Help Center/ Identity and Access Management_Identity and Access Management (New Edition)/ Service Authorization Reference/ Identity Policy–based Authorization/ Databases/ Data Replication Service (DRS)
Updated on 2025-12-08 GMT+08:00
Online Debugging
CLI Examples
View PDF
Share

Data Replication Service (DRS)

IAM provides system-defined identity policies to define common actions supported by cloud services. You can also create custom identity policies using the actions supported by cloud services for more refined access control.

In addition to IAM, the Organizations service provides Service Control Policies (SCPs) to set access control policies.

SCPs do not actually grant any permissions to an entity. They only set the permissions boundary for the entity. When SCPs are attached to an organizational unit (OU) or a member account, the SCPs do not directly grant permissions to that OU or member account. Instead, the SCPs only determine what permissions are available for that member account or those member accounts under that OU. The granted permissions can be applied only if they are allowed by the SCPs.

To learn more about how IAM is different from Organizations for access control, see What Are the Differences in Access Control Between IAM and Organizations?

This section describes the elements used by IAM custom identity policies and Organizations SCPs. The elements include actions, resources, and conditions.

Actions

Actions are specific operations that are allowed or denied in an identity policy.

  • The Access Level column describes how the action is classified (List, Read, or Write). This classification helps you understand the level of access that an action grants when you use it in an identity policy.
  • The Resource Type column indicates whether the action supports resource-level permissions.
    • You can use a wildcard (*) to indicate all resource types. If this column is empty (-), the action does not support resource-level permissions and you must specify all resources ("*") in your identity policy statements.
    • If this column includes a resource type, you must specify the URN in the Resource element of your identity policy statements.
    • Required resources are marked with asterisks (*) in the table. If you specify a resource in a statement using this action, then it must be of this type.

    For details about the resource types defined by DRS, see Resources.

  • The Condition Key column contains keys that you can specify in the Condition element of an identity policy statement.
    • If the Resource Type column has values for an action, the condition key takes effect only for the listed resource types.
    • If the Resource Type column is empty (-) for an action, the condition key takes effect for all resources that action supports.
    • If the Condition Key column is empty (-) for an action, the action does not support any condition keys.

    For details about the condition keys defined by DRS, see Conditions.

  • The Alias column lists the policy actions that are configured in identity policies. With these actions, you can use APIs for identity policy-based authorization. For details, see Policies and Identity Policies.

The following table lists the actions that you can define in identity policy statements for DRS.

Table 1 Actions supported by DRS

Action

Description

Access Level

Resource Type (*: required)

Condition Key

Alias

drs:backupMigrationJob:createJob

Grants permission to create a backup migration task.

write

job

drs:backupMigrationJob:create

drs:backupMigrationJob:deleteJob

Grants permission to delete a backup migration task.

write

job

drs:backupMigrationJob:delete

drs:backupMigrationJob:getJobDetail

Grants permission to query details about a backup migration task.

list

job

drs:backupMigrationJob:get

drs:backupMigrationJob:modifyOfflineTaskInfo

Grants permission to modify information about a backup migration task.

write

job

drs:backupMigrationJob:modify

drs:cloudDataGuardJob:getChartMonitor

Grants permission to query report charts.

list

job

drs:disasterRecoveryJob:get

drs:cloudDataGuardJob:getDataGuardMonitor

Grants permission to query DR monitoring data.

list

job

drs:disasterRecoveryJob:get

drs:cloudDataGuardJob:getLastDataDisplay

Grants permission to query the last DR data.

write

job

drs:dataGuardJob:list

drs:cloudDataGuardJob:getRpoAndRto

Grants permission to query the RPO and RTO of a specified task.

list

job

drs:dataGuardJob:list

drs:compareJob:createDataCompareJob

Grants permission to create a data-level table comparison task.

write

job

drs:migrationCompareJob:create

drs:compareJob:createObjectCompareJob

Grants permission to create an object-level table comparison task.

write

job

drs:migrationCompareJob:create

drs:compareJob:deleteDataCompareJob

Grants permission to cancel a data-level table comparison task.

write

job

drs:migrationCompareJob:delete

drs:migrationJob:getTopicInfo

Grants permission to query information about all created topics.

list

-

-

drs:migrationJob:get

drs:migrationJob:listAllSmnInfo

Grants permission to query all delivered information.

list

-

-

drs:migrationJob:get

drs:configuration:getPublicIp

Grants permission to query EIPs or EIP information.

list

-

-

drs:migrationJob:get

drs:configuration:getVpcs

Grants permission to query VPCs.

list

-

-

drs:migrationJob:get

drs:configuration:listSubnets

Grants permission to query subnets.

list

-

-

drs:migrationJob:get

drs:configuration:getFeatures

Grants permission to query the feature whitelist.

list

-

-

drs:featureWhiteJob:list

drs:configuration:addTag

Grants permission to add tags.

tagging

-

-

drs:tag:add

drs:compareJob:exportAccountCompareResult

Grants permission to export and download the comparison result of an account-level comparison task.

list

job

drs:compareJob:list

drs:compareJob:exportCompareReport

Grants permission to download the comparison result.

list

job

drs:compareJob:list

drs:configuration:getInstancesTag

Grants permission to batch query tags.

list

-

-

drs:tag:get

drs:compareJob:exportContentsCompareResult

Grants permission to export the comparison result of a value comparison task.

list

job

drs:compareJob:list

drs:configuration:getProjectTags

Grants permission to query project tags.

list

-

-

drs:tag:get

drs:compareJob:exportLinesCompareResult

Grants permission to export the comparison result of a row comparison task.

list

job

drs:compareJob:list

drs:compareJob:exportObjectsCompareResult

Grants permission to export the comparison result of an object-level comparison task.

list

job

drs:compareJob:list

drs:compareJob:getAccountCompare

Grants permission to query the overview of an account-level comparison task.

list

job

drs:compareJob:getOverview

drs:compareJob:getAccountCompareDetail

Grants permission to query the details of an account-level comparison task.

list

job

drs:healthCompareJob:getAccountDetails

drs:compareJob:getAccountCompareDetails

Grants permission to query the details of an account-level comparison task.

