AliyunTracingAnalysisFullAccess is a service system policy that is managed by Alibaba Cloud. You can attach the AliyunTracingAnalysisFullAccess policy to a Resource Access Management (RAM) identity, such as a RAM user, RAM user group, and RAM role. The AliyunTracingAnalysisFullAccess policy: Provides full access to Tracing Analysis via Management Console.
Policy details
Type: service system policy
Creation time: 04:47:03 on September 21, 2018
Update time: 03:31:24 on January 22, 2026
Current version: v8
Policy content
{
"Version": "1",
"Statement": [
{
"Action": "xtrace:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "arms:*",
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "xtrace.aliyuncs.com"
}
}
},
{
"Action": [
"log:GetLogStoreLogs",
"log:GetIndex"
],
"Resource": "acs:log:*:*:project/proj-xtrace-*/logstore/*",
"Effect": "Allow"
},
{
"Action": [
"cms:Get*",
"cms:List*",
"log:GetAgentInstanceConfig",
"log:Get*",
"log:List*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"cms:UpdateServiceObservability",
"cms:CreateServiceObservability",
"cms:CreateService",
"cms:DeleteService",
"cms:UpdateService",
"log:UpdateAgentInstanceConfig",
"log:DeleteAgentInstanceConfig",
"log:CreateAgentInstanceConfig",
"log:CreateResourceRecord",
"log:UpdateResourceRecord",
"log:DeleteResourceRecord",
"cms:CreateServiceTask",
"cms:DeleteServiceTask",
"cms:CreateAlertRule",
"cms:PatchAlertRule",
"cms:DisableAlertRules",
"cms:EnableAlertRules",
"cms:DeleteAlertRules",
"cms:CreateMaintainWindow",
"cms:UpdateMaintainWindow",
"cms:DeleteMaintainWindow",
"cms:CreateChat",
"cms:CreateThread",
"cms:CreteEvaluationTask",
"cms:UpdateEvaluationTask",
"cms:CreatePlaygroundTask"
],
"Resource": "*",
"Effect": "Allow"
}
]
}