開通DataV-Note（智能分析）時，系統會自動創建AliyunServiceRoleForDataVNote服務關聯角色，該角色擁有AliyunServiceRolePolicyForDataVNote權限策略，以允許服務關聯角色代您訪問其他云服務。本文為您介紹AliyunServiceRoleForDataVNote服務關聯角色的相關權限。
背景信息
服務關聯角色是一種可信實體為阿里云服務的RAM角色，旨在解決跨云服務的授權訪問問題。更多服務關聯角色的介紹，請參見服務關聯角色。
使用說明
AliyunServiceRolePolicyForDataVNote策略由對應的阿里云服務按需更新，請勿將本策略授權給AliyunServiceRoleForDataVNote服務關聯角色以外的RAM身份使用。
查看AliyunServiceRoleForDataVNote服務關聯角色的權限策略
您可登錄RAM控制臺，按照下圖所示步驟進入AliyunServiceRoleForDataVNote服務關聯角色的詳情頁，查看角色名稱、創建時間等基本信息。
在AliyunServiceRoleForDataVNote角色詳情頁的權限管理頁簽，單擊權限策略名稱，即可查看該角色被授予的權限策略詳情。
{
"Version": "1",
"Statement": [
{
"Effect": "Allow",
"Action": [
"rds:DescribeDBInstances",
"rds:DescribeDBInstanceAttribute",
"rds:DescribeDBInstanceNetInfo",
"rds:DescribeDatabases",
"rds:DescribeDBInstanceIPArrayList",
"rds:ModifySecurityIps"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"adb:DescribeDBClusters",
"adb:DescribeDBClusterAttribute",
"adb:DescribeDBClusterNetInfo",
"adb:DescribeSchemas",
"adb:DescribeDBClusterAccessWhiteList",
"adb:ModifyDBClusterAccessWhiteList"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"gpdb:DescribeDBInstances",
"gpdb:DescribeDBInstanceAttribute",
"gpdb:DescribeDBInstanceNetInfo",
"gpdb:DescribeDBInstanceIPArrayList",
"gpdb:ModifySecurityIps"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"polardb:DescribeDBClusters",
"polardb:DescribeDBClusterAttribute",
"polardb:DescribeDBClusterEndpoints",
"polardb:DescribeDatabases",
"polardb:DescribeDBClusterAccessWhitelist",
"polardb:ModifyDBClusterAccessWhitelist"
],
"Resource": "*"
},
{
"Effect": "Allow",
"Action": [
"vpc:DescribeVSwitchAttributes",
"vpc:DescribeVSwitches",
"ecs:CreateNetworkInterface",
"ecs:DeleteNetworkInterface",
"ecs:DescribeNetworkInterfaces",
"ecs:CreateNetworkInterfacePermission",
"ecs:DescribeNetworkInterfacePermissions",
"ecs:AttachNetworkInterface",
"ecs:DetachNetworkInterface",
"ecs:CreateSecurityGroup",
"ecs:DeleteSecurityGroup",
"ecs:DescribeSecurityGroupAttribute",
"ecs:AuthorizeSecurityGroupEgress",
"ecs:TagResources",
"ecs:ListTagResources"
],
"Resource": "*"
},
{
"Action": [
"slb:AddBackendServers",
"slb:AddTags",
"slb:AddVServerGroupBackendServers",
"slb:CreateLoadBalancer",
"slb:CreateLoadBalancerForCloudService",
"slb:CreateLoadBalancerHTTPListener",
"slb:CreateLoadBalancerHTTPSListener",
"slb:CreateLoadBalancerTCPListener",
"slb:CreateLoadBalancerUDPListener",
"slb:CreateVServerGroup",
"slb:DeleteLoadBalancer",
"slb:DeleteLoadBalancerListener",
"slb:DeleteVServerGroup",
"slb:DescribeLoadBalancerAttribute",
"slb:DescribeLoadBalancerHTTPListenerAttribute",
"slb:DescribeLoadBalancerHTTPSListenerAttribute",
"slb:DescribeLoadBalancerListeners",
"slb:DescribeLoadBalancerTCPListenerAttribute",
"slb:DescribeLoadBalancerUDPListenerAttribute",
"slb:DescribeLoadBalancers",
"slb:DescribeTags",
"slb:DescribeVServerGroupAttribute",
"slb:DescribeVServerGroups",
"slb:ModifyLoadBalancerInstanceSpec",
"slb:ModifyLoadBalancerInternetSpec",
"slb:ModifyVServerGroupBackendServers",
"slb:RemoveBackendServers",
"slb:RemoveTags",
"slb:RemoveVServerGroupBackendServers",
"slb:SetLoadBalancerDeleteProtection",
"slb:SetLoadBalancerHTTPListenerAttribute",
"slb:SetLoadBalancerHTTPSListenerAttribute",
"slb:SetLoadBalancerModificationProtection",
"slb:SetLoadBalancerName",
"slb:SetLoadBalancerTCPListenerAttribute",
"slb:SetLoadBalancerUDPListenerAttribute",
"slb:SetVServerGroupAttribute",
"slb:StartLoadBalancerListener",
"slb:StopLoadBalancerListener",
"vpc:ModifyBypassToaAttribute"
],
"Resource": "*",
"Effect": "Allow"
},
{
"Action": "ram:DeleteServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "datavnote.aliyuncs.com"
}
}
},
{
"Action": "ram:CreateServiceLinkedRole",
"Resource": "*",
"Effect": "Allow",
"Condition": {
"StringEquals": {
"ram:ServiceName": "eipaccess.slb.aliyuncs.com"
}
}
},
{
"Effect": "Allow",
"Action": [
"ecs:ModifyNetworkInterfaceAttribute",
"ecs:UntagResources",
"ecs:DescribeNetworkInterfaceAttribute",
"ecs:DescribeRegions",
"ecs:DescribeSecurityGroups",
"ecs:CreateSecurityGroup",
"ecs:DeleteSecurityGroup",
"ecs:DescribeZones",
"ecs:DescribeInstanceAttribute",
"ecs:DescribeInstanceStatus",
"ecs:DescribeInstanceTypeFamilies",
"ecs:DescribeInstanceTypes",
"ecs:DescribeInstances",
"ecs:DescribeInstancesFullStatus",
"vpc:TagResources",
"vpc:ListTagResources",
"vpc:UntagResources",
"vpc:DescribeRegions",
"vpc:DescribeVpcAttribute",
"vpc:DescribeVpcs",
"vpc:DescribeZones",
"vpc:ModifyBypassToaAttribute"
],
"Resource": "*"
},
{
"Action": [
"ecs:ModifySecurityGroupPolicy",
"ecs:ModifySecurityGroupAttribute",
"ecs:ModifySecurityGroupRule",
"ecs:ModifySecurityGroupEgressRule",
"ecs:AuthorizeSecurityGroup",
"vpc:CreateVpc",
"vpc:ModifyVpcAttribute",
"vpc:DeleteVpc",
"vpc:CreateVSwitch",
"vpc:ModifyVSwitchAttribute"
],
"Effect": "Allow",
"Resource": "*"
}
]
}如您無需再使用AliyunServiceRoleForDataVNote，可參考刪除服務關聯角色操作。
文檔內容是否對您有幫助？