list

job

drs:CompareJob:getAccountDetails

drs:subscriptionJob:exportJobs

Grants permission to export data subscription tasks.

list

-

-

drs:subscriptionJob:get

drs:compareJob:getAccountDetails

Grants permission to query the overview of a row comparison task.

list

job

drs:healthCompareJob:getAccountDetails

drs:compareJob:getCompareJobEstimatedTime

Grants permission to query the estimated time of a comparison task.

list

job

drs:CompareJob:getEstimateTime

drs:compareJob:getComparePolicy

Grants permission to query a comparison policy.

list

job

drs:healthPolicyCompare:list

drs:subscriptionJob:listJobs

Grants permission to query data subscription tasks.

list

-

-

drs:subscriptionJob:get

drs:compareJob:getContentCompare

Grants permission to query the overview of a value comparison task.

list

job

drs:CompareJob:getContentOverview

drs:compareJob:getContentCompareDetail

Grants permission to query the details of a value comparison task.

list

job

drs:CompareJob:getContentDetail

drs:compareJob:getContentCompareDiff

Grants permission to query the differences of a value comparison task.

list

job

drs:CompareJob:getContentDiff

drs:compareJob:getDataCompareDetail

Grants permission to query the details of a row comparison task.

list

job

drs:healthCompareJob:getLineDetail

drs:compareJob:getDataCompareResult

Grants permission to query the comparison result of a data-level table comparison task.

list

job

drs:CompareJob:getResult

drs:compareJob:getFlowObjectsCompare

Grants permission to query the overview of a dynamic object-level migration comparison task.

list

job

drs:migrationJob:getCompareStruct

drs:compareJob:getHealthCompareJobDetail

Grants permission to query details of a health comparison task.

list

job

drs:healthCompareJob:list

drs:compareJob:getLineCompare

Grants permission to query the overview of a row comparison task.

list

job

drs:CompareJob:getLineOverview

drs:compareJob:getLineCompareDetail

Grants permission to query the details of a row comparison task.

list

job

drs:CompareJob:getLineDetail

drs:compareJob:getObjectCompare

Grants permission to query the overview of an object-level migration comparison task based on the comparison task ID.

list

job

drs:healthCompareJob:getOverview

drs:compareJob:getObjectsCompareDetail

Grants permission to query the details of an object-level comparison task.

list

job

drs:healthCompareJob:getLineDetail

drs:compareJob:getObjectsMigrateCompare

Grants permission to query the overview of an object-level migration comparison task based on the task ID.

list

job

drs:CompareJob:list

drs:compareJob:getObjectsMigrateCompareDetail

Grants permission to query the details of an object-level migration comparison task.

list

job

drs:CompareJob:getDetails

drs:compareJob:getTableCompareDetail

Grants permission to query the details of a data-level table comparison task.

list

job

drs:CompareJob:getContentsInfo

drs:compareJob:listDataCompare

Grants permission to query data-level table comparison tasks.

list

job

drs:CompareJob:list

drs:compareJob:listHealthCompareJobs

Grants permission to query the health comparison report list.

list

job

drs:healthCompareJob:list

drs:compareJob:modifyComparePolicy

Grants permission to modify the comparison policy.

write

job

drs:healthCompare:modify

drs:compareJob:startJob

Grants permission to immediately start a data-level table comparison task.

write

job

drs:migrationCompareJob:start

drs:compareJob:stopJob

Grants permission to stop a comparison task.

write

job

drs:healthCompare:stop

drs:configuration:addDataTransformationInfo

Grants permission to add the data processing information.

write

job

drs:dataTransformation:add

drs:configuration:batchModifyTag

Grants permission to batch add or modify tags.

tagging

job

drs:tags:delete

drs:configuration:batchReplaceTags

Grants permission to batch reset tags.

tagging

job

drs:tags:delete

drs:configuration:checkDataTransformationInfo

Grants permission to verify data processing information.

write

job

drs:dataTransformation:check

drs:configuration:deleteDataTransformationInfo

Grants permission to delete data processing data.

write

job

drs:dataTransformation:delete

drs:configuration:deleteSmnInfo

Grants permission to delete a single piece of delivered information.

write

job

drs:migrationJob:action

drs:configuration:deleteSmnInfoForTopic

Grants permission to delete a single piece of delivered topic information.

write

job

drs:migrationJob:action

drs:configuration:deleteTag

Grants permission to delete a tag.

tagging

job

drs:tags:delete

drs:configuration:downloadTemplate

Grants permission to download the Excel template before importing object information.

write

job

drs:migrationJob:update

drs:configuration:getAddColumns

Grants permission to query data processing information (for many-to-one and column adding scenarios).

list

job

drs:migrationTransformationJob:get

drs:configuration:getAddColumnsFromDb

Grants permission to query data processing information (for many-to-one and column adding scenarios) after the task is started.

list

job

drs:migrationTransformationJob:get

drs:configuration:getFlavorInfo

Grants permission to query the DB engine specifications.

list

-

-

drs:flavors:get

drs:backupMigrationJob:checkOfflineTaskName

Grants permission to verify the name of a backup migration task.

write

-

-

drs:backupMigrationJob:check

drs:configuration:getColumnInfo

Grants permission to query the column information (column mapping and column filtering) of an object.

list

job

drs:migrationJob:get

drs:configuration:getDatabaseName

Grants permission to query the destination database name.

list

job

drs:migrationJob:get

drs:configuration:getDatabaseParams

Grants permission to query database parameters.

list

job

drs:databaseParameters:get

drs:backupMigrationJob:exportJobList

Grants permission to export backup migration tasks.

list

-

-

drs:backupMigrationJob:list

drs:backupMigrationJob:getBackupFileDbList

Grants permission to query databases in a backup file.

list

-

-

drs:backupMigrationJob:get

drs:configuration:getDataTransformationData

Grants permission to query data processing data.

list

job

drs:migrationTransformationJob:get

drs:backupMigrationJob:getRedisInstList

Grants permission to query Redis DB instances.

list

-

-

drs:backupMigrationJob:get

drs:backupMigrationJob:listBuckets

Grants permission to query buckets.

