Alibaba Cloud DNS:Manage permissions

Grant read-only permissions on Alibaba Cloud DNS to a RAM user

Create a RAM user in the RAM console and attach the AliyunDNSReadOnlyAccess system policy to the RAM user. For more information about how to grant permissions to a RAM user, see Grant permissions to RAM users.

Grant full management permissions on Alibaba Cloud DNS to a RAM user

Attach the AliyunDNSFullAccess system policy to the RAM user in the RAM console.

Grant management permissions on a specific domain name to a RAM user

After a RAM user is granted management permissions on a specific domain name such as example.com, the RAM user has full permissions to manage the domain name.

1. Create a policy.

   

2. Configure the script.

   

The following example demonstrates the script configurations:

{
    "Version": "1",
    "Statement": [
        {
            "Action": "alidns:*",
            "Resource": "acs:alidns:*:*:domain/example.com",
            "Effect": "Allow"
        },
        {
            "Action": "alidns:*",
            "Resource": "acs:alidns:*:*:instance/dns-cn-st21yjl****(Enter the ID of the instance bound to the domain name)",
            "Effect": "Allow"
        },
        {
            "Action": [
                "alidns:DescribeSiteMonitorIspInfos",
                "alidns:DescribeSiteMonitorIspCityInfos",
                "alidns:DescribeSupportLines",
                "alidns:DescribeDomains",
                "alidns:DescribeDomainNs",
                "alidns:*Batch*",
                "alidns:DescribeDomainGroups"
            ],
            "Resource": "acs:alidns:*:*:*",
            "Effect": "Allow"
        }
    ]
}