob",
        "alidns:CancelOrder",
        "alidns:ChangeBatchDomainGroup",
        "alidns:ChangeDomainOfDnsProduct",
        "alidns:ChatAssistantMessage",
        "alidns:CheckDomainRecord",
        "alidns:CheckEdgeDnsClusterConnection",
        "alidns:CheckEdgeDnsClusterDeploymentAppVersion",
        "alidns:CheckEdgeDnsDeploymentAppVersion",
        "alidns:CheckFusionClientAvailable",
        "alidns:CheckGtmInstanceExistence",
        "alidns:CheckInstanceAllowSystemAssign",
        "alidns:CheckSubDomainRecord4Add",
        "alidns:CompleteCommodity",
        "alidns:CompleteCommodityWithoutTraffic",
        "alidns:CopyGtmConfig",
        "alidns:CreateCloudMonitorTask",
        "alidns:CreateEdgeDnsCluster",
        "alidns:CreateInstance",
        "alidns:CreateMultiCommodityOrder",
        "alidns:CreatePtrRecordSet",
        "alidns:CreateRenewOrder",
        "alidns:CreateRspDomainSuperProhibited",
        "alidns:CreateRspDomainSuperProhibitedOte",
        "alidns:CreateRspEppClient",
        "alidns:CreateRspEppClientOte",
        "alidns:CreateRspGateway",
        "alidns:CreateRspGatewayClientAuthorizedIp",
        "alidns:CreateRspGatewayClientAuthorizedIpOte",
        "alidns:CreateRspGatewayOte",
        "alidns:CreateRspRegistrar",
        "alidns:CreateRspRegistrarContact",
        "alidns:CreateRspRegistrarContactOte",
        "alidns:CreateRspRegistrarOte",
        "alidns:CreateRspReservedName",
        "alidns:CreateRspReservedNameOte",
        "alidns:CreateRspSensitiveName",
        "alidns:CreateRspSensitiveNameOte",
        "alidns:CreateRspTldGatewayConfig",
        "alidns:CreateRspTldGatewayConfigOte",
        "alidns:CreateRspTldMeta",
        "alidns:CreateRspTldMetaOte",
        "alidns:CreateRspTldSuperProhibited",
        "alidns:CreateRspTldSuperProhibitedOte",
        "alidns:DeleteAssistantChat",
        "alidns:DeleteBatchDomain",
        "alidns:DeleteBatchRr",
        "alidns:DeleteCloudGtmAddress",
        "alidns:DeleteCloudGtmAddressPool",
        "alidns:DeleteCloudGtmInstanceConfig",
        "alidns:DeleteCloudGtmMonitorTemplate",
        "alidns:DeleteCloudMonitorTask",
        "alidns:DeleteCloudMonitorTasksJob",
        "alidns:DeleteDnsMonitor",
        "alidns:DeleteDnsTemplate",
        "alidns:DeleteDnsTemplateRecord",
        "alidns:DeleteDomainGroup",
        "alidns:DeleteEdgeDnsCluster",
        "alidns:DeleteFusionClientConfig",
        "alidns:DeleteGtmRecoveryPlan",
        "alidns:DeletePtrRecord",
        "alidns:DeleteRspDomainSuperProhibited",
        "alidns:DeleteRspDomainSuperProhibitedOte",
        "alidns:DeleteRspEppClient",
        "alidns:DeleteRspEppClientOte",
        "alidns:DeleteRspGatewayClientAuthorizedIp",
        "alidns:DeleteRspGatewayClientAuthorizedIpOte",
        "alidns:DeleteRspRegistrar",
        "alidns:DeleteRspRegistrarContact",
        "alidns:DeleteRspRegistrarContactOte",
        "alidns:DeleteRspRegistrarOte",
        "alidns:DeleteRspReservedName",
        "alidns:DeleteRspReservedNameOte",
        "alidns:DeleteRspSensitiveName",
        "alidns:DeleteRspSensitiveNameOte",
        "alidns:DeleteRspTldGatewayConfig",
        "alidns:DeleteRspTldGatewayConfigOte",
        "alidns:DeleteRspTldSuperProhibited",
        "alidns:DeleteRspTldSuperProhibitedOte",
        "alidns:DescribeAccount",
        "alidns:DescribeAlidnsGlobalAlert",
        "alidns:DescribeAlidnsInstances",
        "alidns:DescribeAlidnsPostBusinessStatus",
        "alidns:DescribeAlidnsResolveAnalysisConfig",
        "alidns:DescribeBatchLogs",
        "alidns:DescribeBatchResultCount",
        "alidns:DescribeBatchResultDetail",
        "alidns:DescribeBundleRecordTaskResult",
        "alidns:DescribeBundleTempDomains",
        "alidns:DescribeCanAddMonitorDomainRrs",
        "alidns:DescribeCanAddMonitorSubDomainInfo",
        "alidns:DescribeChangeLogs",
        "alidns:DescribeCloudGtmAddress",
        "alidns:DescribeCloudGtmAddressPool",
        "alidns:DescribeCloudGtmAddressPoolReference",
