Resource Access Management (RAM) is an Alibaba Cloud service for managing user identities and access to resources. RAM allows you to grant users the minimum permissions they need without sharing your Alibaba Cloud account credentials. RAM policies define the permissions to grant.
This topic describes the actions, resources, and conditions that Alibaba Cloud Model Studio (BailianChatBot) defines for RAM policies. Its RAM code (RamCode) is bailianchatbot, and it supports service-level authorization.
RAM policies use JSON. The following example shows the general structure:
The fields are described as follows:
The following table lists the actions defined by Alibaba Cloud Model Studio (BailianChatBot). Use these actions in the
No data available
Alibaba Cloud Model Studio (BailianChatBot) does not support resource ARNs in the
Alibaba Cloud Model Studio (BailianChatBot) does not define service-specific condition keys. For common condition keys that apply to all cloud services, see Common condition keys.
You can create custom policies and attach them to RAM users, RAM user groups, or RAM roles. For more information, see the following topics:
General policy structure
RAM policies use JSON. The following example shows the general structure:
- Effect: whether the policy allows or denies access. Valid values: Allow and Deny.
- Action: the specific operations to allow or deny. For more information, see Actions.
- Resource: the objects affected by the action. Use resource ARNs to specify resources. For more information, see Resources.
-
Condition: the conditions under which the permissions take effect. This field is optional. For more information, see Conditions.
- Condition_operator: the condition operator. Different types of conditions use different operators. For more information, see Policy elements.
- Condition_key: the condition key.
- Condition_value: the value of the condition key.
Actions
The following table lists the actions defined by Alibaba Cloud Model Studio (BailianChatBot). Use these actions in the Action element of a RAM policy statement to grant access. Alibaba Cloud Model Studio (BailianChatBot) does not support authorization for individual API operations and provides only general service-level actions. The columns are described as follows:
- Action: a specific permission.
- Access level: the access level of an action. Valid values: Write, Read, and List.
- Resource type: the types of resources that support authorization for the action. This service does not support authorization for specific resources. You must grant access to all resources.
- Condition key: a condition key defined by the cloud service. This column does not list common condition keys that apply to all actions.
- Dependent action: an additional permission required to perform the action. The caller must also have permission to perform the dependent action.
| Action | Access level | Resource type | Condition key | Dependent action |
|---|
Resources
Alibaba Cloud Model Studio (BailianChatBot) does not support resource ARNs in the Resource element of a RAM policy statement. To allow access, specify "Resource": "*" in the policy statement.
Conditions
Alibaba Cloud Model Studio (BailianChatBot) does not define service-specific condition keys. For common condition keys that apply to all cloud services, see Common condition keys.
Related operations
You can create custom policies and attach them to RAM users, RAM user groups, or RAM roles. For more information, see the following topics:
- Create custom policies
- Grant permissions to a RAM user
- Grant permissions to a RAM user group
- Grant permissions to a RAM role