RAM权限策略的Action资源Condition参考-智能接入网关-阿里云-智能接入网关(SAG)-阿里云帮助中心

访问控制（RAM）是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥，并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 智能接入网关 为 RAM 权限策略定义的操作（Action）、资源（Resource）和条件（Condition）。 智能接入网关 的 RAM 代码（RamCode）为 smartag ，支持的授权粒度为 资源级 。

权限策略通用结构

权限策略支持 JSON 格式，其通用结构如下：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

各字段含义如下：

Effect：权限策略效果。取值：Allow（允许）、Deny（拒绝）。
Action：授予允许或拒绝权限的具体操作。具体信息，请参见操作（Action）。
Resource：受操作影响的具体对象，您可以使用资源 ARN 来描述指定资源。具体信息，请参见资源（Resource）。
Condition：指授权生效的条件。可选字段。具体信息，请参见条件（Condition）。
- Condition_operator：条件运算符，不同类型的条件对应不同的条件运算符。具体信息，请参见权限策略基本元素。
- Condition_key：条件关键字。
- Condition_value：条件关键字对应的值。

操作（Action）

下表是智能接入网关定义的操作，这些操作可以在 RAM 权限策略语句的Action元素中使用，用来授予执行该操作的权限。下面对表中的具体项提供说明：

操作：是指具体的权限点。
API：是指操作对应的 API 接口。
访问级别：是指每个操作的访问级别，取值为写入（Write）、读取（Read）或列出（List）。
资源类型：是指操作中支持授权的资源类型。具体说明如下：
- 对于必选的资源类型，用前面加 * 表示。
- 对于不支持资源级授权的操作，用全部资源表示。
条件关键字：是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。
关联操作：是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限，操作才能成功。

