# 数据仓库服务 GaussDB(DWS) 云服务在IAM预置了常用授权项，称为系统身份策略。如果IAM系统身份策略无法满足授权要求，管理员可以根据各服务支持的授权项，创建IAM自定义身份策略来进行精细的访问控制，IAM自定义身份策略是对系统身份策略的扩展和补充。 除IAM服务外，[Organizations](https://support.huaweicloud.com/productdesc-organizations/org_01_0011.html)服务中的[服务控制策略](https://support.huaweicloud.com/usermanual-organizations/org_03_0065.html)（Service Control Policy，以下简称SCP）也可以使用这些授权项元素设置访问控制策略。 SCP不直接进行授权，只划定权限边界。将SCP绑定到组织单元或者成员账号时，并没有直接对组织单元或成员账号授予操作权限，而是规定了成员账号或组织单元包含的成员账号的授权范围。IAM身份策略授予权限的有效性受SCP限制，只有在SCP允许范围内的权限才能生效。 IAM服务与Organizations服务在使用这些元素进行访问控制时，存在着一些区别，详情请参见：[IAM服务与Organizations服务权限访问控制的区别](https://support.huaweicloud.com/organizations_faq/org_06_0004.html)。 本章节介绍IAM服务身份策略授权场景中自定义身份策略和组织服务中SCP使用的元素，这些元素包含了操作（Action）、资源（Resource）和条件（Condition）。 - 如何使用这些元素编辑IAM自定义身份策略，请参考[创建自定义身份策略](https://support.huaweicloud.com/usermanual-iam5/iam_01_0917.html)。 - 如何使用这些元素编辑SCP自定义策略，请参考[创建SCP](https://support.huaweicloud.com/usermanual-organizations/org_03_0035.html)。 #### 操作（Action） 操作（Action）即为身份策略中支持的授权项。 - **"访问级别"**列描述如何对操作进行分类（list、read和write等）。此分类可帮助您了解在身份策略中相应操作对应的访问级别。 - "**资源类型"** 列指每个操作是否支持资源级权限。 - 资源类型支持通配符号\*表示所有。如果此列没有值（-），则必须在身份策略语句的Resource元素中指定所有资源类型（"\*"）。 - 如果该列包含资源类型，则必须在具有该操作的语句中指定该资源的URN。 - 资源类型列中必需资源在表中用星号（\*）标识，表示使用此操作必须指定该资源类型。 关于DWS定义的资源类型的详细信息请参见[资源类型（Resource）]。 - **"条件键"** 列包括了可以在身份策略语句的Condition元素中支持指定的键值。 - 如果该授权项资源类型列存在值，则表示条件键仅对列举的资源类型生效。 - 如果该授权项资源类型列没有值（-），则表示条件键对整个授权项生效。 - 如果此列条件键没有值（-），表示此操作不支持指定条件键。 关于DWS定义的条件键的详细信息请参见[条件（Condition）]。 - **"别名"** 列包括了可以在身份策略中配置的策略授权项。通过这些授权项，可以控制支持策略授权的API访问。详细信息请参见[身份策略兼容性说明](https://support.huaweicloud.com/iam5_faq/iam_01_1103.html)。 您可以在身份策略语句的Action元素中指定以下DWS的相关操作。 表1DWS支持的授权项 | 授权项 | 描述 | 访问级别 | 资源类型（\*为必须） | 条件键 | 别名 | |:---|:---|:---|:---|:---|:---| | dws:cluster:list | 授予集群列表查询权限。 | List | - | - | - | | dws:cluster:getDetail | 授予集群详情查看权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:openAPICluster:getDetail | | dws:cluster:create | 授予DWS集群创建权限。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:AvailabilityZone - dws:VpcId - dws:SubnetId - dws:PublicIPId - dws:KmsId | - dws:openAPICluster:create - dws:checkCluster:create | | dws:cluster:delete | 授予DWS集群删除权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:openAPICluster:delete | | dws:cluster:scaleIn | 授予DWS集群缩容权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:cluster:shrink | | dws:cluster:listRing | 授予查询集群ring环节点信息权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:ring:list | | dws:cluster:restore | 授予就地恢复集群权限。 | Write | cluster \* | - | - | | dws:cluster:restore | 授予就地恢复集群权限。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:scaleOut | 授予集群扩容权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:VpcId - dws:SubnetId | - | | dws:cluster:resize | 授予集群扩容和调整大小权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:SubnetId | dws:cluster:scaleOutOrOpenAPIResize | | dws:cluster:expandDisk | 授予DWS集群磁盘扩容权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:disk:expand - dws:periodExpandPrecheck:operate | | dws:cluster:restart | 授予DWS集群重启权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:openAPICluster:restart | | dws:cluster:resetPassword | 授予DWS集群重置密码权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:openAPICluster:resetPassword | | dws:cluster:listAuditLog | 授予查看审计日志列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:setMaintainceWindow | 授予维护时间窗修改权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:switchover | 授予集群主备恢复权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:cancelReadonly | 授予集群解除只读权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:addCN | 授予集群增加CN节点权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:module:install | | dws:cluster:listCN | 授予获取集群CN列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteCN | 授予删除CN节点权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:module:uninstall | | dws:cluster:redistribution | 授予集群数据重分布权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:redistribution:operate | | dws:cluster:createDataSource | 授予创建MRS数据源权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:MRSToEdge - dws:OBSToEdge - dws:LakeFormationToEdge | dws:MRSConnection:create | | dws:cluster:updateDataSource | 授予更新MRS数据源权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:MRSConnection:update | | dws:cluster:deleteDataSource | 授予删除MRS数据源权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:MRSConnection:delete | | dws:alarm:listConfig | 授予查询告警配置权限。 | List | - | - | dws:alarmConfig:list | | dws:alarm:listDetail | 授予查询告警详情列表权限。 | List | - | - | dws:alarmDetail:list | | dws:alarm:listStatistics | 授予查询告警统计列表权限。 | List | - | - | dws:alarmStatistic:list | | dws:alarm:createSubscription | 授予创建告警订阅权限。 | Write | - | - | dws:alarmSub:create | | dws:alarm:listSubscription | 授予查询订阅告警权限。 | List | - | - | dws:alarmSub:list | | dws:alarm:updateSubscription | 授予更新订阅告警权限。 | Write | - | - | dws:alarmSub:update | | dws:alarm:deleteSubscription | 授予删除订阅的告警权限。 | Write | - | - | dws:alarmSub:delete | | dws:alarm:report | 授予上报告警权限。 | Write | - | - | - | | dws:event:list | 授予查询事件列表权限。 | List | - | - | - | | dws:event:listSpec | 授予查询事件配置权限。 | List | - | - | dws:eventSpec:list | | dws:event:listSubscription | 授予查询订阅事件权限。 | Read | - | - | dws:eventSub:list | | dws:event:createSpec | 授予创建事件配置权限。 | Write | - | - | - | | dws:event:deleteSpec | 授予删除事件配置权限。 | Write | - | - | - | | dws:event:createSubscription | 授予创建订阅事件权限。 | Write | - | - | dws:eventSub:create | | dws:event:updateSubscription | 授予更新订阅事件权限。 | Write | - | - | dws:eventSub:update | | dws:event:deleteSubscription | 授予删除订阅的事件权限。 | Write | - | - | dws:eventSub:delete | | dws:event:report | 授予上报事件权限。 | Write | - | - | - | | dws:cluster:createConnection | 授予创建DWS集群连接权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dns:create | | dws:cluster:deleteConnection | 授予删除DWS集群连接权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dns:release | | dws:cluster:updateConnection | 授予更新DWS集群连接权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dns:edit | | dws:cluster:bindEIP | 授予公网IP绑定权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:eip:operate | | dws:cluster:unbindEIP | 授予公网IP解绑权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:eip:operate | | dws:cluster:listELB | 授予获得弹性负载均衡列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:elb:list | | dws:cluster:bindELB | 授予绑定弹性负载均衡权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:elb:bind | | dws:cluster:unbindELB | 授予解绑弹性负载均衡权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:elb:unbind | | dws:cluster:createSnapshotPolicy | 授予设置自动快照策略权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:BackupToEdge | dws:cluster:setAutomatedSnapshot | | dws:cluster:listSnapshotStatistics | 授予查询快照空间容量权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listSnapshot | 授予查看集群快照列表权限。 | List | cluster | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:openAPISnapshot:list - dws:clusterSnapshot:list - dws:snapshot:list | | dws:cluster:getSnapshotDetail | 授予查看集群快照详情权限。 | List | cluster | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:openAPISnapshot:detail | | dws:cluster:createSnapshot | 授予使用API创建快照权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:BackupToEdge | - dws:openAPISnapshot:create - dws:snapshot:create | | dws:cluster:deleteSnapshotPolicy | 授予删除快照策略权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:backupPolicy:delete | | dws:cluster:listSnapshotPolicy | 授予查询快照策略权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:copySnapshot | 授予复制快照权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:snapshot:copy | | dws:cluster:deleteSnapshot | 授予删除快照权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:openAPISnapshot:delete - dws:snapshot:delete | | dws:cluster:restoreSnapshot | 授予恢复快照权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:VpcId - dws:SubnetId - dws:PublicIPId | dws:openAPISnapshot:restore | | dws:cluster:deleteDisasterRecovery | 授予删除容灾权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:delete | | dws:cluster:createDisasterRecovery | 授予创建备份容灾权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:create | | dws:cluster:startDisasterRecovery | 授予容灾启动权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:otherOperate | | dws:cluster:pauseDisasterRecovery | 授予容灾暂停权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:otherOperate | | dws:cluster:switchoverDisasterRecovery | 授予容灾切换权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:otherOperate | | dws:cluster:switchFailoverDisaster | 授予容灾切换权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:otherOperate | | dws:cluster:restoreDisaster | 授予容灾恢复权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:otherOperate | | dws:cluster:getDisasterRecovery | 授予容灾查询操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:get | | dws::listTagsForProject | 授予查询该项目下的标签列表权限。 | List | - | - | - dws:openAPITag:list - dws:tag:listTagsForProject | | dws::listTagsForResource | 授予查询集群标签列表权限。 | List | cluster \* | - | - dws:openAPITag:getResourceTag - dws:tag:listTagsForResource | | dws::listTagsForResource | 授予查询集群标签列表权限。 | List | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:openAPITag:getResourceTag - dws:tag:listTagsForResource | | dws::tagResource | 授予添加标签权限。 | Tagging | cluster \* | - | - dws:openAPITag:add - dws:tag:tagResource | | dws::tagResource | 授予添加标签权限。 | Tagging | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:openAPITag:add - dws:tag:tagResource | | dws::unTagResource | 授予删除标签权限。 | Tagging | cluster \* | - | - dws:openAPITag:delete - dws:tag:unTagResource | | dws::unTagResource | 授予删除标签权限。 | Tagging | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:openAPITag:delete - dws:tag:unTagResource | | dws:monitor:listHostDisk | 授予DMS-查询主机磁盘信息权限。 | List | - | - | dws:dmsDdlExamine:getOrCreate | | dws:monitor:listHostNet | 授予DMS-查询主机网络监控权限。 | List | - | - | dws:dmsDdlExamine:getOrCreate | | dws:monitor:listMonitorIndicatorData | 授予DMS-查询主机历史监控信息权限。 | List | - | - | dws:dmsDdlExamine:getOrCreate | | dws:monitor:listMonitorIndicators | 授予DMS-查询性能监控指标权限。 | List | - | - | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listConfig | 授予查看集群配置参数权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:service:listSpec | 授予查看服务规格列表权限。 | List | - | - | dws:specProduct:list | | dws:cluster:listDataSource | 授予查看集群数据源权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:MRSSource:list | | dws:service:listJobDetail | 授予查看任务进度详情权限。 | List | - | - | - | | dws:service:listStatistics | 授予查看当前可用资源数量权限。 | List | - | - | - | | dws:service:listQuotas | 授予查看用户配额权限。 | List | - | - | - | | dws:cluster:updateConfig | 授予更新集群配置参数权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:AuditLogToEdge | dws:cluster:setSecuritySettings | | dws:service:listAZ | 授予查看服务可用区列表权限。 | List | - | - | - | | dws:service:listDssPools | 授予查看专属存储池列表权限。 | List | - | - | - | | dws:service:listEps | 授予查看eps列表权限。 | List | - | - | - | | dws:service:authorize | 授予获取用户授权权限。 | Write | - | - | dws:authorize:operate | | dws:service:checkAuthorize | 授予检查用户授权权限。 | Read | - | - | dws:checkAuthorize:operate | | dws::updateTag | 授予更新标签权限。 | Tagging | cluster \* | - | - dws:tag:edit - dws:openAPITag:update | | dws::updateTag | 授予更新标签权限。 | Tagging | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:tag:edit - dws:openAPITag:update | | dws:cluster:getSnapshotPolicy | 授予查看快照策略权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:backupPolicy:list | | dws:cluster:bindOrUnbindELB | 授予绑定或解绑弹性负载均衡权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:elb:bind | | dws:cluster:bindOrUnbindEIP | 授予绑定或解绑弹性IP权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:eip:operate | | dws:cluster:deleteNode | 授予删除节点权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:clusterNodes:operate | | dws:cluster:listConnection | 授予查询DWS集群连接列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dns:list | | dws:cluster:checkConnection | 授予检查DWS集群连接权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listDN | 授予获取集群DN列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listBucket | 授予获取桶列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:queryBuckets:list | | dws:cluster:listScaleInNode | 授予获取缩容待删除节点列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listFlavorForResize | 授予查询支持变更的规格列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:supportFlavors:list | | dws:cluster:listFlavorForRestore | 授予查询支持恢复的规格列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws::countResourceByTag | 授予使用标签查询集群权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:tag:countResourceByTag | | dws:cluster:updateSnapshotPolicy | 授予更新快照策略权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:backupPolicyDetail:update | | dws::listResourceByTag | 授予根据标签查询集群列表权限。 | List | cluster \* | - | - dws:openAPITag:getResourceByTag - dws:tag:listResourceByTag | | dws::listResourceByTag | 授予根据标签查询集群列表权限。 | List | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:openAPITag:getResourceByTag - dws:tag:listResourceByTag | | dws:cluster:assessRisk | 授予评估调整大小风险权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:checkRestoreTable | 授予恢复表检查权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:tableRestoreCheck:operate | | dws:cluster:checkSupportFineGrainedBackup | 授予检测集群是否支持细粒度备份权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:checkSupport:operate | | dws:cluster:configureNetwork | 授予配置集群网络权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:expandWithExistedNodes | 授予集群从空闲节点扩容权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:expandWithExistedNodes:update | | dws:cluster:getAntiAffinity | 授予查询反亲和性状态权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getCnCount | 授予查询集群CN数量权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getCredential | 授予获取集群JDBC连接凭证权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getDiskExpandScope | 授予获取磁盘扩容范围权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getEncryptInfo | 授予查看集群加密信息权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listHistoryConfig | 授予查询参数修改历史权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getHistoryConfigDetail | 授予查询参数修改历史详情权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getInstanceDetail | 授予实例详情查看权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getProcessTopo | 授予查询集群节点进程拓扑权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:processTopo:list | | dws:cluster:getRedistribution | 授予查询重分布详情权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:redistributionInfo:list | | dws:cluster:getRestoreDatabase | 授予获取用户恢复数据库权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getRoachConfig | 授予获取roach参数配置权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:roachConfig:get | | dws:cluster:getSnapshotEncryptInfo | 授予查看快照加密信息权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:clusterEncryptInfo:list | | dws:cluster:getSnapshotStorage | 授予查询快照空间容量使用情况权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getTaskDetail | 授予查询集群任务详情权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getVolumeInfo | 授予查询磁盘信息权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listNode | 授予查询节点列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listSchema | 授予获取用户结构列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:schemas:list | | dws:cluster:listTable | 授予获取用户表列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:tables:list | | dws:cluster:listDatabase | 授予获取用户数据库列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:userDatabase:list | | dws:cluster:recoverRedistribution | 授予恢复重分布权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:redistribution:recover | | dws:cluster:resizeFlavor | 授予执行规格变更权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:specResize:operate | | dws:cluster:resizeRetry | 授予调整大小重试权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:cluster:submitResizeRetry | | dws:cluster:restoreTable | 授予表恢复权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:tableRestore:operate | | dws:cluster:retryELBSwitch | 授予重试ELB切换任务权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listRingForScaleIn | 授予查询可缩容的ring环信息权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:saveDescriptionInfo | 授予保存集群描述信息权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:stopSnapshot | 授予停止快照权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:snapshot:stop | | dws:cluster:suspendRedistribution | 授予暂停重分布权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:redistribution:suspend | | dws:cluster:updateInstanceAliasName | 授予更新节点别名权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:instanceAliasName:update | | dws:cluster:updateRoachConfig | 授予更新roach参数配置权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:roachConfig:update | | dws:cluster:updateScheduleConfig | 授予更新调度配置权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:roachConfig:update | | dws:service:getClusterSum | 授予查询集群数量权限。 | Read | - | - | - | | dws:service:getResourceStatistics | 授予查询资源统计权限。 | Read | - | - | - | | dws:service:getStorageStatistics | 授予查询存储统计信息权限。 | Read | - | - | - | | dws:cluster:listDisasterRecovery | 授予容灾列表查询操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:get | | dws:cluster:checkDisasterRecoveryName | 授予容灾名称检查操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:get | | dws:cluster:updateDisasterRecoveryConfig | 授予更新容灾配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:otherOperate | | dws:cluster:addOperationalTask | 授予新增调度任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:operate | | dws:cluster:bindManageIp | 授予绑定管理面IP操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:bindManageIp:operate | | dws:cluster:checkAccessLts | 授予检查LTS服务是否正常操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:ltsAccess:get | | dws:cluster:checkLogicalClusterData | 授予逻辑集群-检查集群有无业务数据操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:get | | dws:cluster:closeAccessLts | 授予关闭云服务日志操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:ltsAccess:operate | | dws:cluster:createLogicalCluster | 授予逻辑集群-创建逻辑集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:operate | | dws:cluster:createApplicationForDM | 授予数据迁移-增加作业任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:createClusterForDM | 授予数据迁移-创建集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:VpcId - dws:SubnetId | - | | dws:cluster:createConnectionForDM | 授予数据迁移-增加指定连接信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:createMappingForDM | 授予数据迁移-增加指定映射信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteApplicationForDM | 授予数据迁移-删除作业任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteClusterForDM | 授予数据迁移-删除集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteConnectionForDM | 授予数据迁移-删除指定连接信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteMappingForDM | 授予数据迁移-删除指定映射信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:dialsConnectionForDM | 授予数据迁移-连接信息探活操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getApplicationForDM | 授予数据迁移-查询作业任务详情操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listApplicationConfigForDM | 授予数据迁移-作业任务参数配置信息操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listApplicationForDM | 授予数据迁移-查询集群内所有作业任务操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getClusterForDM | 授予数据迁移-查询集群信息详情操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listClusterForDM | 授予数据迁移-查询集群信息列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listConfigurationTemplateForDM | 授予数据迁移-查询参数模板操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getConnectionForDM | 授予数据迁移-查询连接信息详情操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listConnectionForDM | 授予数据迁移-查询所有连接信息操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listDependApplicationForDM | 授予数据迁移-查询所有依赖作业任务操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getMappingForDM | 授予数据迁移-查询映射信息详情操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listMappingForDM | 授予数据迁移-查询所有映射信息操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listProductForDM | 授予GDS-Kafka-查询产品信息操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateConnectionForDM | 授予数据迁移-修改指定连接信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateMappingForDM | 授予数据迁移-修改指定映射信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:startApplicationForDM | 授予数据迁移-启动作业任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:stopApplicationForDM | 授予数据迁移-停止作业任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteCrossRegionSnapshotPolicy | 授予删除跨区域备份配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:crossRegionBackupConfig:delete | | dws:cluster:deleteLogicalCluster | 授予逻辑集群-删除逻辑集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:operate | | dws:cluster:deleteOperationalTask | 授予调度器-删除调度任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:operate | | dws:cluster:operateDisasterRecovery | 授予容灾-容灾操作，启/停/切换等操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:otherOperate | | dws:cluster:updateLogicalCluster | 授予逻辑集群-更新逻辑集群权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:operate | | dws:cluster:listAllCrossRegionSnapshotConfig | 授予查询所有跨区域快照配置操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getDisasterRecoveryProject | 授予容灾-查询可用project操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:get | | dws:cluster:getDisasterRecoveryRegion | 授予容灾-查询可用region操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:get | | dws:cluster:getLastOperationalTask | 授予调度器-查询上次构建任务操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:get | | dws:cluster:getLogicalClusterRings | 授予逻辑集群-查询集群环信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:get | | dws:cluster:getLogicalClusterVolume | 授予逻辑集群-查询集群磁盘信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:get | | dws:cluster:getOperationalTaskConfig | 授予调度器-获取调度器运维任务公共配置操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:get | | dws:cluster:getOperationalTaskDetail | 授予调度器-获取运维任务详情列表操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:get | | dws:cluster:getOperationalTaskStatus | 授予调度器-获取调度器状态操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:get | | dws:cluster:listSnapshotRegion | 授予获取跨区域快照可用region操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getTargetAllCrossRegionSnapshotConfig | 授予查询所有跨区域快照配置操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:initLogicalClusterSwitch | 授予逻辑集群-切换逻辑集群开关操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:operate | | dws:cluster:listAccessLts | 授予查询LTS列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listLogicalCluster | 授予逻辑集群-查询逻辑集群列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:get | | dws:cluster:listLogicalClusterTask | 授予逻辑集群-查询任务信息操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:get | | dws:cluster:listOperationalTask | 授予调度器-获取运维任务列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:get | | dws:cluster:openAccessLts | 授予开启云服务日志操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - dws:AuditLogToEdge | dws:ltsAccess:operate | | dws:cluster:pauseOperationalTask | 授予调度器-暂停调度任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:operate | | dws:cluster:getDisasterRecoveryDetail | 授予容灾-查询容灾详情操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:disasterRecovery:get | | dws:cluster:refreshOperationalTask | 授予调度器-远程刷新当前集群运维任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:get | | dws:cluster:restartLogicalCluster | 授予逻辑集群-重启逻辑集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:operate | | dws:cluster:resumeOperationalTask | 授予调度器-恢复调度任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:operate | | dws:cluster:setCrossRegionSnapshotPolicy | 授予设置跨区域备份配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:crossRegionBackupConfig:update | | dws:cluster:startOperationalTask | 授予调度器-打开调度器操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:operate | | dws:cluster:stopOperationalTask | 授予调度器-关闭调度器操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:operate | | dws:cluster:switchLogicalCluster | 授予逻辑集群-转换到逻辑集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:logicalCluster:operate | | dws:cluster:syncCrossRegionBackupClusterInfo | 授予同步跨region备份集群信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:syncCrossRegionBackupConfig | 授予同步跨区域快照配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:syncCrossRegionBackupInfo | 授予同步跨region快照信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateOperationalTaskConfig | 授予调度器-修改调度器运维任务公共配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:operate | | dws:cluster:updateOperationalTask | 授予调度器-修改调度任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:operationalTask:operate | | dws:cluster:addPlanForWLM | 授予工作负载管理-添加工作负载计划操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:addPlanStageForWLM | 授予工作负载管理-添加工作负载计划阶段操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:addQueueForWLM | 授予工作负载管理-添加工作负载队列操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:addQueueUserForWLM | 授予工作负载管理-添加工作负载队列的绑定用户操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:deletePlanForWLM | 授予工作负载管理-删除工作负载计划操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:deletePlanStageForWLM | 授予工作负载管理-删除工作负载计划阶段操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:deleteQueueForWLM | 授予工作负载管理-删除工作负载队列操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:deleteQueueUserForWLM | 授予工作负载管理-删除工作负载队列的绑定用户操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:exportPlanForWLM | 授予工作负载管理-导出工作负载计划操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:getPlanDetailForWLM | 