list

-

-

drs:backupMigrationJob:get

drs:backupMigrationJob:listJobs

Grants permission to query backup migration tasks.

list

-

-

drs:backupMigrationJob:list

drs:backupMigrationJob:listObsObject

Grants permission to query objects in the current bucket.

list

-

-

drs:backupMigrationJob:get

drs:configuration:getDataTransformationInfo

Grants permission to query data processing information.

list

job

drs:migrationTransformationJob:get

drs:configuration:listFeature

Grants permission to query supported features.

list

-

-

drs:supportFeature:get

drs:configuration:listLinks

Grants permission to query available data flow information.

list

-

-

drs:supportFeature:get

drs:configuration:getEffectTime

Grants permission to query the database affected time of a specified task.

list

job

drs:migrationJob:getEffectTime

drs:configuration:getESConfig

Grants permission to query ElasticSearch configurations.

list

job

drs:migrationJob:get

drs:configuration:getInstanceTag

Grants permission to query resource tags.

list

job

drs:tag:get

drs:configuration:getSupportDataTransformationType

Grants permission to query data processing data types.

list

job

drs:migrationTransformationJob:get

drs:configuration:getTableInfo

Grants permission to query the table structure and table data.

list

job

drs:migrationJob:get

drs:configuration:importSmnInfo

Grants permission to enter the notification method and information.

write

job

drs:migrationJob:action

drs:configuration:listTopics

Grants permission to query Kafka topic information.

list

job

drs:kafkaJob:get

drs:configuration:modifyDatabaseParams

Grants permission to modify database parameters.

write

job

drs:dataBaseParams:modify

drs:configuration:modifyESConfig

Grants permission to modify ElasticSearch configurations.

write

job

drs:migrationJob:get

drs:configuration:modifySmnInfo

Grants permission to modify the notification method and information.

write

job

drs:migrationJob:action

drs:configuration:modifyTag

Grants permission to modify resource tags.

tagging

job

drs:tag:modify

drs:configuration:modifyUserInfo

Grants permission to update migration user information.

write

job

drs:migrationJob:modifyUserInfo

drs:configuration:setMigrationTransSpeed

Grants permission to set the flow control of a migration task.

write

job

drs:migrationJob:setMigrationTransSpeed

drs:configuration:getInstanceNum

Grants permission to query the number of tasks.

list

-

-

drs:instances:list

drs:configuration:getInstanceQuotas

Grants permission to query quotas.

list

-

-

drs:quota:get

drs:configuration:getQuota

Grants permission to query DRS quotas to a tenant.

list

-

-

drs:quota:get

drs:migrationJoAb:batchDeleteJobs

Grants permission to batch stop or delete tasks.

write

-

-

drs:migrationJobs:delete

drs:configuration:updateDataTransformationInfo

Grants permission to update data processing information.

write

job

drs:dataTransformation:update

drs:migrationJob:addSubscribeJob

Grants permission to create a yearly/monthly task.

write

job

drs:migrationJob:action

drs:migrationJob:associateSmnInfo

Grants permission to associate the management-plane topic information.

write

job

drs:migrationJob:action

drs:migrationJob:batchPauseJob

Grants permission to batch suspend tasks.

write

-

-

drs:migrationJob:action

drs:migrationJob:batchPreCheckJob

Grants permission to batch perform prechecks.

write

-

-

drs:migrationJob:action

drs:migrationJob:batchRetryJob

Grants permission to retry a task.

write

-

-

drs:migrationJob:action

drs:migrationJob:batchSetTransformation

Grants permission to process synchronization objects.

write

-

-

drs:migrationJob:action

drs:migrationJob:batchStartJob

Grants permission to batch start tasks.

write

-

-

drs:migrationJob:action

drs:migrationJob:batchTestClusterConnection

Grants permission to test connections in batches (cluster mode).

write

-

-

drs:migrationJobs:connect

drs:migrationJob:batchTestConnection

Grants permission to test connections in batches.

write

-

-

drs:migrationJobs:connect

drs:migrationJob:downloadBatchCreateTemplate

Grants permission to download the template for creating tasks in batches.

list

-

-

drs:migrationJob:get

drs:migrationJob:importBatchCreateJobs

Grants permission to import batch creation tasks.

write

-

-

drs:migrationJobs:create

drs:migrationJob:listAsyncJobDetail

Grants permission to query details about the tasks created asynchronously in batches with a specified ID.

list

-

-

drs:migrationJob:get

drs:migrationJob:listAsyncJobs

Grants permission to query the list of tasks created asynchronously in batches.

list

-

-

drs:migrationJob:get

drs:migrationJob:listJobInfo

Grants permission to batch query task details by task ID.

list

-

-

drs:migrationJob:get

drs:migrationJob:listJobStatus

Grants permission to batch query task status by task ID.

list

-

-

drs:migrationJob:get

drs:migrationJob:asyncBatchCreateJobByAsyncId

Grants permission to asynchronously create tasks in batches.

write

job

drs:migrationJob:action

drs:migrationJob:getJobList

Grants permission to query tasks of a tenant.

list

-

-

drs:migrationJob:get

drs:migrationJob:listPrecheckResult

Grants permission to query the pre-check results of tasks in batches.

list

-

-

drs:migrationJob:get

drs:migrationJob:selectDatabaseObject

Grants permission to select the databases or tables to be migrated.

write

-

-

drs:migrationJobs:select

drs:configuration:listEPs

Grants permission to query enterprise projects.

list

-

-

drs:tag:get

drs:migrationJob:asyncBatchSaveJob

Grants permission to submit the tasks created asynchronously in batches.

write

job

drs:migrationJobs:create

drs:migrationJob:asyncBatchUpdateJobByAsyncId

Grants permission to update details about the tasks created asynchronously in batches with a specified ID.

write

job

drs:migrationJob:action

drs:migrationJob:batchCreateJob

Grants permission to synchronously create tasks in batches.

write

job

drs:migrationJobs:create

drs:migrationJob:changeFlavor

Grants permission to change specifications.

write

job

drs:migrationJob:action

drs:migrationJob:getCesJobs

Grants permission to query migration tasks.