        "alidns:DescribeCloudGtmAddressReference",
        "alidns:DescribeCloudGtmGlobalAlert",
        "alidns:DescribeCloudGtmInstanceConfigAlert",
        "alidns:DescribeCloudGtmInstanceConfigFullInfo",
        "alidns:DescribeCloudGtmMonitorTemplate",
        "alidns:DescribeCloudGtmResolveAnalysisConfig",
        "alidns:DescribeCloudGtmSummary",
        "alidns:DescribeCloudGtmSystemLines",
        "alidns:DescribeCloudMonitorDetectCountOverview",
        "alidns:DescribeCloudMonitorDetectCountSummary",
        "alidns:DescribeCloudMonitorDetectLogs",
        "alidns:DescribeCloudMonitorGlobalAlertConfig",
        "alidns:DescribeCloudMonitorLatestDetectLogOverview",
        "alidns:DescribeCloudMonitorLatestDetectLogs",
        "alidns:DescribeCloudMonitorTask",
        "alidns:DescribeCloudMonitorTaskAlertConfig",
        "alidns:DescribeCloudMonitorTaskDetectSummary",
        "alidns:DescribeCloudMonitorTaskOverview",
        "alidns:DescribeDnsCacheDomains",
        "alidns:DescribeDnsGtmAddrAttributeInfo",
        "alidns:DescribeDnsGtmAvailableAlertGroup",
        "alidns:DescribeDnsGtmMonitorAvailableConfig",
        "alidns:DescribeDnsMonitor",
        "alidns:DescribeDnsMonitorAvailableNodes",
        "alidns:DescribeDnsMonitorTaskConfig",
        "alidns:DescribeDnsMonitors",
        "alidns:DescribeDnsProductInstance",
        "alidns:DescribeDnsProductInstanceSummary",
        "alidns:DescribeDnsProductInstances",
        "alidns:DescribeDnsTemplateInfo",
        "alidns:DescribeDnsTemplates",
        "alidns:DescribeDnsUserInstancesInfo",
        "alidns:DescribeDohAccountStatistics",
        "alidns:DescribeDohDomainStatistics",
        "alidns:DescribeDohDomainStatisticsSummary",
        "alidns:DescribeDohSdkList",
        "alidns:DescribeDohSubDomainStatistics",
        "alidns:DescribeDohSubDomainStatisticsSummary",
        "alidns:DescribeDohUserInfo",
        "alidns:DescribeDomainBackups",
        "alidns:DescribeDomainGroups",
        "alidns:DescribeDomainLogs",
        "alidns:DescribeDomainResolveStatisticsSummary",
        "alidns:DescribeDomainStatisticsSummary",
        "alidns:DescribeEdgeDnsAppAgentInfo",
        "alidns:DescribeEdgeDnsAppLatestVersion",
        "alidns:DescribeEdgeDnsClusterFullInfo",
        "alidns:DescribeEdgeDnsClusterNodeContainers",
        "alidns:DescribeEdgeDnsClusterNodeServiceStatus",
        "alidns:DescribeEdgeDnsClusterResource",
        "alidns:DescribeEdgeDnsClusterResourceOverview",
        "alidns:DescribeEdgeDnsDeployNotFinalStatusTask",
        "alidns:DescribeEdgeDnsDeployOptionalIp",
        "alidns:DescribeEdgeDnsDeployOptionalVersion",
        "alidns:DescribeEdgeDnsDeployTask",
        "alidns:DescribeEdgeDnsDeploymentInfo",
        "alidns:DescribeEdgeDnsDeploymentStatistics",
        "alidns:DescribeEdgeDnsNodeConnectionToken",
        "alidns:DescribeEdgeDnsNodeFullInfo",
        "alidns:DescribeFusionOnPremisesInstances",
        "alidns:DescribeFusionResources",
        "alidns:DescribeGtmAvailableAlertGroup",
        "alidns:DescribeGtmMonitorAvailableConfig",
        "alidns:DescribeGtmRecoveryPlan",
        "alidns:DescribeGtmRecoveryPlanAvailableConfig",
        "alidns:DescribeGtmRecoveryPlans",
        "alidns:DescribeImportDomainRecordsResult",
        "alidns:DescribeImportDomainsResult",
        "alidns:DescribeInstanceDomains",
        "alidns:DescribeInstanceExtendStatus",
        "alidns:DescribeInternetDnsLogs",
        "alidns:DescribeIntranetFirewallProtectionDetail",
        "alidns:DescribeIntranetFirewallProtectionDetails",
        "alidns:DescribeIntranetFirewallProtectionHistory",
        "alidns:DescribeIntranetFirewallProtectionLogs",
        "alidns:DescribeIntranetFirewallProtectionOverview",
        "alidns:DescribeIntranetFirewallProtectionRankings",
        "alidns:DescribeInvalidDomains",
        "alidns:DescribeIspFlushCacheInstances",
        "alidns:DescribeIspFlushCacheRemainQuota",