操作	API	访问级别	资源类型	条件关键字	关联操作
smartag:ModifySagRouteProtocolOspf	ModifySagRouteProtocolOspf	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:SynchronizeSmartAGWebConfig	SynchronizeSmartAGWebConfig		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:EnableSmartAGDpiMonitor	EnableSmartAGDpiMonitor	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagWan	ModifySagWan	update	全部资源 ``	无	无
smartag:UpdateSmartAccessGatewayWanSnat	UpdateSmartAccessGatewayWanSnat		全部资源 ``	无	无
smartag:KickOutClients	KickOutClients		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagWifi	ModifySagWifi		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagRouteList	DescribeSagRouteList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListAccessPoints	ListAccessPoints	get	全部资源 ``	无	无
smartag:ModifyCloudConnectNetwork	ModifyCloudConnectNetwork	update	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	无	无
smartag:DescribeHealthChecks	DescribeHealthChecks	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagStaticRouteList	DescribeSagStaticRouteList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagHa	ModifySagHa	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeHealthCheckAttribute	DescribeHealthCheckAttribute	get	全部资源 ``	无	无
smartag:GrantSagInstanceToVbr	GrantSagInstanceToVbr		全部资源 ``	无	无
smartag:ModifySagPortRouteProtocol	ModifySagPortRouteProtocol		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagGlobalRouteProtocol	DescribeSagGlobalRouteProtocol	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayDnsForward	UpdateSmartAccessGatewayDnsForward		全部资源 ``	无	无
smartag:ClearSagCipher	ClearSagCipher		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyDeviceAutoUpgradePolicy	ModifyDeviceAutoUpgradePolicy	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateServiceAddress	CreateServiceAddress		全部资源 ``	无	无
smartag:DescribeSagRemoteAccess	DescribeSagRemoteAccess	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DisableSmartAccessGatewayUser	DisableSmartAccessGatewayUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteServiceAddress	DeleteServiceAddress		全部资源 ``	无	无
smartag:DescribeDnatEntries	DescribeDnatEntries	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AttachCcnInstanceToCen	AttachCcnInstanceToCen	none	全部资源 ``	无	无
smartag:DescribeUserOnlineClients	DescribeUserOnlineClients	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyRouteDistributionStrategy	ModifyRouteDistributionStrategy	update	全部资源 ``	无	无
smartag:ModifyACL	ModifyACL	update	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:UpdateSmartAGDpiAttribute	UpdateSmartAGDpiAttribute	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AssociateSmartAGWithApplicationBandwidthPackage	AssociateSmartAGWithApplicationBandwidthPackage		全部资源 ``	无	无
smartag:DescribeSagVbrRelations	DescribeSagVbrRelations	get	全部资源 ``	无	无
smartag:AddACLRule	AddACLRule	create	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:GetCloudConnectNetworkUseLimit	GetCloudConnectNetworkUseLimit	get	全部资源 ``	无	无
smartag:UpdateSmartAccessGatewayBgpRoute	UpdateSmartAccessGatewayBgpRoute		全部资源 ``	无	无
smartag:ModifySagPortRole	ModifySagPortRole		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AssociateACL	AssociateACL	create	Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateQos	CreateQos	create	Qos `acs:smartag:{#regionId}:{#accountId}:qos/`	无	无
smartag:DiscribeSmartAccessGatewayDiagnosisReport	DiscribeSmartAccessGatewayDiagnosisReport	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:BindSerialNumber	BindSerialNumber	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DissociateSmartAGFromApplicationBandwidthPackage	DissociateSmartAGFromApplicationBandwidthPackage		全部资源 ``	无	无
smartag:DetachCcnInstanceFromCen	DetachCcnInstanceFromCen	none	全部资源 ``	无	无
smartag:ModifyACLRule	ModifyACLRule	update	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:DeactiveFlowLog	DeactiveFlowLog		*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#flowlogId}`	无	无
smartag:CreateSmartAccessGateway	CreateSmartAccessGateway	create	SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/`	无	无
smartag:UnbindVbr	UnbindVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DowngradeSmartAccessGateway	DowngradeSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteFlowLog	DeleteFlowLog	delete	*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	无	无
smartag:DescribeDeviceAutoUpgradePolicy	DescribeDeviceAutoUpgradePolicy	get	全部资源 ``	无	无
smartag:UnlockSmartAccessGateway	UnlockSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteHealthCheck	DeleteHealthCheck	delete	全部资源 ``	无	无
smartag:CreateQosPolicy	CreateQosPolicy	create	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:ModifySagExpressConnectInterface	ModifySagExpressConnectInterface	update	全部资源 ``	无	无
smartag:ViewSmartAccessGatewayBgpRoute	ViewSmartAccessGatewayBgpRoute	get	全部资源 ``	无	无
smartag:DescribeSmartAccessGatewayAttribute	DescribeSmartAccessGatewayAttribute	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteSnatEntry	DeleteSnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyClientUserDNS	ModifyClientUserDNS	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeACLs	DescribeACLs	get	全部资源 ``	无	无
smartag:ViewSmartAccessGatewayDnsForwards	ViewSmartAccessGatewayDnsForwards	get	全部资源 ``	无	无
smartag:DescribeSagManagementPort	DescribeSagManagementPort	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateHealthCheck	CreateHealthCheck	create	全部资源 ``	无	无
smartag:DisableSmartAGDpiMonitor	DisableSmartAGDpiMonitor	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteCloudConnectNetwork	DeleteCloudConnectNetwork	delete	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	无	无
smartag:ModifySagRouteProtocolBgp	ModifySagRouteProtocolBgp	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayPortRouteProtocol	UpdateSmartAccessGatewayPortRouteProtocol		全部资源 ``	无	无
smartag:UpdateSmartAccessGatewayVersion	UpdateSmartAccessGatewayVersion	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSAGDeviceInfo	DescribeSAGDeviceInfo	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySmartAccessGatewayUpBandwidth	ModifySmartAccessGatewayUpBandwidth	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagStaticRoute	ModifySagStaticRoute	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagWifi	DescribeSagWifi	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ProbeAccessPointNetworkQuality	ProbeAccessPointNetworkQuality		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:RevokeInstanceFromCbn	RevokeInstanceFromCbn		*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}`	无	无