list

-

-

drs:migrationJob:list

drs:migrationJob:changeFlavorByNeed

Grants permission to change node specifications on the pay-per-use page.

write

job

drs:migrationJob:modify

drs:compareJob:createJob

Grants permission to create a comparison task.

write

-

-

drs:migrationCompareJob:create

drs:migrationJob:checkInheritJob

Grants permission to determine whether a task can be inherited.

write

job

drs:migrationJob:check

drs:migrationJob:checkRestartPoint

Grants permission to check resumable position.

write

job

drs:migrationJob:check

drs:migrationJob:checkTableExist

Grants permission to query whether the table structure and table data were found.

list

job

drs:migrationJob:get

drs:migrationJob:copyJobAction

Grants permission to deliver a replication task.

write

job

drs:migrationJob:check

drs:migrationJob:createJob

Grants permission to create an online migration task.

write

job

drs:migrationJob:create

drs:migrationJob:createJobs

Grants permission to create a task.

write

job

drs:migrationJobs:create

drs:migrationJob:deleteColumnInfo

Grants permission to delete the column information (column mapping and column filtering) of an object.

write

job

drs:migrationJob:get

drs:migrationJob:deleteJob

Grants permission to delete online migration task V1.

write

job

drs:migrationJob:delete

drs:migrationJob:downloadDbObjectTemplate

Grants permission to download the object selection template.

read

job

drs:migrationJob:update

drs:migrationJob:endJob

Grants permission to stop an online migration task.

write

job

drs:migrationJob:terminate

drs:migrationJob:exportAddedDeletedObjectsInfo

Grants permission to export added and deleted object information.

list

job

drs:migrationJob:update

drs:compareJob:getCompareResult

Grants permission to query comparison results.

list

-

-

drs:CompareJob:getResult

drs:migrationJob:exportErrorInfo

Grants permission to export error information.

list

job

drs:migrationJob:update

drs:migrationJob:exportObjectsSentInfo

Grants permission to export delivered object information.

list

job

drs:migrationJob:update

drs:migrationJob:getAccess

Grants permission to query the allowed operations of a specified task.

list

job

drs:migrationJob:get

drs:migrationJob:getAggregationTable

Grants permission to query multi-table mapping in the memory.

list

job

drs:migrationJob:get

drs:migrationJob:getCesJob

Grants permission to query migration task details.

list

job

drs:migrationJob:get

drs:migrationJob:getDbObjectCollectionStatus

Grants permission to obtain the result of submitting the query of database object information.

list

job

drs:migrationJob:get

drs:migrationJob:getDbObjects

Grants permission to query database object information.

list

job

drs:migrationJob:get

drs:migrationJob:getDbObjectsCollectAsync

Grants permission to submit the query of database object information.

list

job

drs:migrationJob:get

drs:migrationJob:getDbObjectTemplateProgress

Grants permission to query the progress of uploading the object import template.

list

job

drs:migrationJob:update

drs:migrationJob:getDbObjectTemplateResult

Grants permission to obtain the result of uploading the object import template.

list

job

drs:migrationJob:update

drs:migrationJob:getFullJobDetails

Grants permission to query details of a full synchronization task.

list

job

drs:migrationJob:update

drs:migrationJob:getImportExcelProcess

Grants permission to query the progress of parsing Excel files.

list

job

drs:migrationJob:update

drs:migrationJob:getIncreComponentsDetails

Grants permission to query details about incremental components.

list

job

drs:migrationJob:update

drs:migrationJob:getJob

Grants permission to query details about an online migration task.

list

job

drs:migrationJob:get

drs:migrationJob:getJobDetail

Grants permission to query task details.

list

job

drs:migrationJob:get

drs:migrationJob:getJobMeteringPrice

Grants permission to query task price information.

list

job

drs:MigrationJob:getMeteringPrice

drs:migrationJob:getObjectHasColumn

Grants permission to query objects with column information (column mapping and column filtering).

list

job

drs:migrationJob:get

drs:migrationJob:getObjectsCompareOverviewa

Grants permission to query data-level streaming comparison.

list

job

drs:migrationJob:getStreamComparison

drs:migrationJob:getObjectSelectInfo

Grants permission to query task object selection information.

list

job

drs:migrationJob:get

drs:migrationJob:getOperationInfo

Grants permission to query the operation statistics of a specified task.

list

job

drs:migrationJob:get

drs:migrationJob:getProgress

Grants permission to query the migration progress of a specified task.

list

job

drs:migrationJob:getSpecifiedProgress

drs:configuration:listDatabaseParams

Grants permission to query the parameters of the source and destination databases.

list

-

-

drs:databaseParameters:get

drs:migrationJob:getSmnInfo

Grants permission to query a single piece of delivered information.

list

job

drs:migrationJob:get

drs:migrationJob:getSmnInfoForTopic

Grants permission to query a single piece of delivered topic information.

list

job

drs:migrationJob:get

drs:migrationJob:getSrcUsers

Grants permission to query the migration users of the source database.

list

job

drs:migrationJob:getSrcUsers

drs:configuration:getOpenStreamResult

Grants permission to query the result of enabling the stream mode.

list

-

-

drs:migrationTransformationJob:get

drs:migrationJob:getSupportObject

Grants permission to query whether a task supports object selection and column mapping.

list

job

drs:migrationJob:get

drs:migrationJob:getSupportSearchObjectType

Grants permission to query the object types that can be queried by a user.

list

job

drs:migrationJob:get

drs:migrationJob:getSwitchVipStatus

Grants permission to query dual-VIP switchover result.

list

job

drs:migrationJob:get

drs:migrationJob:batchDeleteJob

Grants permission to batch delete tasks.

write

-

-

drs:migrationJob:delete

drs:migrationJob:batchOperateJob

Grants permission to batch perform operations on tasks with specified IDs.

write

-

-

drs:migrationJob:action

drs:migrationJob:getTaskLog

Grants permission to query migration logs.

list

job

drs:migrationJob:getLog

drs:migrationJob:getTuningParams

Grants permission to query the value of a tuning parameter.

list

job

drs:migrationJob:update

drs:migrationJob:checkAction

Grants permission to verify a task name.

