访问控制RAM权限策略元素详解-智能开放搜索 OpenSearch-阿里云

访问控制（RAM）是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥，并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 智能开放搜索 OpenSearch 为 RAM 权限策略定义的操作（Action）、资源（Resource）和条件（Condition）。 智能开放搜索 OpenSearch 的 RAM 代码（RamCode）为 opensearch ，支持的授权粒度为 服务级 。

权限策略通用结构

权限策略支持 JSON 格式，其通用结构如下：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

各字段含义如下：

Effect：权限策略效果。取值：Allow（允许）、Deny（拒绝）。
Action：授予允许或拒绝权限的具体操作。具体信息，请参见操作（Action）。
Resource：受操作影响的具体对象，您可以使用资源 ARN 来描述指定资源。具体信息，请参见资源（Resource）。
Condition：指授权生效的条件。可选字段。具体信息，请参见条件（Condition）。
- Condition_operator：条件运算符，不同类型的条件对应不同的条件运算符。具体信息，请参见权限策略基本元素。
- Condition_key：条件关键字。
- Condition_value：条件关键字对应的值。

操作（Action）

下表是智能开放搜索 OpenSearch定义的操作，这些操作可以在 RAM 权限策略语句的Action元素中使用，用来授予执行该操作的权限。下面对表中的具体项提供说明：

操作：是指具体的权限点。
API：是指操作对应的 API 接口。
访问级别：是指每个操作的访问级别，取值为写入（Write）、读取（Read）或列出（List）。
资源类型：是指操作中支持授权的资源类型。具体说明如下：
- 对于必选的资源类型，用前面加 * 表示。
- 对于不支持资源级授权的操作，用全部资源表示。
条件关键字：是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。
关联操作：是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限，操作才能成功。

操作	API	访问级别	资源类型	条件关键字	关联操作
opensearch:UpdateApp	UpdateABTestGroup	update	*AbTestGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeFunction	ListFunctionResources	list	*FunctionResource `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListApp	ListABTestFixedFlowDividers	none	*AbTestExperiment `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListApp	DescribeApps	list	*App `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:DescribeSortScript	ListSortScripts	list	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:BindEsInstance	BindEsInstance	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:DescribeSortScript	GetSortScript	get	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListDataCollections	ListDataCollections	get	*DataCollection `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteInterventionDictionary	CreateInterventionDictionary	create	InterventionDictionary `acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/`	无	无
opensearch:ListApp	ListABTestGroups	list	*AbTestGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSortScript	CompileSortScript	update	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteUserAnalyzer	PushUserAnalyzerEntries	update	*Analyzer `acs:opensearch:{#regionId}:{#accountId}:user-analyzers/{#AnalyzerId}`	无	无
opensearch:GetDomain	GetDomain	get	全部资源 ``	无	无
opensearch:DescribeAppStatistics	DescribeAppStatistics	get	*App `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:WriteFunction	UpdateFunctionInstance	update	*FunctionInstance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeSearchStrategy	ListSearchStrategies	list	*SearchStrategy `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:CreateApp	CreateApp	create	*App `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:DeleteApp	DeleteABTestGroup	delete	*AbTestGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSortScript	DeleteSortScriptFile	update	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ModifyAppGroup	ModifyAppGroupQuota	update	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:UnBindEsInstance	UnbindEsInstance	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:ListScheduledTask	ListScheduledTasks	list	*ScheduledTask `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:ListApp	ListABTestScenes	list	*AbTestScene `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ValidateDataSources	ValidateDataSources	get	全部资源 ``	无	无
opensearch:DeleteUserAnalyzer	RemoveUserAnalyzer	delete	*Analyzer `acs:opensearch:{#regionId}:{#accountId}:user-analyzers/{#AnalyzerId}`	无	无
opensearch:DescribeFunction	GetFunctionVersion	get	*FunctionInstance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeUserAnalyzer	DescribeUserAnalyzer	get	*Analyzer `acs:opensearch:{#regionId}:{#accountId}:user-analyzers/{#AnalyzerId}`	无	无
opensearch:EnableSlowQuery	EnableSlowQuery	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteFunction	DeleteFunctionInstance	delete	FunctionInstance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}` Instance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:CreateAppGroup	CreateAppGroup	create	AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/`	无	无
opensearch:ListSortExpression	ListSortExpressions	list	FirstRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}` SecondRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:UpdateApp	UpdateABTestScene	update	*AbTestScene `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:ListFirstRank	ListFirstRanks	list	*FirstRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeApp	DescribeABTestExperiment	get	*AbTestExperiment `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListProceedings	ListProceedings	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:TagResources	TagResources	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:instance/{#AppGroupId}`	无	无
opensearch:ListTagResources	ListTagResources	get	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:instance/{#AppGroupId}`	无	无
opensearch:WriteSortScript	CreateSortScript	create	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:StartSlowQueryAnalyzer	StartSlowQueryAnalyzer	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteQueryProcessor	CreateQueryProcessor	create	*QueryProcessor `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DisableSlowQuery	DisableSlowQuery	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeDataCollection	DescribeDataCollction	get	*DataCollection `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteFunction	CreateFunctionInstance	create	*FunctionInstance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSortScript	ReleaseSortScript	update	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteFunction	DeleteFunctionResource	delete	*FunctionResource `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeApp	DescribeApp	get	*App `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:WriteFunction	UpdateFunctionResource	update	*FunctionResource `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteAppGroupCredential	CreateAppGroupCredentials	create	*AppGroupCredential `acs:opensearch:{#regionId}:{#accountId}:appGroup/{#AppGroupId}`	无	无
opensearch:DescribeFunction	GetFunctionTask	get	*FunctionTask `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:UpdateApp	UpdateABTestFixedFlowDividers	update	*AbTestExperiment `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListDataSourceTables	ListDataSourceTables	get	全部资源 ``	无	无
opensearch:CreateUserAnalyzer	CreateUserAnalyzer	create	Analyzer `acs:opensearch:{#regionId}:{#accountId}:user-analyzers/`	无	无
opensearch:DescribeApp	ListQuotaReviewTasks	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeFunction	GetFunctionResource	get	*FunctionResource `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteInterventionDictionary	PushInterventionDictionaryEntries	update	*InterventionDictionary `acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/{#InterventionDictionaryId}`	无	无
opensearch:DeleteApp	DeleteABTestExperiment	delete	*AbTestExperiment `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteFirstRank	RemoveFirstRank	delete	*FirstRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteFunction	UpdateFunctionDefaultInstance	update	*FunctionInstance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteFunction	CreateFunctionTask	create	*FunctionTask `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeSlowQueryStatus	DescribeSlowQueryStatus	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeFunction	ListFunctionInstances	get	*FunctionInstance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:RemoveAppGroup	RemoveAppGroup	delete	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:WriteSearchStrategy	CreateSearchStrategy	create	*SearchStrategy `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteFirstRank	ModifyFirstRank	update	*FirstRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:CreateApp	CreateABTestExperiment	create	*AbTestExperiment `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeFunction	ListFunctionTasks	get	*FunctionTask `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListApp	ListABTestExperiments	list	*AbTestExperiment `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DeleteApp	DeleteABTestScene	delete	*AbTestScene `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:UntagResources	UntagResources	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:instance/{#AppGroupId}`	无	无
opensearch:DescribeInterventionDictionary	ListInterventionDictionaryNerResults	none	*InterventionDictionary `acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/{#InterventionDictionaryId}`	无	无
opensearch:ListQueryProcessor	ListQueryProcessors	list	*QueryProcessor `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeAppGroup	DescribeAppGroup	get	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:WriteSummary	UpdateSummaries	update	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppId}`	无	无
opensearch:ListUserAnalyzers	ListUserAnalyzers	list	Analyzer `acs:opensearch:{#regionId}:{#accountId}:user-analyzers/`	无	无
opensearch:CreateScheduledTask	CreateScheduledTask	create	*ScheduledTask `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:DescribeApp	DescribeABTestScene	get	*AbTestScene `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ModifyAppGroup	UnbindESUserAnalyzer	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:DescribeQueryProcessor	ListQueryProcessorAnalyzerResults	none	*QueryProcessor `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeSortScript	GetScriptFileNames		*SortScript `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:GenerateMergedTable	GenerateMergedTable	get	全部资源 ``	无	无
opensearch:WriteQueryProcessor	ModifyQueryProcessor	update	*QueryProcessor `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSecondRank	RemoveSecondRank	delete	*SecondRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListSecondRank	ListSecondRanks	list	*SecondRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSortScript	DeleteSortScript	delete	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListDataSourceTableFields	ListDataSourceTableFields	get	全部资源 ``	无	无
opensearch:DescribeFirstRank	DescribeFirstRank	get	*FirstRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:RemoveApp	RemoveApp	delete	*App `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:WriteInterventionDictionary	RemoveInterventionDictionary	delete	*InterventionDictionary `acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/{#InterventionDictionaryId}`	无	无
opensearch:UpdateApp	UpdateABTestExperiment	update	*AbTestExperiment `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeSearchStrategy	GetSearchStrategy	get	*SearchStrategy `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSecondRank	CreateSecondRank	create	*SecondRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSearchStrategy	UpdateSearchStrategy	update	*SearchStrategy `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteDataCollection	RemoveDataCollection	delete	*DataCollection `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeUserAnalyzer	ListUserAnalyzerEntries	list	*Analyzer `acs:opensearch:{#regionId}:{#accountId}:user-analyzers/{#AnalyzerId}`	无	无
opensearch:ListQueryProcessorNers	ListQueryProcessorNers	none	QueryProcessor `acs:opensearch:{#regionId}:{#accountId}:apps/`	无	无
opensearch:UpdateApp	ReplaceAppGroupCommodityCode	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#appGroupIdentity}`	无	无
opensearch:WriteFunction	CreateFunctionResource		*FunctionResource `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteQueryProqcessor	RemoveQueryProcessor	delete	*QueryProcessor `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeInterventionDictionary	ListInterventionDictionaryRelatedEntities	none	*InterventionDictionary `acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/{#InterventionDictionaryId}`	无	无
opensearch:DescribeFunction	GetFunctionDefaultInstance	get	*FunctionDefaultInstance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeQueryProcessor	DescribeQueryProcessor		*QueryProcessor `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeInterventionDictionary	DescribeInterventionDictionary	get	*InterventionDictionary `acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/{#InterventionDictionaryId}`	无	无
opensearch:WriteSortScript	SaveSortScriptFile	update	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListStatisticLogs	ListStatisticLogs	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:ListSlowQueryQueries	ListSlowQueryQueries	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ModifyScheduledTask	ModifyScheduledTask	update	*ScheduledTask `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:DescribeSortScript	GetSortScriptFile	get	*SortScript `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeSecondRank	DescribeSecondRank	get	*SecondRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeScheduledTask	DescribeScheduledTask	get	*ScheduledTask `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:WriteSecondRank	ModifySecondRank	update	*SecondRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSortScript	UpdateSortScript	update	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteSearchStrategy	RemoveSearchStrategy	delete	*SearchStrategy `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:CreateApp	CreateABTestScene	create	*ABTestScenes `acs:opensearch:{#regionId}:{#accountId}:app-groups{#AppGroupId}`	无	无
opensearch:ListSlowQueryCategories	ListSlowQueryCategories	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ModifyAppGroup	ModifyAppGroup	update	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:WriteFunction	DeleteFunctionTask	delete	*FunctionTask `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeFunction	GetFunctionInstance	get	*FunctionInstance `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:DescribeInterventionDictionary	ListInterventionDictionaryEntries	list	*InterventionDictionary `acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/{#InterventionDictionaryId}`	无	无
opensearch:DescribeFunction	GetFunctionCurrentVersion	get	全部资源 ``	无	无
opensearch:ListInterventionDictionaries	ListInterventionDictionaries	list	InterventionDictionary `acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/`	无	无
opensearch:ModifyAppGroup	BindESUserAnalyzer	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:CreateApp	CreateABTestGroup	create	*AbTestGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:ListStatisticReport	ListStatisticReport	none	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:DeleteApp	RemoveScheduledTask	delete	*ScheduledTask `acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}`	无	无
opensearch:UpdateApp	RenewAppGroup	update	*AppGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:UpdateApp	UpdateFetchFields	update	*App `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppId}`	无	无
opensearch:ListAppGroup	ListAppGroups	list	AppGroup `acs:opensearch:{#regionId}:{#accountId}:app-groups/`	无	无
opensearch:DescribeApp	DescribeABTestGroup	get	*AbTestGroup `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无
opensearch:WriteFirstRank	CreateFirstRank	create	*FirstRank `acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}`	无	无