smartag:DeleteSmartAccessGatewayDnsForward	DeleteSmartAccessGatewayDnsForward		全部资源 ``	无	无
smartag:CreateCloudConnectNetwork	CreateCloudConnectNetwork	create	CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/`	无	无
smartag:ModifyFlowLogAttribute	ModifyFlowLogAttribute	update	全部资源 ``	无	无
smartag:AddDnatEntry	AddDnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AddSmartAccessGatewayDnsForward	AddSmartAccessGatewayDnsForward		全部资源 ``	无	无
smartag:ActivateSmartAccessGateway	ActivateSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DisassociateACL	DisassociateACL	delete	全部资源 ``	无	无
smartag:DescribeSmartAccessGatewayVersions	DescribeSmartAccessGatewayVersions	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagWanSnat	ModifySagWanSnat		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ViewSmartAccessGatewayPortRouteProtocol	ViewSmartAccessGatewayPortRouteProtocol	get	全部资源 ``	无	无
smartag:DisassociateQos	DisassociateQos	update	Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagGlobalRouteProtocol	ModifySagGlobalRouteProtocol		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ResetSmartAccessGatewayClientUserPassword	ResetSmartAccessGatewayClientUserPassword		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GetAclAttribute	GetAclAttribute	get	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:ListEnterpriseCode	ListEnterpriseCode	list	EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/`	无	无
smartag:DescribeSagHa	DescribeSagHa	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateFlowLog	CreateFlowLog	create	FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/`	无	无
smartag:UpdateSmartAGUserAccelerateConfig	UpdateSmartAGUserAccelerateConfig		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:BindSmartAccessGateway	BindSmartAccessGateway		*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	无	无
smartag:DescribeFlowLogSags	DescribeFlowLogSags	get	*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	无	无
smartag:CreateSagExpressConnectInterface	CreateSagExpressConnectInterface	create	全部资源 ``	无	无
smartag:ViewSmartAccessGatewayGlobalRouteProtocol	ViewSmartAccessGatewayGlobalRouteProtocol	get	全部资源 ``	无	无
smartag:DescribeSagPortList	DescribeSagPortList	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagTrafficTopN	DescribeSagTrafficTopN	get	全部资源 ``	无	无
smartag:GetQosAttribute	GetQosAttribute	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DescribeRouteDistributionStrategies	DescribeRouteDistributionStrategies	get	全部资源 ``	无	无
smartag:DescribeQosCars	DescribeQosCars	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DescribeSagWanSnat	DescribeSagWanSnat	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeBindableSmartAccessGateways	DescribeBindableSmartAccessGateways	get	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSmartAccessGatewayHa	DescribeSmartAccessGatewayHa	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateEnterpriseCode	UpdateEnterpriseCode	update	*EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode}`	无	无
smartag:UpgradeSmartAccessGateway	UpgradeSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DisassociateFlowLog	DisassociateFlowLog		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AssociateFlowLog	AssociateFlowLog		SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}` FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	无	无
smartag:RevokeSagInstanceFromCcn	RevokeSagInstanceFromCcn		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagUserDns	ModifySagUserDns		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySAGAdminPassword	ModifySAGAdminPassword		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteProbeTask	DeleteProbeTask		*ProbeTask `acs:smartag:{#regionId}:{#accountId}:probetask/{#ProbeTaskId}`	无	无
smartag:ModifyQos	ModifyQos	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DescribeSagExpressConnectInterfaceList	DescribeSagExpressConnectInterfaceList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:RoamClientUser	RoamClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateSmartAccessGatewayClientUser	CreateSmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:RebootSmartAccessGateway	RebootSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UnbindSmartAccessGateway	UnbindSmartAccessGateway		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagLan	ModifySagLan		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateEnterpriseCode	CreateEnterpriseCode	create	EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/`	无	无
smartag:DiagnoseSmartAccessGateway	DiagnoseSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeGrantSagVbrRules	DescribeGrantSagVbrRules	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeGrantRules	DescribeGrantRules	get	全部资源 ``	无	无
smartag:UpdateSmartAccessGatewayDns	UpdateSmartAccessGatewayDns		全部资源 ``	无	无
smartag:ViewSmartAccessGatewayWanSnat	ViewSmartAccessGatewayWanSnat	get	全部资源 ``	无	无
smartag:ListProbeTask	ListProbeTask	list	全部资源 ``	无	无
smartag:DescribeSmartAccessGatewayClientUsers	DescribeSmartAccessGatewayClientUsers	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GetSmartAGDpiAttribute	GetSmartAGDpiAttribute	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeCloudConnectNetworks	DescribeCloudConnectNetworks	get	全部资源 ``	无	无
smartag:DescribeSagRouteProtocolBgp	DescribeSagRouteProtocolBgp	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateQosCar	CreateQosCar	create	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DescribeGrantSagRules	DescribeGrantSagRules	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:RevokeInstanceFromVbr	RevokeInstanceFromVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:MoveResourceGroup	MoveResourceGroup		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagRouteProtocolOspf	DescribeSagRouteProtocolOspf	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:EnableSmartAccessGatewayUser	EnableSmartAccessGatewayUser	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateACL	CreateACL	create	Acl `acs:smartag:{#regionId}:{#accountId}:acl/`	无	无