write

-

-

drs:migrationJob:check

drs:migrationJob:getUpdateObjectSavingStatus

Grants permission to obtain the progress of saving objects.

list

job

drs:migrationJob:get

drs:migrationJob:getUserSelectedObjectInfo

Grants permission to query the synchronization mapping selected by a user.

list

job

drs:migrationJob:get

drs:migrationJob:cloneJobs

Grants permission to clone a MySQL synchronization task.

write

-

-

drs:migrationJob:create

drs:migrationJob:getUserSetObjectInfo

Grants permission to query synchronized object information.

list

job

drs:migrationJob:get

drs:migrationJob:jobAction

Grants permission to perform specific operations on a task.

write

job

drs:migrationJob:action

drs:migrationJob:jobUpdateAction

Grants permission to start and stop tasks, capture, and replay.

write

job

drs:migrationJob:update

drs:migrationJob:exportJobs

Grants permission to export online migration tasks.

list

-

-

drs:migrationJob:list

drs:migrationJob:listJobs

Grants permission to query tasks of a tenant.

list

job

drs:migrationJob:list

drs:migrationJob:getBatchTaskLog

Grants permission to batch query migration logs.

list

-

-

drs:migrationJob:getLog

drs:migrationJob:getCountdown

Grants permission to query cloud service countdown information.

list

-

-

drs:migrationJob:get

drs:migrationJob:getDrsJobByRdsInstanceId

Grants permission to query migration tasks related to RDS DB instances.

list

-

-

drs:migrationJob:list

drs:migrationJob:listJobs

   

list

job

-

drs:migrationJob:listReplayFaultsJobs

Grants permission to query the replay faults.

list

job

drs:replayFaultsJob:list

drs:migrationJob:modifyColumnInfo

Grants permission to modify the column information (column mapping and column filtering) of an object.

write

job

drs:migrationJob:get

drs:migrationJob:modifyCommonSetting

Grants permission to update task configurations.

write

job

drs:migrationJob:updateJobConfig

drs:migrationJob:modifyConflictPolicy

Grants permission to update the conflict policy of a synchronization task.

write

job

drs:synchronizationJob:update

drs:migrationJob:getJobs

Grants permission to query online migration tasks.

list

-

-

drs:migrationJob:list

drs:migrationJob:getNodeNumByDDMInstance

Grants permission to calculate the number of subtasks based on the number of DDM sharding nodes.

list

-

-

drs:migrationJob:get

drs:migrationJob:modifyGroupAndStream

Grants permission to enable or disable log reporting to LTS.

write

job

drs:migrationJob:update

drs:migrationJob:getPrecheckResult

Grants permission to query the pre-check result of a migration task.

list

-

-

drs:precheckJob:get

drs:migrationJob:modifyIncreStartPosition

Grants permission to update the start point of an incremental task.

write

job

drs:migrationJob:updateJobConfig

drs:migrationJob:getResourceInstances

Grants permission to query resource instances and associated resources.

list

-

-

drs:migrationJob:get

drs:migrationJob:modifyJob

Grants permission to modify an online migration task.

write

job

drs:migrationJob:modify

drs:migrationJob:modifySyncTypePolicy

Grants permission to update the synchronization type policy.

write

job

drs:migrationJob:create

drs:migrationJob:getSubscribeNumber

Grants permission to query the specifications of a yearly/monthly task.

list

-

-

drs:migrationJob:get

drs:migrationJob:operateJobByJobId

Grants permission to perform operations on a task with a specified ID.

write

job

drs:migrationJob:action

drs:migrationJob:selectGroupAndStream

Grants permission to query whether the LTS service is enabled for the current task.

list

job

drs:migrationJob:get

drs:migrationJob:sendImportCheck

Grants permission to upload Excel files.

write

job

drs:migrationJob:update

drs:migrationJob:switchVip

Grants permission to perform dual-VIP switchover.

write

job

drs:migrationJob:action

drs:migrationJob:updateDDLPolicy

Grants permission to update the DDL filtering policy.

write

job

drs:migrationJob:updateDDLPolicy

drs:migrationJob:listProgressInfo

Grants permission to batch query the migration progress and incremental latency by task ID.

list

-

-

drs:migrationJobs:getProgress

drs:migrationJob:updateJobInfo

Grants permission to update details about a task with a specified ID.

write

job

drs:migrationJob:update

drs:migrationJob:updateObjectInfo

Grants permission to update database object selection information.

write

job

drs:migrationJob:update

drs:migrationJob:updateTuningParams

Grants permission to modify tuning parameters.

write

job

drs:migrationJob:update

drs:migrationJob:uploadDbObjectTemplate

Grants permission to upload the object import template.

write

job

drs:migrationJob:update

drs:replayJob:downloadReport

Grants permission to download files related to a workload replay task.

list

job

drs:compareJob:list

drs:replayJob:exportAbnormalSqlData

Grants permission to download abnormal SQL statements during workload replay.

list

job

drs:supportFeature:get

drs:migrationJob:resourceCheck

Grants permission to check resources for creating an online migration task.

write

-

-

drs:migrationJob:create

drs:migrationJob:skipPrecheck

Grants permission to skip the pre-check.

write

-

-

drs:migrationJob:check

drs:replayJob:exportSlowSqlData

Grants permission to export SQL statements during workload replay.

list

job

drs:supportFeature:get

drs:replayJob:getAbnormalSqlData

Grants permission to query abnormal SQL statements during workload replay.

list

job

drs:supportFeature:get

drs:replayJob:getAllSqlFile

Grants permission to query full SQL files during workload replay.

list

job

drs:supportFeature:get

drs:replayJob:getExecuteResultData

Grants permission to query the result of a workload replay task.

list

job

drs:supportFeature:get

drs:replayJob:getExportSlowSqlStatus

Grants permission to query the export status of a workload replay file.

list

job

drs:supportFeature:get

drs:replayJob:getReplayErrorTemplate

Grants permission to query abnormal SQL templates.

list

job

drs:supportFeature:get

drs:replayJob:getReplayFile

Grants permission to query files for a workload replay task.

list

job

drs:supportFeature:get

drs:cloudDataGuardJob:getMonitoringData

Grants permission to query DR monitoring data based on the task ID.

list

-

-

drs:disasterRecoveryJob:get

drs:cloudDataGuardJob:batchSwitchover

Grants permission to batch perform primary/standby switchover.

write

-

-

drs:disasterRecoveryJob:switchover

drs:cloudDataGuardJob:listJobInfo

Grants permission to query details about DR initialization objects in batches by task ID.

list

-

-

drs:disasterRecoveryJob:get

drs:cloudDataGuardJob:listRpoAndRto

Grants permission to batch query RPO and RTO.

list

-

-

drs:dataGuardJob:list

drs:cloudDataGuardJob:listStructProcess

Grants permission to query the progress of DR initialization in batches by task ID.

list

-

-

drs:disasterRecoveryJob:get

drs:migrationJob:batchSetSmn

Grants permission to batch set alarm information.

write

-

-

drs:migrationJob:action

drs:migrationJob:batchSetSpeedLimit

Grants permission to batch set control flow.

write

-

-

drs:migrationJobs:update

drs:migrationJob:batchUpdateDefinerMigrateSetting

Grants permission to set whether to migrate Definers to the user in batches.

write

-

-

drs:migrationJob:updateJobConfig

drs:migrationJob:batchUpdateJobInfo

Grants permission to modify task names or descriptions in batches and set exception notification.

write

-

-

drs:migrationJob:modify

drs:migrationJob:batchUpdateUserMigrate

Grants permission to set users and roles to be migrated in batches.

write

-

-

drs:migrationJob:modifyUserInfo

drs:migrationJob:changeSrcOrTargetPwd

Grants permission to change the password of the source or destination database.

write

-

-

drs:migrationJobs:update

drs:migrationJob:setBatchSyncPolicy

Grants permission to set synchronization policies in batches.

write

-

-

drs:migrationJobs:add

drs:replayJob:getReplayRecord

Grants permission to query reports for a workload replay task.

list

job

drs:supportFeature:get

drs:replayJob:getReplaySlowTemplate

Grants permission to query slow SQL templates.

list

job

drs:supportFeature:get

drs:replayJob:getSlowSqlData

Grants permission to query slow SQL statements during workload replay.

list

job

drs:supportFeature:get

drs:replayJob:listReplayData

Grants permission to query the statistics list during workload replay.

list

job

drs:supportFeature:get

drs:subscriptionJob:createJob

Grants permission to create a data subscription task.

write

job

drs:subscriptionJob:create

drs:subscriptionJob:deleteJob

Grants permission to delete a data subscription task.

write

job

drs:subscriptionJob:delete

drs:subscriptionJob:editJobInfo

Grants permission to edit subscription task information.

write

job

drs:subscriptionJob:edit

drs:subscriptionJob:getJobDetail

Grants permission to query details about a data subscription task.

list

job

drs:subscriptionJob:get

drs:subscriptionJob:getSubscriptionRecord

Grants permission to query detailed subscription content.

list

job

drs:subscriptionJob:get

drs:subscriptionJob:jobAction

Grants permission to perform operations on a data subscription task.

write

job

drs:subscriptionJob:subscribe

drs:configuration:getUserGuideInfo

Grants permission to obtain user guide details.

list

-

-

drs:userGuide:list

drs:configuration:modifyUserGuideInfo

Grants permission to update the user guide.

write

-

-

drs:userGuide:update

drs:subscriptionJob:updateConsumeTime

Grants permission to modify the consumption time point.

write

job

drs:subscriptionJob:UpdateConsumeTime

drs:subscriptionJob:updateJob

Grants permission to modify a data subscription task.

write

job

drs:subscriptionJob:update

drs:cloudDataGuardJob:getRdsInstanceCount

Grants permission to query the number of RDS DB instances bound to a specified DDM instance.

list

-

-

drs:dataGuardJob:list

drs:configuration:getAvailableNodeType

Grants permission to query available node specifications.

list

-

-

drs:migrationJob:get

drs:configuration:getAvailableZoneWithoutSellOut

Grants permission to query available AZs where node specifications are not sold out.

list

-

-

drs:migrationJob:get

drs:configuration:listAvailableZoneStatus

Grants permission to query the AZ status.

list

-

-

drs:migrationJob:get

drs:configuration:listAvailableZone

Grants permission to query available AZs.

list

-

-

drs:configuration:list

drs:migrationJob:listAvailableZone

Grants permission to query AZs where specifications are not sold out.

list

-

-

drs:migrationJob:get

drs:configuration:listResourcesByTag

Grants permission to query tasks by tag.

list

-

-

drs:tag:get

drs::listDrivers

Grants permission to query drivers.

list

-

-

drs:migrationJob:get

drs::uploadDriver

Grants permission to upload drivers.

write

-

-

drs:migrationJob:update

drs::deleteDriver

Grants permission to delete drivers.

write

-

-

drs:migrationJob:delete

drs:migrationJob:syncDriver

Grants permission to synchronize drivers.

write

-

-

drs:migrationJob:update

drs:configuration:modifyConfigInfo

Grants permission to update task parameters.

write

job

drs:migrationJob:modify

drs:configuration:getJobParameters

Grants permission to query task parameter configuration list.

list

job

drs:migrationJob:get

drs:configuration:getJobParametersHistory

Grants permission to query the parameter change history of a task.

list

job

drs:migrationJob:get

drs:replayJob:showReplayTimeScope

Grants permission to query the time window for a workload replay task.

read

job

drs:supportFeature:get

drs:replayJob:showReplayResults

Grants permission to query the result data for a workload replay task.

list

job

drs:supportFeature:get

drs:replayJob:exportReport

Grants permission to export reports for a workload replay task.

read

job

drs:supportFeature:get

drs:replayJob:showReportExportStatus

Grants permission to query the export status of a workload replay report.

read

job

drs:supportFeature:get

drs:replayJob:showReportFileObsUris

Grants permission to query the download address of a workload replay report.

list

job

drs:supportFeature:get

Each API of DRS usually supports one or more actions. Table 2 lists the supported actions and dependencies.