        "alidns:DescribeIspFlushCacheTask",
        "alidns:DescribeIspFlushCacheTasks",
        "alidns:DescribeJobOverview",
        "alidns:DescribeJobs",
        "alidns:DescribePostBusinessServiceStatus",
        "alidns:DescribePtrRecordSet",
        "alidns:DescribePtrRecords",
        "alidns:DescribeRecommendCommodities",
        "alidns:DescribeRecursionFirewallProtectionDetail",
        "alidns:DescribeRecursionFirewallProtectionDetails",
        "alidns:DescribeRecursionFirewallProtectionHistory",
        "alidns:DescribeRecursionFirewallProtectionLogs",
        "alidns:DescribeRecursionFirewallProtectionOverview",
        "alidns:DescribeRecursionFirewallProtectionRankings",
        "alidns:DescribeResolveAndOperatorClusterAssociationOverview",
        "alidns:DescribeResolveSummary",
        "alidns:DescribeRestoreDomainResults",
        "alidns:DescribeRestoringDomainTasks",
        "alidns:DescribeRspDomainStatus",
        "alidns:DescribeRspDomainStatusOte",
        "alidns:DescribeRspGateway",
        "alidns:DescribeRspGatewayOte",
        "alidns:DescribeRspRegistrarForRegistrar",
        "alidns:DescribeRspRegistrarForRegistrarOte",
        "alidns:DescribeRspRegistrarForRegistry",
        "alidns:DescribeRspRegistrarForRegistryOte",
        "alidns:DescribeRspTld",
        "alidns:DescribeRspTldMeta",
        "alidns:DescribeRspTldMetaOte",
        "alidns:DescribeRspTldOte",
        "alidns:DescribeSiteMonitor",
        "alidns:DescribeSiteMonitorIspCityInfos",
        "alidns:DescribeSiteMonitorIspInfos",
        "alidns:DescribeSlaveDnsDomains",
        "alidns:DescribeSubJobs",
        "alidns:DescribeSubdomainRecords",
        "alidns:DescribeSupportLines",
        "alidns:DescribeTags",
        "alidns:DescribeTransferDomains",
        "alidns:DescribeUserContactInfo",
        "alidns:DescribeUserGrayStatus",
        "alidns:DescribleMultiCommodityPrices",
        "alidns:ExecuteGtmRecoveryPlan",
        "alidns:ExportDomainJob",
        "alidns:ExportResolveSummaryJob",
        "alidns:FetchFusionFirewallThreatDownloadUrl",
        "alidns:FinishEdgeDnsDeployTask",
        "alidns:GetMainDomainName",
        "alidns:GetTxtRecordForRetrievalDomainName",
        "alidns:GetTxtRecordForVerify",
        "alidns:ListAlidnsAlertLogs",
        "alidns:ListAssistantChat",
        "alidns:ListAssistantMessage",
        "alidns:ListAssistantQuestionGuide",
        "alidns:ListAssociatedResolveClusters",
        "alidns:ListAvailableAlertGroups",
        "alidns:ListCloudGtmAddressPools",
        "alidns:ListCloudGtmAddresses",
        "alidns:ListCloudGtmAlertLogs",
        "alidns:ListCloudGtmAvailableAlertGroups",
        "alidns:ListCloudGtmInstanceConfigs",
        "alidns:ListCloudGtmInstances",
        "alidns:ListCloudGtmMonitorNodes",
        "alidns:ListCloudGtmMonitorTemplates",
        "alidns:ListCloudMonitorAlertLogs",
        "alidns:ListCloudMonitorProbes",
        "alidns:ListCloudMonitorTasks",
        "alidns:ListEdgeDnsAlertLogs",
        "alidns:ListEdgeDnsClusters",
        "alidns:ListEdgeDnsNodes",
        "alidns:ListEdgeDnsNotifyConfigs",
        "alidns:ListEdgeDnsNotifyGatewayConfigs",
        "alidns:ListEdgeDnsResolveLogs",
        "alidns:ListEppClient",
        "alidns:ListRspContacts",
        "alidns:ListRspContactsOte",
        "alidns:ListRspDomainSuperProhibited",
        "alidns:ListRspDomainSuperProhibitedOte",
        "alidns:ListRspDomains",
        "alidns:ListRspDomainsOte",
        "alidns:ListRspEppClient",
        "alidns:ListRspEppClientOte",
        "alidns:ListRspEppClients",
        "alidns:ListRspEppClientsOte",
        "alidns:ListRspGateway",
        "alidns:ListRspGatewayClientAuthorizedIp",
        "alidns:ListRspGatewayClientAuthorizedIpOte",
        "alidns:ListRspGatewayOte",
        "alidns:ListRspHosts",
        "alidns:ListRspHostsOte",
        "alidns:ListRspInternalRegistrars",
        "alidns:ListRspInternalRegistrarsOte",
        "alidns:ListRspOperator",
        "alidns:ListRspOperatorOte",