授予工作负载管理-查询某个工作负载计划详细信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getPlanLogForWLM | 授予工作负载管理-查看计划执行日志操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getPlanQueueForWLM | 授予工作负载管理-查询某个队列是否在计划中操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getPlanStageForWLM | 授予工作负载管理-查询工作负载计划阶段操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:listQueueForWLM | 授予工作负载管理-获得当前集群的工作负载队列的名称列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getQueueDetailForWLM | 授予工作负载管理-获得工作负载队列信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getQueueRuleForWLM | 授予工作负载管理-获得工作负载队列异常规则信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:importPlanForWLM | 授予工作负载管理-导入工作负载计划操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:listPlanQueueForWLM | 授予工作负载管理-查询所有工作负载计划可用的队列信息操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:listPlanForWLM | 授予工作负载管理-查询工作负载计划操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:listQueueUserForWLM | 授予工作负载管理-获得工作负载队列的绑定用户列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:listUserForWLM | 授予工作负载管理-获得集群中所有未绑定工作负载队列的用户列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getClusterDBInfoForWLM | 授予工作负载管理-查询集群数据库信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:listClusterPlanForWLM | 授予工作负载管理-查询集群中所有工作负载计划操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getClusterSchemaInfoForWLM | 授予工作负载管理-查询集群模式空间信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getClusterVersionForWLM | 授予工作负载管理-获得当前集群后台数据库的版本操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:getFunctionStatusForWLM | 授予工作负载管理-获得工作负载功能开关状态操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:get | | dws:cluster:setFunctionStatusForWLM | 授予工作负载管理-设置工作负载功能开关状态操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:startPlanForWLM | 授予工作负载管理-启动工作负载计划操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:stopPlanForWLM | 授予工作负载管理-停止工作负载计划操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:switchPlanStageForWLM | 授予工作负载管理-切换工作负载阶段操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:updatePlanStageForWLM | 授予工作负载管理-修改工作负载计划阶段操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:updateQueueBaseForWLM | 授予工作负载管理-更新工作负载队列基础信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:updateQueueResourceForWLM | 授予工作负载管理-更新工作负载队列资源配置信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:updateQueueRuleForWLM | 授予工作负载管理-更新工作负载队列异常规则信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:updateSchemaLimitForWLM | 授予工作负载管理-更新模式空间限额操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:workLoadManager:operate | | dws:cluster:getMonitorConfigForDMS | 授予DMS-查询采集配置或存储配置额操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:monitor:listClusterOverview | 授予DMS-获取集群概览操作权限。 | List | - | - | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listClusterInstanceForDMS | 授予DMS-获取集群实例列表操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getDDLExamineDetailForDMS | 授予DMS-查询审核结果详细信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getClusterDnStreamForDMS | 授予DMS-查询dn数据流监控信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listClusterAlarmRuleForDMS | 授予DMS-查询租户侧告警规则列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getClusterInstanceForDMS | 授予DMS-查询实例信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getHostNetMetricsForDMS | 授予DMS-查询网络状态操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:monitor:getHistoryMetrics | 授予DMS-查询历史监控数据操作权限。 | Read | - | - | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getMonitoringInfoForDMS | 授予DMS-查询监控数据操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listAlarmRuleForDMS | 授予DMS-租户侧根据告警id查询告警规则操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:updateCollectionItemForDMS | 授予DMS-更新采集配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsCollectConfig:modify | | dws:cluster:doDDLExamineActionForDMS | 授予DMS-手动触发审核操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:downloadDDLExamineDetailForDMS | 授予DMS-DDL审核详情下载操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listInstanceDiskIOForDMS | 授予DMS-查询磁盘IO操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:resetCollectionItemForDMS | 授予DMS-重置采集配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsCollectConfig:modify | | dws:cluster:getQueryRangeForDMS | 授予DMS-查询时间句柄操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:monitor:getAlarmConfig | 授予DMS-租户侧查询所有集群和告警配置信息操作权限。 | Read | - | - | dws:dmsDdlExamine:getOrCreate | | dws:cluster:switchoverCollectionItemForDMS | 授予DMS-切换采集开关操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsCollectItem:enableOrDisable | | dws:monitor:getOSMetrics | 授予DMS-查询DWS硬件资源使用情况操作权限。 | Read | - | - | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listPerfDashboardForDMS | 授予DMS-查询当前用户所有性能监控面板操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:disableCollectionItemForDMS | 授予DMS-关闭采集开关操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsCollectItem:enableOrDisable | | dws:monitor:getAggregationOSMetrics | 授予DMS-查询DWS集群硬件资源使用情况操作权限。 | Read | - | - | dws:dmsDdlExamine:getOrCreate | | dws:cluster:terminateSessionForDMS | 授予DMS-终止会话操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsSession:terminate | | dws:cluster:getPerfDashboardDetailForDMS | 授予DMS-通过面板id获取面板信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:monitor:createAlarmRule | 授予DMS-租户侧添加告警规则操作权限。 | Write | - | - | - dws:dmsAlarmRule:add - dws:dmsQuery:terminate | | dws:cluster:enableCollectionItemForDMS | 授予DMS-开启采集开关操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsCollectItem:enableOrDisable | | dws:cluster:listInstanceNetworkMetricsForDMS | 授予DMS-查询DWS集群节点各网卡流量操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:createPerfDashboardForDMS | 授予DMS-创建用户面板操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:dmsUserBoard:create - dws:dmsQuery:terminate | | dws:cluster:getMonitorMetricsForDMS | 授予DMS-获取首页监控项操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:createSQLProbeForDMS | 授予DMS-新增SQL探针操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listInstanceIOStatusForDMS | 授予DMS-查询DWS集群各节点磁盘IO使用情况操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getMonitorMetricsByDimensionForDMS | 授予DMS-按维度获取指标操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:updateStorageConfigForDMS | 授予DMS-更新存储配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsStorageConfig:modify | | dws:monitor:updateAlarmRule | 授予DMS-租户侧修改告警规则操作权限。 | Write | - | - | - dws:dmsAlarmRule:update - dws:dmsQuery:terminate | | dws:cluster:getInstanceIOAggResultForDMS | 授予DMS-查询DWS集群各节点磁盘IO汇聚使用情况操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:updatePerfDashboardForDMS | 授予DMS-修改用户面板操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:dmsQuery:terminate - dws:dmsUserBoard:update | | dws:cluster:getMonitorHistoryMetricsCost | 授予DMS-查询队列历史消耗操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:monitor:deleteAlarmRule | 授予DMS-租户侧删除规则操作权限。 | Write | - | - | - dws:dmsAlarmRule:delete - dws:dmsQuery:terminate | | dws:cluster:updateSQLProbeForDMS | 授予DMS-修改SQL探针操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:startMonitorMetricsCollectionForDMS | 授予DMS-开始采集操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsService:enableOrDisable | | dws:cluster:listInstanceStorageForDMS | 授予DMS-查询DWS集群各节点文件系统使用情况操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:deletePerfDashboardForDMS | 授予DMS-删除用户监控面板操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsUserBoard:delete | | dws:cluster:getMonitorMetricsDetailForDMS | 授予DMS-查询指标数据操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:deleteSQLProbeForDMS | 授予DMS-删除SQL探针操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:monitor:stopAlarmRule | 授予DMS-租户侧停用规则操作权限。 | Write | - | - | dws:dmsAlarmRule:disable | | dws:cluster:stopMonitorMetricsCollectionForDMS | 授予DMS-停止采集操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsService:enableOrDisable | | dws:cluster:listExceptionTableForDMS | 授予DMS-查询表倾斜或脏页率信息操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getInstanceStorageAggForDMS | 授予DMS-查询DWS集群各节点文件系统使用情况操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getWDRSnapShotForDMS | 授予DMS-获取快照记录操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getPerfMetricsDataForDMS | 授予DMS-获取所有监控指标操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listQueryForDMS | 授予DMS-获取当前所有的查询操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getInstanceIOMetricsForDMS | 授予DMS-查询网卡IO数据操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getSQLProbeDetailForDMS | 授予DMS-查询SQL探针详情操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:switchoverMonitorMetricStatusForDMS | 授予DMS-切换采集开关操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsService:enableOrDisable | | dws:monitor:startAlarmRule | 授予DMS-租户侧启用规则操作权限。 | Write | - | - | dws:dmsAlarmRule:enable | | dws:monitor:getClusterStatus | 授予DMS-查询DWS集群状态操作权限。 | Read | - | - | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getPerfMetricsDetailForDMS | 授予DMS-通过pmid获取监控项操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listSlowInstanceForDMS | 授予DMS-查询慢节点操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getDDLExamineConfigForDMS | 授予DMS-查询采集配置操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getMonitoringViewStatusForDMS | 授予DMS-获取DMS视图状态操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:monitor:enableAlarm | 授予DMS-租户侧集群启用告警功能操作权限。 | Write | - | - | dws:dmsClusterAlarm:enable | | dws:cluster:createWDRSnapShotForDMS | 授予DMS-新增快照操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsWorkloadDiagnosisSnapshot:create | | dws:cluster:listExecuteStatusForDMS | 授予DMS-查询DWS集群查询执行情况操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getSlowInstanceDetailForDMS | 授予DMS-查询慢节点详情操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:enableSQLProbeForDMS | 授予DMS-更新SQL探针启用状态操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsProbe:enable | | dws:cluster:getWDRConfigForDMS | 授予DMS-查询集群WDR配置操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:monitor:disableAlarm | 授予DMS-租户侧集群停用告警功能操作权限。 | Write | - | - | - | | dws:cluster:getMonitoringViewForDMS | 授予DMS-获取可用菜单操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getDatabaseUsageForDMS | 授予DMS-查询DWS集群中数据库使用情况操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listSQLProbeForDMS | 授予DMS-分页查询SQL探针操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:monitor:getAlarmMetrics | 授予DMS-租户侧查询告警指标操作权限。 | Read | - | - | dws:dmsDdlExamine:getOrCreate | | dws:monitor:listMetricStatus | 授予DMS-获取功能状态操作权限。 | List | - | - | - | | dws:cluster:listSessionStatusForDMS | 授予DMS-查询DWS集群会话执行情况操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:downloadPerfHistoryForDMS | 授予DMS-下载历史监控趋势操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:addPerfItemForDMS | 授予DMS-添加监控项操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:dmsPerformanceMonitor:add - dws:dmsQuery:terminate | | dws:cluster:listClusterSessionForDMS | 授予DMS-获取当前所有的会话操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getSQLDiagnosticsForDMS | 授予DMS-查询SQL诊断详情操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:updateWDRSnapShotForDMS | 授予DMS-更新集群WDR配置操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsWorkloadDiagnosisReport:create | | dws:monitor:clearAlarm | 授予DMS-租户侧告警清除操作权限。 | Write | - | - | - | | dws:cluster:executeSQLProbeForDMS | 授予DMS-执行SQL探针操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsQuery:terminate | | dws:cluster:listQueryStatusForDMS | 授予DMS-获取查询的当前状态操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getWDRReportForDMS | 授予DMS-获取报告记录操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listWLMQueueForDMS | 授予DMS-查询当前的工作负载队列操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:updatePerfItemForDMS | 授予DMS-更新监控项操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsQuery:terminate | | dws:cluster:getQueryCostForDMS | 授予DMS-获取历史资源消耗操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:createWDRReportForDMS | 授予DMS-新增WDR报告操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsWorkloadDiagnosisReport:create | | dws:cluster:downloadWDRReportForDMS | 授予DMS-WDR报告下载操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsWorkloadDiagnosisReport:create | | dws:cluster:listDatabaseForDMS | 授予DMS-查询当前集群所有数据库操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listUserWLMQueueForDMS | 授予DMS-查询用户工作负载队列操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:deletePerfItemForDMS | 授予DMS-删除监控项操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsPerformanceMonitor:delete | | dws:monitor:getExceptionAlarmRule | 授予DMS-查询异常告警规则操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getWDRHostForDMS | 授予DMS-查询节点信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getHistoryPerfDataForDMS | 授予DMS-查询历史监控数据操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:deleteWDRReportForDMS | 授予DMS-删除WDR报告操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsWorkloadDiagnosisReport:create | | dws:cluster:getPerfDetailByDimensionForDMS | 授予DMS-通过集群id，维度获取监控对象操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:downloadPerfHistoryByIdForDMS | 授予DMS-下载历史监控趋势操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:dmsDdlExamine:getOrCreate - dws:dmsTrendHistory:down | | dws:cluster:listWaitingWLMForDMS | 授予DMS-获取当前等待的查询操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getQueryPropertyForDMS | 授予DMS-获取查询属性操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listBucketForDMS | 授予DMS-获取OBS桶列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getHistoryQueryPropertyForDMS | 授予DMS-获取历史查询属性操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:listExceptionWLMForDMS | 授予DMS-查询当前异常任务操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:terminateQueryForDMS | 授予DMS-终止查询操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsQuery:terminate | | dws:cluster:updateTaskForDMS | 授予DMS-更新任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - dws:dmsGrpcOuter:operation - dws:dmsQuery:terminate | | dws:cluster:retryTaskForDMS | 授予DMS-重试任务操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsQuery:terminate | | dws:cluster:listTaskForDMS | 授予DMS-任务查询操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsDdlExamine:getOrCreate | | dws:cluster:getPerfDashboardForDMS | 授予DMS-获取共享监控面板权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dmsQuery:terminate | | dws:cluster:syncIamUser | 授予同步IAM用户到DWS数据库操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dbAuthority:syncIamUser | | dws:cluster:listDatabaseUser | 授予查询用户/角色列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getDatabaseUser | 授予查询用户基本信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateDatabaseUserInfo | 授予修改用户基本信息操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dbAuthority:updateUser | | dws:cluster:updateDatabaseAuthority | 授予设置数据库对象权限操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:dbAuthority:update | | dws:cluster:getDatabaseAuthority | 授予查询数据库对象权限操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getDisasterProgress | 授予获取容灾进程接口操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getDatabaseOmUserStatus | 授予获取运维用户状态操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:executeDatabaseOmUserAction | 授予执行运维用户操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getClusterInstancesInfo | 授予查询集群实例逻辑集群详情操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getMetadataSyncStatus | 授予dataArts元数据同步开启状态查询操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:startMetadataSync | 授予开启dataArts元数据同步操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:stopMetadataSync | 授予关闭dataArts元数据同步操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updatePeriodCluster | 授予更新包周期集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:periodCluster:modify | | dws:cluster:createPeriodCluster | 授予创建包周期集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:periodCluster:create | | dws:cluster:deleteConfigTemplate | 授予删除配置模板操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:parameterGroup:delete | | dws:cluster:getCountDown | 授予获取倒计时信息操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getObsHotStorage | 授予查询存算分离集群OBS数据使用情况操作权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listConfigTemplate | 授予查询配置参数模板操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listDwsResource | 授予获取集群实例资源列表操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:resources:list | | dws:cluster:listDiscountNode | 授予查询折扣套餐包节点操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:changeToPeriod | 授予按需转包周期操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:ondemandToPeriod:operate | | dws:cluster:rotateKey | 授予密钥轮转操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:operateCluster | 授予集群操作，修复集群、解除只读等操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:doUpgrade | 授予升级集群操作权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:cluster:doUpdate | | dws:cluster:listUpgradePath | 授予获取集群升级路径操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:cluster:getUpgradePaths | | dws:cluster:listUpgradeRecord | 