AliyunServiceRolePolicyForHologresIdentityMgmt

AliyunServiceRolePolicyForHologresIdentityMgmt 是专用于服务关联角色的授权策略，会在创建服务关联角色 AliyunServiceRoleForHologresIdentityMgmt 时自动授权，以允许服务关联角色代您访问其他云服务。本策略由对应的阿里云服务按需更新，请勿将本策略授权给服务关联角色之外的 RAM 身份使用。

策略详情

• 类型：系统策略

• 创建时间：2025-12-31 14:29:14

• 更新时间：2025-12-31 14:29:14

• 当前版本：v1

策略内容

{
  "Statement": [
    {
      "Effect": "Allow",
      "Action": [
        "odps:ActOnBehalfOfAUser",
        "odps:ActOnBehalfOfAnotherUser"
      ],
      "Resource": "acs:odps:*:*:users/*"
    },
    {
      "Effect": "Allow",
      "Action": "dlf-auth:ActOnBehalfOfAnotherUser",
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": [
        "dlf:AbortLock",
        "dlf:AlterDatabase",
        "dlf:AlterTable",
        "dlf:BatchCreatePartitions",
        "dlf:BatchCreateTables",
        "dlf:BatchDeletePartitions",
        "dlf:BatchDeleteRoles",
        "dlf:BatchDeleteTables",
        "dlf:BatchGetPartitionColumnStatistics",
        "dlf:BatchGetPartitions",
        "dlf:BatchGetTables",
        "dlf:BatchUpdatePartitions",
        "dlf:BatchUpdateTables",
        "dlf:CheckPermissions",
        "dlf:CommitTable",
        "dlf:CreateBranch",
        "dlf:CreateCatalog",
        "dlf:CreateDatabase",
        "dlf:CreateFunction",
        "dlf:CreateLock",
        "dlf:CreatePartition",
        "dlf:CreateRole",
        "dlf:CreateTable",
        "dlf:CreateView",
        "dlf:DeleteDatabase",
        "dlf:DeleteFunction",
        "dlf:DeletePartition",
        "dlf:DeletePartitionColumnStatistics",
        "dlf:DeleteTable",
        "dlf:DeleteTableColumnStatistics",
        "dlf:DropBranch",
        "dlf:DropDatabase",
        "dlf:DropTable",
        "dlf:DropView",
        "dlf:ForwardBranch",
        "dlf:GetAsyncTaskStatus",
        "dlf:GetCatalog",
        "dlf:GetCatalogAccessInfo",
        "dlf:GetCatalogAccessInfo",
        "dlf:GetCatalogByInstanceId",
        "dlf:GetCatalogSettings",
        "dlf:GetCatalogStorageAnalysis",
        "dlf:GetCatalogStorageIndicatorDetails",
        "dlf:GetCatalogStorageRank",
        "dlf:GetCatalogStorageStatistics",
        "dlf:GetConfig",
        "dlf:GetDatabase",
        "dlf:GetDatabaseProfile",
        "dlf:GetDatabaseStorageAnalysis",
        "dlf:GetDataToken",
        "dlf:GetDataTokenByName",
        "dlf:GetFunction",
        "dlf:getLatestStorageStatisticsDate",
        "dlf:GetLock",
        "dlf:GetPartition",
        "dlf:GetPartitionColumnStatistics",
        "dlf:GetRole",
        "dlf:GetServiceInfo",
        "dlf:GetTable",
        "dlf:GetTableColumnStatistics",
        "dlf:GetTableProfile",
        "dlf:GetTableSnapshot",
        "dlf:GetTableStorageAnalysis",
        "dlf:GetTableToken",
        "dlf:GetView",
        "dlf:GrantPermissions",
        "dlf:GrantRolesToPrincipal",
        "dlf:GrantRolesToUser",
        "dlf:GrantRoleToPrincipals",
        "dlf:GrantRoleToUsers",
        "dlf:ListBranches",
        "dlf:ListCatalogs",
        "dlf:ListDatabases",
        "dlf:ListFunctionNames",
        "dlf:ListFunctions",
        "dlf:ListPartitionNames",
        "dlf:ListPartitionProfiles",
        "dlf:ListPartitions",
        "dlf:ListPartitionsByExpr",
        "dlf:ListPartitionsByFilter",
        "dlf:ListPermissions",
        "dlf:ListRoles",
        "dlf:ListRoleUsers",
        "dlf:ListTableDetails",
        "dlf:ListTableNames",
        "dlf:ListTables",
        "dlf:ListUserRoles",
        "dlf:ListViewDetails",
        "dlf:ListViews",
        "dlf:MarkDonePartitions",
        "dlf:RefreshLock",
        "dlf:RenamePartition",
        "dlf:RenameTable",
        "dlf:RenameView",
        "dlf:RevokeRoleFromPrincipals",
        "dlf:RevokeRoleFromUsers",
        "dlf:RevokeRolesFromPrincipal",
        "dlf:RevokeRolesFromUser",
        "dlf:UnLock",
        "dlf:UpdateCatalog",
        "dlf:UpdateDatabase",
        "dlf:UpdateFunction",
        "dlf:UpdatePartitionColumnStatistics",
        "dlf:UpdateRole",
        "dlf:UpdateRolePrincipals",
        "dlf:UpdateRoleUsers",
        "dlf:UpdateTable",
        "dlf:UpdateTableColumnStatistics"
      ],
      "Resource": "*"
    },
    {
      "Effect": "Allow",
      "Action": "ram:DeleteServiceLinkedRole",
      "Resource": "*",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "identity.hologres.aliyuncs.com"
        }
      }
    }
  ],
  "Version": "1"
}

相关文档

• 权限策略基本元素

• 服务关联角色