        "alidns:ListRspRegistrarContact",
        "alidns:ListRspRegistrarContactOte",
        "alidns:ListRspRegistrars",
        "alidns:ListRspRegistrarsOte",
        "alidns:ListRspReservedName",
        "alidns:ListRspReservedNameOte",
        "alidns:ListRspSensitiveName",
        "alidns:ListRspSensitiveNameOte",
        "alidns:ListRspTld",
        "alidns:ListRspTldGatewayConfig",
        "alidns:ListRspTldGatewayConfigOte",
        "alidns:ListRspTldOte",
        "alidns:ListRspTldSuperProhibited",
        "alidns:ListRspTldSuperProhibitedOte",
        "alidns:ListTagResources",
        "alidns:ListTld",
        "alidns:ManuallyRetryEdgeDnsClusterDispatchDataJob",
        "alidns:OpenPostBusinessService",
        "alidns:OperateBatchDomain",
        "alidns:OperateRspRegistration",
        "alidns:OperateRspRegistrationOte",
        "alidns:OrderPaidNotice",
        "alidns:PreviewGtmRecoveryPlan",
        "alidns:QueryAllowRenewPeriodList",
        "alidns:QueryDnsMonitorErrorEvent",
        "alidns:QueryDnsMonitorFailureRate",
        "alidns:QueryDnsMonitorHistory",
        "alidns:QueryDnsMonitorLast",
        "alidns:QueryDnsMonitorNodeResponseTime",
        "alidns:QueryDnsMonitorStatistics",
        "alidns:QueryEdgeDnsMonitors",
        "alidns:QueryEdgeDnsResolveQps",
        "alidns:QueryEdgeDnsTopData",
        "alidns:QueryEdgeDnsTopDomain",
        "alidns:QueryEdgeDnsTopRCode",
        "alidns:QueryInstanceUnpaidOrder",
        "alidns:QueryRenewPrice",
        "alidns:RecheckInvalidDomain",
        "alidns:ReclaimDomain",
        "alidns:RefundOrder",
        "alidns:RemoveRspDomainServerHoldStatusForGateway",
        "alidns:RemoveRspDomainServerHoldStatusForGatewayOte",
        "alidns:ReplaceAlidnsResolveAnalysisConfig",
        "alidns:ReplaceCloudGtmResolveAnalysisConfig",
        "alidns:ReplacePtrRecordSet",
        "alidns:ResetBatchResult",
        "alidns:ResetImportDomainsResult",
        "alidns:ResetRspEppClientPassword",
        "alidns:ResetRspEppClientPasswordOTE",
        "alidns:RetrieveBatchDomain",
        "alidns:RetrieveDomain",
        "alidns:RollbackGtmRecoveryPlan",
        "alidns:SaveResolveClustersAssociation",
        "alidns:ScanSubdomainRecords",
        "alidns:SearchCloudGtmAddressPools",
        "alidns:SearchCloudGtmAddresses",
        "alidns:SearchCloudGtmInstanceConfigs",
        "alidns:SearchCloudGtmInstances",
        "alidns:SearchCloudGtmMonitorTemplates",
        "alidns:SearchCloudMonitorTasks",
        "alidns:SearchEdgeDnsClusters",
        "alidns:SearchEdgeDnsNodes",
        "alidns:SendVerifyCode",
        "alidns:SetCloudGtmInstanceConfigLogSwitch",
        "alidns:SetCloudMonitorTaskStatus",
        "alidns:SetDomainAuthLogConfig",
        "alidns:SetEdgeDnsClusterRecurseEnableStatus",
        "alidns:SetInstanceRenewalStatus",
        "alidns:SetPtrRecordStatus",
        "alidns:SubmitEdgeDnsDeployRetryTask",
        "alidns:SubmitEdgeDnsDeployTask",
        "alidns:SubmitImportDomainRecordsFile",
        "alidns:SubmitIspFlushCacheTask",
        "alidns:TagResources",
        "alidns:TemporaryCancelFusionResource",
        "alidns:TransferBatchDomain",
        "alidns:UnbindInstanceDomains",
        "alidns:UntagResources",
        "alidns:UpdateAlidnsGlobalAlert",
        "alidns:UpdateAlidnsLineRecordSet",
        "alidns:UpdateAlidnsResolveAnalysisConfig",
        "alidns:UpdateAssistantChatName",
        "alidns:UpdateAssistantMessageFeedback",
        "alidns:UpdateBatchRr",
        "alidns:UpdateCloudGtmAddressEnableStatus",
        "alidns:UpdateCloudGtmAddressManualAvailableStatus",
        "alidns:UpdateCloudGtmAddressPoolEnableStatus",
        "alidns:UpdateCloudGtmAddressPoolRemark",
        "alidns:UpdateCloudGtmAddressRemark",
        "alidns:UpdateCloudGtmGlobalAlert",
        "alidns:UpdateCloudGtmInstanceConfigBasic",
        "alidns:UpdateCloudGtmInstanceConfigRemark",
        "alidns:UpdateCloudGtmInstanceName",
