AliyunARMSReadOnlyAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunARMSReadOnlyAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunARMSReadOnlyAccess policy: Provides read-only access to Application Real-Time Monitoring Service via Management Console.
Policy details
Type: service system policy
Creation time: 12:04:42 on May 09, 2019
Update time: 01:44:51 on January 30, 2026
Current version: v16
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"arms:DoInsightsAction",
"arms:Describe*",
"arms:List*",
"arms:Get*",
"arms:Search*",
"arms:Check*",
"arms:Query*",
"xtrace:Read*",
"xtrace:Get*",
"xtrace:Describe*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"cms:Get*",
"cms:List*",
"cms:Query*",
"cms:BatchQuery*",
"cms:Describe*",
"cms:Cursor",
"cms:BatchGet",
"cms:BatchExport",
"cms:Check*",
"log:GetAgentInstanceConfig",
"log:GetResource",
"log:ListResources",
"log:GetResourceRecord",
"log:ListResourceRecords",
"log:GetLogStoreLogs",
"log:GetIndex",
"log:ListProject",
"log:listLogStores",
"log:ListSavedSearch",
"log:ListStoreViews",
"log:GetStoreViewIndex"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "log:GetMLServiceResults",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"log:GetLogStoreLogs",
"log:QueryPrometheusMetrics",
"log:QueryMetrics"
],
"Resource": [
"acs:log:*:*:project/*/logstore/aliyun-prom-*",
"acs:log:*:*:project/*/storeview/aliyun_prom_*"
],
"Effect": "Allow"
},
{
"Action": [
"log:GetLogStoreLogs",
"log:GetIndex"
],
"Resource": "acs:log:*:*:project/proj-xtrace-*/logstore/*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": [
"cms:CreateChat",
"cms:CreateThread"
],
"Resource": "acs:cms:*:*:digitalemployee/apsara-*"
}
]
}