Permissions

AOM Permissions

Table 1 lists all the system-defined permissions for AOM.

**Table 1** System-defined permissions for AOM
Role/Policy Name	Description	Type	Dependency
AOM FullAccess	Administrator permissions for AOM. Users with these permissions can perform all operations on AOM.	System-defined policy	OBS Administrator, and LTS FullAccess
AOM ReadOnlyAccess	Read-only permissions for AOM. Users with these permissions can only view AOM data.	System-defined policy	OBS Administrator, and LTS FullAccess

To use a custom fine-grained policy, log in to IAM as the administrator and select fine-grained permissions of AOM as required. For details, see Table 2.

**Table 2** AOM operations that support fine-grained permission control
Service	Operation	Fine-Grained Action	Usage Instruction
AOM (list)	Query metrics.	aom:metric:get	Recommended
	Query or count alarms/events.	aom:alarm:list	Recommended
	Query the event list.	aom:event:list	Recommended
	Query all PE scaling rules.	aom:autoScalingRule:list	Recommended
	Query logs.	aom:log:list	Recommended
	Query the ICAgent list.	aom:icmgr:list	Recommended
	Query the message template list.	aom:notificationTemplate:list	Recommended
	Query the Prometheus instance list.	aom:prometheus:list	Recommended
AOM (read-only)	Query events.	aom:event:get	Recommended
	Query metrics.	aom:metric:list	Recommended
	Query the alarm rule list.	aom:alarmRule:list	Recommended
	Query an alarm rule.	aom:alarmRule:get	Recommended
	Query a dashboard or dashboard group.	aom:view:get	Recommended
	Query the resource list.	aom:inventory:list	Recommended
	Query or count resources.	aom:inventory:get	Recommended
	Query or count alarms.	aom:alarm:get	Recommended
	Query an access code.	aom:accessCode:get	Recommended
	Query the ICAgent version.	aom:icmgr:get	Recommended
	Query a PE scaling rule.	aom:autoScalingRule:get	Recommended
	Query logs.	aom:log:get	Recommended
	Query the subscription rule list.	aom:subscriberules:list	Recommended
	Query the alarm action rule list.	aom:actionRule:list	Recommended
	Query an alarm action rule.	aom:actionRule:get	Recommended
	Query or preview a message template.	aom:notificationTemplate:get	Recommended
AOM (write)	Report an event.	aom:event:put	Use as required
	Report metrics.	aom:metric:put	Use as required
	Modify monitoring configuration.	aom:metric:set	Use as required
	Delete monitoring configuration.	aom:metric:delete	Use as required
	Add or modify a dashboard or dashboard group.	aom:view:create	Use as required
	Delete a dashboard or dashboard group.	aom:view:delete	Use as required
	Delete an application discovery rule.	aom:discoveryRule:delete	Use as required
	Add or modify a resource tag or alias.	aom:inventory:set	Use as required
	Report an event or alarm.	aom:alarm:put	Use as required
	Clear an alarm.	aom:alarm:delete	Use as required
	Register an alarm type.	aom:alarm:create	Use as required
	Delete an access code.	aom:accessCode:delete	Use as required
	Create an access code.	aom:accessCode:create	Use as required
	Add or modify an application discovery rule.	aom:discoveryRule:set	Use as required
	Deliver ICAgent configuration.	aom:icmgr:set	Use as required
	Uninstall the ICAgent.	aom:icmgr:delete	Use as required
	Upgrade the ICAgent version.	aom:icmgr:update	Use as required
	Install the ICAgent.	aom:icmgr:create	Use as required
	Modify a PE scaling rule.	aom:autoScalingRule:update	Use as required
	Delete a PE scaling rule.	aom:autoScalingRule:delete	Use as required
	Stop a PE scaling rule.	aom:autoScalingRule:disable	Use as required
	Start a PE scaling rule.	aom:autoScalingRule:enable	Use as required
	Add or modify an alarm rule.	aom:alarmRule:create	Use as required
	Update an alarm rule.	aom:alarmRule:set	Use as required
	Delete an alarm rule.	aom:alarmRule:delete	Use as required
	Modify a subscription rule.	aom:subscriberules:update	Use as required
	Create a subscription rule.	aom:subscriberules:set	Use as required
	Delete a subscription rule.	aom:subscriberules:delete	Use as required
	Delete an alarm action rule.	aom:actionRule:delete	Use as required
	Update an alarm action rule.	aom:actionRule:update	Use as required
	Add an alarm action rule.	aom:actionRule:create	Use as required
	Delete a message template.	aom:notificationTemplate:delete	Use as required
	Modify a message template.	aom:notificationTemplate:update	Use as required
	Create a message template.	aom:notificationTemplate:create	Use as required
	Delete a Prometheus instance.	aom:prometheus:delete	Use as required
	Create a Prometheus instance.	aom:prometheus:create	Use as required
	Modify a Prometheus instance.	aom:prometheus:update	Use as required