        "alidns:UpdateCloudGtmMonitorTemplateRemark",
        "alidns:UpdateCloudGtmResolveAnalysisConfig",
        "alidns:UpdateCloudMonitorGlobalAlertConfig",
        "alidns:UpdateCloudMonitorTask",
        "alidns:UpdateCloudMonitorTaskAlertConfig",
        "alidns:UpdateCloudMonitorTaskRemark",
        "alidns:UpdateDnsMonitor",
        "alidns:UpdateDnsTemplateName",
        "alidns:UpdateDnsTemplateRecord",
        "alidns:UpdateDomainGroup",
        "alidns:UpdateDomainServerHoldStatus",
        "alidns:UpdateDomainStatus",
        "alidns:UpdateEdgeDnsCluster",
        "alidns:UpdateEdgeDnsClusterRecurseRemark",
        "alidns:UpdateEdgeDnsNodeName",
        "alidns:UpdateEdgeDnsNodeOperationIp",
        "alidns:UpdateEdgeDnsNodeRemark",
        "alidns:UpdateEdgeDnsNotifyConfig",
        "alidns:UpdateEdgeDnsNotifyGatewayConfig",
        "alidns:UpdateEdgeDnsSyslogDnsLogNotifyConfig",
        "alidns:UpdateFusionClientConfig",
        "alidns:UpdateFusionClientNodeEscapeConfig",
        "alidns:UpdateFusionFirewallSubscriptionConfig",
        "alidns:UpdateGtmRecoveryPlan",
        "alidns:UpdateIspFlushCacheInstanceConfig",
        "alidns:UpdatePtrRecordRemark",
        "alidns:UpdateRspDomainServerHoldStatus",
        "alidns:UpdateRspDomainServerHoldStatusOte",
        "alidns:UpdateRspDomainServerProhibitStatus",
        "alidns:UpdateRspDomainServerProhibitStatusForGateway",
        "alidns:UpdateRspDomainServerProhibitStatusForGatewayOte",
        "alidns:UpdateRspDomainServerProhibitStatusOte",
        "alidns:UpdateRspDomainStatus",
        "alidns:UpdateRspDomainStatusOte",
        "alidns:UpdateRspEppClient",
        "alidns:UpdateRspEppClientAllowedTlds",
        "alidns:UpdateRspEppClientAllowedTldsOte",
        "alidns:UpdateRspEppClientGatewayId",
        "alidns:UpdateRspEppClientGatewayIdOte",
        "alidns:UpdateRspEppClientIpWhiteList",
        "alidns:UpdateRspEppClientIpWhiteListOte",
        "alidns:UpdateRspEppClientMaxConnection",
        "alidns:UpdateRspEppClientMaxConnectionOte",
        "alidns:UpdateRspEppClientOte",
        "alidns:UpdateRspEppClientRemark",
        "alidns:UpdateRspEppClientRemarkOte",
        "alidns:UpdateRspEppClientStatus",
        "alidns:UpdateRspEppClientStatusOte",
        "alidns:UpdateRspEppClientTld",
        "alidns:UpdateRspEppClientTldOte",
        "alidns:UpdateRspGateway",
        "alidns:UpdateRspGatewayClientAuthorizedIp",
        "alidns:UpdateRspGatewayClientAuthorizedIpOte",
        "alidns:UpdateRspGatewayOte",
        "alidns:UpdateRspGatewayStatus",
        "alidns:UpdateRspGatewayStatusOte",
        "alidns:UpdateRspRegistrar",
        "alidns:UpdateRspRegistrarContact",
        "alidns:UpdateRspRegistrarContactOte",
        "alidns:UpdateRspRegistrarOte",
        "alidns:UpdateRspRegistrarStatus",
        "alidns:UpdateRspRegistrarStatusOte",
        "alidns:UpdateRspReservedName",
        "alidns:UpdateRspReservedNameOte",
        "alidns:UpdateRspSensitiveName",
        "alidns:UpdateRspSensitiveNameOte",
        "alidns:UpdateRspTld",
        "alidns:UpdateRspTldDisableCommand",
        "alidns:UpdateRspTldDisableCommandOte",
        "alidns:UpdateRspTldGatewayConfig",
        "alidns:UpdateRspTldGatewayConfigOte",
        "alidns:UpdateRspTldOte",
        "alidns:UpdateRspTldPrice",
        "alidns:UpdateRspTldPriceOte",
        "alidns:UpdateRspTldStatus",
        "alidns:UpdateRspTldStatusOte",
        "alidns:UpdateUserProductFeedback",
        "alidns:ValidateDomainCanAdd",
        "alidns:ValidateVerifyCode",
        "alidns:VerifyAccount",
        "alidns:VerifyTxtRecord",
        "alidns:VerifyTxtRecordForRetrievalDomainName",
        "alidns:addDomainRecord",
        "alidns:createTldMeta",
        "alidns:deleteDomainRecord",
        "alidns:null",
        "alidns:read",
        "alidns:setDomainRecordStatus",
        "alidns:update",
        "alidns:updateDomainRecord",
        "alidns:updateDomainRecordRemark"
      ],
      "Resource": "*"
    }
  ]
}
重要

