RAM权限策略的Action资源Condition参考-智能接入网关-阿里云-智能接入网关(SAG)-阿里云帮助中心

访问控制（RAM）是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥，并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 智能接入网关 为 RAM 权限策略定义的操作（Action）、资源（Resource）和条件（Condition）。 智能接入网关 的 RAM 代码（RamCode）为 smartag ，支持的授权粒度为 资源级 。

权限策略通用结构

权限策略支持 JSON 格式，其通用结构如下：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

各字段含义如下：

Effect：权限策略效果。取值：Allow（允许）、Deny（拒绝）。
Action：授予允许或拒绝权限的具体操作。具体信息，请参见操作（Action）。
Resource：受操作影响的具体对象，您可以使用资源 ARN 来描述指定资源。具体信息，请参见资源（Resource）。
Condition：指授权生效的条件。可选字段。具体信息，请参见条件（Condition）。
- Condition_operator：条件运算符，不同类型的条件对应不同的条件运算符。具体信息，请参见权限策略基本元素。
- Condition_key：条件关键字。
- Condition_value：条件关键字对应的值。

操作（Action）

下表是智能接入网关定义的操作，这些操作可以在 RAM 权限策略语句的Action元素中使用，用来授予执行该操作的权限。下面对表中的具体项提供说明：

操作：是指具体的权限点。
API：是指操作对应的 API 接口。
访问级别：是指每个操作的访问级别，取值为写入（Write）、读取（Read）或列出（List）。
资源类型：是指操作中支持授权的资源类型。具体说明如下：
- 对于必选的资源类型，用前面加 * 表示。
- 对于不支持资源级授权的操作，用全部资源表示。
条件关键字：是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字。
关联操作：是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限，操作才能成功。