smartag:ModifyQosPolicy	ModifyQosPolicy	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DeleteQosCar	DeleteQosCar	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DowngradeSmartAccessGatewaySoftware	DowngradeSmartAccessGatewaySoftware		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagWanList	DescribeSagWanList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeQosPolicies	DescribeQosPolicies	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:AddSnatEntry	AddSnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteSmartAccessGateway	DeleteSmartAccessGateway	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteSmartAccessGatewayClientUser	DeleteSmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeACLAttribute	DescribeACLAttribute	get	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:DeleteSagExpressConnectInterface	DeleteSagExpressConnectInterface	delete	全部资源 ``	无	无
smartag:UnbindSerialNumber	UnbindSerialNumber		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateSmartAccessGatewaySoftware	CreateSmartAccessGatewaySoftware	create	全部资源 ``	无	无
smartag:DescribeClientUserDNS	DescribeClientUserDNS	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagPortRouteProtocolList	DescribeSagPortRouteProtocolList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeFlowLogs	DescribeFlowLogs	get	FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/` FlowLog `acs:smartag::{#accountId}:flowlog/*`	无	无
smartag:ActiveFlowLog	ActiveFlowLog		*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#flowlogId}`	无	无
smartag:DescribeQoses	DescribeQoses	get	Qos `acs:smartag::{#accountId}:qos/` Qos `acs:smartag::{#accountId}:qos/` Qos `acs:smartag::{#accountId}:qos/*`	无	无
smartag:DeleteSagStaticRoute	DeleteSagStaticRoute	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteACLRule	DeleteACLRule	delete	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:DescribeSnatEntries	DescribeSnatEntries	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GrantSagInstanceToCcn	GrantSagInstanceToCcn		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyQosCar	ModifyQosCar	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DeleteACL	DeleteACL	delete	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:DescribeSagUserDns	DescribeSagUserDns	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListSmartAGApiUnsupportedFeature	ListSmartAGApiUnsupportedFeature	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagOnlineClientStatistics	DescribeSagOnlineClientStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ViewSmartAccessGatewayRoutes	ViewSmartAccessGatewayRoutes	get	全部资源 ``	无	无
smartag:CreateSagStaticRoute	CreateSagStaticRoute	create	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteQosPolicy	DeleteQosPolicy	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DeleteQos	DeleteQos	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:BindVbr	BindVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListSmartAGByAccessPoint	ListSmartAGByAccessPoint	get	全部资源 ``	无	无
smartag:ClearSagRouteableAddress	ClearSagRouteableAddress	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayOspfRoute	UpdateSmartAccessGatewayOspfRoute		全部资源 ``	无	无
smartag:GetAdvancedMonitorState	GetAdvancedMonitorState	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	无	无
smartag:UpdateProbeTask	UpdateProbeTask		全部资源 ``	无	无
smartag:DescribeSagCurrentDns	DescribeSagCurrentDns	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteRouteDistributionStrategy	DeleteRouteDistributionStrategy	delete	全部资源 ``	无	无
smartag:CreateProbeTask	CreateProbeTask		ProbeTask `acs:smartag:{#regionId}:{#accountId}:probetask/` *SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	无	无
smartag:DescribeSagWan4G	DescribeSagWan4G	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayGlobalRouteProtocol	UpdateSmartAccessGatewayGlobalRouteProtocol		全部资源 ``	无	无
smartag:ViewSmartAccessGatewayDns	ViewSmartAccessGatewayDns	get	全部资源 ``	无	无
smartag:AssociateQos	AssociateQos	update	Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagDropTopN	DescribeSagDropTopN	get	全部资源 ``	无	无
smartag:SetAdvancedMonitorState	SetAdvancedMonitorState		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	无	无
smartag:DescribeSagLanList	DescribeSagLanList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSmartAccessGateways	DescribeSmartAccessGateways	get	全部资源 ``	无	无
smartag:ModifySmartAccessGateway	ModifySmartAccessGateway	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteEnterpriseCode	DeleteEnterpriseCode	delete	*EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode}`	无	无
smartag:ListAccessPointNetworkQualities	ListAccessPointNetworkQualities	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySmartAccessGatewayClientUser	ModifySmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAGEnterpriseCode	UpdateSmartAGEnterpriseCode	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyHealthCheck	ModifyHealthCheck	update	全部资源 ``	无	无
smartag:ListAvailableServiceAddress	ListAvailableServiceAddress	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	无	无
smartag:ViewSmartAccessGatewayOspfRoute	ViewSmartAccessGatewayOspfRoute	get	全部资源 ``	无	无
smartag:UpdateSmartAGAccessPoint	UpdateSmartAGAccessPoint	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpgradeSmartAccessGatewaySoftware	UpgradeSmartAccessGatewaySoftware		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListDpiConfigError	ListDpiConfigError	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeUserFlowStatistics	DescribeUserFlowStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GetSmartAccessGatewayUseLimit	GetSmartAccessGatewayUseLimit	get	全部资源 ``	无	无
smartag:DescribeUnbindFlowLogSags	DescribeUnbindFlowLogSags	get	全部资源 ``	无	无
smartag:DescribeUserOnlineClientStatistics	DescribeUserOnlineClientStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayAdminPassword	UpdateSmartAccessGatewayAdminPassword		全部资源 ``	无	无
smartag:ModifySagRemoteAccess	ModifySagRemoteAccess	update	全部资源 ``	无	无
smartag:ModifySagManagementPort	ModifySagManagementPort		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteDnatEntry	DeleteDnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GrantInstanceToCbn	GrantInstanceToCbn		*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}`	无	无

