全部产品
Search
文档中心

数据管理 DMS:授权信息

更新时间:Feb 12, 2026

访问控制(RAM)是阿里云提供的管理用户身份与资源访问权限的服务。使用 RAM 可以让您避免与其他用户共享阿里云账号密钥,并可按需为用户授予最小权限。RAM 中使用权限策略描述授权的具体内容。

本文为您介绍 数据管理 为 RAM 权限策略定义的操作(Action)、资源(Resource)和条件(Condition)。 数据管理 的 RAM 代码(RamCode)为 dms,dms-console ,支持的授权粒度为 操作级

权限策略通用结构

权限策略支持 JSON 格式,其通用结构如下:

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}        

各字段含义如下:

  • Effect:权限策略效果。取值:Allow(允许)、Deny(拒绝)。

  • Action:授予允许或拒绝权限的具体操作。具体信息,请参见操作(Action)

  • Resource:受操作影响的具体对象,您可以使用资源 ARN 来描述指定资源。具体信息,请参见资源(Resource)

  • Condition:指授权生效的条件。可选字段。具体信息,请参见条件(Condition)

    • Condition_operator:条件运算符,不同类型的条件对应不同的条件运算符。具体信息,请参见权限策略基本元素

    • Condition_key:条件关键字。

    • Condition_value:条件关键字对应的值。

操作(Action)

下表是数据管理定义的操作,这些操作可以在 RAM 权限策略语句的Action元素中使用,用来授予执行该操作的权限。下面对表中的具体项提供说明:

  • 操作:是指具体的权限点。

  • API:是指操作对应的 API 接口。

  • 访问级别:是指每个操作的访问级别,取值为写入(Write)、读取(Read)或列出(List)。

  • 资源类型:是指操作中支持授权的资源类型。具体说明如下:

