腾讯健康组学平台

服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。本文档介绍具体服务相关角色的使用场景及相关权限策略信息。

Omics_QCSLinkedRoleInManageCloudResource

使用场景： 当前角色为腾讯健康组学平台（OMICS）服务相关角色，该角色将在已关联策略的权限范围内访问您的其他云服务资源。
权限策略

• 策略名称： QcloudAccessForOmicsLinkedRoleInManageCloudResource
• 策略内容：
  

  {
      "version": "2.0",
      "statement": [
          {
              "action": [
                  "vpc:DescribeVpcEx",
                  "vpc:DescribeVpcPrivateIpAddresses",
                  "vpc:DescribeSubnetEx",
                  "vpc:CreateVpc",
                  "vpc:CreateSubnet",
                  "vpc:CreateAddress",
                  "vpc:CreateAddressGroup",
                  "vpc:CreateAddressTemplate",
                  "vpc:CreateAddressTemplateGroup",
                  "vpc:DeleteSubnet",
                  "vpc:DeleteVpc",
                  "vpc:DeleteAddress",
                  "vpc:DeleteAddressTemplate",
                  "vpc:DeleteAddressGroup",
                  "vpc:DeleteAddressTemplateGroup",
                  "tke:CreateCluster",
                  "tke:DescribeClusters",
                  "tke:DeleteCluster",
                  "monitor:DescribeStatisticData",
                  "monitor:GetMonitorData",
                  "cvm:RunInstances",
                  "cvm:TerminateInstances",
                  "cvm:DescribeInstancesStatus",
                  "cvm:DescribeInstances",
                  "cvm:CreateSecurityGroup",
                  "cvm:CreateSecurityGroupPolicy",
                  "cvm:AssociateSecurityGroups",
                  "cvm:DescribeImages",
                  "cvm:ModifySingleSecurityGroupPolicy",
                  "cvm:ModifySecurityGroupPolicys",
                  "cvm:ModifySecurityGroupAttributes",
                  "cvm:DescribeSecurityGroupPolicys",
                  "cvm:DeleteSecurityGroup",
                  "cvm:DeleteSecurityGroupPolicy",
                  "cfs:CreateCfsFileSystem",
                  "cfs:DescribeCfsFileSystems",
                  "cfs:DescribeMountTargets",
                  "cfs:DeleteMountTarget",
                  "cfs:DeleteCfsFileSystem",
                  "cos:GetBucket",
                  "cos:GetBucketObjectVersions",
                  "cos:PutObject",
                  "cos:PutObjectCopy",
                  "cos:PostObject",
                  "cos:AppendObject",
                  "cos:GetObject",
                  "cos:HeadBucket",
                  "cos:HeadObject",
                  "cos:DeleteObject",
                  "cos:OptionsObject",
                  "cos:PostObjectRestore",
                  "cos:InitiateMultipartUpload",
                  "cos:UploadPart",
                  "cos:UploadPartCopy",
                  "cos:CompleteMultipartUpload",
                  "cos:AbortMultipartUpload",
                  "cos:ListMultipartUploads",
                  "cos:ListParts",
                  "cos:GetObjectTagging",
                  "cos:RenameObject",
                  "cos:GetObjectTagging",
                  "cos:GetService",
                  "cos:GetBucketCORS",
                  "cos:PutBucketCORS",
                  "cos:DeleteBucketCORS",
                  "cynosdb:CreateClusters",
                  "cynosdb:DescribeClusterDetail",
                  "cynosdb:CreateAccounts",
                  "cynosdb:DescribeAccounts",
                  "cynosdb:GrantAccountPrivileges",
                  "cynosdb:DescribeInstanceSlowQueries",
                  "cynosdb:DescribeResourcesByDealName",
                  "cynosdb:IsolateCluster",
                  "cynosdb:OfflineCluster",
                  "tat:RunCommand",
                  "tat:DescribeInvocations",
                  "tat:DescribeAutomationAgentStatus",
                  "tat:DescribeInvocationTasks"
              ],
              "resource": "*",
              "effect": "allow"
          },
          {
              "effect": "allow",
              "action": "finance:*",
              "resource": "qcs::cvm:::*"
          }
      ]
  }