Table 2 Actions and dependencies supported by DRS APIs

API

Action

Dependencies

DELETE /v3/{project_id}/jobs/batch-jobs

drs:migrationJoAb:batchDeleteJobs

-

DELETE /v5/{project_id}/jdbc-drivers

drs::deleteDriver

-

DELETE /v5/{project_id}/jobs

drs:migrationJob:batchDeleteJob

-

DELETE /v5/{project_id}/jobs/{job_id}

drs:migrationJob:deleteJob

-

GET /v3/{project_id}/jobs/{job_id}/get-src-user

drs:migrationJob:getSrcUsers

-

GET /v3/{project_id}/node-type

drs:configuration:getAvailableNodeType

-

GET /v3/{project_id}/quotas

drs:configuration:getQuota

-

GET /v5.1/{project_id}/jobs/{job_id}/db-object

drs:migrationJob:getDbObjects

-

GET /v5/{project_id}/{resource_type}/{resource_id}/tags

drs:configuration:getInstanceTag

-

GET /v5/{project_id}/{resource_type}/tags

drs:configuration:getProjectTags

-

GET /v5/{project_id}/batch-async-jobs

drs:migrationJob:listAsyncJobs

-

GET /v5/{project_id}/batch-async-jobs/{async_job_id}

drs:migrationJob:listAsyncJobDetail

-

GET /v5/{project_id}/enterprise-projects

drs:configuration:listEPs

-

GET /v5/{project_id}/jdbc-drivers

drs::listDrivers

-

GET /v5/{project_id}/job/{job_id}/columns

drs:configuration:getColumnInfo

-

GET /v5/{project_id}/job/{job_id}/data-filtering/result

drs:configuration:getDataTransformationData

-

GET /v5/{project_id}/jobs

drs:migrationJob:getJobList

-

GET /v5/{project_id}/jobs/{job_id}

drs:migrationJob:getJobDetail

-

GET /v5/{project_id}/jobs/{job_id}/actions

drs:migrationJob:getAccess

-

GET /v5/{project_id}/jobs/{job_id}/compare-policy

drs:compareJob:getComparePolicy

-

GET /v5/{project_id}/jobs/{job_id}/configuration-histories

drs:configuration:getJobParametersHistory

-

GET /v5/{project_id}/jobs/{job_id}/configurations

drs:configuration:getJobParameters

-

GET /v5/{project_id}/jobs/{job_id}/data-processing-rules

drs:configuration:getDataTransformationInfo

-

GET /v5/{project_id}/jobs/{job_id}/data-processing-rules/result

drs:configuration:getDataTransformationInfo

-

GET /v5/{project_id}/jobs/{job_id}/db-object/template

drs:migrationJob:downloadDbObjectTemplate

-

GET /v5/{project_id}/jobs/{job_id}/db-object/template/progress

drs:migrationJob:getDbObjectTemplateProgress

-

GET /v5/{project_id}/jobs/{job_id}/db-object/template/result

drs:migrationJob:getDbObjectTemplateResult

-

GET /v5/{project_id}/jobs/{job_id}/db-objects

drs:migrationJob:getDbObjects

-

GET /v5/{project_id}/jobs/{job_id}/db-objects/collection-status

drs:migrationJob:getDbObjectCollectionStatus

-

GET /v5/{project_id}/jobs/{job_id}/db-objects/saving-status

drs:migrationJob:getUpdateObjectSavingStatus

-

GET /v5/{project_id}/jobs/{job_id}/db-position

drs:migrationJob:checkAction

-

GET /v5/{project_id}/jobs/{job_id}/dirty-data

drs:migrationJob:listReplayFaultsJobs

-

GET /v5/{project_id}/jobs/{job_id}/health-compare-jobs

drs:compareJob:listHealthCompareJobs

-

GET /v5/{project_id}/jobs/{job_id}/increment-components-detail

drs:migrationJob:getIncreComponentsDetails

-

GET /v5/{project_id}/jobs/{job_id}/metering

drs:migrationJob:getJobMeteringPrice

-

GET /v5/{project_id}/jobs/{job_id}/monitor-data

drs:cloudDataGuardJob:getDataGuardMonitor

-

GET /v5/{project_id}/jobs/{job_id}/object/support

drs:migrationJob:getSupportObject

-

GET /v5/{project_id}/jobs/{job_id}/progress-data/{type}

drs:migrationJob:getObjectsCompareOverviewa

-

GET /v5/{project_id}/jobs/{resource_type}/{job_id}/tags

drs:configuration:getInstanceTag

-

GET /v5/{project_id}/jobs/{resource_type}/tags

drs:configuration:getProjectTags

-

GET /v5/{project_id}/jobs/template

drs:migrationJob:downloadBatchCreateTemplate

-

GET /v5/{project_id}/links

drs:configuration:listLinks

-

POST /v3/{project_id}/available-zone

drs:migrationJob:listAvailableZone

-

POST /v3/{project_id}/jobs

drs:migrationJob:listJobs

-

POST /v3/{project_id}/jobs/{job_id}/params

drs:configuration:modifyDatabaseParams

-

POST /v3/{project_id}/jobs/{type}/batch-struct-detail

drs:cloudDataGuardJob:listJobInfo

-

POST /v3/{project_id}/jobs/batch-connection

drs:migrationJob:batchTestConnection

-

POST /v3/{project_id}/jobs/batch-creation

drs:migrationJob:batchCreateJob

-

POST /v3/{project_id}/jobs/batch-detail

drs:migrationJob:listJobInfo

-

POST /v3/{project_id}/jobs/batch-get-params

drs:configuration:listDatabaseParams

-

POST /v3/{project_id}/jobs/batch-pause-task

drs:migrationJob:batchPauseJob

-

POST /v3/{project_id}/jobs/batch-precheck

drs:migrationJob:batchPreCheckJob

-

POST /v3/{project_id}/jobs/batch-precheck-result

drs:migrationJob:listPrecheckResult

-

POST /v3/{project_id}/jobs/batch-progress

drs:migrationJob:listProgressInfo

-

POST /v3/{project_id}/jobs/batch-replace-definer

drs:migrationJob:batchUpdateDefinerMigrateSetting

-

POST /v3/{project_id}/jobs/batch-retry-task

drs:migrationJob:batchRetryJob

-

POST /v3/{project_id}/jobs/batch-rpo-and-rto

drs:cloudDataGuardJob:listRpoAndRto

-

POST /v3/{project_id}/jobs/batch-set-smn

drs:migrationJob:batchSetSmn

-

POST /v3/{project_id}/jobs/batch-starting

drs:migrationJob:batchStartJob

-

POST /v3/{project_id}/jobs/batch-status

drs:migrationJob:listJobStatus

-

POST /v3/{project_id}/jobs/batch-struct-process

drs:cloudDataGuardJob:listStructProcess

-

POST /v3/{project_id}/jobs/batch-switchover

drs:cloudDataGuardJob:batchSwitchover

-

POST /v3/{project_id}/jobs/batch-sync-policy

drs:migrationJob:setBatchSyncPolicy

-

POST /v3/{project_id}/jobs/batch-transformation

drs:migrationJob:batchSetTransformation

-

POST /v3/{project_id}/jobs/cluster/batch-connection

drs:migrationJob:batchTestClusterConnection

-

POST /v3/{project_id}/jobs/create-compare-task

drs:compareJob:createJob

-

POST /v3/{project_id}/jobs/disaster-recovery-monitoring-data

drs:cloudDataGuardJob:getMonitoringData

-

POST /v3/{project_id}/jobs/query-compare-result

drs:compareJob:getCompareResult

-

POST /v5.1/{project_id}/jobs/{job_id}/db-objects/collect

drs:migrationJob:getDbObjectsCollectAsync

-

POST /v5/{project_id}/{resource_type}/{resource_id}/tags/create

drs:configuration:addTag

-

POST /v5/{project_id}/{resource_type}/{resource_id}/tags/delete

drs:configuration:deleteTag

-

POST /v5/{project_id}/{resource_type}/resource-instances/count

drs:configuration:listResourcesByTag

-

POST /v5/{project_id}/{resource_type}/resource-instances/filter

drs:configuration:listResourcesByTag

-

POST /v5/{project_id}/batch-async-jobs/{async_job_id}/commit

drs:migrationJob:asyncBatchCreateJobByAsyncId

-

POST /v5/{project_id}/jdbc-driver

drs::uploadDriver

-

POST /v5/{project_id}/job/{job_id}/columns/collect

drs:configuration:getColumnInfo

-

POST /v5/{project_id}/job/{job_id}/data-filtering/check

drs:configuration:checkDataTransformationInfo

-

POST /v5/{project_id}/jobs

drs:migrationJob:createJobs

-

POST /v5/{project_id}/jobs/{job_id}/action

drs:migrationJob:operateJobByJobId

-

POST /v5/{project_id}/jobs/{job_id}/collect-db-position

drs:migrationJob:checkAction

-

POST /v5/{project_id}/jobs/{job_id}/db-object/template

drs:migrationJob:uploadDbObjectTemplate

-

POST /v5/{project_id}/jobs/{job_id}/db-objects/collect

drs:migrationJob:getDbObjectsCollectAsync

-

POST /v5/{project_id}/jobs/{job_id}/object-mappings

drs:migrationJob:getUserSelectedObjectInfo

-

POST /v5/{project_id}/jobs/{job_id}/operation-statistics/export

drs:migrationJob:getOperationInfo

-

POST /v5/{project_id}/jobs/{job_id}/stop

drs:migrationJob:deleteJob

-

POST /v5/{project_id}/jobs/{resource_type}/{job_id}/tags/action

drs:configuration:batchReplaceTags

-

POST /v5/{project_id}/jobs/action

drs:migrationJob:batchOperateJob

-

POST /v5/{project_id}/jobs/batch-async-create

drs:migrationJob:asyncBatchSaveJob

-

POST /v5/{project_id}/jobs/batch-stop

drs:migrationJob:deleteJob

-

POST /v5/{project_id}/jobs/clone

drs:migrationJob:cloneJobs

-

POST /v5/{project_id}/jobs/name-validation

drs:migrationJob:checkAction

-

POST /v5/{project_id}/jobs/template

drs:migrationJob:importBatchCreateJobs

-

PUT /v3/{project_id}/job/{job_id}/tuning-params/modify-params

drs:migrationJob:updateTuningParams

-

PUT /v3/{project_id}/jobs/batch-limit-speed

drs:migrationJob:batchSetSpeedLimit

-

PUT /v3/{project_id}/jobs/batch-modification

drs:migrationJob:batchUpdateJobInfo

-

PUT /v3/{project_id}/jobs/batch-modify-pwd

drs:migrationJob:changeSrcOrTargetPwd

-

PUT /v3/{project_id}/jobs/batch-select-objects

drs:migrationJob:selectDatabaseObject

-

PUT /v3/{project_id}/jobs/batch-update-user

drs:migrationJob:batchUpdateUserMigrate

-

PUT /v5/{project_id}/batch-async-jobs/{async_job_id}

drs:migrationJob:asyncBatchUpdateJobByAsyncId

-

PUT /v5/{project_id}/jobs/{job_id}

drs:migrationJob:updateJobInfo

-

PUT /v5/{project_id}/jobs/{job_id}/data-processing-rules

drs:configuration:addDataTransformationInfo

-

PUT /v5/{project_id}/jobs/{job_id}/modify-configuration

drs:configuration:modifyConfigInfo

-

PUT /v5/{project_id}/jobs/{job_id}/start-position

drs:migrationJob:modifyIncreStartPosition

-

PUT /v5/{project_id}/jobs/{job_id}/update-jdbc-driver

drs:migrationJob:syncDriver

-

Resources

A resource type indicates the resources that an identity policy applies to. If you specify a resource type for any action in Table 3, the resource URN must be specified in the identity policy statements using that action, and the identity policy applies only to resources of this type. If no resource type is specified, the Resource element is marked with an asterisk (*) and the identity policy applies to all resources. You can also set condition keys in an identity policy to define resource types.

Table 3 Resource types supported by DRS

Resource Type

URN

job

drs:<region>:<account-id>:job:<job-id>

Conditions

DRS does not support service-specific condition keys in identity policies. It can only use global condition keys applicable to all services. For details, see Global Condition Keys.

Parent topic: Databases