    • 对于必选的资源类型,用前面加 * 表示。

    • 对于不支持资源级授权的操作,用全部资源表示。

  • 条件关键字:是指云产品自身定义的条件关键字。该列不体现适用于任何操作的通用条件关键字

  • 关联操作:是指成功执行操作所需要的其他权限。操作者必须同时具备关联操作的权限,操作才能成功。

操作

API

访问级别

资源类型

条件关键字

关联操作

dms:ListAuthorizedUsersForDatabase ListAuthorizedUsersForDatabase none

*全部资源

*

dms:ListLogicTableRouteConfig ListLogicTableRouteConfig list

*全部资源

*

dms:RemoveTableFromCategory RemoveTableFromCategory none

*全部资源

*

dms:UpdateWorkspace UpdateWorkspace update

*全部资源

*

dms:UpdateTaskFlowTimeVariables UpdateTaskFlowTimeVariables update

*全部资源

*

dms:StopTaskFlowInstance StopTaskFlowInstance none

*全部资源

*

dms:GetProxy GetProxy get

*全部资源

*

dms:GetOpLog GetOpLog get

*全部资源

*

dms:ListTaskFlow ListTaskFlow list

*全部资源

*

dms:CreateProxyAccess CreateProxyAccess create

*全部资源

*

dms:GetTaskInstanceRelation GetTaskInstanceRelation get

*全部资源

*

dms:ListUsers ListUsers list

*全部资源

*

dms:RevokeTemplateAuthority RevokeTemplateAuthority none

*全部资源

*

dms:ListDataLakeFunctionName ListDataLakeFunctionName get

*全部资源

*

dms:RegisterUser RegisterUser create

*全部资源

*

dms:ListDBTaskSQLJobDetail ListDBTaskSQLJobDetail list

*全部资源

*

dms:ListSensitiveColumnInfo ListSensitiveColumnInfo list

*全部资源

*

dms:EditLogicDatabase EditLogicDatabase update

*全部资源

*

dms:ChangeLhDagOwner ChangeLhDagOwner update

*全部资源

*

dms:GetWorkspace GetWorkspace get

*全部资源

*

dms:GetPhysicalDatabase GetPhysicalDatabase get

*全部资源

*

dms:BatchCreateDataLakePartitions BatchCreateDataLakePartitions create

*全部资源

*

dms:ListInstances ListInstances list

*全部资源

*

dms:UpdateAuthorityTemplate UpdateAuthorityTemplate update

*全部资源

*

dms:OfflineTaskFlow OfflineTaskFlow none

*全部资源

*

dms:GetDataLakeDatabase GetDataLakeDatabase get

*全部资源

*

dms:CheckBatchTableAccessPermission CheckBatchTableAccessPermission none

*全部资源

*

dms:CreateOrder CreateOrder create

*全部资源

*

dms:SyncDatabaseMeta SyncDatabaseMeta update

*全部资源

*

dms:GetStructSyncExecSqlDetail GetStructSyncExecSqlDetail get

*全部资源

*

dms:SetOwners SetOwners update

*全部资源

*

dms:GetDataImportSQL GetDataImportSQL none

*全部资源

*

dms:RetryDataCorrectPreCheck RetryDataCorrectPreCheck update

*全部资源

*

dms:SubmitStructSyncOrderApproval SubmitStructSyncOrderApproval update

*全部资源

*

dms:SubmitOrderApproval SubmitOrderApproval update

*全部资源

*

dms:GetDataTrackJobTableMeta GetDataTrackJobTableMeta none

*全部资源

*

dms:ListIndexes ListIndexes list

*全部资源

*

dms:ListLhTaskFlowAndScenario ListLhTaskFlowAndScenario list

*全部资源

*

dms:GetStandardGroup GetStandardGroup get

*全部资源

*

dms:CreateLogicDatabase CreateLogicDatabase create

*全部资源

*

dms:SyncInstanceMeta SyncInstanceMeta update

*全部资源

*

dms:ExecuteDataExport ExecuteDataExport update

*全部资源

*

dms:ListColumns ListColumns list

*全部资源

*

dms:ListDataLakeTableName ListDataLakeTableName get

*全部资源

*

dms:GetUserActiveTenant GetUserActiveTenant get

*全部资源

*

dms:DeleteInstance DeleteInstance delete

*全部资源

*

dms:ExecuteStructSync ExecuteStructSync update

*全部资源

*

dms:ListSQLReviewOriginSQL ListSQLReviewOriginSQL list

*全部资源

*

dms:ListEffectiveOrders ListEffectiveOrders list

*全部资源

*

dms:GetDataArchiveCount GetDataArchiveCount none

*全部资源

*

dms:ListUserTenants ListUserTenants list

*全部资源

*

dms:ModifyDesensitizationStrategy ModifyDesensitizationStrategy update

*全部资源

*

dms:GetUser GetUser get

*全部资源

*

dms:ListInstanceLoginAuditLog ListInstanceLoginAuditLog list

*全部资源

*

dms:GetTableDBTopology GetTableDBTopology get

*全部资源

*

dms:CreateStandardGroup CreateStandardGroup create

*全部资源

*

dms:GetLogicDatabase GetLogicDatabase get

*全部资源

*

dms:CreateDataLakeFunction CreateDataLakeFunction create

*全部资源

*

dms:ListDDLPublishRecords ListDDLPublishRecords list

*全部资源

*

dms:GetTaskFlowGraph GetTaskFlowGraph get

*全部资源

*

dms:ListOrders ListOrders list

*全部资源

*

dms:UpdateTaskFlowConstants UpdateTaskFlowConstants update

*全部资源

*

dms:ListAuthorizedUsersForInstance ListAuthorizedUsersForInstance none

*全部资源

*

dms:AnalyzeSQLLineage AnalyzeSQLLineage get

*全部资源

*

dms:GetDBTopology GetDBTopology get

*全部资源

*

dms:DeleteWorkspace DeleteWorkspace delete

*全部资源

*

dms:RevokeUserPermission RevokeUserPermission delete

*全部资源

*

dms:GetTableTopology GetTableTopology get

*全部资源

*

dms:GetDataLakeCatalog GetDataLakeCatalog get

*全部资源

*

dms:CloseOrder CloseOrder update

*全部资源

*

dms:ListSQLExecAuditLog ListSQLExecAuditLog list

*全部资源

*

dms:DeleteDataLakeDatabase DeleteDataLakeDatabase delete

*全部资源

*

dms:ListDataLakePartitionByFilter ListDataLakePartitionByFilter get

*全部资源

*

dms:BuyPayAsYouGoOrder BuyPayAsYouGoOrder create

*全部资源

*

dms:GetTableDesignProjectInfo GetTableDesignProjectInfo get

*全部资源

*

dms:UpdateDataLakePartition UpdateDataLakePartition update

*全部资源

*

dms:GetDataCorrectTaskDetail GetDataCorrectTaskDetail get

*全部资源

*

dms:CreateDataCorrectOrder CreateDataCorrectOrder create

*全部资源

*

dms:ListTaskFlowsByPage ListTaskFlowsByPage list

*全部资源

*

dms:DeleteUser DeleteUser delete

*全部资源

*

dms:DownloadDataTrackResult DownloadDataTrackResult none

*全部资源

*

dms:ListWorkspaces ListWorkspaces list

*全部资源

*

dms:AddAuthorityTemplateItems AddAuthorityTemplateItems update

*全部资源

*

dms:ListTasksInTaskFlow ListTasksInTaskFlow list

*全部资源

*

dms:GetAbacPolicy GetAbacPolicy none

*全部资源

*

dms:GetTableKnowledgeInfo GetTableKnowledgeInfo get

*全部资源

*

dms:GetLhSpaceByName GetLhSpaceByName get

*全部资源

*

dms:GetTableDesignProjectFlow GetTableDesignProjectFlow get

*全部资源

*

dms:DeleteLogicDatabase DeleteLogicDatabase delete

*全部资源

*

dms:CreateDataImportOrder CreateDataImportOrder create

*全部资源

*

dms:GetDataTrackOrderDetail GetDataTrackOrderDetail none

*全部资源

*

dms:ListScenarios ListScenarios list

*全部资源

*

dms:CreateMetaCategory CreateMetaCategory create

*全部资源

*

dms:GetInstance GetInstance get

*全部资源

*

dms:GetDataCorrectBackupFiles GetDataCorrectBackupFiles get

*全部资源

*

dms:CreateFreeLockCorrectOrder CreateFreeLockCorrectOrder create

*全部资源

*

dms:ListDatabases ListDatabases list

*全部资源

*

dms:ListDatabaseUserPermssions ListDatabaseUserPermssions list

*全部资源

*

dms:ListTaskFlowInstance ListTaskFlowInstance list

*全部资源

*

dms:GetRuleNumLimitOfSLA GetRuleNumLimitOfSLA get

*全部资源

*

dms:ListProxySQLExecAuditLog ListProxySQLExecAuditLog list

*全部资源

*

dms:ModifyDataCorrectExecSQL ModifyDataCorrectExecSQL update

*全部资源

*

dms:CreateDatabaseExportOrder CreateDatabaseExportOrder create

*全部资源

*

dms:GetSQLReviewCheckResultStatus GetSQLReviewCheckResultStatus get

*全部资源

*

dms:CreateDataExportOrder CreateDataExportOrder create

*全部资源

*

dms:ListLogicDatabases ListLogicDatabases list

*全部资源

*

dms:UpdateUser UpdateUser update

*全部资源

*

dms:UpdateDataLakeFunction UpdateDataLakeFunction create

*全部资源

*

dms:InspectProxyAccessSecret InspectProxyAccessSecret get

*全部资源

*

dms:SearchDataTrackResult SearchDataTrackResult none

*全部资源

*

dms:GetDataTrackJobDegree GetDataTrackJobDegree none

*全部资源

*

dms:CreateTask CreateTask create

*全部资源

*

dms:ListInstanceUserPermissions ListInstanceUserPermissions list

*全部资源

*

dms:ListUserOwnedResources ListUserOwnedResources list

*全部资源

*

dms:GetUserUploadFileJob GetUserUploadFileJob get

*全部资源

*

dms:CreateStructSyncOrder CreateStructSyncOrder create

*全部资源

*

dms:ListDataCorrectPreCheckSQL ListDataCorrectPreCheckSQL list

*全部资源

*

dms:PublishAndDeployTaskFlow PublishAndDeployTaskFlow none

*全部资源

*

dms:PauseDataCorrectSQLJob PauseDataCorrectSQLJob update

*全部资源

*

dms:ListDataImportSQLPreCheckDetail ListDataImportSQLPreCheckDetail list

*全部资源

*

dms:ListDataLakePartition ListDataLakePartition get

*全部资源

*

dms:UpdateDataLakeDatabase UpdateDataLakeDatabase update

*全部资源

*

dms:GetStructSyncJobAnalyzeResult GetStructSyncJobAnalyzeResult get

*全部资源

*

dms:GrantUserPermission GrantUserPermission create

*全部资源

*

dms:EnableUser EnableUser update

*全部资源

*

dms:CreateDataLakeTable CreateDataLakeTable create

*全部资源

*

dms:GetDataCorrectRollbackFile GetDataCorrectRollbackFile get

*全部资源

*

dms:UpdateTaskTimeVariables UpdateTaskTimeVariables update

*全部资源

*

dms:ListTableColumns ListTableColumns get

*全部资源

*

dms:CreateDataTrackOrder CreateDataTrackOrder none

*全部资源

*

dms:UpdateTaskFlowNotification UpdateTaskFlowNotification update

*全部资源

*

dms:AddTaskFlowEdges AddTaskFlowEdges create

*全部资源

*

dms:ListSensitivityLevel ListSensitivityLevel list

*全部资源

*

dms:ListSLARules ListSLARules list

*全部资源

*

dms:QueryDataTrackResultDownloadStatus QueryDataTrackResultDownloadStatus none

*全部资源

*

dms:GetPermApplyOrderDetail GetPermApplyOrderDetail get

*全部资源

*

dms:GenerateSqlFromNL GenerateSqlFromNL none

*全部资源

*

dms:UpdateStandardGroup UpdateStandardGroup update

*全部资源

*

dms:GetStructSyncOrderDetail GetStructSyncOrderDetail get

*全部资源

*

dms:CreateDataLakePartition CreateDataLakePartition create

*全部资源

*

dms:UpdateTaskContent UpdateTaskContent update

*全部资源

*

dms:UpdateTaskOutput UpdateTaskOutput update

*全部资源

*

dms:GetApprovalDetail GetApprovalDetail get

*全部资源

*

dms:UpdateScenario UpdateScenario update

*全部资源

*

dms:ListDataLakePartitionName ListDataLakePartitionName get

*全部资源

*

dms:DeleteProxyAccess DeleteProxyAccess delete

*全部资源

*

dms:GetAuthorityTemplate GetAuthorityTemplate get

*全部资源

*

dms:DeleteLhMembers DeleteLhMembers delete

*全部资源

*

dms:ListAuthorityTemplate ListAuthorityTemplate list

*全部资源

*

dms:GetOwnerApplyOrderDetail GetOwnerApplyOrderDetail get

*全部资源

*

dms:ListDataLakeTablebaseInfo ListDataLakeTablebaseInfo get

*全部资源

*

dms:ListTaskFlowCooperators ListTaskFlowCooperators list

*全部资源

*

dms:ListTablesInCategory ListTablesInCategory get

*全部资源

*

dms:GetMetaTableColumn GetMetaTableColumn get

*全部资源

*

dms:ListUserPermissions ListUserPermissions list

*全部资源

*

dms:GetDataCronClearConfig GetDataCronClearConfig get

*全部资源

*

dms:RefundPayAsYouGoOrder RefundPayAsYouGoOrder update

*全部资源

*

dms:EditMetaKnowledgeAsset EditMetaKnowledgeAsset get

*全部资源

*

dms:CreateProcCorrectOrder CreateProcCorrectOrder create

*全部资源

*

dms:AddLhMembers AddLhMembers update

*全部资源

*

dms:AddDesensitizationRule AddDesensitizationRule create

*全部资源

*

dms:GetDatabase GetDatabase get

*全部资源

*

dms:ListTables ListTables list

*全部资源

*

dms:ListSensitiveDataAuditLog ListSensitiveDataAuditLog list

*全部资源

*

dms:ListDBTaskSQLJob ListDBTaskSQLJob list

*全部资源

*

dms:GetDataCorrectSQLFile GetDataCorrectSQLFile get

*全部资源

*

dms:DeleteAuthorityTemplate DeleteAuthorityTemplate delete

*全部资源

*

dms:DeleteDataLakePartition DeleteDataLakePartition delete

*全部资源

*

dms:GetDataLakeTable GetDataLakeTable get

*全部资源

*

dms:RestartDataExportJob RestartDataExportJob update

*全部资源

*

dms:RemoveDataExportJob RemoveDataExportJob delete

*全部资源

*

dms:CreateUploadFileJob CreateUploadFileJob create

*全部资源

*

dms:GetDataExportDownloadURL GetDataExportDownloadURL get

*全部资源

*

dms:ListDataImportSQLType ListDataImportSQLType list

*全部资源

*

dms:ResumeTaskFlowInstance ResumeTaskFlowInstance none

*全部资源

*

dms:UpdateTaskFlowCooperators UpdateTaskFlowCooperators update

*全部资源

*

dms:GetDataCorrectOrderDetail GetDataCorrectOrderDetail get

*全部资源

*

dms:SuspendDataExportJob SuspendDataExportJob update

*全部资源

*

dms:ListAuthorizedDatabasesForUser ListAuthorizedDatabasesForUser none

*全部资源

*

dms:GetStructSyncJobDetail GetStructSyncJobDetail get

*全部资源

*

dms:SimplyAddInstance SimplyAddInstance create

*全部资源

*

dms:ListLogicTables ListLogicTables list

*全部资源

*

dms:DeleteAbacAuthorization DeleteAbacAuthorization delete

*全部资源

*

dms:UpdateMetaCategory UpdateMetaCategory update

*全部资源

*

dms:CreateScenario CreateScenario create

*全部资源

*

dms:GrantTemplateAuthority GrantTemplateAuthority none

*全部资源

*

dms:ListDataLakeDatabase ListDataLakeDatabase get

*全部资源

*

dms:UpdateTaskFlowSchedule UpdateTaskFlowSchedule update

*全部资源

*

dms:DeleteTask DeleteTask delete

*全部资源

*

dms:UpdateInstance UpdateInstance update

*全部资源

*

dms:ListProxies ListProxies get

*全部资源

*

dms:ListTaskFlowTimeVariables ListTaskFlowTimeVariables list

*全部资源

*

dms:GetDatabaseExportOrderDetail GetDatabaseExportOrderDetail get

*全部资源

*

dms:ListAbacAuthorizations ListAbacAuthorizations get

*全部资源

*

dms:SearchTable SearchTable get

*全部资源

*

dms:ListMetaCategory ListMetaCategory get

*全部资源

*

dms:PreviewWorkflow PreviewWorkflow get

*全部资源

*

dms:SkipDataCorrectRowCheck SkipDataCorrectRowCheck none

*全部资源

*

dms:GetProxyAccess GetProxyAccess get

*全部资源

*

dms:GetAuthorityTemplateItem GetAuthorityTemplateItem list

*全部资源

*

dms:GetDbExportDownloadURL GetDbExportDownloadURL get

*全部资源

*

dms:PauseDataExportJob PauseDataExportJob update

*全部资源

*

dms:MakeTaskFlowInstanceSuccess MakeTaskFlowInstanceSuccess update

*全部资源

*

dms:MoveTaskFlowToScenario MoveTaskFlowToScenario update

*全部资源

*

dms:DeleteLogicTableRouteConfig DeleteLogicTableRouteConfig delete

*全部资源

*

dms:DeleteProxy DeleteProxy get

*全部资源

*

dms:BatchUpdateDataLakePartitions BatchUpdateDataLakePartitions update

*全部资源

*

dms:CreateAbacAuthorization CreateAbacAuthorization create

*全部资源

*

dms:GetDataLakeFunction GetDataLakeFunction create

*全部资源

*

dms:GetOrderBaseInfo GetOrderBaseInfo get

*全部资源

*

dms:GetIntervalLimitOfSLA GetIntervalLimitOfSLA get

*全部资源

*

dms:ListDAGVersions ListDAGVersions list

*全部资源

*

dms:ReRunTaskFlowInstance ReRunTaskFlowInstance none

*全部资源

*

dms:CreateLakeHouseSpace CreateLakeHouseSpace create

*全部资源

*

dms:AddInstance AddInstance create

*全部资源

*

dms:CreateDataLakeDatabase CreateDataLakeDatabase create

*全部资源

*

dms:GetClassificationTemplate GetClassificationTemplate get

*全部资源

*

dms:CreateSQLReviewOrder CreateSQLReviewOrder create

*全部资源

*

dms:BatchDeleteDataLakePartitions BatchDeleteDataLakePartitions delete

*全部资源

*

dms:ChangeColumnSecLevel ChangeColumnSecLevel update

*全部资源

*

dms:SetWorkflowExtraInfo SetWorkflowExtraInfo update

*全部资源

*

dms:ListSensitiveColumnsDetail ListSensitiveColumnsDetail list

*全部资源

*

dms:CreatePublishGroupTask CreatePublishGroupTask create

*全部资源

*

dms:UpdateTaskContentV2 UpdateTaskContentV2 update

*全部资源

*

dms:ListAbacPolicies ListAbacPolicies none

*全部资源

*

dms:SearchDatabase SearchDatabase list

*全部资源

*

dms:GetPagedInstance GetPagedInstance get

*全部资源

*

dms:UpdateTaskName UpdateTaskName update

*全部资源

*

dms:RestartDataCorrectSQLJob RestartDataCorrectSQLJob update

*全部资源

*

dms:DeleteStandardGroup DeleteStandardGroup delete

*全部资源

*

dms:DeleteDataLakeTable DeleteDataLakeTable delete

*全部资源

*

dms:CreateWorkspace CreateWorkspace create

*全部资源

*

dms:ListWorkFlowNodes ListWorkFlowNodes list

*全部资源

*

dms:CreateProxy CreateProxy create

*全部资源

*

dms:DeleteLakeHouseSpace DeleteLakeHouseSpace delete

*全部资源

*

dms:UpdateAbacPolicy UpdateAbacPolicy update

*全部资源

*

dms:DeleteTaskFlow DeleteTaskFlow delete

*全部资源

*

dms:DeleteMetaCategory DeleteMetaCategory delete

*全部资源

*

dms:ListDesensitizationRule ListDesensitizationRule list

*全部资源

*

dms:GetDataExportOrderDetail GetDataExportOrderDetail get

*全部资源

*

dms:DeleteAbacPolicy DeleteAbacPolicy none

*全部资源

*

dms:CreateAbacPolicy CreateAbacPolicy create

*全部资源

*

dms:RegisterInstance RegisterInstance create

*全部资源

*

dms:DeleteDataLakeFunction DeleteDataLakeFunction create

*全部资源

*

dms:ListAuthorizedInstancesForUser ListAuthorizedInstancesForUser none

*全部资源

*

dms:ChangeColumnSecurityLevel ChangeColumnSecurityLevel update

*全部资源

*

dms:OptimizeSqlByMetaAgent OptimizeSqlByMetaAgent none

*全部资源

*

dms:CreateUploadOSSFileJob CreateUploadOSSFileJob create

*全部资源

*

dms:FixSqlByMetaAgent FixSqlByMetaAgent none

*全部资源

*

dms:UpdateTaskFlowNameAndDesc UpdateTaskFlowNameAndDesc update

*全部资源

*

dms:DeleteScenario DeleteScenario delete

*全部资源

*

dms:ExecuteDataCorrect ExecuteDataCorrect update

*全部资源

*

dms:GetTaskFlowNotification GetTaskFlowNotification get

*全部资源

*

dms:GetDataArchiveOrderDetail GetDataArchiveOrderDetail get

*全部资源

*

dms:CreateDataCronClearOrder CreateDataCronClearOrder create

*全部资源

*

dms:ListTaskFlowEdgesByCondition ListTaskFlowEdgesByCondition list

*全部资源

*

dms:ExecuteScript ExecuteScript update

*全部资源

*

dms:GetDBTaskSQLJobLog GetDBTaskSQLJobLog get

*全部资源

*

dms:GetDataCronClearTaskDetailList GetDataCronClearTaskDetailList get

*全部资源

*

dms:UpdateTaskConfig UpdateTaskConfig update

*全部资源

*

dms:ModifyInstance ModifyInstance update

*全部资源

*

dms:ListStandardGroups ListStandardGroups list

*全部资源

*

dms:CreateAuthorityTemplate CreateAuthorityTemplate create

*全部资源

*

dms:ListSensitiveColumns ListSensitiveColumns list

*全部资源

*

dms:ListDataLakeCatalog ListDataLakeCatalog get

*全部资源

*

dms:ApproveOrder ApproveOrder update

*全部资源

*

dms:CreateDataArchiveOrder CreateDataArchiveOrder create

*全部资源

*

dms:ListDataCorrectPreCheckDB ListDataCorrectPreCheckDB list

*全部资源

*

dms:ChatWithDesensitize ChatWithDesensitize none

*全部资源

*

dms:ListDataLakeFunction ListDataLakeFunction get

*全部资源

*

dms:UpdateDataLakeTable UpdateDataLakeTable update

*全部资源

*

dms:GetOnlineDDLProgress GetOnlineDDLProgress get

*全部资源

*

dms:ListDefaultSLARules ListDefaultSLARules list

*全部资源

*

dms:ListWorkFlowTemplates ListWorkFlowTemplates list

*全部资源

*

dms:GetSQLReviewOptimizeDetail GetSQLReviewOptimizeDetail get

*全部资源

*

dms:AnswerSqlSyntaxByMetaAgent AnswerSqlSyntaxByMetaAgent none

*全部资源

*

dms:GetTask GetTask get

*全部资源

*

dms:TryRunTaskFlow TryRunTaskFlow get

*全部资源

*

dms:CreateTaskFlow CreateTaskFlow create

*全部资源

*

dms:ReDeployLhDagVersion ReDeployLhDagVersion none

*全部资源

*

dms:ListTaskFlowConstants ListTaskFlowConstants list

*全部资源

*

dms:GetMetaTableDetailInfo GetMetaTableDetailInfo get

*全部资源

*

dms:DisableUser DisableUser update

*全部资源

*

dms:BackFill BackFill none

*全部资源

*

dms:UpdateTaskFlowEdges UpdateTaskFlowEdges update

*全部资源

*

dms:UpdateSLARules UpdateSLARules update

*全部资源

*

dms:ListDataLakeTable ListDataLakeTable get

*全部资源

*

dms:GetOrderAttachmentFile GetOrderAttachmentFile get

*全部资源

*

dms:DeleteTaskFlowEdgesByCondition DeleteTaskFlowEdgesByCondition delete

*全部资源

*

dms:ListClassificationTemplates ListClassificationTemplates list

*全部资源

*

dms:AddTableToCategory AddTableToCategory none

*全部资源

*

dms:GetDataExportPreCheckDetail GetDataExportPreCheckDetail get

*全部资源

*

dms:UpdateTaskFlowOwner UpdateTaskFlowOwner update

*全部资源

*

dms:SuspendTaskFlowInstance SuspendTaskFlowInstance none

*全部资源

*

dms:AddLogicTableRouteConfig AddLogicTableRouteConfig create

*全部资源

*

dms:UpdateTaskFlowRelations UpdateTaskFlowRelations update

*全部资源

*

dms:GetDataLakePartition GetDataLakePartition get

*全部资源

*

dms:ListProxyAccesses ListProxyAccesses get

*全部资源

*

资源(Resource)

下表是数据管理定义的资源,这些资源可以在 RAM 权限策略语句的Resource元素中使用,用来授予对该资源执行具体操作的权限。 其中,资源 ARN 是资源在阿里云上的唯一标识。具体说明如下:

  • {#}为变量标识,需要您替换为实际值。例如:{#ramcode}需要您替换为实际的云服务RAM代码。

  • *表示全部。例如:

    • {#resourceType}*时:表示全部资源。

    • {#regionId}*时:表示全部地域。

    • {#accountId}*时:表示全部阿里云账号。

资源类型

资源 ARN

TaskFlow
  • acs:dms,dms-console:{#regionId}:{#accountId}:taskflow/{#TaskFlowId}
Order
  • acs:dmsenterprise:{#regionId}:{#accountId}:order/{#OrderId}
  • acs:dmsenterprise::{#accountId}:order/{#OrderId}
  • acs:dmsenterprise:{#Region}:{#AccountId}:order/{#OrderId}
Database
  • acs:dmsenterprise:{#regionId}:{#accountId}:database/{#DatabaseId}
Instance
  • acs:dms:*:{#accountId}:instance/{#Host}/{#Port}

条件(Condition)

数据管理未定义产品级别的条件关键字。如需查看适用于所有云产品的通用条件关键字,请参见通用条件关键字

相关操作

您可以创建自定义权限策略,并将权限策略授予 RAM 用户、RAM 用户组或 RAM 角色。具体操作如下: