授权信息

访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 云原生大数据计算服务 MaxCompute 为 RAM 权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。 云原生大数据计算服务 MaxCompute 的 RAM 代码(RamCode)为 odps,maxcompute ,支持的授权粒度为 资源级

权限策略通用结构

权限策略支持 JSON 格式,其通用结构如下:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

各字段含义如下:

  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。

  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)

  • Resource:受操作影响的具体对象,您可以使用资源 ARN 来描述指定资源。具体信息,请参见资源(Resource)

  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)

    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素

    • Condition_key:条件关键字。

    • Condition_value:条件关键字对应的值。

操作(Action)

下表是云原生大数据计算服务 MaxCompute定义的操作,这些操作可以在 RAM 权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:

  • 操作:是指具体的权限点。

  • API:是指操作对应的 API 接口。

  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。

  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:

    • 对于必选的资源类型,用前面加 * 表示。

    • 对于不支持资源级授权的操作,用全部资源表示。

  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字

  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。

操作

API

访问级别

资源类型

条件关键字

关联操作

odps:ListProjectUsers ListProjectUsers get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListDisasterRecoveryTables ListDisasterRecoveryTables none

*全部资源

*

odps:ListNotebookInstances ListNotebookInstances list

*全部资源

*

odps:UpdateQuotaSchedule UpdateComputeQuotaSchedule update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:ListMaterializedViews ListMaterializedViews list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:ListUsersByRole AsyncListUsersByRole list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:DeleteQuotaPlan DeleteQuotaPlan delete

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:QueryTunnelMetricDetail QueryTunnelMetricDetail list

*Tunnel

acs:odps:{#regionId}:{#accountId}:tunnel/{#metric}

odps:ListQuotaRoutingRules ListQuotaRoutingRules list

*全部资源

*

odps:GetEcsQuotaUsage GetEcsQuotaUsage get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#nickName}

odps:GetQuota GetQuota get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetMmsPartition GetMmsPartition get

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetTenantRolePolicy GetTenantRolePolicy get

*全部资源

*

odps:CreateQuotaPlan CreateQuotaPlan create

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetMmsSpeed GetSpeed get

*全部资源

*

odps:ListQuotaTimers ListTunnelQuotaTimer list

*全部资源

*

odps:StartNotebookInstance StartNotebookInstance update

*全部资源

*

odps:UpdateRole UpdateRole update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:ListStoragePartitionsInfo ListStoragePartitionsInfo get

*Storage

acs:odps:{#regionId}:{#accountId}:storage/{#project}

odps:CreateQuota CreateQuota create

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/*

odps:ListNotebookStorage ListNotebookStorage list

*全部资源

*

odps:GetTaskType GetTaskType none

*全部资源

*

odps:GetRoleAclOnObject GetRoleAclOnObject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdatePackage UpdatePackage update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetJobLogView GetJobLogView get

*Job

acs:odps:{#regionId}:{#accountId}:job/{#instanceId}

odps:GetQuotaScheduleEffectAnalysisWithProjects GetQuotaScheduleEffectAnalysisWithProjects get

*全部资源

*

odps:GetQuotaPlan GetQuotaPlan get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:ListMmsTables ListMmsTables list

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:CreateMmsAgent CreateMmsAgent create

*全部资源

*

odps:ListCrossRegionReplications ListCrossRegionReplications list

*全部资源

*

odps:GetStorageSuggestionSummaryByProject GetStorageSuggestionSummaryByProject get

*Storage

acs:odps:{#regionId}:{#accountId}:storage/{#project}

odps:CreateNotebookStorage CreateNotebookStorage create

*全部资源

*

odps:UpdateMmsTask UpdateMmsTask update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:UpdateUsersToRole UpdateUsersToRole update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:OperateOdpsCatalog OperateOdpsCatalog none

*全部资源

*

odps:UpdateForeignServer UpdateForeignServer update

*ForeignServer

acs:odps:{#regionId}:{#accountId}:foreignservers/{#foreignServerName}

odps:ResetMmsDataSource ResetMmsDataSource update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:QueryStorageMetric QueryStorageMetric list

