Authorization Policy Language

Interface Name Authentication Rules Description

AddUserToGroup

pcs:ram:*:${AccountId}:group/${GroupName}

Add sub-users to group

pcs:ram:*:${AccountId}:user/${LoginName}

AdminResetPassword

pcs:ram:*:${AccountId}:user/*

Reset sub-account password

AttachPolicyToGroup

pcs:ram:*:${AccountId}:group/${GroupName}

Attach authorization to group

pcs:ram:*:${AccountId}:policy/${PolicyName}

AttachPolicyToUser

pcs:ram:*:${AccountId}:user/${LoginName}

Attach authorization to user

pcs:ram:*:${AccountId}:policy/${PolicyName}

BatchUpdatePolicyToGroup

pcs:ram:*:${AccountId}:group/${groupName}

Batch authorization to group

BatchUpdatePolicyToUser

pcs:ram:*:${AccountId}:user/${LoginName}

Batch authorization to user

CreateAccessKey

pcs:ram:*:${AccountId}:user/${UserName}

Create access key

CreateGroup

pcs:ram:*:${AccountId}:group/*

Create group

CreatePolicy

pcs:ram:*:${AccountId}:policy/*

Create an authorization policy

CreatePolicyVersion

pcs:ram:*:${AccountId}:policy/${PolicyName}

Create policy version

CreateUser

pcs:ram:*:${AccountId}:user/*

Create user

DeleteAccessKey

pcs:ram:*:${AccountId}:user/${UserName}

Delete access key

DeleteGroup

pcs:ram:*:${AccountId}:group/${GroupName}

Delete group

DeletePolicy

pcs:ram:*:${AccountId}:policy/${PolicyName}

Delete policy

DeletePolicyVersion

pcs:ram:*:${AccountId}:policy/${PolicyName}

Delete policy version

DeleteUser

pcs:ram:*:${AccountId}:user/${LoginName}

Delete user

DetachPolicyFromGroup

pcs:ram:*:${AccountId}:group/${GroupName}

Detach policy from group

pcs:ram:*:${AccountId}:policy/${PolicyName}

DetachPolicyFromUser

pcs:ram:*:${AccountId}:user/${LoginName}

Detach policy from user

pcs:ram:*:${AccountId}:policy/${PolicyName}

ExportAccessKey

pcs:ram:*:${AccountId}:user/${UserName}

Export access key to local

GetAccessKey

pcs:ram:*:${AccountId}:user/${UserName}

Get access key

GetGroup

pcs:ram:*:${AccountId}:group/${GroupName}

Get group information

GetPolicy

pcs:ram:*:${AccountId}:policy/${PolicyName}

Get policy information

GetPolicyVersion

pcs:ram:*:${AccountId}:policy/${PolicyName}

Get the authorization policy version

GetRamSummary

pcs:ram:*:${AccountId}:ramsummary/*

Get RAM Summary

GetUser

pcs:ram:*:${AccountId}:user/${LoginName}

Get user information

ListAccessKey

pcs:ram:*:${AccountId}:user/${UserName}

List access key

ListGroups

pcs:ram:*:${AccountId}:group/*

List groups

ListGroupsCanAddForUser

pcs:ram:*:${AccountId}:user/${LoginName}

List groups that can add for user

ListGroupsForUser

pcs:ram:*:${AccountId}:user/${LoginName}

List groups for user

ListPolicies

pcs:ram:*:${AccountId}:policy/*

List authorization policies

ListPoliciesCanAttachToGroup

pcs:ram:*:${AccountId}:group/${GroupName}

List policies that can attach to group

ListPoliciesCanAttachToUser

pcs:ram:*:${AccountId}:user/${LoginName}

List authorization policies that can attach to user

ListPoliciesForGroup

pcs:ram:*:${AccountId}:group/${GroupName}

List authorization policies for group

ListPoliciesForUser

pcs:ram:*:${AccountId}:user/${LoginName}

List authorization policies for user

ListPolicyVersions

pcs:ram:*:${AccountId}:policy/${PolicyName}

List authorization policy versions

ListUsers

pcs:ram:*:${AccountId}:user/*

List authorization policies for group

ListUsersCanAddToGroup

pcs:ram:*:${AccountId}:group/${GroupName}

List sub-users that can add to group

ListUsersForGroup

pcs:ram:*:${AccountId}:group/${GroupName}

List sub-users for group

RemoveUserFromGroup

pcs:ram:*:${AccountId}:group/${GroupName}

Remove sub-users from group

pcs:ram:*:${AccountId}:user/${LoginName}

SetDefaultPolicyVersion

pcs:ram:*:${AccountId}:policy/${PolicyName}

Set default policy version

UpdateAccessKey

pcs:ram:*:${AccountId}:user/${UserName}

Update access key

UpdateGroup

pcs:ram:*:${AccountId}:group/${GroupName}

Update group information

UpdateUser

pcs:ram:*:${AccountId}:user/${LoginName}

Update user information

Did the above content solve your problem? Yes No
Please complete information!

Call us

400-151-8800

Email us

cloud@pingan.com

Online customer service

Instant reply

Technical Support

cloud products