AliyunDLAFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunDLAFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunDLAFullAccess policy: Provides full access to Data Lake Analytics via Management Console.
Policy details
Type: service system policy
Creation time: 05:05:13 on October 12, 2018
Update time: 08:29:52 on August 18, 2021
Current version: v6
Policy content
{
"Version": "1",
"Statement": [
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "openanalytics.aliyuncs.com"
}
}
},
{
"Action": "openanalytics:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:ListRoles",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "dms:LoginDatabase",
"Resource": "acs:openanalytics:*:*:*",
"Effect": "Allow"
},
{
"Action": "ram:PassRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"acs:Service": "openanalytics.aliyuncs.com"
}
}
},
{
"Action": [
"dts:DescribeSubscriptionInstances",
"dts:DescribeConsumerGroup",
"dts:DescribeDtsJobDetail"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ecs:DescribeSecurityGroups"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"alikafka:ListInstance",
"alikafka:ListTopic",
"alikafka:QueryMessage"
],
"Resource": "acs:alikafka:*:*:*",
"Effect": "Allow"
},
{
"Action": [
"lindorm:GetSpecifiedLindormInstanceList",
"lindorm:GetLdfsDirectories",
"lindorm:CreateLdfsDirectory",
"lindorm:CheckLdfsUserPermission",
"lindorm:GetLtsStreams",
"lindorm:GetLtsStreamDetails"
],
"Resource": "*",
"Effect": "Allow"
}
]
}