资源（Resource）

下表是智能开放搜索 OpenSearch定义的资源，这些资源可以在 RAM 权限策略语句的Resource元素中使用，用来授予对该资源执行具体操作的权限。其中，资源 ARN 是资源在阿里云上的唯一标识。具体说明如下：

{#}为变量标识，需要您替换为实际值。例如：{#ramcode}需要您替换为实际的云服务RAM代码。
*表示全部。例如：
- {#resourceType}为*时：表示全部资源。
- {#regionId}为*时：表示全部地域。
- {#accountId}为*时：表示全部阿里云账号。

资源类型	资源 ARN
AbTestGroup	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
FunctionResource	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
AbTestExperiment	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
App	acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId} acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId} acs:opensearch:{#regionId}:{#accountId}:apps/{#AppId}
AppGroup	acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId} acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId} acs:opensearch:{#regionId}:{#accountId}:app-groups/* acs:opensearch:{#regionId}:{#accountId}:instance/{#AppGroupId} acs:opensearch:{#regionId}:{#accountId}:apps/{#appGroupIdentity}
DataCollection	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
InterventionDictionary	acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/* acs:opensearch:{#regionId}:{#accountId}:intervention-dictionaries/{#InterventionDictionaryId}
Analyzer	acs:opensearch:{#regionId}:{#accountId}:user-analyzers/{#AnalyzerId} acs:opensearch:{#regionId}:{#accountId}:user-analyzers/*
FunctionInstance	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId} acs:opensearch:{#regionId}:{#accountId}:functions/*
SearchStrategy	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
ScheduledTask	acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}
AbTestScene	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId} acs:opensearch:{#regionId}:{#accountId}:app-groups/{#AppGroupId}
Instance	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
FirstRank	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
SecondRank	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
QueryProcessor	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId} acs:opensearch:{#regionId}:{#accountId}:apps/*
AppGroupCredential	acs:opensearch:{#regionId}:{#accountId}:appGroup/{#AppGroupId}
FunctionTask	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
SortScript	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
FunctionDefaultInstance	acs:opensearch:{#regionId}:{#accountId}:apps/{#AppGroupId}
ABTestScenes	acs:opensearch:{#regionId}:{#accountId}:app-groups{#AppGroupId}

条件（Condition）

智能开放搜索 OpenSearch未定义产品级别的条件关键字。如需查看适用于所有云产品的通用条件关键字，请参见通用条件关键字。

授权信息

权限策略通用结构

操作（Action）

资源（Resource）

条件（Condition）

相关操作