授予获取集群升级记录操作权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | dws:cluster:getUpgradeRecords | | dws:cluster:createDatabaseUser | 授予创建用户并授权权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteDatabaseUser | 授予删除用户权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getUserRoles | 授予获取用户拥有角色列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getUserAuthority | 授予查询用户权限列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getDatabaseObjects | 授予查询数据库对象列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listLogicalClusterPlans | 授予查询定时增删计划权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:createLogicalClusterPlan | 授予添加定时增删计划权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteLogicalClusterPlan | 授予删除定时增删计划权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listDatabaseUsers | 授予查询所有数据库用户权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:switchLogicalClusterPlan | 授予启停定时增删计划权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateLogicalClusterPlan | 授予编辑定时增删计划权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listRedistributionSchema | 授予查询待重分布表所属schemas权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:setRedistributionPriority | 授予设置重分布表优先级权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateRedistributionConfigurations | 授予修改重分布并发数的配置权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:setLdapConfig | 授予配置ldap身份源权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getLdapConfig | 授予查询Ldap身份源配置权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:setOneAccessConfig | 授予配置oneAccess身份源权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getOneAccessConfig | 授予查询oneAccess身份源配置权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listIdentifySyncRecords | 授予查询同步记录权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listIdentifySyncDetails | 授予查询同步详情权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:identifySyncExecute | 授予手动同步外部身份源权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:service:checkHudiJob | 授予校验hudi作业名称权限。 | Read | - | - | - | | dws:service:createHudiJob | 授予创建hudi同步作业权限。 | Write | - | - | - | | dws:service:getHudiJob | 授予查询hudi作业权限。 | Read | - | - | - | | dws:service:deleteHudiJob | 授予删除hudi作业权限。 | Write | - | - | - | | dws:service:listHudiJob | 授予查询hudi作业列表权限。 | List | - | - | - | | dws:service:operateHudiJob | 授予操作（启动/暂停/重启）hudi作业权限。 | Write | - | - | - | | dws:service:listHistoryHudiJob | 授予查询hudi作业同步历史列表权限。 | List | - | - | - | | dws:service:listActiveCluster | 授予查询可用列表权限。 | List | - | - | - | | dws:cluster:encrypt | 授予给集群加密权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getAccessWhitelistStatus | 授予查询集群的白名单启停状态权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:enableAccessWhitelist | 授予启用白名单权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:disableAccessWhitelist | 授予关闭白名单权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getAccessWhitelist | 授予查询集群的白名单列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:addAccessWhitelist | 授予添加白名单权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteAccessWhitelist | 授予删除集群的白名单权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getAccessWhitelistDetail | 授予查询集群的白名单详情权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:setAccessWhitelistDetail | 授予编辑集群的白名单权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:addWorkloadRule | 授予新增异常规则权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateWorkloadRule | 授予修改异常规则权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteWorkloadRule | 授予删除异常规则权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listWorkloadRules | 授予查询异常规则列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:changeQueueRules | 授予资源池绑定、解绑异常规则权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listExpandFlavors | 授予根据集群ID查询跨规格扩容的规格权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:startCluster | 授予启动集群权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:stopCluster | 授予停止集群权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:createVW | 授予创建只读vw权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:modifyClusterTimezone | 授予修改集群时区权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateServerlessConfig | 授予修改serverless配置权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteVW | 授予删除只读vw权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateUserVwRelations | 授予负载转移权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:shrinkLogicalCluster | 授予逻辑集群缩容权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:changeSecurityGroup | 授予修改集群安全组权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:createInspection | 授予创建集群巡检任务权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:showInspection | 授予获取集群最近的巡检任务详情权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listInspection | 授予获取集群巡检列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:abortInspection | 授予终止巡检任务权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getFlavor | 授予获取集群规格权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:checkRestore | 授予获取检验恢复集群权限。 | Read | - | - | - | | dws:cluster:listUpgradeFlavor | 授予获取查询v3.0规格列表权限。 | Read | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:upgradeFlavor | 授予获取转换数仓类型如DWS2.0到DWS3.0或者标仓到实时或者标仓到IOT权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:rollbackFlavor | 授予获取回退数仓类型到DWS2.0权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:getDisasterRecoveryRecord | 授予获取查询容灾历史记录权限。 | Read | - | - | - | | dws:cluster:listUpgradeableCluster | 授予获取可升级的集群列表权限。 | List | - | - | - | | dws:cluster:listBlockRules | 授予获取查询sql过滤器规则列表权限。 | List | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:createBlockRule | 授予获取创建sql过滤器规则权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:updateBlockRule | 授予获取更新sql过滤器规则权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:deleteBlockRule | 授予获取删除sql过滤器规则权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:modifyClusterName | 授予获取修改集群名称权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:cluster:listBackupFiles | 授予获取备份文件列表权限。 | List | - | - | - | | dws:cluster:importUserAuthority | 授予获取用户权限导入权限。 | Write | cluster \* | - [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | dws:ecfcluster:create | 授予创建ecf集群权限。 | Write | - | - | - | | dws:ecfcluster:list | 授予查看ecf集群列表权限。 | List | - | - | - | | dws:ecfcluster:scaleOut | 授予扩容ecf集群权限。 | Write | - | - | - | | dws:ecfcluster:operateCluster | 授予操作ecf集群权限。 | Write | - | - | - | | dws:ecfcluster:getDetail | 授予获取ecf集群详情权限。 | Read | - | - | - | | dws:ecfcluster:delete | 授予删除ecf集群权限。 | Write | - | - | - | | dws:ecfcluster:restart | 授予重启ecf集群权限。 | Write | - | - | - | | dws:ecfcluster:listConnection | 授予获取ecf集群连接权限。 | List | - | - | - | | dws:websql:createConnection | 授予创建连接权限。 | Write | - | - | dws:websqlConnection:create | | dws:websql:updateConnection | 授予修改连接权限。 | Write | - | - | dws:websqlConnection:update | | dws:websql:login | 授予打开连接权限。 | Write | - | - | dws:websqlLogin:login | | dws:websql:logout | 授予关闭连接权限。 | Write | - | - | dws:websqlLogin:close | | dws:websql:getConnection | 授予查询自定义连接列表权限。 | List | - | - | dws:websqlConnection:list | | dws:websql:testConnection | 授予测试连接权限。 | Write | - | - | dws:websqlConnection:test | | dws:websql:deleteConnection | 授予删除自定义连接权限。 | Write | - | - | dws:websqlConnection:delete | | dws:websql:submitSqlTask | 授予提交异步执行SQL权限。 | Write | - | - | dws:websqlLogin:submitSqlTask | | dws:websql:getTask | 授予获取异步执行结果权限。 | Read | - | - | dws:websqlLogin:getTask | | dws:websql:cancelTask | 授予取消执行权限。 | Write | - | - | dws:websqlLogin:cancelTask | | dws:websql:getAutoFill | 授予获取自动提示关键字权限。 | Read | - | - | dws:websqlLogin:getAutoFill | | dws:websql:getExplain | 授予获取sql执行计划权限。 | Read | - | - | - | | dws:websql:splitSql | 授予拆分SQL权限。 | Write | - | - | - | | dws:websql:getKeywords | 授予查询关键字权限。 | Read | - | - | - | | dws:websql:createDirectory | 授予创建目录权限。 | Write | - | - | dws:websqlDirectory:create | | dws:websql:deleteDirectory | 授予删除目录权限。 | Write | - | - | dws:websqlDirectory:delete | | dws:websql:listScript | 授予查询脚本列表权限。 | List | - | - | dws:websqlScript:list | | dws:websql:createScript | 授予创建脚本权限。 | Write | - | - | dws:websqlScript:create | | dws:websql:updateScript | 授予更新脚本内容权限。 | Write | - | - | dws:websqlScript:update | | dws:websql:getScriptDetail | 授予查询脚本详情权限。 | Read | - | - | dws:websqlScript:getDetail | | dws:websql:deleteScript | 授予删除脚本权限。 | Write | - | - | dws:websqlScript:delete | | dws:websql:createConfig | 授予保存websql配置权限。 | Write | - | - | dws:websqlConfig:create | | dws:websql:getConfig | 授予获取websql配置权限。 | Read | - | - | dws:websqlConfig:get | | dws:websql:listBucket | 授予获取OBS桶列表权限。 | List | - | - | dws:websqlBucket:list | | dws:websql:listMetadata | 授予获取元数据列表权限。 | List | - | - | dws:websqlMetadata:list | | dws:websql:getMetadataDetail | 授予获取元数据详情权限。 | Read | - | - | dws:websqlMetadata:getDetail | | dws:websql:getDDLSqlMetadata | 授予获取DDL SQL权限。 | Read | - | - | dws:websqlMetadata:getDDLSql | | dws:websql:createMetadata | 授予获取创建元数据权限。 | Write | - | - | dws:websqlMetadata:create | | dws:websql:deleteMetadata | 授予获取删除元数据权限。 | Write | - | - | dws:websqlMetadata:delete | | dws:websql:updateMetadata | 授予获取修改元数据权限。 | Write | - | - | dws:websqlMetadata:update | | dws:websql:listExecSqlRecord | 授予获取执行SQL记录列表权限。 | List | - | - | - | | dws:websql:listTableRecord | 授予获取表记录列表权限。 | List | - | - | - | | dws:websql:insertTableRecord | 授予插入表记录权限。 | Write | - | - | - | | dws:websql:updateTableRecord | 授予更新表记录权限。 | Write | - | - | - | | dws:websql:deleteTableRecord | 授予删除表记录权限。 | Write | - | - | - | | dws:websql:exportSqlResultset | 授予导出SQL结果集权限。 | Write | - | - | - | | dws:websql:createObsImportTask | 授予创建OBS导入任务权限。 | Write | - | - | - | | dws:websql:createLocalImportTask | 授予创建本地导入任务权限。 | Write | - | - | - | | dws:websql:listAsyncTask | 授予获取异步任务的结果列表权限。 | List | - | - | - | | dws:websql:shareConnection | 授予共享连接权限。 | Write | - | - | - | | dws:websql:unshareConnection | 授予取消共享连接权限。 | Write | - | - | - | | dws:websql:listShareConnection | 授予获取共享连接列表权限。 | List | - | - | - | | dws:websql:listIamUser | 授予获取租户下的所有IAM用户权限。 | List | - | - | - | | dws:websql:updatePermission | 授予配置用户或角色权限。 | Write | - | - | - | | dws:websql:listUserPermission | 授予获取数据库用户websql权限列表权限。 | List | - | - | - | | dws:migration:checkMigrationName | 授予获取校验作业名称权限。 | Read | - | - | - | | dws:migration:createMigrationJob | 授予获取创建作业权限。 | Write | - | - | - | | dws:migration:deleteMigrationJob | 授予获取删除作业权限。 | Write | - | - | - | | dws:migration:listMigrationJob | 授予获取查询作业列表权限。 | List | - | - | - | | dws:migration:getMigrationJob | 授予获取查询单个作业详情权限。 | Read | - | - | - | | dws:migration:showDscLog | 授予获取查询作业日志权限。 | Read | - | - | - | | dws:migration:downloadDscJobResult | 授予获取下载DSC作业结果权限。 | Read | - | - | - | | dws:migration:downloadDataCheckJobResult | 授予获取导出数据校验作业结果权限。 | Read | - | - | - | | dws:migration:showDataCheckResult | 授予获取查询数据校验作业结果权限。 | Read | - | - | - | | dws:migration:listDataCheckTable | 授予获取查询数据检验的表权限。 | List | - | - | - | | dws:migration:startSqlConversion | 授予获取启动sql语句语法转换权限。 | Write | - | - | - | | dws:migration:checkDataCheckConnection | 授予获取测试数据库的连通性权限。 | Read | - | - | - | | dws:migration:createOBSTask | 授予获取创建迁移任务权限。 | Write | - | - | - | | dws:migration:listOBSTask | 授予获取查询迁移任务列表权限。 | List | - | - | - | | dws:migration:deleteOBSTask | 授予获取删除迁移任务权限。 | Write | - | - | - | | dws:migration:showOBSTask | 授予获取查询迁移任务权限。 | Read | - | - | - | | dws:migration:startOBSTask | 授予获取启动迁移任务权限。 | Write | - | - | - | | dws:migration:stopOBSTask | 授予获取暂停迁移任务权限。 | Write | - | - | - | | dws:migration:listSourceBucket | 授予获取查询源端桶列表信息权限。 | List | - | - | - | | dws:migration:showBucketRegion | 授予获取查询桶region信息权限。 | Read | - | - | - | | dws:migration:listBucket | 授予获取查询桶列表权限。 | List | - | - | - | | dws:migration:createBucket | 授予获取创建资源租户桶权限。 | Write | - | - | - | | dws:migration:deleteBucket | 授予获取删除桶权限。 | Write | - | - | - | | dws:migration:getBucketPolicy | 授予获取查询桶策略权限。 | Read | - | - | - | | dws:migration:setBucketPolicy | 授予获取设置桶策略权限。 | Write | - | - | - | | dws:migration:listBucketObject | 授予获取查询桶对象列表权限。 | List | - | - | - | | dws:migration:addBucketFolder | 授予获取创建文件夹权限。 | Write | - | - | - | | dws:migration:deleteBucketObject | 授予获取删除桶内对象权限。 | Write | - | - | - | | dws:migration:getBucketStatistic | 授予获取查询桶监控指标权限。 | Read | - | - | - | | dws:migration:showBucketLifecycle | 授予获取查询存储桶生命周期权限。 | Read | - | - | - | | dws:migration:setBucketLifecycle | 授予获取设置存储桶生命周期权限。 | Write | - | - | - | | dws:migration:showBucketEncryption | 授予获取查询桶加密权限。 | Read | - | - | - | | dws:migration:setBucketEncryption | 授予获取设置桶加密权限。 | Write | - | - | - | | dws:cluster:listDistributionKeyRecommendation | 授予获取智能分布列推荐历史记录列表权限。 | List | - | - | - | | dws:cluster:showDistributionKeyRecommendation | 授予获取查看单条分布列推荐的详细结果权限。 | Read | - | - | - | | dws:cluster:createDistributionKeyRecommendation | 授予创建智能分布列推荐作业权限。 | Write | - | - | - | | dws:cluster:deleteDistributionKeyRecommendation | 授予删除单条分布列推荐记录权限。 | Write | - | - | - | DWS的API通常对应着一个或多个授权项。[表2]展示了API与授权项的关系，以及该API需要依赖的授权项。 表2API与授权项的关系 | API | 对应的授权项 | 依赖的授权项 | |:---|:---|:---| | POST /v2/{project_id}/alarm-subs | dws:alarm:createSubscription | - | | DELETE /v2/{project_id}/alarm-subs/{alarm_sub_id} | dws:alarm:deleteSubscription | - | | GET /v2/{project_id}/alarm-configs | dws:alarm:listConfig | - | | GET /v2/{project_id}/alarms | dws:alarm:listDetail | - | | GET /v2/{project_id}/alarm-statistic | dws:alarm:listStatistics | - | | GET /v2/{project_id}/alarm-subs | dws:alarm:listSubscription | - | | PUT /v2/{project_id}/alarm-subs/{alarm_sub_id} | dws:alarm:updateSubscription | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/cns/batch-create | dws:cluster:addCN | - | | PUT /v2/{project_id}/clusters/{cluster_id}/workload/queues | dws:cluster:addQueueForWLM | - | | POST /v2/{project_id}/clusters/{cluster_id}/eips/{eip_id} | dws:cluster:bindEIP | - | | POST /v2/{project_id}/clusters/{cluster_id}/elbs/{elb_id} | dws:cluster:bindELB | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/cancel-readonly | dws:cluster:cancelReadonly | - | | GET /v2/{project_id}/disaster-recovery/check-name | dws:cluster:checkDisasterRecoveryName | - | | POST /v1.0/{project_id}/snapshots/{snapshot_id}/linked-copy | dws:cluster:copySnapshot | - | | POST /v1.0/{project_id}/clusters | dws:cluster:create | - ecs:cloudServerQuotas:get - ecs:cloudServerFlavors:get - bms:serverQuotas:get - bms:serverFlavors:get - vpc:subnets:get - vpc:vpcs:list - vpc:ports:get - vpc:ports:create - vpc:ports:update - vpc:securityGroups:get - vpc:securityGroups:create - vpc:securityGroups:delete - vpc:securityGroupRules:create - vpc:securityGroupRules:delete - vpc:quotas:list - eip:publicIps:list - eip:publicIps:get - eip:publicIps:create - evs:quotas:get | | POST /v2/{project_id}/clusters | dws:cluster:create | - | | POST /v2/{project_id}/cluster-precheck | dws:cluster:create | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/dns | dws:cluster:createConnection | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/ext-data-sources | dws:cluster:createDataSource | - | | POST /v2/{project_id}/disaster-recoveries | dws:cluster:createDisasterRecovery | - | | POST /v2/{project_id}/clusters/{cluster_id}/workload | dws:cluster:setFunctionStatusForWLM | - | | POST /v1.0/{project_id}/snapshots | dws:cluster:createSnapshot | - | | PUT /v2/{project_id}/clusters/{cluster_id}/snapshot-policies | dws:cluster:createSnapshotPolicy | - | | POST /v2/{project_id}/clusters/{cluster_id}/workload/plans | dws:cluster:addPlanForWLM | - | | DELETE /v1.0/{project_id}/clusters/{cluster_id} | dws:cluster:delete | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/cns/batch-delete | dws:cluster:deleteCN | - | | DELETE /v1.0/{project_id}/clusters/{cluster_id}/dns | dws:cluster:deleteConnection | - | | DELETE /v1.0/{project_id}/clusters/{cluster_id}/ext-data-sources/{ext_data_source_id} | dws:cluster:deleteDataSource | - | | DELETE /v2/{project_id}/disaster-recovery/{disaster_recovery_id} | dws:cluster:deleteDisasterRecovery | - | | POST /v2/{project_id}/clusters/{cluster_id}/nodes/delete | dws:cluster:deleteNode | - | | DELETE /v1.0/{project_id}/snapshots/{snapshot_id} | dws:cluster:deleteSnapshot | - | | DELETE /v1.0/{project_id}/clusters/{cluster_id}/snapshot-policies/{id} | dws:cluster:deleteSnapshotPolicy | - | | DELETE /v2/{project_id}/clusters/{cluster_id}/workload/queues | dws:cluster:deleteQueueForWLM | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/expand-instance-storage | dws:cluster:expandDisk | - | | GET /v1.0/{project_id}/clusters/{cluster_id} | dws:cluster:getDetail | - | | GET /v2/{project_id}/disaster-recoveries | dws:cluster:getDisasterRecovery | - | | GET /v2/{project_id}/disaster-recovery/{disaster_recovery_id} | dws:cluster:getDisasterRecovery | - | | GET /v1.0/{project_id}/clusters | dws:cluster:list | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/audit-log-records | dws:cluster:listAuditLog | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/cns | dws:cluster:listCN | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/configurations | dws:cluster:listConfig | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/configurations/{configuration_id} | dws:cluster:listConfig | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/ext-data-sources | dws:cluster:listDataSource | - | | GET /v2/{project_id}/clusters/{cluster_id}/elbs | dws:cluster:listELB | - | | GET /v2/{project_id}/disaster-recovery-clusters | dws:cluster:listDisasterRecovery | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/shrink-numbers | dws:cluster:listRingForScaleIn | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/snapshots | dws:cluster:listSnapshot | - | | GET /v1.0/{project_id}/snapshots | dws:cluster:listSnapshot | - | | GET /v1.0/{project_id}/snapshots/{snapshot_id} | dws:cluster:getSnapshotDetail | - | | GET /v2/{project_id}/clusters/{cluster_id}/snapshot-policies | dws:cluster:listSnapshotPolicy | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/snapshots/statistics | dws:cluster:listSnapshotStatistics | - | | GET /v1.0/{project_id}/clusters/{cluster_id}/tags | dws::listTagsForResource | - | | GET /v2/{project_id}/clusters/{cluster_id}/workload | dws:cluster:getFunctionStatusForWLM | - | | GET /v2/{project_id}/clusters/{cluster_id}/workload/queues | dws:cluster:listQueueForWLM | - | | POST /v2/{project_id}/disaster-recovery/{disaster_recovery_id}/pause | dws:cluster:pauseDisasterRecovery | - | | POST /v2/{project_id}/clusters/{cluster_id}/redistribution | dws:cluster:redistribution | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/reset-password | dws:cluster:resetPassword | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/resize | dws:cluster:resize | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/restart | dws:cluster:restart | - | | POST /v2/{project_id}/disaster-recovery/{disaster_recovery_id}/recovery | dws:cluster:restoreDisaster | - | | POST /v1.0/{project_id}/snapshots/{snapshot_id}/actions | dws:cluster:restoreSnapshot | - | | POST /v1/{project_id}/clusters/{cluster_id}/description | dws:cluster:saveDescriptionInfo | - | | PUT /v1.0/{project_id}/clusters/{cluster_id}/maintenance-window | dws:cluster:setMaintainceWindow | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/cluster-shrink | dws:cluster:scaleIn | - | | POST /v2/{project_id}/disaster-recovery/{disaster_recovery_id}/start | dws:cluster:startDisasterRecovery | - | | POST /v2/{project_id}/disaster-recovery/{disaster_recovery_id}/failover | dws:cluster:switchFailoverDisaster | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/switchover | dws:cluster:switchover | - | | POST /v2/{project_id}/disaster-recovery/{disaster_recovery_id}/switchover | dws:cluster:switchoverDisasterRecovery | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/tags/batch-create | dws::tagResource | - | | DELETE /v2/{project_id}/clusters/{cluster_id}/eips/{eip_id} | dws:cluster:unbindEIP | - | | DELETE /v2/{project_id}/clusters/{cluster_id}/elbs/{elb_id} | dws:cluster:unbindELB | - | | POST /v1.0/{project_id}/clusters/{cluster_id}/tags/batch-delete | dws::unTagResource | - | | PUT /v2/{project_id}/clusters/{cluster_id}/configurations/{configuration_id} | dws:cluster:updateConfig | - | | PUT /v1.0/{project_id}/clusters/{cluster_id}/dns | dws:cluster:updateConnection | - | | PUT /v1.0/{project_id}/clusters/{cluster_id}/ext-data-sources/{ext_data_source_id} | dws:cluster:updateDataSource | - | | PUT /v2/{project_id}/disaster-recovery/{disaster_recovery_id} | dws:cluster:updateDisasterRecoveryConfig | - | | POST /v2/{project_id}/event-subs | dws:event:createSubscription | - | | DELETE /v2/{project_id}/event-subs/{event_sub_id} | dws:event:deleteSubscription | - | | GET /v2/{project_id}/events | dws:event:list | - | | GET /v2/{project_id}/event-specs | dws:event:listSpec | - | | GET /v2/{project_id}/event-subs | dws:event:listSubscription | - | | PUT /v2/{project_id}/event-subs/{event_sub_id} | dws:event:updateSubscription | - | | GET /v1.0/{project_id}/availability-zones | dws:service:listAZ | - | | GET /v1.0/{project_id}/dss-pools | dws:service:listDssPools | - | | GET /v1.0/{project_id}/dms/disk | dws:monitor:listHostDisk | - | | GET /v1.0/{project_id}/dms/net | dws:monitor:listHostNet | - | | GET /v1.0/{project_id}/dms/host-overview | dws:monitor:listClusterOverview | - | | GET /v1.0/{project_id}/job/{job_id} | dws:service:listJobDetail | - | | GET /v1.0/{project_id}/dms/metric-data | dws:monitor:listMonitorIndicatorData | - | | GET /v1.0/{project_id}/dms/metric-data/indicators | dws:monitor:listMonitorIndicators | - | | GET /v1.0/{project_id}/quotas | dws:service:listQuotas | - | | GET /v2/{project_id}/node-types | dws:service:listSpec | - | | GET /v1.0/{project_id}/statistics | dws:service:listStatistics | - | | GET /v1.0/{project_id}/tags | dws::listTagsForProject | - | | POST /v2/{project_id}/clusters/{cluster_id}/logical-clusters | dws:cluster:createLogicalCluster | - | | DELETE /v2/{project_id}/clusters/{cluster_id}/logical-clusters/{logical_cluster_id} | dws:cluster:deleteLogicalCluster | - | | PUT /v2/{project_id}/clusters/{cluster_id}/logical-clusters/{logical_cluster_id} | dws:cluster:updateLogicalCluster | - | | POST /v2/{project_id}/clusters/{cluster_id}/logical-clusters/{logical_cluster_id}/restart | dws:cluster:restartLogicalCluster | - | | POST /v1/{project_id}/clusters/{cluster_id}/db-manager/sync-iam-user | dws:cluster:syncIamUser | - | | GET /v1/{project_id}/clusters/{cluster_id}/db-manager/users | dws:cluster:listDatabaseUser | - | | GET /v1/{project_id}/clusters/{cluster_id}/db-manager/users/{name} | dws:cluster:getDatabaseUser | - | | POST /v1/{project_id}/clusters/{cluster_id}/db-manager/users/{name} | dws:cluster:updateDatabaseUserInfo | - | | POST /v1/{project_id}/clusters/{cluster_id}/db-manager/authority | dws:cluster:updateDatabaseAuthority | - | | GET /v1/{project_id}/clusters/{cluster_id}/db-manager/authority | dws:cluster:getDatabaseAuthority | - | | GET /v1/{project_id}/disaster-recovery/{disaster_recovery_id}/show-progress | dws:cluster:getDisasterProgress | - | | GET /v1/{project_id}/clusters/{cluster_id}/db-manager/om-user/status | dws:cluster:getDatabaseOmUserStatus | - | | POST /v1/{project_id}/clusters/{cluster_id}/db-manager/om-user/action | dws:cluster:executeDatabaseOmUserAction | - | | POST /v1/{project_id}/clusters/{cluster_id}/rotate-key | dws:cluster:rotateKey | - | | POST /v1/{project_id}/clusters/{cluster_id}/db-manager/users | dws:cluster:createDatabaseUser | - | | DELETE /v1/{project_id}/clusters/{cluster_id}/db-manager/users/{name} | dws:cluster:deleteDatabaseUser | - | | GET /v1/{project_id}/clusters/{cluster_id}/db-manager/users/{name}/authority | dws:cluster:getUserAuthority | - | | GET /v1/{project_id}/clusters/{cluster_id}/db-manager/objects | dws:cluster:getDatabaseObjects | - | | GET /v1/{project_id}/clusters/{cluster_id}/logical-cluster-plans | dws:cluster:listLogicalClusterPlans | - | | POST /v1/{project_id}/clusters/{cluster_id}/logical-cluster-plans | dws:cluster:createLogicalClusterPlan | - | | DELETE /v1/{project_id}/clusters/{cluster_id}/logical-cluster-plans/{plan_id} | dws:cluster:deleteLogicalClusterPlan | - | | PUT /v1/{project_id}/clusters/{cluster_id}/logical-cluster-plans/{plan_id} | dws:cluster:updateLogicalClusterPlan | - | | PUT /v1/{project_id}/clusters/{cluster_id}/security-group | dws:cluster:changeSecurityGroup | - | | GET /v1/{project_id}/clusters/{cluster_id}/db-manager/users/{name}/authority/export | dws:cluster:getUserAuthority | - | | GET /v1/{project_id}/clusters/{cluster_id}/db-manager/users/export | dws:cluster:listDatabaseUser | - | #### 资源类型（Resource） 资源类型（Resource）用于定义身份策略生效的资源范围。如[表3]中某项操作已指定了对应的资源类型，则在包含该操作的身份策略语句中选择填写对应资源的URN时，身份策略仅对该指定资源生效；未填写对应资源的URN时，身份策略将对指定资源类型下所有资源生效；如未指定资源类型，Resource默认取值为"\*"，身份策略将作用于所有资源。此外，您也可在身份策略中设置条件，进一步精细化限定资源类型。 DWS定义了以下可以在自定义身份策略的Resource元素中使用的资源类型。 表3DWS支持的资源类型 | 资源类型 | URN | |:---|:---| | cluster | dws:\:\:cluster:\ | ![](https://support.huaweicloud.com/service-authorization-iam5/public_sys-resources/note_3.0-zh-cn.png) DWS服务不支持在IAM自定义策略中的资源中指定资源进行授权。如需允许访问DWS服务，请在IAM自定义策略的Resource元素中使用通配符号\*，表示获得所有资源的该操作项权限。 #### 条件（Condition） DWS服务不支持在身份策略中的条件键中配置服务级的条件键。DWS可以使用适用于所有服务的全局条件键，请参考[全局条件键](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html)。