AliyunAgentLoopFullAccess

AliyunAgentLoopFullAccess 是阿里云管理的产品系统策略，您可以将 AliyunAgentLoopFullAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理 Agent 观测与优化（AgentLoop）的权限。

策略详情

• 类型：系统策略

• 创建时间：2026-06-02 08:37:17

• 更新时间：2026-08-04 18:13:35

• 当前版本：v6

策略内容

{
  "Version": "1",
  "Statement": [
    {
      "Action": "agentloop:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "log:GetLogStoreLogs",
        "log:GetLogStoreHistogram",
        "log:GetIndex",
        "log:GetLogStore",
        "log:CreateIndex",
        "log:ListLogStores",
        "log:GetProject",
        "log:ListProject",
        "log:CreateLogStore",
        "log:UpdateIndex",
        "log:UpdateLogStore",
        "log:ListScheduledSQLs",
        "log:CreateScheduledSQL",
        "log:EnableScheduledSQL",
        "log:GetScheduledSQL",
        "log:UpdateScheduledSQL",
        "log:DisableScheduledSQL",
        "log:ListDashboard",
        "log:GetDashboard",
        "log:CreateDashboard",
        "log:UpdateDashboard",
        "log:DeleteDashboard",
        "log:ListTagResources",
        "log:TagResources",
        "log:UntagResources",
        "log:ListDashboardSharing",
        "log:CreateDashboardSharing",
        "log:AccessDashboardSharing",
        "log:UpdateDashboardSharing",
        "log:DeleteDashboardSharing"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "airegistry:ListNamespaces",
        "airegistry:GetNamespace",
        "airegistry:GetPrompt",
        "airegistry:CreatePrompt",
        "airegistry:ListPrompts",
        "airegistry:UpdatePrompt",
        "airegistry:DeletePrompt",
        "airegistry:ListPromptVersions",
        "airegistry:GetPromptVersion",
        "airegistry:GetPromptVersionDetail",
        "airegistry:CreatePromptVersion",
        "airegistry:UpdatePromptVersion",
        "airegistry:SubmitPromptVersion",
        "airegistry:DeletePromptVersion",
        "airegistry:GetPromptGovernance",
        "airegistry:CreateSkillDraft",
        "airegistry:UpdateSkillDraft",
        "airegistry:DeleteSkillDraft",
        "airegistry:SubmitSkillVersion",
        "airegistry:PublishSkillVersion",
        "airegistry:ForcePublishSkillVersion",
        "airegistry:UpdateSkillBizTags",
        "airegistry:UpdateSkillLabels",
        "airegistry:OnlineSkill",
        "airegistry:OfflineSkill",
        "airegistry:UpdateSkillScope",
        "airegistry:GetSkillDetail",
        "airegistry:GetSkillVersionDetail",
        "airegistry:DownloadSkillVersion",
        "airegistry:ListSkills",
        "airegistry:DeleteSkill",
        "airegistry:UploadSkill",
        "airegistry:UploadSkillViaOss",
        "airegistry:DownloadSkillVersionViaOss"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "cms:ListWorkspaces",
        "cms:GetWorkspace",
        "cms:GetEntityStoreData",
        "cms:GetEntityStore",
        "cms:GetServiceObservability",
        "cms:DescribeIntranetRegions",
        "cms:DescribeVpcForIntranetSynthetic",
        "cms:DescribeVswitchForIntranetSynthetic",
        "cms:DescribeSecurityGroupForIntranetSynthetic",
        "cms:ListServices",
        "cms:CreateService",
        "cms:GetUmodelCommonSchemaRef",
        "cms:GetUmodel",
        "cms:UpsertUmodelCommonSchemaRef",
        "cms:UpsertUmodelData",
        "cms:ListAddons",
        "cms:GetAddon",
        "cms:GetAddonSchema",
        "cms:GetAddonCodeTemplate",
        "cms:GetAddonMetrics",
        "cms:GetAddonAlertTemplates",
        "cms:GetPrometheusUserSetting",
        "cms:GetCmsService",
        "cms:ListIntegrationPolicies",
        "cms:CreateIntegrationPolicy",
        "cms:CreateAddonRelease",
        "cms:GetAddonRelease",
        "cms:ListAddonReleases",
        "cms:ListIntegrationPolicyResources",
        "cms:ListIntegrationPolicyCollectors",
        "cms:ListPrometheusInstances",
        "cms:GetCloudResource",
        "cms:CreateCloudResource",
        "cms:GetCloudResourceData",
        "cms:ProxyApiForMemberAccount",
        "cms:CreateServiceObservability"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "resourcecenter:GetResourceCenterServiceStatus"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": [
            "agentloop.aliyuncs.com"
          ]
        }
      }
    },
    {
      "Effect": "Allow",
      "Action": "ram:PassRole",
      "Resource": "acs:ram::*:role/aliyunlogetlrole"
    }
  ]
}

相关文档

• 权限策略基本元素

• 管理RAM用户的权限

• 为RAM用户组授权

• 管理RAM角色的权限