AliyunDataWorksFullAccess

AliyunDataWorksFullAccess 是阿里云管理的产品系统策略，您可以将 AliyunDataWorksFullAccess 授权给 RAM 身份（RAM 用户、RAM 用户组和 RAM 角色），本策略定义了管理DataWorks的权限。

策略详情

• 类型：系统策略

• 创建时间：2018-08-28 09:13:50

• 更新时间：2023-08-22 11:12:02

• 当前版本：v12

策略内容

{
    "Version": "1",
    "Statement": [
        {
            "Action": "dataworks:*",
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": [
                "bpstudio:CreateApplication",
                "bpstudio:ValidateApplication",
                "bpstudio:GetApplication",
                "bpstudio:ValuateApplication",
                "bpstudio:AddApplication",
                "bpstudio:DeployApplication",
                "bpstudio:CreateOneClickOrder",
                "bpstudio:DeployOneClickOrder",
                "bpstudio:CheckOneClickOrder",
                "bpstudio:GetApplicationDetail",
                "bpstudio:QueryTemplateNodeInfo"
            ],
            "Resource": [
                "acs:bpstudio::*:template/Z2O6SR1RNDO9DFK0",
                "acs:bpstudio::*:template/B3O8L8S0Q6G7OPCE",
                "acs:bpstudio::*:template/1CQU6W4Y42HXLZ14",
                "acs:bpstudio::*:template/37KVVXY607PO3J99",
                "acs:bpstudio::*:template/C479JZ7D4M8404NX",
                "acs:bpstudio::*:template/5KK2C33L4OTJHCMX",
                "acs:bpstudio::*:template/F802CGSF25BJUH56"
            ],
            "Effect": "Allow"
        },
        {
            "Action": [
                "bpstudio:ExecuteOperationASync",
                "bpstudio:GetExecuteResult",
                "bss:DescribeOrderDetail",
                "bpstudio:ValuateResource",
                "quotas:ListProductQuotas",
                "bss:DescribeInstances",
                "odps:CreateProject"
            ],
            "Resource": "*",
            "Effect": "Allow"
        },
        {
            "Action": "ram:CreateServiceLinkedRole",
            "Resource": "*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": [
                        "di.dataworks.aliyuncs.com",
                        "datamap.dataworks.aliyuncs.com",
                        "openplatform.dataworks.aliyuncs.com",
                        "dataworks.aliyuncs.com",
                        "dlf.dataworks.aliyuncs.com",
                        "engine.dataworks.aliyuncs.com",
                        "emr.dataworks.aliyuncs.com",
                        "identity.odps.aliyuncs.com"
                    ]
                }
            }
        }
    ]
}

相关文档

• 权限策略基本元素

• 为RAM用户授权

• 为RAM用户组授权

• 为RAM角色授权