获得账号级别权限的RAM用户或RAM角色，能够操作整个账号范围内的相关资源。请务必确认所授予的权限是否符合预期，遵从最小授权原则谨慎分配权限。

常见问题

如何查看当前资源属于哪个资源组？

  • 方式一：单击资源名称，进入资源的详情页面，即可查看到当前资源的资源组。

  • 方式二：登录资源管理控制台，单击资源中心 > 资源搜索，在左侧选择目标资源所属账号（默认为当前账号），通过筛选条件定位目标资源，即可查看其所属资源组。

如何查看当前产品在某个资源组下的所有资源？

  • 方式一：登录资源管理控制台，单击资源中心 > 资源搜索，然后在左侧的资源所属账号（默认为当前账号）下选择单击目标资源组名称，最后在右侧的选择资源类型中选择当前产品，即可查看当前产品在某个资源组下的所有资源。

  • 方式二：登录资源管理控制台，单击资源组 > 资源组，然后找到目标资源组，单击其所在行的操作列下的资源管理，最后在资源管理页面上方的产品下拉框中选择当前产品，即可查看当前产品在某个资源组下的所有资源。

如何批量修改多个资源的资源组？

登录资源管理控制台，单击资源组 > 资源组，在目标资源组所在行的操作列下，单击资源管理以进入资源管理页面。通过筛选条件定位多个目标资源，批量勾选第一列的复选框后单击下方转移资源组，并按页面提示完成资源组修改。

上一篇：内网域名解析（PrivateZone）自定义权限策略参考下一篇：开发参考