AliyunServiceRolePolicyForDataworksEngine 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForDataworksEngine 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。
策略详情
类型：系统策略
创建时间：2025-12-31 14:28:32
更新时间：2026-01-04 06:14:07
当前版本：v23
策略内容
{
"Version": "1",
"Statement": [
{
"Action": "odps:*",
"Effect": "Allow",
"Resource": "*"
},
{
"Action": [
"stream:ActOnBehalfOfAnotherUser",
"stream:CreateDeployment",
"stream:StartJobWithParams",
"stream:ListDeployments",
"stream:GetDeployment",
"stream:GetJob",
"stream:StopJob",
"stream:DeleteDeployment"
],
"Effect": "Allow",
"Resource": "*"
},
{
"Action": "dlf-auth:ActOnBehalfOfAnotherUser",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"dlf:GetConfig",
"dlf:ListDatabases",
"dlf:CreateDatabase",
"dlf:DropDatabase",
"dlf:GetDatabase",
"dlf:AlterDatabase",
"dlf:ListTables",
"dlf:CreateTable",
"dlf:ListTableDetails",
"dlf:GetTable",
"dlf:AlterTable",
"dlf:DropTable",
"dlf:RenameTable",
"dlf:CommitTable",
"dlf:RollbackTable",
"dlf:GetTableToken",
"dlf:GetTableSnapshot",
"dlf:ListTableSnapshots",
"dlf:ListPartitions",
"dlf:MarkDonePartitions",
"dlf:ListBranches",
"dlf:CreateBranch",
"dlf:DropBranch",
"dlf:ForwardBranch",
"dlf:ListViews",
"dlf:CreateView",
"dlf:GetView",
"dlf:AlterView",
"dlf:DropView",
"dlf:RenameView",
"dlf:ListFunctions",
"dlf:CreateFunction",
"dlf:GetFunction",
"dlf:AlterFunction",
"dlf:DropFunction",
"dlf:GetIcebergTable",
"dlf:ListIcebergSnapshots",
"dlf:DescribeRegions",
"dlf:GetRegionStatus",
"dlf:Subscribe",
"dlf:ListCatalogs",
"dlf:GetCatalogByld",
"dlf:GetCatalog",
"dlf:ListDatabaseDetails",
"dlf:GetCatalogAccessInfo",
"dlf:GetDataToken",
"dlf:GetDataTokenByName",
"dlf:BatchCreatePartitions",
"dlf:BatchCreateTables",
"dlf:BatchDeletePartitions",
"dlf:BatchDeleteTables",
"dlf:BatchGetPartitions",
"dlf:BatchGetTables",
"dlf:BatchUpdatePartitions",
"dlf:BatchUpdateTables",
"dlf:CreateCatalog",
"dlf:CreatePartition",
"dlf:DeleteCatalog",
"dlf:DeleteDatabase",
"dlf:DeleteFunction",
"dlf:DeletePartition",
"dlf:DeleteTable",
"dlf:GetAsyncTaskStatus",
"dlf:GetCatalogByInstanceId",
"dlf:GetCatalogSettings",
"dlf:GetPartition",
"dlf:ListFunctionNames",
"dlf:ListPartitionNames",
"dlf:ListPartitionsByExpr",
"dlf:ListPartitionsByFilter",
"dlf:ListTableNames",
"dlf:RenamePartition",
"dlf:UpdateCatalog",
"dlf:UpdateDatabase",
"dlf:UpdateFunction",
"dlf:UpdateTable",
"dlf:BatchGetPartitionColumnStatistics",
"dlf:DeletePartitionColumnStatistics",
"dlf:DeleteTableColumnStatistics",
"dlf:GetPartitionColumnStatistics",
"dlf:GetTableColumnStatistics",
"dlf:UpdateTableColumnStatistics",
"dlf:UpdatePartitionColumnStatistics",
"dlf:CreateLock",
"dlf:UnLock",
"dlf:AbortLock",
"dlf:RefreshLock",
"dlf:GetLock",
"dlf:GrantPermissions",
"dlf:RevokePermissions",
"dlf:BatchGrantPermissions",
"dlf:BatchRevokePermissions",
"dlf:UpdatePermissions",
"dlf:ListPermissions",
"dlf:CheckPermissions"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"pai:*",
"paiplugin:*",
"eas:*",
"featurestore:*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": [
"emr-serverless-spark:StartSessionCluster",
"emr-serverless-spark:CreateSqlStatement",
"emr-serverless-spark:GetSqlStatement",
"emr-serverless-spark:TerminateSqlStatement",
"emr-serverless-spark:ListSessionClusters",
"emr-serverless-spark:ListWorkspaces",
"emr-serverless-spark:ListWorkspaceQueues",
"emr-serverless-spark:ListReleaseVersions",
"emr-serverless-spark:CancelJobRun",
"emr-serverless-spark:ListJobRuns",
"emr-serverless-spark:GetJobRun",
"emr-serverless-spark:StartJobRun",
"emr-serverless-spark:AddMembers",
"emr-serverless-spark:GrantRoleToUsers",
"emr-serverless-spark:ListLogContents",
"emr-serverless-spark:GetTemplate",
"emr-serverless-spark:ListKyuubiServices",
"emr-serverless-spark:GetLivyCompute",
"emr-serverless-spark:CreateLivyCompute",
"emr-serverless-spark:UpdateLivyCompute",
"emr-serverless-spark:ListLivyCompute",
"emr-serverless-spark:DeleteLivyCompute",
"emr-serverless-spark:StartLivyCompute",
"emr-serverless-spark:StopLivyCompute",
"emr-serverless-spark:CreateLivyComputeToken",
"emr-serverless-spark:GetLivyComputeToken",
"emr-serverless-spark:ListLivyComputeToken",
"emr-serverless-spark:DeleteLivyComputeToken",
"emr-serverless-spark:RefreshLivyComputeToken",
"emr-serverless-spark:ListSqlStatementContents",
"emr-serverless-spark:ListCatalogs",
"emr-serverless-spark:ListTemplate",
"emr-serverless-spark:ListKerberosConf"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"adb:SubmitSparkApp",
"adb:GetSparkAppState",
"adb:GetSparkAppLog",
"adb:GetSparkAppWebUiAddress",
"adb:ListSparkApps",
"adb:GetSparkAppInfo",
"adb:KillSparkApp",
"adb:DescribeAdbMySqlTables",
"adb:getDatabaseObjectsByFilter",
"adb:getTable"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"lindorm:GetLindormInstanceList",
"lindorm:GetLindormInstance",
"lindorm:GetLindormInstanceEngineList",
"lindorm:GetLindormV2InstanceEngineList",
"lindorm:ListLdpsComputeGroups",
"lindorm:RestartLdpsComputeGroup"
],
"Resource": "*"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "engine.dataworks.aliyuncs.com"
}
}
},
{
"Action": [
"searchengine:GetInstance",
"searchengine:ListInstances",
"searchengine:GetTable",
"searchengine:ListTables"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"oss:PutObject",
"oss:GetObject",
"oss:DeleteObject",
"oss:DeleteObjectVersion"
],
"Resource": [
"acs:oss:*:*:*/.dataworks/*",
"acs:oss:*:*:*/.dlsdata/*"
],
"Effect": "Allow"
},
{
"Action": "oss:PostDataLakeStorageFileOperation",
"Resource": "*",
"Effect": "Allow"
}
]
}相关文档
该文章对您有帮助吗？