亚洲欧美人与动人物在线,日产自拍不卡视频,久久综合亚洲鲁鲁五月天

訪問控制（RAM）是阿里云提供的管理用戶身份與資源訪問權限的服務。使用RAM可以讓您避免與其他用戶共享阿里云賬號密鑰，并可按需為用戶授予最小權限。RAM中使用權限策略描述授權的具體內容。

本文為您介紹訪問控制（CloudSSO）為RAM權限策略定義的操作（Action）、資源（Resource）和條件（Condition）。訪問控制（CloudSSO）的RAM代碼（RamCode）為cloudsso，支持的授權粒度為RESOURCE。

權限策略通用結構

權限策略支持JSON格式，其通用結構如下：

{
  "Version": "1",
  "Statement": [
    {
      "Effect": "<Effect>",
      "Action": "<Action>",
      "Resource": "<Resource>",
      "Condition": {
        "<Condition_operator>": {
          "<Condition_key>": [
            "<Condition_value>"
          ]
        }
      }
    }
  ]
}

各字段含義如下：

Effect：權限策略效果。取值：Allow（允許）、Deny（拒絕）。
Action：授予允許或拒絕權限的具體操作。具體信息，請參見操作（Action）。
Resource：受操作影響的具體對象，您可以使用資源ARN來描述指定資源。具體信息，請參見資源（Resource）。
Condition：指授權生效的條件。可選字段。具體信息，請參見條件（Condition）。
- Condition_operator：條件運算符，不同類型的條件對應不同的條件運算符。具體信息，請參見權限策略基本元素。
- Condition_key：條件關鍵字。
- Condition_value：條件關鍵字對應的值。

操作（Action）

下表是訪問控制（CloudSSO）定義的操作，這些操作可以在RAM權限策略語句的Action元素中使用，用來授予執行該操作的權限。下面對表中的具體項提供說明：

操作：是指具體的權限點。
API：是指操作對應的API接口。
訪問級別：是指每個操作的訪問級別，取值為寫入（Write）、讀取（Read）或列出（List）。
資源類型：是指操作中支持授權的資源類型。具體說明如下：
- 對于必選的資源類型，用背景高亮的方式表示。
- 對于不支持資源級授權的操作，用全部資源表示。
條件關鍵字：是指云產品自身定義的條件關鍵字。該列不體現適用于任何操作的通用條件關鍵字。
關聯操作：是指成功執行操作所需要的其他權限。操作者必須同時具備關聯操作的權限，操作才能成功。

操作	API	訪問級別	資源類型	條件關鍵字	關聯操作
cloudsso:GetUserProvisioningStatistics	GetUserProvisioningStatistics	get	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId}	無	無
cloudsso:GetMFAAuthenticationSettingInfo	GetMFAAuthenticationSettingInfo	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:GetAccessConfiguration	GetAccessConfiguration	get	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無
cloudsso:ProvisionAccessConfiguration	ProvisionAccessConfiguration	update	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無
cloudsso:SetExternalSAMLIdentityProvider	SetExternalSAMLIdentityProvider	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:RemoveUserFromGroup	RemoveUserFromGroup	Write	Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId} User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:ListGroupMembers	ListGroupMembers	get	Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId}	無	無
cloudsso:CreateAccessAssignment	CreateAccessAssignment	create	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId} User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId} Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId} Account acs:resourcemanager::{#accountId}:account/{#AccountId}	無	無
cloudsso:GetUserProvisioningEvent	GetUserProvisioningEvent	get	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId} UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/*	無	無
cloudsso:ListUsers	ListUsers	get	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/*	無	無
cloudsso:ListExternalSAMLIdPCertificates	ListExternalSAMLIdPCertificates	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:ListAccessAssignments	ListAccessAssignments	get	全部資源 *	無	無
cloudsso:GetLoginPreference	GetLoginPreference	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:GetTask	GetTask	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:DeleteUser	DeleteUser	delete	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:CreateUserProvisioning	CreateUserProvisioning	Write	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/* Account acs:resourcemanager::{#accountId}:account/{#AccountId} Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId} User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:UpdateDirectory	UpdateDirectory	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:RetryUserProvisioningEvent	RetryUserProvisioningEvent	Write	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId} UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/*	無	無
cloudsso:RemoveExternalSAMLIdPCertificate	RemoveExternalSAMLIdPCertificate	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:EnableService	EnableService	update	全部資源 *	無	無
cloudsso:GetDirectorySAMLServiceProviderInfo	GetDirectorySAMLServiceProviderInfo	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:UpdateUserProvisioning	UpdateUserProvisioning	Write	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId}	無	無
cloudsso:UpdateInlinePolicyForAccessConfiguration	UpdateInlinePolicyForAccessConfiguration	update	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無
cloudsso:GetDirectoryStatistics	GetDirectoryStatistics	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:EnableDelegateAccount	EnableDelegateAccount	update	全部資源 *	無	無
cloudsso:AddUserToGroup	AddUserToGroup	create	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId} Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId}	無	無
cloudsso:GetServiceStatus	GetServiceStatus	get	全部資源 *	無	無
cloudsso:GetUserMFAAuthenticationSettings	GetUserMFAAuthenticationSettings	get	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:SetMFAAuthenticationStatus	SetMFAAuthenticationStatus	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:CreateSCIMServerCredential	CreateSCIMServerCredential	create	SCIMServerCredential acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/scim-credential/*	無	無
cloudsso:SetPasswordPolicy	SetPasswordPolicy	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:RemovePermissionPolicyFromAccessConfiguration	RemovePermissionPolicyFromAccessConfiguration	update	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無
cloudsso:ListJoinedGroupsForUser	ListJoinedGroupsForUser	get	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:CreateDirectory	CreateDirectory	create	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/*	無	無
cloudsso:ListSCIMServerCredentials	ListSCIMServerCredentials	get	SCIMServerCredential acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/scim-credential/*	無	無
cloudsso:SetLoginPreference	SetLoginPreference	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:SetSCIMSynchronizationStatus	SetSCIMSynchronizationStatus	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:ListGroups	ListGroups	get	Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/*	無	無
cloudsso:CreateUser	CreateUser	create	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/*	無	無
cloudsso:GetUserProvisioningConfiguration	GetUserProvisioningConfiguration	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:DisableDelegateAccount	DisableDelegateAccount	update	全部資源 *	無	無
cloudsso:GetSCIMSynchronizationStatus	GetSCIMSynchronizationStatus	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:UpdateMFAAuthenticationSettings	UpdateMFAAuthenticationSettings	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:GetUserProvisioningRdAccountStatistics	GetUserProvisioningRdAccountStatistics	get	Account acs:resourcemanager::{#accountId}:account/{#AccountId}	無	無
cloudsso:ClearExternalSAMLIdentityProvider	ClearExternalSAMLIdentityProvider	update	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:ResetUserPassword	ResetUserPassword	update	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:ListUserProvisioningEvents	ListUserProvisioningEvents	get	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId} UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/*	無	無
cloudsso:DeleteGroup	DeleteGroup	delete	Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId}	無	無
cloudsso:UpdateUserStatus	UpdateUserStatus	update	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:GetDirectory	GetDirectory	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:ListAccessConfigurationProvisionings	ListAccessConfigurationProvisionings	get	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId} AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/*	無	無
cloudsso:UpdateSCIMServerCredentialStatus	UpdateSCIMServerCredentialStatus	update	SCIMServerCredential acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/scim-credential/{#CredentialId}	無	無
cloudsso:AddPermissionPolicyToAccessConfiguration	AddPermissionPolicyToAccessConfiguration	create	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無
cloudsso:DeleteAccessAssignment	DeleteAccessAssignment	delete	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId} User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId} Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId} Account acs:resourcemanager::{#accountId}:account/{#AccountId}	無	無
cloudsso:GetGroup	GetGroup	get	Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId}	無	無
cloudsso:CreateGroup	CreateGroup	create	Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/*	無	無
cloudsso:GetUserProvisioning	GetUserProvisioning	get	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId}	無	無
cloudsso:DeleteSCIMServerCredential	DeleteSCIMServerCredential	delete	SCIMServerCredential acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/scim-credential/{#CredentialId}	無	無
cloudsso:UpdateGroup	UpdateGroup	update	Group acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId}	無	無
cloudsso:GetExternalSAMLIdentityProvider	GetExternalSAMLIdentityProvider	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:ListPermissionPoliciesInAccessConfiguration	ListPermissionPoliciesInAccessConfiguration	get	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無
cloudsso:GetPasswordPolicy	GetPasswordPolicy	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:DeleteDirectory	DeleteDirectory	delete	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:AddExternalSAMLIdPCertificate	AddExternalSAMLIdPCertificate	create	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:GetMFAAuthenticationStatus	GetMFAAuthenticationStatus	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:ListMFADevicesForUser	ListMFADevicesForUser	get	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:UpdateUser	UpdateUser	update	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:ListTasks	ListTasks	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:GetUser	GetUser	get	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:UpdateUserMFAAuthenticationSettings	UpdateUserMFAAuthenticationSettings	update	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:DisableService	DisableService	update	全部資源 *	無	無
cloudsso:DeleteMFADeviceForUser	DeleteMFADeviceForUser	delete	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}	無	無
cloudsso:UpdateAccessConfiguration	UpdateAccessConfiguration	update	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無
cloudsso:GetUserId	GetUserId	get	User acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/*	無	無
cloudsso:UpdateUserProvisioningConfiguration	UpdateUserProvisioningConfiguration	Write	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:DeleteUserProvisioning	DeleteUserProvisioning	Write	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId}	無	無
cloudsso:DeleteAccessConfiguration	DeleteAccessConfiguration	delete	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無
cloudsso:ListUserProvisionings	ListUserProvisionings	list	全部資源 *	無	無
cloudsso:GetTaskStatus	GetTaskStatus	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:CreateAccessConfiguration	CreateAccessConfiguration	create	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/*	無	無
cloudsso:ListDirectories	ListDirectories	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/*	無	無
cloudsso:GetMFAAuthenticationSettings	GetMFAAuthenticationSettings	get	Directory acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}	無	無
cloudsso:ListAccessConfigurations	ListAccessConfigurations	get	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/*	無	無
cloudsso:DeleteUserProvisioningEvent	DeleteUserProvisioningEvent	Write	UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId} UserProvisioning acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/*	無	無
cloudsso:DeprovisionAccessConfiguration	DeprovisionAccessConfiguration	update	AccessConfiguration acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}	無	無

資源（Resource）

下表是訪問控制（CloudSSO）定義的資源，這些資源可以在RAM權限策略語句的Resource元素中使用，用來授予對該資源執行具體操作的權限。其中，資源ARN是資源在阿里云上的唯一標識。具體說明如下：

{#}為變量標識，需要您替換為實際值。例如：{#ramcode}需要您替換為實際的云服務RAM代碼。
*表示全部。例如：
- {#resourceType}為*時：表示全部資源。
- {#regionId}為*時：表示全部地域。
- {#accountId}為*時：表示全部阿里云賬號。

資源類型	資源ARN
UserProvisioning	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/{#UserProvisioningId}
Directory	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}
AccessConfiguration	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/{#AccessConfigurationId}
Group	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/{#GroupId}
User	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/{#UserId}
Account	acs:resourcemanager::{#accountId}:account/{#AccountId}
UserProvisioning	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user-provisioning/*
User	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/user/*
AccessConfiguration	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/access-configuration/*
Account	acs:resourcemanager::{#accountId}:account/*
Group	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/group/*
SCIMServerCredential	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/scim-credential/*
Directory	acs:cloudsso:{#regionId}:{#accountId}:directory/*
SCIMServerCredential	acs:cloudsso:{#regionId}:{#accountId}:directory/{#DirectoryId}/scim-credential/{#CredentialId}

條件（Condition）

訪問控制（CloudSSO）未定義產品級別的條件關鍵字。如需查看適用于所有云產品的通用條件關鍵字，請參見通用條件關鍵字。

日本熟妇hd丰满老熟妇,中文字幕一区二区三区在线不卡 ,亚洲成片在线观看,免费女同在线一区二区

授權信息

權限策略通用結構

操作（Action）

資源（Resource）

條件（Condition）

相關操作