操作	API	访问级别	资源类型	条件关键字	关联操作
smartag:DescribeSagWanSnat	DescribeSagWanSnat	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagPortRole	ModifySagPortRole		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateServiceAddress	CreateServiceAddress		全部资源 ``	无	无
smartag:DescribeQosPolicies	DescribeQosPolicies	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:CreateProbeTask	CreateProbeTask		ProbeTask `acs:smartag:{#regionId}:{#accountId}:probetask/` *SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	无	无
smartag:DescribeGrantSagVbrRules	DescribeGrantSagVbrRules	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSmartAccessGatewayVersions	DescribeSmartAccessGatewayVersions	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayDns	UpdateSmartAccessGatewayDns		全部资源 ``	无	无
smartag:DisableSmartAGDpiMonitor	DisableSmartAGDpiMonitor	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GrantInstanceToCbn	GrantInstanceToCbn		*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}`	无	无
smartag:UpdateSmartAGEnterpriseCode	UpdateSmartAGEnterpriseCode	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ViewSmartAccessGatewayPortRouteProtocol	ViewSmartAccessGatewayPortRouteProtocol	get	全部资源 ``	无	无
smartag:ListAccessPoints	ListAccessPoints	get	全部资源 ``	无	无
smartag:ViewSmartAccessGatewayGlobalRouteProtocol	ViewSmartAccessGatewayGlobalRouteProtocol	get	全部资源 ``	无	无
smartag:GrantSagInstanceToCcn	GrantSagInstanceToCcn		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSnatEntries	DescribeSnatEntries	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagHa	ModifySagHa	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListDpiConfigError	ListDpiConfigError	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpgradeSmartAccessGatewaySoftware	UpgradeSmartAccessGatewaySoftware		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ClearSagCipher	ClearSagCipher		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateQosPolicy	CreateQosPolicy	create	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DescribeGrantRules	DescribeGrantRules	get	全部资源 ``	无	无
smartag:DescribeSmartAccessGateways	DescribeSmartAccessGateways	get	全部资源 ``	无	无
smartag:DescribeFlowLogs	DescribeFlowLogs	get	FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/` FlowLog `acs:smartag::{#accountId}:flowlog/*`	无	无
smartag:CreateQos	CreateQos	create	Qos `acs:smartag:{#regionId}:{#accountId}:qos/`	无	无
smartag:BindVbr	BindVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AddDnatEntry	AddDnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeUnbindFlowLogSags	DescribeUnbindFlowLogSags	get	全部资源 ``	无	无
smartag:AssociateACL	AssociateACL	create	Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteRouteDistributionStrategy	DeleteRouteDistributionStrategy	delete	全部资源 ``	无	无
smartag:DeleteSmartAccessGatewayClientUser	DeleteSmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateFlowLog	CreateFlowLog	create	FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/`	无	无
smartag:DescribeSagRemoteAccess	DescribeSagRemoteAccess	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayVersion	UpdateSmartAccessGatewayVersion	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySmartAccessGatewayClientUser	ModifySmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ProbeAccessPointNetworkQuality	ProbeAccessPointNetworkQuality		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ViewSmartAccessGatewayDnsForwards	ViewSmartAccessGatewayDnsForwards	get	全部资源 ``	无	无
smartag:DeleteSmartAccessGateway	DeleteSmartAccessGateway	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSmartAccessGatewayAttribute	DescribeSmartAccessGatewayAttribute	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagGlobalRouteProtocol	DescribeSagGlobalRouteProtocol	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AddSmartAccessGatewayDnsForward	AddSmartAccessGatewayDnsForward		全部资源 ``	无	无
smartag:DescribeBindableSmartAccessGateways	DescribeBindableSmartAccessGateways	get	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayBgpRoute	UpdateSmartAccessGatewayBgpRoute		全部资源 ``	无	无
smartag:DeleteACL	DeleteACL	delete	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:GetSmartAGDpiAttribute	GetSmartAGDpiAttribute	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyFlowLogAttribute	ModifyFlowLogAttribute	update	全部资源 ``	无	无
smartag:ViewSmartAccessGatewayDns	ViewSmartAccessGatewayDns	get	全部资源 ``	无	无
smartag:DiscribeSmartAccessGatewayDiagnosisReport	DiscribeSmartAccessGatewayDiagnosisReport	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeACLAttribute	DescribeACLAttribute	get	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:DeleteQosCar	DeleteQosCar	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:ModifySagWifi	ModifySagWifi		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAGAccessPoint	UpdateSmartAGAccessPoint	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagRouteList	DescribeSagRouteList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeCloudConnectNetworks	DescribeCloudConnectNetworks	get	全部资源 ``	无	无
smartag:UpdateProbeTask	UpdateProbeTask		全部资源 ``	无	无
smartag:RevokeInstanceFromVbr	RevokeInstanceFromVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagStaticRouteList	DescribeSagStaticRouteList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DisableSmartAccessGatewayUser	DisableSmartAccessGatewayUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagExpressConnectInterface	ModifySagExpressConnectInterface	update	全部资源 ``	无	无
smartag:DeleteEnterpriseCode	DeleteEnterpriseCode	delete	*EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode}`	无	无
smartag:DescribeQosCars	DescribeQosCars	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:BindSmartAccessGateway	BindSmartAccessGateway	none	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	无	无
smartag:GetAclAttribute	GetAclAttribute	get	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:UpdateEnterpriseCode	UpdateEnterpriseCode	update	*EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode}`	无	无
smartag:BindSerialNumber	BindSerialNumber	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GetAdvancedMonitorState	GetAdvancedMonitorState	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	无	无
smartag:DeleteHealthCheck	DeleteHealthCheck	delete	全部资源 ``	无	无
