AliyunIDaaSEiamFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunIDaaSEiamFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunIDaaSEiamFullAccess policy: Manage permissions for the Employee Identity and Access Management (EIAM2.0).
Policy details
Type: service system policy
Creation time: 11:42:25 on February 25, 2022
Update time: 01:48:57 on May 25, 2023
Current version: v2
Policy content
{
"Version": "1",
"Statement": [
{
"Action": [
"ecs:DescribeNetworkInterfaces",
"ecs:DescribeNetworkInterfaceAttribute",
"ecs:DescribeSecurityGroups",
"ecs:DescribeSecurityGroupAttribute",
"ecs:DescribeSecurityGroupReferences"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"vpc:DescribeVpcs",
"vpc:DescribeVSwitches",
"vpc:DescribeNatGateways",
"vpc:DescribeSnatTableEntries"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Effect": "Allow",
"Action": "eiam:*",
"Resource": "*"
},
{
"Action": [
"ram:CreateServiceLinkedRole",
"ram:CheckServiceLinkedRoleExistence"
],
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "eiam.aliyuncs.com"
}
}
}
]
}