AliyunCloudSSOReadOnlyAccess 是阿里云管理的产品系统策略,您可以将 AliyunCloudSSOReadOnlyAccess 授权给 RAM 身份(RAM 用户、RAM 用户组和 RAM 角色),本策略定义了只读访问云SSO(CloudSSO)的权限。
策略详情
类型:系统策略
创建时间:2021-08-20 03:13:35
更新时间:2021-08-20 03:13:35
当前版本:v1
策略内容
{
"Version": "1",
"Statement": [
{
"Action": [
"cloudsso:List*",
"cloudsso:Get*",
"cloudsso:Check*"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"resourcemanager:GetResourceDirectory",
"resourcemanager:ListParents",
"resourcemanager:ListChildrenForParent",
"resourcemanager:ListAncestors",
"resourcemanager:ListAccountRecordsForParent",
"resourcemanager:GetFolder",
"resourcemanager:GetAccount"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": [
"ram:GetPolicyVersion",
"ram:ListPolicyVersions",
"ram:GetPolicy"
],
"Resource": "acs:ram:*:system:policy/*",
"Effect": "Allow"
}
]
}