smartag:DescribeUserOnlineClientStatistics	DescribeUserOnlineClientStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteSagStaticRoute	DeleteSagStaticRoute	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyClientUserDNS	ModifyClientUserDNS	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateSmartAccessGateway	CreateSmartAccessGateway	create	SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/`	无	无
smartag:DeleteDnatEntry	DeleteDnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeGrantSagRules	DescribeGrantSagRules	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListEnterpriseCode	ListEnterpriseCode	list	EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/`	无	无
smartag:ActivateSmartAccessGateway	ActivateSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateACL	CreateACL	create	Acl `acs:smartag:{#regionId}:{#accountId}:acl/`	无	无
smartag:RoamClientUser	RoamClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagExpressConnectInterfaceList	DescribeSagExpressConnectInterfaceList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagGlobalRouteProtocol	ModifySagGlobalRouteProtocol		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpgradeSmartAccessGateway	UpgradeSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteServiceAddress	DeleteServiceAddress		全部资源 ``	无	无
smartag:CreateQosCar	CreateQosCar	create	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DescribeSagWifi	DescribeSagWifi	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AssociateQos	AssociateQos	update	Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateCloudConnectNetwork	CreateCloudConnectNetwork	create	CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/`	无	无
smartag:ViewSmartAccessGatewayBgpRoute	ViewSmartAccessGatewayBgpRoute	get	全部资源 ``	无	无
smartag:UpdateSmartAccessGatewayAdminPassword	UpdateSmartAccessGatewayAdminPassword		全部资源 ``	无	无
smartag:ModifyHealthCheck	ModifyHealthCheck	update	全部资源 ``	无	无
smartag:DisassociateFlowLog	DisassociateFlowLog		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagWan4G	DescribeSagWan4G	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagHa	DescribeSagHa	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagUserDns	DescribeSagUserDns	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAccessGatewayWanSnat	UpdateSmartAccessGatewayWanSnat		全部资源 ``	无	无
smartag:GrantSagInstanceToVbr	GrantSagInstanceToVbr		全部资源 ``	无	无
smartag:ModifyQos	ModifyQos	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DeleteACLRule	DeleteACLRule	delete	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:ModifySagWanSnat	ModifySagWanSnat		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeUserOnlineClients	DescribeUserOnlineClients	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DowngradeSmartAccessGateway	DowngradeSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeHealthChecks	DescribeHealthChecks	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagPortList	DescribeSagPortList	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagRemoteAccess	ModifySagRemoteAccess	update	全部资源 ``	无	无
smartag:ClearSagRouteableAddress	ClearSagRouteableAddress	delete	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GetCloudConnectNetworkUseLimit	GetCloudConnectNetworkUseLimit	get	全部资源 ``	无	无
smartag:CreateHealthCheck	CreateHealthCheck	create	全部资源 ``	无	无
smartag:DescribeSagManagementPort	DescribeSagManagementPort	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyACLRule	ModifyACLRule	update	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:CreateSagStaticRoute	CreateSagStaticRoute	create	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:MoveResourceGroup	MoveResourceGroup		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagOnlineClientStatistics	DescribeSagOnlineClientStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListProbeTask	ListProbeTask	list	全部资源 ``	无	无
smartag:UnbindVbr	UnbindVbr		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteCloudConnectNetwork	DeleteCloudConnectNetwork	delete	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	无	无
smartag:UnbindSerialNumber	UnbindSerialNumber		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagWanList	DescribeSagWanList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteSnatEntry	DeleteSnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DowngradeSmartAccessGatewaySoftware	DowngradeSmartAccessGatewaySoftware		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListAccessPointNetworkQualities	ListAccessPointNetworkQualities	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeRouteDistributionStrategies	DescribeRouteDistributionStrategies	get	全部资源 ``	无	无
smartag:GetQosAttribute	GetQosAttribute	get	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:ResetSmartAccessGatewayClientUserPassword	ResetSmartAccessGatewayClientUserPassword		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyQosPolicy	ModifyQosPolicy	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DescribeSAGDeviceInfo	DescribeSAGDeviceInfo	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAGDpiAttribute	UpdateSmartAGDpiAttribute	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagTrafficTopN	DescribeSagTrafficTopN	get	全部资源 ``	无	无
smartag:AssociateSmartAGWithApplicationBandwidthPackage	AssociateSmartAGWithApplicationBandwidthPackage		全部资源 ``	无	无
smartag:UnbindSmartAccessGateway	UnbindSmartAccessGateway	none	CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AttachCcnInstanceToCen	AttachCcnInstanceToCen	none	全部资源 ``	无	无
smartag:ModifySagStaticRoute	ModifySagStaticRoute	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteSagExpressConnectInterface	DeleteSagExpressConnectInterface	delete	全部资源 ``	无	无
smartag:ViewSmartAccessGatewayRoutes	ViewSmartAccessGatewayRoutes	get	全部资源 ``	无	无
smartag:DescribeDnatEntries	DescribeDnatEntries	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:RebootSmartAccessGateway	RebootSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AddACLRule	AddACLRule	create	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:CreateSagExpressConnectInterface	CreateSagExpressConnectInterface	create	全部资源 ``	无	无
smartag:ListAvailableServiceAddress	ListAvailableServiceAddress	list	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	无	无
smartag:DescribeSmartAccessGatewayClientUsers	DescribeSmartAccessGatewayClientUsers	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:UpdateSmartAGUserAccelerateConfig	UpdateSmartAGUserAccelerateConfig		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:KickOutClients	KickOutClients		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeactiveFlowLog	DeactiveFlowLog		*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#flowlogId}`	无	无
smartag:UpdateSmartAccessGatewayOspfRoute	UpdateSmartAccessGatewayOspfRoute		全部资源 ``	无	无
smartag:ModifySagLan	ModifySagLan		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DisassociateACL	DisassociateACL	delete	全部资源 ``	无	无
smartag:SetAdvancedMonitorState	SetAdvancedMonitorState		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAgId}`	无	无
smartag:ModifySagPortRouteProtocol	ModifySagPortRouteProtocol		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateSmartAccessGatewaySoftware	CreateSmartAccessGatewaySoftware	create	全部资源 ``	无	无
smartag:CreateSmartAccessGatewayClientUser	CreateSmartAccessGatewayClientUser		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteQosPolicy	DeleteQosPolicy	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:DeleteQos	DeleteQos	delete	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无
smartag:EnableSmartAccessGatewayUser	EnableSmartAccessGatewayUser	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:AssociateFlowLog	AssociateFlowLog		SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}` FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	无	无
smartag:RevokeSagInstanceFromCcn	RevokeSagInstanceFromCcn		CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagRouteProtocolOspf	ModifySagRouteProtocolOspf	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagPortRouteProtocolList	DescribeSagPortRouteProtocolList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListSmartAGApiUnsupportedFeature	ListSmartAGApiUnsupportedFeature	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ViewSmartAccessGatewayWanSnat	ViewSmartAccessGatewayWanSnat	get	全部资源 ``	无	无
smartag:UpdateSmartAccessGatewayGlobalRouteProtocol	UpdateSmartAccessGatewayGlobalRouteProtocol		全部资源 ``	无	无
smartag:ModifyRouteDistributionStrategy	ModifyRouteDistributionStrategy	update	全部资源 ``	无	无
smartag:DetachCcnInstanceFromCen	DetachCcnInstanceFromCen	none	全部资源 ``	无	无
smartag:DescribeUserFlowStatistics	DescribeUserFlowStatistics	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ListSmartAGByAccessPoint	ListSmartAGByAccessPoint	get	全部资源 ``	无	无
smartag:DissociateSmartAGFromApplicationBandwidthPackage	DissociateSmartAGFromApplicationBandwidthPackage		全部资源 ``	无	无
smartag:DescribeSagRouteProtocolBgp	DescribeSagRouteProtocolBgp	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagRouteProtocolOspf	DescribeSagRouteProtocolOspf	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DiagnoseSmartAccessGateway	DiagnoseSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ActiveFlowLog	ActiveFlowLog		*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#flowlogId}`	无	无
smartag:DescribeDeviceAutoUpgradePolicy	DescribeDeviceAutoUpgradePolicy	get	全部资源 ``	无	无
smartag:EnableSmartAGDpiMonitor	EnableSmartAGDpiMonitor	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifySagUserDns	ModifySagUserDns		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:CreateEnterpriseCode	CreateEnterpriseCode	create	EnterpriseCode `acs:smartag:{#regionId}:{#accountId}:enterprisecode/`	无	无
smartag:AddSnatEntry	AddSnatEntry		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyACL	ModifyACL	update	*Acl `acs:smartag:{#regionId}:{#accountId}:acl/{#AclId}`	无	无
smartag:UpdateSmartAccessGatewayPortRouteProtocol	UpdateSmartAccessGatewayPortRouteProtocol		全部资源 ``	无	无
smartag:DescribeSagDropTopN	DescribeSagDropTopN	get	全部资源 ``	无	无
smartag:UpdateSmartAccessGatewayDnsForward	UpdateSmartAccessGatewayDnsForward		全部资源 ``	无	无
smartag:ViewSmartAccessGatewayOspfRoute	ViewSmartAccessGatewayOspfRoute	get	全部资源 ``	无	无
smartag:DeleteFlowLog	DeleteFlowLog	delete	*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	无	无
smartag:ModifySmartAccessGateway	ModifySmartAccessGateway	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeACLs	DescribeACLs	get	全部资源 ``	无	无
smartag:ModifySagRouteProtocolBgp	ModifySagRouteProtocolBgp	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteSmartAccessGatewayDnsForward	DeleteSmartAccessGatewayDnsForward		全部资源 ``	无	无
smartag:DescribeFlowLogSags	DescribeFlowLogSags	get	*FlowLog `acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}`	无	无
smartag:ModifySagWan	ModifySagWan	update	全部资源 ``	无	无
smartag:DisassociateQos	DisassociateQos	update	Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}` SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagLanList	DescribeSagLanList	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSagVbrRelations	DescribeSagVbrRelations	get	全部资源 ``	无	无
smartag:ModifySmartAccessGatewayUpBandwidth	ModifySmartAccessGatewayUpBandwidth	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DeleteProbeTask	DeleteProbeTask		*ProbeTask `acs:smartag:{#regionId}:{#accountId}:probetask/{#ProbeTaskId}`	无	无
smartag:ModifySAGAdminPassword	ModifySAGAdminPassword		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:RevokeInstanceFromCbn	RevokeInstanceFromCbn		*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId}`	无	无
smartag:DescribeClientUserDNS	DescribeClientUserDNS	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeQoses	DescribeQoses	get	Qos `acs:smartag::{#accountId}:qos/` Qos `acs:smartag::{#accountId}:qos/` Qos `acs:smartag::{#accountId}:qos/*`	无	无
smartag:UnlockSmartAccessGateway	UnlockSmartAccessGateway		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeSmartAccessGatewayHa	DescribeSmartAccessGatewayHa	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyCloudConnectNetwork	ModifyCloudConnectNetwork	update	*CloudConnectNetwork `acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId}`	无	无
smartag:ModifySagManagementPort	ModifySagManagementPort		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:SynchronizeSmartAGWebConfig	SynchronizeSmartAGWebConfig		*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:ModifyDeviceAutoUpgradePolicy	ModifyDeviceAutoUpgradePolicy	update	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:GetSmartAccessGatewayUseLimit	GetSmartAccessGatewayUseLimit	get	全部资源 ``	无	无
smartag:DescribeSagCurrentDns	DescribeSagCurrentDns	get	*SmartAccessGateway `acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}`	无	无
smartag:DescribeHealthCheckAttribute	DescribeHealthCheckAttribute	get	全部资源 ``	无	无
smartag:ModifyQosCar	ModifyQosCar	update	*Qos `acs:smartag:{#regionId}:{#accountId}:qos/{#QosId}`	无	无

资源（Resource）

下表是智能接入网关定义的资源，这些资源可以在 RAM 权限策略语句的Resource元素中使用，用来授予对该资源执行具体操作的权限。其中，资源 ARN 是资源在阿里云上的唯一标识。具体说明如下：

{#}为变量标识，需要您替换为实际值。例如：{#ramcode}需要您替换为实际的云服务RAM代码。
*表示全部。例如：
- {#resourceType}为*时：表示全部资源。
- {#regionId}为*时：表示全部地域。
- {#accountId}为*时：表示全部阿里云账号。

资源类型	资源 ARN
SmartAccessGateway	acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId} acs:smartag:{#regionId}:{#accountId}:smartaccessgateway/{#SmartAgId} acs:smartag:{#regionId}:{#accountId}:smartag/* acs:smartag::{#accountId}:smartag/
Qos	acs:smartag:{#regionId}:{#accountId}:qos/{#QosId} acs:smartag:{#regionId}:{#accountId}:qos/* acs:smartag::{#accountId}:qos/
ProbeTask	acs:smartag:{#regionId}:{#accountId}:probetask/* acs:smartag:{#regionId}:{#accountId}:probetask/{#ProbeTaskId}
CloudConnectNetwork	acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnInstanceId} acs:smartag:{#regionId}:{#accountId}:ccn/{#AssociatedCcnId} acs:smartag:{#regionId}:{#accountId}:ccn/* acs:smartag:{#regionId}:{#accountId}:ccn/{#CcnId} acs:smartag::{#accountId}:ccn/
FlowLog	acs:smartag:{#regionId}:{#accountId}:flowlog/* acs:smartag::{#accountId}:flowlog/ acs:smartag:{#regionId}:{#accountId}:flowlog/{#FlowLogId}
Acl	acs:smartag:{#regionId}:{#accountId}:acl/{#AclId} acs:smartag:{#regionId}:{#accountId}:acl/* acs:smartag::{#accountId}:acl/
EnterpriseCode	acs:smartag:{#regionId}:{#accountId}:enterprisecode/{#EnterpriseCode} acs:smartag:{#regionId}:{#accountId}:enterprisecode/*
SmartAGSmartag	acs:smartag:{#regionId}:{#accountId}:* acs:smartag:{#regionId}:{#accountId}:smartag/{#SmartAGId}
ApplicationBandwidthPackage	acs:smartag:{#regionId}:{#accountId}:abwp/{#ApplicationBandwidthPackageId}
SagExpressConnectInterface	acs:smartag:{#regionId}:{#accountId}:sagexpressconnectinterface/*

条件（Condition）

下表是智能接入网关 定义的产品级条件关键字，这些条件关键字可以在 RAM 权限策略语句的Condition元素中使用，用来描述授予权限的条件。以下仅列举产品级的条件关键字，阿里云定义的通用条件关键字也同样适用智能接入网关。

其中，数据类型决定了您可以使用哪些条件运算符将请求中的值与权限策略语句中的值进行比较。您必须使用与数据类型匹配的条件运算符，否则无法匹配策略语句，授权行为无效。数据类型与条件运算符的对应关系，请参见条件操作类型。

条件关键字	描述	类型
acs:ResourceTag	标签信息	String
acs:RequestTag	请求标签	String

授权信息

权限策略通用结构

操作（Action）

资源（Resource）

条件（Condition）

相关操作