*Storage

acs:odps:{#regionId}:{#accountId}:storage/{#metric}

odps:UpdateQuotaTimers UpdateTunnelQuotaTimer update

*全部资源

*

odps:ListMmsAgents ListMmsAgents list

*全部资源

*

odps:GetMmsTask GetMmsTask get

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:UpdateQuotaSchedule UpdateQuotaSchedule update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetAutoMvUtilityTrendByProject GetAutoMvUtilityTrendByProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetExternalProject GetExternalProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:DeleteProject DeleteProject delete

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListTenantObjectBindings ListTenantObjectBindings list

*全部资源

*

odps:ListQuotas ListQuotas get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/*

odps:ListOutboundInternetAddress ListOutboundInternetAddress list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:CreateQuotaPlan CreateComputeQuotaPlan create

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:RemoveTenantUsers RemoveTenantUsers

*全部资源

*

odps:GetProjectMvRecommendation GetProjectMvRecommendation get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:ListUserPermissionsAsStringByProject ListUserPermissionsAsStringByProject list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetOperationHistory GetOperationHistory none

*全部资源

*

odps:ListSchemas ListSchemas list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListUsersInfoByProject ListUsersInfoByProject list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateQuotaTimers UpdateQuotaTimers update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetAutoClusterSuggestion GetAutoClusterSuggestion get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetMmsJob GetMmsJob get

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:CreateProject CreateProject create

*Project

acs:odps:{#regionId}:{#accountId}:project/*

odps:Encryption

odps:ExistGray ExistGray get

*全部资源

*

odps:ListTableSlotDetail ListTableSlotDetail get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#nickName}

odps:GetQuotaModel GetQuotaModel get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#nickName}

odps:DeleteCrossRegionReplication DeleteCrossRegionReplication delete

*全部资源

*

odps:ListMmsFetchMetadataJobLogs ListMmsFetchMetadataJobLogs list

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:CreateDisasterRecovery CreateDisasterRecovery create

*全部资源

*

odps:GetMmsDataSource GetMmsDataSource get

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetErrorMsg GetErrorMsg none

*全部资源

*

odps:GetAutoMvDetail GetAutoMvDetail get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetJobAnalyzeQuotaUsage GetJobAnalyzeQuotaUsage get

*Job

acs:odps:{#regionId}:{#accountId}:job/{#instanceId}

odps:DeleteQuotaPlan DeleteComputeQuotaPlan delete

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetQuotaScheduleSuggestionWithProjects GetQuotaScheduleSuggestionWithProjects get

*全部资源

*

odps:CreateMaterializedView CreateMaterializedView create

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:CreateQuotaHistoryRequestAnalysis CreateQuotaHistoryRequestAnalysis create

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:ListNotebookTemplates ListNotebookTemplates list

*全部资源

*

odps:GetMaterializedView GetMaterializedView get

*全部资源

*

odps:CreateRole CreateRole create

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:CreateQuotaScheduleSuggestion CreateQuotaScheduleSuggestion create

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:DeletePayAsYouGoUserResource DeletePayAsYouGoUserResource delete

*全部资源

*

odps:ListMmsPartitions ListMmsPartitions list

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:SumStorageMetricsByType SumStorageMetricsByType

*全部资源

*

odps:ListAutoMv ListAutoMv list

*全部资源

*

odps:GetQuotaPlan GetComputeQuotaPlan get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:ListTagResources ListTagResources list

*全部资源

*

odps:GetEffectivePlan GetComputeEffectivePlan get

*QuotaPlan

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetMvRecommendationByProject GetMvRecommendationByProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:DeletePackage DeletePackage delete

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetJobCount GetJobCount get

*全部资源

*

odps:ListCrossRegionRepPartitions ListCrossRegionRepPartitions none

*全部资源

*

odps:ListUsersByRole ListUsersByRole list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListJobInfos ListJobInfos list

*全部资源

*

odps:GetTableInfo GetTableInfo get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateMmsTables UpdateMmsTables update

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListJobSnapshotInfos ListJobSnapshotInfos list

*全部资源

*

odps:GetQuotaHistoryRequestAnalysisWithProjects GetQuotaHistoryRequestAnalysisWithProjects get

*全部资源

*

odps:GetImage GetImage get

*Image

acs:odps:{#regionId}:{#accountId}:image/{#name}

odps:GetCrossRegionReplicationTrends GetCrossRegionReplicationTrends none

*全部资源

*

odps:UpdateProjectIpWhiteList UpdateProjectIpWhiteList update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetStorageSuggestionByProject GetStorageSuggestionByProject get

*Storage

acs:odps:{#regionId}:{#accountId}:storage/{#project}

odps:RemoveQuotaRoutingRule RemoveQuotaRoutingRule delete

*QuotaRoutingRule

acs:odps:{#regionId}:{#accountId}:quotas/{#quotaPath}

odps:GetProject GetProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetPeriodicTask GetPeriodicTask get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetAutoClusterUtility GetAutoClusterUtility get

*全部资源

*

odps:UpdateMaterializedView UpdateMaterializedView update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:GetProject ListUsersByRoleWithRam list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListAutoClusterSuggestionJobInfo ListAutoClusterSuggestionJobInfo list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetTableIpAccessInfoTopK GetTableIpAccessInfoTopK get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#nickName}

odps:GetAutoClusterEstimatedUtilityByProject GetAutoClusterEstimatedUtilityByProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateTenantRole UpdateTenantRole

*全部资源

*

odps:RemoveImage RemoveImage delete

*Image

acs:odps:{#regionId}:{#accountId}:image/{#name}

odps:ListImages ListImages list

*全部资源

*

odps:ListInstances ListInstances list

*全部资源

*

odps:GetQuotaRoutingRule GetQuotaRoutingRule get

*QuotaRoutingRule

acs:odps:{#regionId}:{#accountId}:quotas/{#quotaPath}

odps:GetMvRecommendationsUtilityByProject GetMvRecommendationsUtilityByProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ChatSse ChatSse get

*全部资源

*

odps:ListLivyServer ListLivyServer list

*全部资源

*

odps:GetFuxiSensor GetFuxiSensor none

*全部资源

*

odps:UpdateMmsPartitions UpdateMmsPartitions none

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetNetworkLink GetNetworkLink get

*NetworkLink

acs:odps:{#regionId}:{#accountId}:networklink/{#networkLinkName}

odps:ListForeignServers ListForeignServers list

*全部资源

*

odps:GetJobResourceUsage GetJobResourceUsage list

*全部资源

*

odps:GetMaterializedViewsUtilityByProject GetMaterializedViewsUtilityByProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetQuotaScheduleEffectAnalysis GetQuotaScheduleEffectAnalysis get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:QueryQuotaMetric QueryQuotaMetric list

*Quota

acs:odps:{#regionId}:{#accountId}:quota/{#metric}

odps:ListUserPermissionsByProject ListUserPermissionsByProject list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:CreateMmsTaskLog CreateMmsTaskLog create

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:UpdateQuotaRoutingRule UpdateQuotaRoutingRule update

*QuotaRoutingRule

acs:odps:{#regionId}:{#accountId}:quotas/{#quotaPath}

odps:ListMmsTasks ListMmsTasks list

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListDisasterRecoveries ListDisasterRecoveries list

*全部资源

*

odps:ListSimilarJobInfos ListSimilarJobInfos list

*全部资源

*

odps:SumBills SumBills

*全部资源

*

odps:UpdateMmsPartition UpdateMmsPartition none

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetMvRecommendation GetMvRecommendation list

*全部资源

*

odps:ListQuotaRecentlyActiveProjects ListQuotaRecentlyActiveProjects list

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:ListQuotasPlans ListQuotasPlans get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:ListMvRecommendations ListMvRecommendations list

*全部资源

*

odps:ApplyComputeQuotaPlan ApplyComputeQuotaPlan update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:UpdateTenantRolePolicy UpdateTenantRolePolicy

*全部资源

*

odps:CreateQuotaHistoryRequestAnalysisWithProjects CreateQuotaHistoryRequestAnalysisWithProjects create

*全部资源

*

odps:GetTenant GetTenant get

*全部资源

*

odps:SumStorageMetricsByDate SumStorageMetricsByDate

*全部资源

*

odps:ListMvRecommendationJobInfo ListMvRecommendationJobInfo list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:UpdateMmsDb UpdateMmsDb update

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetStorageSuggestionSummary GetStorageSuggestionSummary list

*全部资源

*

odps:CheckRamRole CheckRamRole get

*全部资源

*

odps:CreateQuotaRoutingRule CreateQuotaRoutingRule create

*全部资源

*

odps:GetMmsTable GetMmsTable get

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetNotebookInstance GetNotebookInstance get

*全部资源

*

odps:StartMmsTask StartMmsTask update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:UpdateOutboundInternetAddress UpdateOutboundInternetAddress update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:CreatePackage CreatePackage create

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetResourceInfo GetResourceInfo get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:DeleteSchema DeleteSchema delete

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListProjectMvRecommendations ListProjectMvRecommendations list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:SaveLogview SaveLogview none

*全部资源

*

odps:DeleteDisasterRecovery DeleteDisasterRecovery delete

*全部资源

*

odps:UpdateMmsAsyncTask UpdateMmsAsyncTask update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:DeleteNotebookTemplate DeleteNotebookTemplate delete

*全部资源

*

odps:CreateMmsDataSource CreateMmsDataSource create

*全部资源

*

odps:ListAvailableReplicationRegions ListAvailableReplicationRegions none

*全部资源

*

odps:UpdateSubQuotas UpdateComputeSubQuota update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:CreateSchema CreateSchema create

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListTenantRoles ListTenantRoles

*全部资源

*

odps:RemoveTenantRole RemoveTenantRole

*全部资源

*

odps:CreateGray CreateGray create

*全部资源

*

odps:DeleteMmsDataSource DeleteMmsDataSource delete

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetMetric GetMetric get

*Metric

acs:odps:{#regionId}:{#accountId}:metric/{#category}

odps:UpdateProjectSecurity UpdateProjectSecurity update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:DeleteMaterializedView DeleteMaterializedView delete

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:GetFunctionInfo GetFunctionInfo get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:DeleteForeignServer DeleteForeignServer delete

*ForeignServer

acs:odps:{#regionId}:{#accountId}:foreignservers/{#foreignServerName}

odps:GetMvRecommendationsUtility GetMvRecommendationsUtility get

*全部资源

*

odps:ListComputeMetricsByInstance ListComputeMetricsByInstance list

*全部资源

*

odps:GetAclAuthInfo GetAclAuthInfo get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:SumComputeMetricsByRecord SumComputeMetricsByRecord

*全部资源

*

odps:StopNotebookInstance StopNotebookInstance update

*全部资源

*

odps:GetExistUserResourceRegion GetExistUserResourceRegion get

*全部资源

*

odps:GetMaterializedViewStatus GetMaterializedViewStatus get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:GetQuotaHistoryRequestAnalysis GetQuotaHistoryRequestAnalysis get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetMmsAgent GetMmsAgent get

*全部资源

*

odps:ListProjects ListProjects list

Project

acs:odps:{#regionId}:{#accountId}:projects/*

odps:KillJobs KillJobs update

*全部资源

*

odps:UpdateTenantObjectBindings UpdateTenantObjectBindings update

*全部资源

*

odps:GetStorageSuggestionEstimateInfo GetStorageSuggestionEstimateInfo list

*全部资源

*

odps:PreviewTable PreviewTable none

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:SumDailyBillsByItem SumDailyBillsByItem

*全部资源

*

odps:DeleteExternalProject DeleteExternalProject delete

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:CreateMmsJob CreateMmsJob create

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetDisasterRecovery GetDisasterRecovery get

*全部资源

*

odps:UpdateUsersToSuperAdmin UpdateUsersToSuperAdmin

*全部资源

*

odps:ListMmsJobs ListMmsJobs list

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:StartMmsJob StartMmsJob update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetAutoClusterEstimatedUtility GetAutoClusterEstimatedUtility get