资源（Resource）

下表是智能接入网关定义的资源，这些资源可以在 RAM 权限策略语句的Resource元素中使用，用来授予对该资源执行具体操作的权限。其中，资源 ARN 是资源在阿里云上的唯一标识。具体说明如下：

{#}为变量标识，需要您替换为实际值。例如：{#ramcode}需要您替换为实际的云服务RAM代码。
*表示全部。例如：
- {#resourceType}为*时：表示全部资源。
- {#regionId}为*时：表示全部地域。
- {#accountId}为*时：表示全部阿里云账号。

资源类型	资源 ARN
SmartAccessGateway	acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId} acs:smartag:{#regionId}:{#accountId}:smartaccessgateway/{#SmartAgId} acs:smartag:{#regionId}:{#accountId}:smartag/* acs:smartag::{#accountId}:smartag/
CloudConnectNetwork	acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId} acs:smartag:{#regionId}:{#accountId}:ccn/* acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId} acs:smartag:{#regionId}:{#accountId}:ccn/{#AssociatedCcnId} acs:smartag::{#accountId}:ccn/
Acl	acs:smartag:{#regionId}:{#accountId}:acl/{#AclId} acs:smartag:{#regionId}:{#accountId}:acl/* acs:smartag::{#accountId}:acl/
ApplicationBandwidthPackage	acs:smartag:{#regionId}:{#accountId}:abwp/{#ApplicationBandwidthPackageId}
Qos	acs:smartag:{#regionId}:{#accountId}:qos/* acs:smartag:{#regionId}:{#accountId}:qos/{#QosId} acs:smartag::{#accountId}:qos/
FlowLog	acs:smartag:{#regionId}:{#accountId}:flowlog/{#flowlogId} acs:smartag:{#regionId}:{#accountId}:flowlog/* acs:smartag::{#accountId}:flowlog/
EnterpriseCode	acs:smartag:{#regionId}:{#accountId}:enterprisecode/* acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode}
SagExpressConnectInterface	acs:smartag:{#regionId}:{#accountId}:sagexpressconnectinterface/*
ProbeTask	acs:smartag:{#regionId}:{#accountId}:probetask/{#ProbeTaskId} acs:smartag:{#regionId}:{#accountId}:probetask/*
SmartAGSmartag	acs:smartag:{#regionId}:{#accountId}:* acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}

条件（Condition）

下表是智能接入网关 定义的产品级条件关键字，这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用，用来描述授予权限的条件。以下仅列举产品级的条件关键字，阿里云定义的通用条件关键字也同样适用智能接入网关。

其中，数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符，否则无法匹配策略语句，授权行为无效。数据类型与条件运算符的对应关系，请参见条件操作类型。

条件关键字	描述	类型
acs:ResourceTag	标签信息	String
acs:RequestTag	请求标签	String

授权信息

权限策略通用结构

操作（Action）

资源（Resource）

条件（Condition）

相关操作