日本熟妇hd丰满老熟妇,中文字幕一区二区三区在线不卡 ,亚洲成片在线观看,免费女同在线一区二区

AI 助理
備案控制臺
文檔
輸入文檔關鍵字查找
首頁 開源大數據平臺 E-MapReduce EMR Serverless Spark 操作指南 權限管理 RAM用戶授權

RAM用戶授權

更新時間：
產品詳情
我的收藏

當RAM用戶（子賬號）進行EMR Serverless Spark操作，例如創建、查看或刪除工作空間等操作時，必須具有相應的權限。本文為您介紹如何進行RAM授權。

前提條件

已創建RAM用戶。具體操作，請參見創建RAM用戶。

操作步驟

  1. 使用RAM管理員登錄RAM控制臺。

  2. 在左側導航欄，選擇身份管理 > 用戶。

  3. 在用戶頁面，單擊目標RAM用戶操作列的添加權限。

    image

    您也可以選中多個RAM用戶，單擊用戶列表下方的添加權限，為RAM用戶批量授權。

  4. 在新增授權面板，為RAM用戶添加相應的權限。

    image.png

    參數

    說明

    授權范圍

    選擇所需的應用范圍：

    • 賬號級別：權限在當前阿里云賬號內生效。

    • 資源組級別：權限在指定的資源組內生效。

    授權主體

    被授權主體，即需要授權的RAM用戶，系統會自動填入當前的RAM用戶，您也可以添加其他RAM用戶。

    選擇權限

    支持的系統策略如下：

    • AliyunEMRServerlessSparkFullAccess：EMR Serverless Spark管理員權限，包含創建、刪除工作空間權限。

      AliyunEMRServerlessSparkFullAccess權限內容

      {
  "Version": "1",
  "Statement": [
    {
      "Action": "emr-serverless-spark:*",
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": [
        "oss:ListBuckets",
        "dlf:DescribeRegions",
        "dlf:GetRegionStatus",
        "dlf:ListCatalogs",
        "emr:GetApmData",
        "emr:QueryApmGrafanaData"
      ],
      "Resource": "*",
      "Effect": "Allow"
    },
    {
      "Action": "ram:CreateServiceLinkedRole",
      "Resource": "*",
      "Effect": "Allow",
      "Condition": {
        "StringEquals": {
          "ram:ServiceName": "spark.emr-serverless.aliyuncs.com"
        }
      }
    }
  ]
}

    • AliyunEMRServerlessSparkDeveloperAccess：EMR Serverless Spark的開發者權限，不包括創建、刪除工作空間權限。

      AliyunEMRServerlessSparkDeveloperAccess權限內容

      {
    "Version": "1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "emr-serverless-spark:AddMembers",
                "emr-serverless-spark:BindSessionCluster",
                "emr-serverless-spark:CancelJobRun",
                "emr-serverless-spark:CancelRun",
                "emr-serverless-spark:Check*",
                "emr-serverless-spark:CommitTask",
                "emr-serverless-spark:CreateArtifact",
                "emr-serverless-spark:CreateCatalog",
                "emr-serverless-spark:CreateCategory",
                "emr-serverless-spark:CreateComputeToken",
                "emr-serverless-spark:CreateEmrSparkServiceLinkedRole",
                "emr-serverless-spark:CreateEnvironment",
                "emr-serverless-spark:CreateJobRunDeployment",
                "emr-serverless-spark:CreateLivyCompute",
                "emr-serverless-spark:CreateLivyComputeToken",
                "emr-serverless-spark:CreateNetworkService",
                "emr-serverless-spark:CreateProcessDefinitionWithSchedule",
                "emr-serverless-spark:CreateRole",
                "emr-serverless-spark:CreateSessionCluster",
                "emr-serverless-spark:CreateSessionStatement",
                "emr-serverless-spark:CreateSqlStatement",
                "emr-serverless-spark:CreateTask",
                "emr-serverless-spark:CreateTaskInstance",
                "emr-serverless-spark:CreateTemplate",
                "emr-serverless-spark:CreateWorkspaceQueue",
                "emr-serverless-spark:DeleteArtifact",
                "emr-serverless-spark:DeleteCatalog",
                "emr-serverless-spark:DeleteCategory",
                "emr-serverless-spark:DeleteComputeToken",
                "emr-serverless-spark:DeleteEnvironment",
                "emr-serverless-spark:DeleteJobRunDeployment",
                "emr-serverless-spark:DeleteLivyCompute",
                "emr-serverless-spark:DeleteLivyComputeSession",
                "emr-serverless-spark:DeleteLivyComputeToken",
                "emr-serverless-spark:DeleteNetworkService",
                "emr-serverless-spark:DeleteProcessDefinitionByCode",
                "emr-serverless-spark:DeleteProcessDefinitionVersion",
                "emr-serverless-spark:DeleteRole",
                "emr-serverless-spark:DeleteSessionCluster",
                "emr-serverless-spark:DeleteTask",
                "emr-serverless-spark:DeleteWorkspaceQueue",
                "emr-serverless-spark:EditCatalog",
                "emr-serverless-spark:EditEnvironment",
                "emr-serverless-spark:EditSessionCluster",
                "emr-serverless-spark:EditWorkspaceQueue",
                "emr-serverless-spark:Execute",
                "emr-serverless-spark:ForceTaskInstanceSuccess",
                "emr-serverless-spark:GenerateComputeToken",
                "emr-serverless-spark:GenerateLivyComputeToken",
                "emr-serverless-spark:GenerateTaskCodes",
                "emr-serverless-spark:Get*",
                "emr-serverless-spark:GrantActionsToRole",
                "emr-serverless-spark:GrantRoleToUsers",
                "emr-serverless-spark:List*",
                "emr-serverless-spark:PublishWorkflowDefinition",
                "emr-serverless-spark:Query*",
                "emr-serverless-spark:RefreshLivyComputeToken",
                "emr-serverless-spark:ReleaseWorkflowAndSchedule",
                "emr-serverless-spark:RemoveMember",
                "emr-serverless-spark:RevokeActionsToRole",
                "emr-serverless-spark:RevokeRoleFromUsers",
                "emr-serverless-spark:StartHmsProxyServer",
                "emr-serverless-spark:StartJobRun",
                "emr-serverless-spark:StartJobRunDeployment",
                "emr-serverless-spark:StartLivyCompute",
                "emr-serverless-spark:StartProcessInstance",
                "emr-serverless-spark:StartRun",
                "emr-serverless-spark:StartSessionCluster",
                "emr-serverless-spark:StopJobRunDeployment",
                "emr-serverless-spark:StopLivyCompute",
                "emr-serverless-spark:StopSessionCluster",
                "emr-serverless-spark:SwitchProcessDefinitionVersion",
                "emr-serverless-spark:TearDownHmsProxyServer",
                "emr-serverless-spark:TerminateSessionStatement",
                "emr-serverless-spark:TerminateSqlStatement",
                "emr-serverless-spark:TestHmsConnection",
                "emr-serverless-spark:UnbindSessionCluster",
                "emr-serverless-spark:UpdateCategory",
                "emr-serverless-spark:UpdateComputeToken",
                "emr-serverless-spark:UpdateJobRunDeployment",
                "emr-serverless-spark:UpdateLivyCompute",
                "emr-serverless-spark:UpdateProcessDefinitionWithSchedule",
                "emr-serverless-spark:UpdateResourceAcl",
                "emr-serverless-spark:UpdateTask",
                "emr-serverless-spark:ValidateCode"
            ],
            "Resource": "*"
        },
        {
            "Effect": "Allow",
            "Action": [
                "dlf:DescribeRegions",
                "dlf:GetRegionStatus",
                "dlf:ListCatalogs",
                "dlf:ListDatabases",
                "dlf:ListTables",
                "emr:GetApmData",
                "emr:QueryApmGrafanaData"
            ],
            "Resource": "*"
        }
    ]
}

    • AliyunEmrServerlessSparkReadOnlyAccess：EMR Serverless Spark只讀權限，包含了只讀訪問Spark服務的權限。

      AliyunEmrServerlessSparkReadOnlyAccess權限內容

      {
    "Statement": [
        {
            "Action": [
                "emr-serverless-spark:Get*",
                "emr-serverless-spark:List*",
                "emr-serverless-spark:Query*",
                "emr-serverless-spark:Is*",
                "emr-serverless-spark:Check*"
            ],
            "Effect": "Allow",
            "Resource": "*"
        }
    ],
    "Version": "1"
}

  5. 單擊確認新增授權。

  6. 單擊關閉。