*全部资源

*

odps:GetJobAnalyzeQuotaDistribution GetJobAnalyzeQuotaDistribution get

*Job

acs:odps:{#regionId}:{#accountId}:job/{#quotaNickname}

odps:GetEffectivePlan GetEffectivePlan get

*全部资源

*

odps:GetSQLJobDiagnosis GetSQLJobDiagnosis none

*全部资源

*

odps:UpdateSubQuotas UpdateSubQuotas update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetMmsAuthFile GetMmsAuthFile get

*全部资源

*

odps:ListDisasterRecoveryAz ListDisasterRecoveryAz none

*全部资源

*

odps:RemoveNetworkLink RemoveNetworkLink delete

*NetworkLink

acs:odps:{#regionId}:{#accountId}:networklink/{#networkLinkName}

odps:CheckTunnelAdditional CheckTunnelAdditional get

*全部资源

*

odps:GetRoleAcl GetRoleAcl get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetStorageSizeSummary GetStorageSizeSummary get

*全部资源

*

odps:GetRunningJobs GetRunningJobs list

*全部资源

*

odps:DeleteMmsJob DeleteMmsJob delete

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListFunctions ListFunctions list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateProjectBasicMeta UpdateProjectBasicMeta update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListAutoClusterInfoByProject ListAutoClusterInfoByProject list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListAutoMvByProject ListAutoMvByProject list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListComputeMetricsBySignature ListComputeMetricsBySignature

*全部资源

*

odps:UpdateQuotaPlan UpdateQuotaPlan update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetSubStatusHistory GetSubStatusHistory none

*全部资源

*

odps:GetMmsProgress GetProgress get

*全部资源

*

odps:UpdateMmsDataSource UpdateMmsDataSource update

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetTenantSetting GetTenantSetting get

*全部资源

*

odps:GetMaterializedViewsUtility GetMaterializedViewsUtility get

*全部资源

*

odps:GetTableAccessInfo GetTableAccessInfo get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#nickName}

odps:SumComputeMetricsByUsage SumComputeMetricsByUsage

*全部资源

*

odps:LivyProxy LivyProxy none

*全部资源

*

odps:GetMmsDb GetMmsDb get

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetQuotaScheduleSuggestion GetQuotaScheduleSuggestion get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:StopMmsJob StopMmsJob update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ApplyAutoCluster ApplyAutoCluster update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListMaterializedViewJobInfo ListMaterializedViewJobInfo list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:GetStorageSummaryCompared GetStorageSummaryCompared get

*全部资源

*

odps:ListAutoClusterInfo ListAutoClusterInfo list

*全部资源

*

odps:GetUserInfoByProject GetUserInfoByProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListTablePartitions ListTablePartitions list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetJobInfo GetJobInfo get

*Job

acs:odps:{#regionId}:{#accountId}:job/{#instanceId}

odps:DeleteAsyncTask DeleteAsyncTask delete

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListTopJobInfo ListTopJobInfo list

*全部资源

*

odps:ListPeriodicTasks ListPeriodicTasks list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:AddTenantUsers AddTenantUsers

*全部资源

*

odps:GetQuotaUsage GetQuotaUsage get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#nickName}

odps:ListRoles ListRoles list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListTenantUsers ListTenantUsers list

*全部资源

*

odps:ListAutoClusterSuggestion ListAutoClusterSuggestion list

*全部资源

*

odps:DeleteRole DeleteRole delete

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#projectName}

odps:RetryMmsTask RetryMmsTask update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:UpdateTenantRolesToUser UpdateTenantRolesToUser update

*全部资源

*

odps:GetLivyServer GetLivyServer get

*全部资源

*

odps:CreateTenantRole CreateTenantRole

*全部资源

*

odps:GetTunnelThroughputSummary GetTunnelThroughputSummary get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#nickName}

odps:UpdateMmsTable UpdateMmsTable update

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListMmsDataSources ListMmsDataSources list

*全部资源

*

odps:ListAutoMvProjects ListAutoMvProjects list

*全部资源

*

odps:AddMyFocusResource AddMyFocusResource create

*全部资源

*

odps:GetStorageAmountSummary GetStorageAmountSummary get

*全部资源

*

odps:GetMmsFetchMetadataJob GetMmsFetchMetadataJob get

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetAutoClusterUtilityByProject GetAutoClusterUtilityByProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:AddImage AddImage create

*全部资源

*

odps:UpdateQuotaPlan UpdateComputeQuotaPlan update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:TriggerSQLJobDiagnosis TriggerSQLJobDiagnosis none

*全部资源

*

odps:ListTables ListTables list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:QueryQuota QueryQuota get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetForeignServer GetForeignServer get

*ForeignServer

acs:odps:{#regionId}:{#accountId}:foreignservers/{#foreignServerName}

odps:GetJobSummaryByPreCompute GetJobSummaryByPreCompute list

*全部资源

*

odps:CreateCrossRegionReplication CreateCrossRegionReplication create

*全部资源

*

odps:GetStorageSuggestion GetStorageSuggestion list

*全部资源

*

odps:GetAutoMvUtility GetAutoMvUtility get

*全部资源

*

odps:UpdateTenantSetting UpdateTenantSetting update

*全部资源

*

odps:MessageInfo MessageInfo none

*全部资源

*

odps:GetDiagnosisCount GetDiagnosisCount none

*全部资源

*

odps:UpdateAutoMvProject UpdateAutoMvProject update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateProjectDefaultQuota UpdateProjectDefaultQuota update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:CreateMmsAuthFile CreateMmsAuthFile create

*全部资源

*

odps:UpdateUsersToAdmin UpdateUsersToAdmin update

*全部资源

*

odps:CreateSession CreateSession create

*全部资源

*

odps:CreateNotebookInstance CreateNotebookInstance create

*全部资源

*

odps:RetryMmsJob RetryMmsJob update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListResourcePackage ListResourcePackage list

*全部资源

*

odps:ListAutoClusterJobInfo ListAutoClusterJobInfo list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:SwitchDrQuotaCluster SwitchDrQuotaCluster none

*全部资源

*

odps:ListMvRecommendationsByProject ListMvRecommendationsByProject list

*全部资源

*

odps:ListQuotaTimers ListQuotaTimers list

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:GetAutoMvUtilityTrend GetAutoMvUtilityTrend get

*全部资源

*

odps:ListUserResource ListUserResource list

*全部资源

*

odps:SwitchCrossRegionRep SwitchCrossRegionReplication none

*全部资源

*

odps:GetQuotaSchedule GetQuotaSchedule get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:UpdateProjectTrustedProjects UpdateProjectTrustedProjects update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListMmsDbs ListMmsDbs list

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListVwQuotaInfos ListVwQuotaInfos list

*全部资源

*

odps:UpdateComputePayAsYouGoQuota UpdateComputePayAsYouGoQuota update

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:UntagResources UntagResources none

*全部资源

*

odps:GetAsyncJobResult GetAsyncJobResult get

*全部资源

*

odps:GetQuotaSchedule GetComputeQuotaSchedule get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:CreateQuotaScheduleSuggestionWithProjects CreateQuotaScheduleSuggestionWithProjects create

*全部资源

*

odps:ListCrossRegionRepTables ListCrossRegionRepTables none

*全部资源

*

odps:ListJobMetric ListJobMetric list

*全部资源

*

odps:ListMmsDataSourceActions ListMmsDataSourceActions list

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:CreateNotebookTemplate CreateNotebookTemplate create

*全部资源

*

odps:CreateMmsFetchMetadataJob CreateMmsFetchMetadataJob create

*Project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:CreateExternalProject CreateExternalProject create

*全部资源

*

odps:GetPackage GetPackage get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateNotebookTemplate UpdateNotebookTemplate update

*全部资源

*

odps:StopMmsTask StopMmsTask update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListQuotasPlans ListComputeQuotaPlan list

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:TagResources TagResources none

*全部资源

*

odps:ListAllTenantRoles ListAllTenantRoles list

*全部资源

*

odps:ListExternalProject ListExternalProject list

*全部资源

*

odps:GetTableAccessInfoTopK GetTableAccessInfoTopK get

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#nickName}

odps:ListTenantObjectBindings ListTenantObjectBindingsByAsync list

*全部资源

*

odps:DeleteNotebookInstance DeleteNotebookInstance delete

*全部资源

*

odps:ListNetworkLinks ListNetworkLinks list

*全部资源

*

odps:GetTrustedProjects GetTrustedProjects get

Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:CreateNetworkLink CreateNetworkLink create

*全部资源

*

odps:CreateQuotaScheduleEffectAnalysis CreateQuotaScheduleEffectAnalysis create

*Quota

acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}

odps:SumBillsByDate SumBillsByDate

*全部资源

*

odps:GetAutoClusterInfo GetAutoClusterInfo get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateProjectStatus UpdateProjectStatus update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:CreateQuotaScheduleEffectAnalysisWithProjects CreateQuotaScheduleEffectAnalysisWithProjects create

*全部资源

*

odps:GetMmsAsyncTask GetMmsAsyncTask get

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetMatrixByParserTypeAndId GetMatrixByParserTypeAndId none

*全部资源

*

odps:ListResources ListResources list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListStorageTablesInfo ListStorageTablesInfo get

*Storage

acs:odps:{#regionId}:{#accountId}:storage/{#project}

odps:UpdateMmsFetchMetadataJob UpdateMmsFetchMetadataJob update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:QueryTunnelMetric QueryTunnelMetric list

*Tunnel

acs:odps:{#regionId}:{#accountId}:tunnel/{#metric}

odps:CreateLivyServer CreateLivyServer create

*全部资源

*

odps:CreateForeignServer CreateForeignServer create

*全部资源

*

odps:PageQueryProjectUserInfo PageQueryProjectUserInfo list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:RemoveMyFocusResource RemoveMyFocusResource delete

*全部资源

*

odps:ListDisasterRecoveryPartitions ListDisasterRecoveryPartitions none

*全部资源

*

odps:GetLogviewNotification GetLogviewNotification none

*全部资源

*

odps:ListMyFocusResource ListMyFocusResource list

*全部资源

*

odps:ListAutoClusterSuggestionByProject ListAutoClusterSuggestionByProject list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateMmsJob UpdateMmsJob update

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:GetAutoMvUtilityByProject GetAutoMvUtilityByProject get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:UpdateProjectModelTier UpdateProjectModelTier update

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListPackages ListPackages list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:GetCrossRegionReplication GetCrossRegionReplication get

*全部资源

*

odps:ListStorageProjectsInfo ListStorageProjectsInfo list

*全部资源

*

odps:ListUsers ListUsers list

*全部资源

*

odps:GetStorageSuggestionEstimateSummary GetStorageSuggestionEstimateSummary get

*全部资源

*

odps:GetRolePolicy GetRolePolicy get

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

odps:ListMmsTaskLogs ListMmsTaskLogs list

*project

acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}

odps:ListPeriodicTaskJobs ListPeriodicTaskJobs list

*Project

acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}

资源(Resource)

下表是云原生大数据计算服务 MaxCompute定义的资源,这些资源可以在 RAM 权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源 ARN 是资源在阿里云上的唯一标识。具体说明如下:

  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。

  • *表示全部。例如:

    • {#resourceType}*时:表示全部资源。

    • {#regionId}*时:表示全部地域。

    • {#accountId}*时:表示全部阿里云账号。

资源类型

资源 ARN

Project
  • acs:odps:{#regionId}:{#accountId}:projects/{#ProjectName}
  • acs:odps:{#regionId}:{#accountId}:projects/*
  • acs:odps:{#regionId}:{#accountId}:project/*
  • acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}
  • acs:odps:{#regionId}:{#accountId}:project/{#projectName}
  • acs:odps:{#regionId}:{#accountId}:mmsdatasource/*
DisasterRecoveries
  • acs:odps:{#regionId}:{#accountId}:disasterrecoveries/*
  • acs:odps:{#regionId}:{#accountId}:drQuota/*
Quota
  • acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}
  • acs:odps:{#regionId}:{#accountId}:quota/{#NickName}
  • acs:odps:{#regionId}:{#accountId}:quotas/*
  • acs:odps:{#regionId}:{#accountId}:quota/{#metric}
Tunnel
  • acs:odps:{#regionId}:{#accountId}:tunnel/{#metric}
QuotaRoutingRule
  • acs:odps:{#regionId}:{#accountId}:quotas/*
  • acs:odps:{#regionId}:{#accountId}:quotas/{#quotaPath}
project
  • acs:odps:{#regionId}:{#accountId}:mmsdatasource/{#sourceId}
Storage
  • acs:odps:{#regionId}:{#accountId}:storage/{#project}
  • acs:odps:{#regionId}:{#accountId}:Storage/*
  • acs:odps:{#regionId}:{#accountId}:storage/{#metric}
  • acs:odps:{#regionId}:{#accountId}:storage/*
JobInsight
  • acs:odps:{#regionId}:{#accountId}:jobInsight/*
  • acs:odps:{#regionId}:{#accountId}:jobinsight/*
Job
  • acs:odps:{#regionId}:{#accountId}:job/{#instanceId}
  • acs:odps:{#regionId}:{#accountId}:job/*
  • acs:odps:{#regionId}:{#accountId}:job/{#quotaNickname}
CrossRegionReplication
  • acs:odps:{#regionId}:{#accountId}:crossregionreplication/*
OdpsCatalogs
  • acs:odps:{#regionId}:{#accountId}:odpscatalogs/*
ForeignServer
  • acs:odps:{#regionId}:{#accountId}:foreignservers/{#foreignServerName}
  • acs:odps:{#regionId}:{#accountId}:foreignservers/*
tenant
  • acs:odps:{#regionId}:{#accountId}:tenant/*
Gray
  • acs:odps:{#regionId}:{#accountId}:gray/*
UserResource
  • acs:odps:{#regionId}:{#accountId}:userresource/*
  • acs:odps:{#regionId}:{#accountId}:userResource/*
Tag
  • acs:odps:{#regionId}:{#accountId}:tags/*
QuotaPlan
  • acs:odps:{#regionId}:{#accountId}:quotas/{#NickName}
  • acs:odps:{#regionId}:{#accountId}:quotaplan/*
Image
  • acs:odps:{#regionId}:{#accountId}:image/{#name}
  • acs:odps:{#regionId}:{#accountId}:image/*
Instance
  • acs:odps:*:{#accountId}:instance/*
LivyServer
  • acs:odps:{#regionId}:{#accountId}:livyserver/*
NetworkLink
  • acs:odps:{#regionId}:{#accountId}:networklink/{#networkLinkName}
  • acs:odps:{#regionId}:{#accountId}:networklink/*
Tenant
  • acs:odps:{#regionId}:{#accountId}:tenant/*
  • acs:odps:{#regionId}:{#accountId}:tenant/settings/*
  • acs:odps:{#regionId}:{#accountId}:tenant/settings/{key}
Metric
  • acs:odps:{#regionId}:{#accountId}:metric/{#category}
MyFocusResource
  • acs:odps:{#regionId}:{#accountId}:myfocusresource/*
Session
  • acs:odps:{#regionId}:{#accountId}:session/*
NotebookInstance
  • acs:odps:{#regionId}:{#accountId}:notebookinstance/*
ResourcePackage
  • acs:odps:{#regionId}:{#accountId}:resourcePackage/*
VwQuotaInfo
  • acs:odps:{#regionId}:{#accountId}:vwQuotaInfos/*
AsyncJob
  • acs:odps:{#regionId}:{#accountId}:asyncjob/*
NotebookTemplate
  • acs:odps:{#regionId}:{#accountId}:notebooktemplate/*
User
  • acs:odps:*:{#accountId}:user/*

条件(Condition)

下表是云原生大数据计算服务 MaxCompute 定义的产品级条件关键字,这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用,用来描述授予权限的条件。以下仅列举产品级的条件关键字,阿里云定义的通用条件关键字也同样适用云原生大数据计算服务 MaxCompute

其中,数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符,否则无法匹配策略语句,授权行为无效。数据类型与条件运算符的对应关系,请参见条件操作类型

条件关键字

描述

类型

odps:Encryption 项目是否开启加密 Boolean

相关操作

您可以创建自定义权限策略,并将权限策略授予 RAM 用户、RAM 用户组或 RAM 角色。具体操作如下: