有奖捉虫:办公协同&微信生态&物联网文档专题 HOT

服务(相关)角色是由腾讯云服务预定义,经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。本文档介绍具体服务相关角色的使用场景及相关权限策略信息。

CAM中产品名 角色名称 角色类型 角色载体
财务 FINANCE_QCSLinkedRoleInModifyInstancesOwner 服务相关角色 modifyInstancesOwner.finance.cloud.tencent.com

FINANCE_QCSLinkedRoleInModifyInstancesOwner

使用场景: 当前角色为财务(Finance)服务相关角色,该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略

  • 策略名称: QcloudAccessForFinanceLinkedRoleInModifyInstancesOwner
  • 策略内容:
    {
        "version": "2.0",
        "statement": [
            {
                "effect": "allow",
                "action": [
                    "ssl:ModifyCertificateProject",
                    "ssl:DescribeCertificate",
                    "tag:UnTagResources",
                    "tag:DescribeResourceTags",
                    "tag:TagResources",
                    "tag:AddProject",
                    "tag:UpdateProject",
                    "cdb:ModifyDBInstanceSecurityGroups",
                    "cdb:DescribeDBSecurityGroups",
                    "cdb:ModifyDBInstanceProject",
                    "cdb:DescribeDBInstances",
                    "cfs:DescribeCfsFileSystems",
                    "ckafka:DescribeInstanceAttributes",
                    "ckafka:DescribeInstances",
                    "clb:DescribeLoadBalancers",
                    "clb:DescribeListeners",
                    "clb:SetLoadBalancerSecurityGroups",
                    "clb:ModifyLoadBalancersProject",
                    "cvm:DescribeInstances",
                    "cvm:ModifyInstancesProject",
                    "cvm:DescribeSecurityGroupPolicys",
                    "cvm:AssociateSecurityGroups",
                    "cvm:CreateSecurityGroup",
                    "cvm:DescribeAddresses",
                    "cvm:DescribeCbsStorages",
                    "cvm:ModifyCbsStorageAttributes",
                    "dcdb:DescribeDCDBInstances",
                    "dcdb:ModifyDBInstancesProject",
                    "dcdb:ModifyDBInstanceSecurityGroups",
                    "dcdb:DescribeDBSecurityGroups",
                    "mariadb:ModifyDBInstancesProject",
                    "mariadb:DescribeDBInstances",
                    "mariadb:ModifyDBInstanceSecurityGroups",
                    "mariadb:DescribeDBSecurityGroups",
                    "mongodb:DescribeDBInstances",
                    "mongodb:AssignProject",
                    "mongodb:DescribeAsyncRequestInfo",
                    "mongodb:DescribeSecurityGroup",
                    "mongodb:ModifyDBInstanceSecurityGroup",
                    "redis:DescribeInstances",
                    "redis:ModifyInstance",
                    "redis:ModifyDBInstanceSecurityGroups",
                    "redis:DescribeDBSecurityGroups",
                    "vpc:DescribeVpcEx",
                    "vpc:DescribeNetworkInterfaces",
                    "vpc:DescribeNatGateways",
                    "cvm:DisassociateNetworkInterfaceSecurityGroups",
                    "cvm:AssociateNetworkInterfaceSecurityGroups",
                    "cvm:DescribeSecurityGroups"
                ],
                "resource": "*"
            }
        ]
    }