# 云日志服务 LTS 云服务在IAM预置了常用的权限，称为系统身份策略。如果IAM系统身份策略无法满足授权要求，管理员可以根据各服务支持的授权项，创建IAM自定义身份策略来进行精细的访问控制，IAM自定义身份策略是对系统身份策略的扩展和补充。 除IAM服务外，[Organizations](https://support.huaweicloud.com/productdesc-organizations/org_01_0011.html)服务中的[服务控制策略](https://support.huaweicloud.com/usermanual-organizations/org_03_0065.html)（Service Control Policy，以下简称SCP）也可以使用这些授权项元素设置访问控制策略。 SCP不直接进行授权，只划定权限边界。将SCP绑定到组织单元或者成员账号时，并没有直接对组织单元或成员账号授予操作权限，而是规定了成员账号或组织单元包含的成员账号的授权范围。IAM身份策略授予权限的有效性受SCP限制，只有在SCP允许范围内的权限才能生效。 IAM服务与Organizations服务在使用这些元素进行访问控制时，存在着一些区别，详情请参见：[IAM服务与Organizations服务权限访问控制的区别](https://support.huaweicloud.com/organizations_faq/org_06_0004.html)。 本章节介绍IAM服务身份策略授权场景中自定义身份策略和组织服务中SCP使用的元素，这些元素包含了操作（Action）、资源（Resource）和条件（Condition）。 - 如何使用这些元素编辑IAM自定义身份策略，请参考[创建自定义身份策略](https://support.huaweicloud.com/usermanual-iam5/iam_01_0917.html)。 - 如何使用这些元素编辑SCP自定义策略，请参考[创建SCP](https://support.huaweicloud.com/usermanual-organizations/org_03_0035.html)。 #### 操作（Action） 操作（Action）即为身份策略中支持的授权项。 - "访问级别"列描述如何对操作进行分类（List、Read和Write等）。此分类可帮助您了解在身份策略中相应操作对应的访问级别。 - "资源类型"列指每个操作是否支持资源级权限。 - 资源类型支持通配符号\*表示所有。如果此列没有值（-），则必须在身份策略语句的Resource元素中指定所有资源类型（"\*"）。 - 如果该列包含资源类型，则必须在具有该操作的语句中指定该资源的URN。 - 资源类型列中必需资源在表中用星号（\*）标识，表示使用此操作必须指定该资源类型。 关于LTS定义的资源类型的详细信息请参见[资源类型（Resource）]。 - "条件键"列包括了可以在身份策略语句的Condition元素中支持指定的键值。 - 如果该授权项资源类型列存在值，则表示条件键仅对列举的资源类型生效。 - 如果该授权项资源类型列没有值（-），则表示条件键对整个授权项生效。 - 如果此列条件键没有值（-），表示此操作不支持指定条件键。 关于LTS定义的条件键的详细信息请参见[条件（Condition）]。 - "别名"列包括了可以在身份策略中配置的策略授权项。通过这些授权项，可以控制支持策略授权的API访问。详细信息请参见[身份策略兼容性说明](https://support.huaweicloud.com/iam5_faq/iam_01_1103.html)。 您可以在身份策略语句的Action元素中指定以下LTS的相关操作。 表1LTS支持的授权项 | 授权项 | 描述 | 访问级别 | 资源类型（\*为必须） | 条件键 | 别名 | |:---|:---|:---|:---|:---|:---| | lts:logGroup:deleteLogGroup | 授予权限以删除指定日志组。 | Write | logGroup \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:groups:delete | | lts:logGroup:listLogGroup | 授予权限以查询日志组列表。 | List | - | - | - lts:groups:get - lts:groups:list | | lts:logGroup:createLogGroup | 授予权限以创建日志组。 | Write | logGroup \* | - | - lts:groups:create | | lts:logGroup:createLogGroup | 授予权限以创建日志组。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:groups:create | | lts:logGroup:updateLogGroup | 授予权限以修改指定日志组。 | Write | logGroup \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:groups:put | | lts:logGroup:updateLogGroup | 授予权限以修改指定日志组。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:groups:put | | lts:logStream:listLogStream | 授予权限以查询日志流列表。 | List | logGroup \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:get - lts:topics:list | | lts:logStream:deleteLogStream | 授予权限以删除指定日志流。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:delete | | lts:logStream:createLogStream | 授予权限以创建日志流。 | Write | logGroup \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:create | | lts:logStream:createLogStream | 授予权限以创建日志流。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:EnterpriseProjectId](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:create | | lts:logStream:searchLog | 授予权限以查询日志。 | List | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:logs:list | | lts:logStream:searchStructLog | 授予权限以查询结构化日志。 | List | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:list - lts:topics:get - lts:logs:list | | lts:logStream:searchLogHistogram | 授予权限以查询日志直方图。 | List | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:list - lts:sqlalarmrules:create | | lts:transfer:createTransfer | 授予权限以创建转储任务。 | Write | - | - | - lts:transfers:create | | lts:transfer:deleteTransfer | 授予权限以删除转储任务。 | Write | transfer \* | - | - lts:transfers:delete | | lts:transfer:listTransfer | 授予权限以查询日志转储任务列表。 | List | - | - | - lts:transfers:list | | lts:transfer:updateTransfer | 授予权限以修改转储任务。 | Write | transfer \* | - | - lts:transfers:put | | lts:transfer:registerDmsKafkaInstance | 授予权限以注册DmsKafka实例。 | Write | - | - | - | | lts:configCenter:updateOverCollectSwitch | 授予权限以修改超额采集开关。 | Write | - | - | - aom:quota:set | | lts:structConfig:createStructConfig | 授予权限以创建LTS结构化配置。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:create - lts:structConfig:create | | lts:structConfig:deleteStructConfig | 授予权限以删除LTS结构化配置。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:structConfig:delete | | lts:structConfig:getStructConfig | 授予权限以查询LTS结构化配置。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:get - lts:structConfig:get | | lts:structConfig:listStructTemplate | 授予权限以查询结构化模板列表。 | List | - | - | - lts:topics:get | | lts:structConfig:updateStructConfig | 授予权限以修改LTS结构化配置。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:put - lts:structConfig:put | | lts:mappingRule:create | 授予权限以创建映射规则。 | Write | - | - | - lts:topics:create | | lts:mappingRule:delete | 授予权限以删除映射规则。 | Write | - | - | - lts:topics:delete | | lts:mappingRule:get | 授予权限以查看映射规则详情。 | Read | - | - | - lts:topics:get | | lts:mappingRule:list | 授予权限以查询映射规则列表。 | List | - | - | - lts:topics:get | | lts:mappingRule:update | 授予权限以修改映射规则。 | Write | - | - | - lts:topics:put | | lts:logStream:getHistorySql | 授予权限以查看日志流历史sql。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:get | | lts:alarmRule:createSqlAlarmRule | 授予权限以创建sql告警规则的规则。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:create | | lts:alarmRule:deleteSqlAlarmRule | 授予权限以删除sql告警规则。 | Write | alarmRule \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:delete | | lts:alarmRule:updateSqlAlarmRule | 授予权限以修改sql告警规则。 | Write | alarmRule \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:put | | lts:alarmRule:updateSqlAlarmRule | 授予权限以修改sql告警规则。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:put | | lts:alarmRule:listSqlAlarmRule | 授予权限以查看sql告警规则。 | List | - | - | - lts:sqlalarmrules:get | | lts:alarmRule:createWordAlarmRule | 授予权限以创建关键词告警规则。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:create | | lts:alarmRule:deleteWordAlarmRule | 授予权限以删除关键词告警规则。 | Write | alarmRule \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:delete | | lts:alarmRule:updateWordAlarmRule | 授予权限以修改关键词告警规则。 | Write | alarmRule \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:put | | lts:alarmRule:updateWordAlarmRule | 授予权限以修改关键词告警规则。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:put | | lts:alarmRule:listWordAlarmRule | 授予权限以查看关键词告警规则。 | List | - | - | - | | lts:alarm:cleanAlarm | 授予权限以删除告警。 | Write | - | - | - lts:sqlalarms:delete | | lts:alarm:listAlarm | 授予权限以查看告警列表。 | List | - | - | - lts:sqlalarms:get | | lts:logStream:listChart | 授予权限以查询日志流图表。 | List | - | - | - | | lts:alarmNoticeTemplate:create | 授予权限以创建告警通知模板。 | Write | - | - | - lts:sqlalarmrules:create | | lts:alarmNoticeTemplate:update | 授予权限以修改告警通知模板。 | Write | - | - | - lts:sqlalarmrules:put | | lts:alarmNoticeTemplate:delete | 授予权限以删除告警通知模板。 | Write | - | - | - lts:sqlalarmrules:delete | | lts:alarmNoticeTemplate:list | 授予权限以查询告警通知模板列表。 | List | - | - | - lts:sqlalarmrules:get | | lts:alarmNoticeTemplate:get | 授予权限以查询告警通知模板详情。 | Read | - | - | - lts:sqlalarmrules:get | | lts:hostGroup:create | 授予权限以创建主机组。 | Write | - | - | - lts:topics:create | | lts:hostGroup:delete | 授予权限以删除主机组。 | Write | hostGroup \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:delete | | lts:host:list | 授予权限以查询主机列表。 | List | - | - | - | | lts:hostGroup:list | 授予权限以查询主机组列表。 | List | accessConfig \* | - | - lts:topics:list | | lts:hostGroup:update | 授予权限以修改主机组。 | Write | hostGroup \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:put | | lts:accessConfig:create | 授予权限以创建日志接入。 | Write | logStream \* | - | - lts:topics:create | | lts:accessConfig:delete | 授予权限以删除日志接入。 | Write | accessConfig \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | lts:accessConfig:list | 授予权限以查询日志接入列表。 | List | - | - | - lts:topics:list | | lts:accessConfig:update | 授予权限以修改日志接入。 | Write | accessConfig \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:put | | lts:accessConfig:update | 授予权限以修改日志接入。 | Write | hostGroup | - | - lts:topics:put | | lts:tag:create | 授予权限以创建或者更新标签。 | Tagging | logGroup | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:put | | lts:tag:create | 授予权限以创建或者更新标签。 | Tagging | logStream | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:put | | lts:tag:create | 授予权限以创建或者更新标签。 | Tagging | accessConfig | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:put | | lts:tag:create | 授予权限以创建或者更新标签。 | Tagging | hostGroup | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:put | | lts:tag:create | 授予权限以创建或者更新标签。 | Tagging | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:put | | lts:tag:delete | 授予权限以删除标签。 | Tagging | logGroup | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:delete | | lts:tag:delete | 授予权限以删除标签。 | Tagging | logStream | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:delete | | lts:tag:delete | 授予权限以删除标签。 | Tagging | accessConfig | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:delete | | lts:tag:delete | 授予权限以删除标签。 | Tagging | hostGroup | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:delete | | lts:tag:delete | 授予权限以删除标签。 | Tagging | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:delete | | lts:logStream:createQuickQuery | 授予权限以创建快速查询。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:searchcriterias:create - lts:searchcriterias:put | | lts:logStream:deleteQuickQuery | 授予权限以删除快速查询。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:searchcriterias:delete | | lts:logStream:listQuickQuery | 授予权限以查询快速查询列表。 | List | logGroup \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:searchcriterias:list | | lts:logFavorite:create | 授予权限以创建日志收藏。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:create | | lts:logFavorite:delete | 授予权限以删除日志收藏。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:delete | | lts:dashboardGroup:create | 授予权限以创建仪表盘分组。 | Write | - | - | - lts:topics:create | | lts:dashboard:create | 授予权限以创建仪表盘。 | Write | - | - | - lts:topics:create | | lts:trafficStatistic:get | 授予权限以获取资源统计详情。 | Read | - | - | - lts:logs:list | | lts:tokenizer:get | 授予权限以获取已配置的分词符。 | Read | - | - | - lts:topics:get - aom:log:list | | lts:tokenizer:create | 授予权限以保存分词符。 | Write | - | - | - lts:topics:put | | lts:tokenizer:preview | 授予权限以预览分词符。 | Read | - | - | - lts:topics:put - aom:log:list | | lts:usageAlarm:update | 授予权限以打开或者关闭使用量预警。 | Write | - | - | - lts:topics:put | | lts:csvTable:list | 授予权限以获取关联数据源配置信息表。 | List | - | - | - lts:sqlalarmrules:list | | lts:csvTable:upload | 授予权限以上传csv文件。 | Write | - | - | - lts:sqlalarmrules:create | | lts:csvTable:get | 授予权限以预览关联数据和查看关联数据源信息。 | Read | - | - | - lts:sqlalarmrules:get | | lts:csvTable:create | 授予权限以创建关联数据源。 | Write | - | - | - lts:sqlalarmrules:create | | lts:csvTable:update | 授予权限以更新关联数据源。 | Write | - | - | - lts:sqlalarmrules:put | | lts:csvTable:delete | 授予权限以删除关联数据源。 | Write | - | - | - lts:sqlalarmrules:delete | | lts:scheduledSql:create | 授予权限以创建定时sql。 | Write | - | - | - lts:sqlalarmrules:create | | lts:scheduledSql:delete | 授予权限以删除定时sql。 | Write | - | - | - lts:sqlalarmrules:delete | | lts:scheduledSql:update | 授予权限以修改定时sql。 | Write | - | - | - lts:sqlalarmrules:put | | lts:scheduledSql:list | 授予权限以获取定时sql列表。 | List | - | - | - lts:sqlalarmrules:list | | lts:scheduledSql:get | 授予权限以获取定时sql详情。 | Read | - | - | - lts:sqlalarmrules:get | | lts:scheduledSql:retry | 授予权限以重试执行实例。 | Write | - | - | - lts:sqlalarmrules:delete | | lts:transfer:getDisList | 授予权限以获取Dis通道列表。 | List | - | - | - lts:disStreams:list | | lts:transfer:listKafkaInstance | 授予权限以获取kafka列表。 | List | - | - | - lts:kafka:list | | lts:transfer:updateKafkaInstance | 授予权限以更新kafka信息。 | Write | - | - | - lts:kafka:update | | lts:transfer:deleteKafkaInstance | 授予权限以删除kafka信息。 | Write | - | - | - lts:kafka:delete | | lts:transfer:listKafkaAuthorization | 授予权限以查询用户配置kafka授权列表。 | List | - | - | - lts:kafka:list | | lts:transfer:createKafkaAuthorization | 授予权限以增加用户配置kafka授权列表。 | Write | - | - | - lts:kafka:create | | lts:transfer:deleteKafkaAuthorization | 授予权限以删除用户配置kafka授权列表。 | Write | - | - | - lts:kafka:delete | | lts:transfer:getTransfer | 授予权限以获取转储任务的信息。 | Read | transfer \* | - | - lts:transfers:list | | lts:transfer:getDwsInfo | 授予权限以查询租户的dws信息。 | Read | - | - | - lts:transfers:list | | lts:transfer:registerDwsCluster | 授予权限以注册dws集群。 | Write | - | - | - lts:transfers:create | | lts:hostGroup:getHost | 授予权限以通过查询条件获取所有主机。 | Read | - | - | - lts:topics:list | | lts:hostGroup:get | 授予权限以通过查询条件获取单个主机组加入的所有配置。 | Read | - | - | - lts:topics:list | | lts:accessConfig:get | 授予权限以获取单个采集配置。 | Read | accessConfig \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:get | | lts:logFavorite:list | 授予权限以获取收藏列表。 | List | - | - | - lts:topics:get | | lts:logFavorite:update | 授予权限以修改收藏。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:put | | lts:logGroup:getLogGroup | 授予权限以查询日志组。 | Read | logGroup \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:groups:get | | lts:IndexConfig:list | 授予权限以查询索引。 | List | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:get - lts:groups:get | | lts:IndexConfig:create | 授予权限以创建索引。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:put - lts:groups:create | | lts:structConfig:listStructConfig | 授予权限以获取日志流结构化信息。 | List | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:wordFreq:get | | lts:logStream:updateLogStream | 授予权限以修改日志流。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:put | | lts:logStream:updateLogStream | 授予权限以修改日志流。 | Write | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:put | | lts:logStream:getRealtimeLog | 授予权限以获取实时日志。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:logs:list | | lts:logStream:createLogFilterRules | 授予权限以创建日志清洗规则。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:create | | lts:logStream:updateLogFilterRules | 授予权限以修改日志清洗规则。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:put | | lts:logStream:deleteLogFilterRules | 授予权限以删除日志清洗规则。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:delete | | lts:logStream:listLogFilterRules | 授予权限以查询日志清洗规则。 | List | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:delete | | lts:logStream:getQuickQuery | 授予权限以查看快速查询。 | List | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:searchcriterias:list | | lts:logStream:updateQuickQuery | 授予权限以修改快速查询。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:searchcriterias:put | | lts:logStream:searchLogContext | 授予权限以查询日志上下文。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:logs:list | | lts:structConfig:getCustomTemplate | 授予权限以查询用户自定义模板。 | Read | - | - | - lts:topics:get | | lts:structConfig:createCustomTemplate | 授予权限以创建用户自定义模板。 | Write | - | - | - lts:topics:create | | lts:structConfig:updateCustomTemplate | 授予权限以修改用户自定义模板。 | Write | - | - | - lts:topics:put | | lts:structConfig:deleteCustomTemplate | 授予权限以删除用户自定义模板。 | Write | - | - | - lts:topics:delete | | lts:structConfig:listCustomTemplate | 授予权限以查询用户自定义模板列表。 | Read | - | - | - lts:topics:get | | lts:structConfig:smartExtra | 授予权限以智能提取结构化字段。 | Write | - | - | - lts:topics:create | | lts:logStream:getAggrResult | 授予权限以获取快速分析结果。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:get | | lts:logStream:getAggr | 授予权限以查询快速分析聚合器。 | Read | - | - | - lts:topics:get | | lts:logStream:createAggr | 授予权限以创建快速分析聚合器。 | Write | - | - | - lts:topics:create | | lts:logStream:deleteAggr | 授予权限以删除快速分析聚合器。 | Write | - | - | - lts:topics:delete | | lts:logStream:getQuickAnalysisAggValue | 授予权限以获取数值类型的快速分析结果。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | lts:logStream:getWordFreqConfig | 授予权限以查询用户已创建的快速分析字段。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:wordFreq:get | | lts:logStream:refreshWordFreqConfig | 授予权限以修改快速分析字段。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:wordFreq:set | | lts:logCrux:list | 授予权限以查询日志聚类信息。 | List | - | - | - lts:logreduce:list | | lts:logCrux:get | 授予权限以获取日志聚类开关信息。 | Read | - | - | - lts:logreduce:get | | lts:logCrux:enable | 授予权限以开启日志聚类开关。 | Write | - | - | - lts:logreduce:put | | lts:logCrux:disable | 授予权限以关闭日志聚类开关。 | Write | - | - | - lts:logreduce:put | | lts:logStream:updateChart | 授予权限以更新用户日志看板。 | Write | logStream \* | - | - lts:topics:put | | lts:logStream:createChart | 授予权限以创建用户日志看板。 | Write | logStream \* | - | - lts:topics:create | | lts:logStream:deleteChart | 授予权限以删除用户日志看板。 | Write | logStream \* | - | - lts:topics:delete | | lts:logStream:getChart | 授予权限以获取用户日志看板。 | Read | logStream \* | - | - lts:topics:get | | lts:dashboard:deleteChart | 授予权限以删除图表。 | Write | dashboard \* | - | - lts:topics:delete | | lts:dashboard:listCharts | 授予权限以展示仪表盘层级的图表。 | List | - | - | - lts:topics:get | | lts:dashboard:updateChart | 授予权限以移动图表。 | Write | dashboard \* | - | - lts:topics:put | | lts:dashboard:getDashboard | 授予权限以查询用户日志仪表盘。 | Read | - | - | - lts:topics:get | | lts:dashboardGroup:getDashboardsGroup | 授予权限以查询用户日志仪表盘分组。 | Read | - | - | - lts:topics:get | | lts:dashboardGroup:updateDashboardsGroup | 授予权限以修改用户日志仪表盘分组。 | Write | - | - | - lts:topics:put | | lts:dashboardGroup:deleteDashboardsGroup | 授予权限以更新用户日志仪表盘分组。 | Write | - | - | - lts:topics:delete | | lts:dashboard:CreateDashBoard | 授予权限以根据日志仪表盘模板批量创建仪表盘。 | Write | - | - | - lts:topics:create | | lts:dashboard:CreateDashBoardTemplate | 授予权限以创建用户日志仪表盘模板。 | Write | - | - | - lts:topics:create | | lts:dashboard:getDashBoardTemplate | 授予权限以查询用户日志仪表盘模板。 | Read | - | - | - lts:topics:get | | lts:dashboard:updateDashBoardTemplate | 授予权限以修改用户日志仪表盘模板。 | Write | - | - | - lts:topics:put | | lts:dashboard:deleteDashBoardTemplate | 授予权限以删除用户日志仪表盘模板。 | Write | - | - | - lts:topics:delete | | lts:dashboardGroup:createLogDashboardTemplateGroup | 授予权限以创建仪表盘模板分组。 | Write | - | - | - lts:topics:create | | lts:dashboardGroup:updateLogDashboardTemplateGroup | 授予权限以修改仪表盘模板分组。 | Write | - | - | - lts:topics:put | | lts:dashboardGroup:deleteLogDashboardTemplateGroup | 授予权限以删除用户日志仪表盘模板分组。 | Write | - | - | - lts:topics:delete | | lts:dashboard:listFilter | 授予权限以查询仪表盘过滤器。 | List | dashboard \* | - | - | | lts:dashboard:createFilter | 授予权限以创建仪表盘过滤器。 | Write | dashboard \* | - | - | | lts:dashboard:updateFilter | 授予权限以修改仪表盘过滤器。 | Write | dashboard \* | - | - | | lts:dashboard:deleteFilter | 授予权限以删除仪表盘过滤器。 | Write | dashboard \* | - | - | | lts:alarmRule:listAlarmRules | 授予权限以查询告警规则列表。 | List | - | - | - lts:sqlalarmrules:get | | lts:alarmRule:getKeywordsAlarmRule | 授予权限以查询关键词告警规则。 | Read | alarmRule \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:get | | lts:alarmRule:getSqlAlarmRule | 授予权限以查询sql告警规则。 | Read | alarmRule \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:sqlalarmrules:get | | lts:alarm:listAlarmStatistic | 授予权限以查询sql告警数据。 | List | - | - | - lts:sqlalarmstatistics:get | | lts:dashboard:update | 授予权限以修改用户日志仪表盘。 | Write | dashboard \* | - | - lts:topics:put | | lts:dashboard:delete | 授予权限以删除用户日志仪表盘。 | Write | dashboard \* | - | - lts:topics:delete | | lts:logSearch:list | 授予权限以获取集群列表，命名空间，组件，实例，日志，节点，日志文件页面组件列表，文件列表。 | List | - | - | - aom:log:list | | lts:logSearch:getTime | 授予权限以获取后端节点当前时间。 | Read | - | - | - aom:log:get | | lts:supportCloudService:listCloudService | 授予权限以获取所有已经支持的云服务列表。 | Read | - | - | - | | lts:logSearch:getLogContext | 授予权限以获取日志上下文。 | Read | - | - | - aom:log:get | | lts:logSearch:exportLogs | 授予权限以下载日志。 | Write | - | - | - aom:log:list | | lts:ageingTime:get | 授予权限以获取配额管理。 | List | - | - | - aom:log:list | | lts:ageingTime:update | 授予权限以修改配额管理。 | Write | - | - | - aom:quota:set | | lts:logConfigPath:list | 授予权限以查询VM日志路径配置。 | List | - | - | - aom:log:list | | lts:logConfigPath:create | 授予权限以新建VM日志路径配置。 | Write | - | - | - aom:subscribe:set | | lts:structRule:get | 授予权限以获取结构化规则。 | Read | - | - | - aom:log:get | | lts:structRule:create | 授予权限以创建结构化规则。 | Write | - | - | - aom:subscribe:set | | lts:structRule:delete | 授予权限以删除结构化规则。 | Write | - | - | - aom:subscribe:set | | lts:structRule:regex | 授予权限以结构化提取。 | Write | - | - | - aom:subscribe:set | | lts:logPail:list | 授予权限以查询日志桶、桶内日志和日志柱状图。 | List | - | - | - aom:log:list | | lts:structSql:list | 授予权限以查询结构化日志。 | List | - | - | - aom:log:list | | lts:logPail:create | 授予权限以添加日志桶。 | Write | - | - | - aom:subscribe:set | | lts:logPail:update | 授予权限以修改日志桶。 | Write | - | - | - aom:subscribe:set | | lts:logPail:delete | 授予权限以删除日志桶。 | Write | - | - | - aom:subscribe:set | | lts:storageRelation:list | 授予权限以查询当前租户下的转储关系。 | List | - | - | - aom:log:list | | lts:storageRelation:delete | 授予权限以删除当前租户下的转储关系。 | Write | - | - | - aom:subscribe:set | | lts:storage:batchAction | 授予权限以周期性批量启停。 | Write | - | - | - aom:subscribe:set | | lts:logPailDump:create | 授予权限以添加日志转储。 | Write | - | - | - aom:subscribe:set | | lts:statisticsRule:list | 授予权限以查询统计规则。 | List | - | - | - aom:log:list | | lts:statisticsRule:create | 授予权限以创建统计规则。 | Write | - | - | - aom:subscribe:set | | lts:statisticsRule:update | 授予权限以修改统计规则。 | Write | - | - | - aom:subscribe:set | | lts:statisticsRule:delete | 授予权限以删除统计规则。 | Write | - | - | - aom:subscribe:set | | lts:transfer:listKafkaInstanceTopic | 授予权限以获取用户kafka所有topic。 | List | - | - | - lts:kafka:list | | lts:logPackage:create | 授予权限以购买资源包。 | Write | - | - | - lts:topics:put | | lts:consumerGroup:create | 授予权限以创建消费组。 | Write | - | - | - lts:topics:create | | lts:consumerGroup:delete | 授予权限以删除消费组。 | Write | - | - | - lts:topics:delete | | lts:consumerGroup:list | 授予权限以查询消费组列表。 | List | - | - | - lts:topics:list | | lts:consumerGroup:get | 授予权限以查询消费组详情。 | Read | - | - | - lts:topics:get | | lts:consumerGroup:update | 授予权限以修改消费组。 | Write | - | - | - lts:topics:put | | lts:logStream:get | 授予权限以获取日志流详情。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:get | | lts:agency:listGroupAndStream | 授予权限以获取委托方日志组日志流列表。 | List | - | - | - lts:topics:get | | lts:agency:listEps | 授予权限以获取委托方EPS列表。 | List | - | - | - lts:topics:get | | lts:agency:listStructConfig | 授予权限以获取委托方结构化配置。 | List | - | - | - lts:topics:get | | lts:logConverge:get | 授予权限以获取多账号日志汇聚配置。 | Read | - | - | - lts:logConverge:get | | lts:logConverge:update | 授予权限以更新多账号日志汇聚配置。 | Write | - | - | - lts:logConverge:update | | lts:logManager:createAggr | 授予权限以创建快速分析聚合器。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:create | | lts:logManager:createAggrs | 授予权限以批量创建快速分析聚合器。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:create | | lts:logManager:deleteAggr | 授予权限以删除快速分析聚合器。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:delete | | lts:logManager:deleteAggrs | 授予权限以批量删除快速分析聚合器。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:topics:delete | | lts:logManager:createLogFilter | 授予权限以创建日志过滤规则。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:filters:create | | lts:logManager:listLogFilters | 授予权限以查看日志过滤规则。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:filters:list | | lts:logManager:updateLogFilters | 授予权限以修改日志过滤规则。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:filters:put - lts:filtersAction:put | | lts:logManager:deleteLogFilters | 授予权限以删除日志过滤规则。 | Write | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:filters:delete | | lts:structConfig:regex | 授予权限以正则结构化示例日志。 | Write | - | - | - lts:regex:create | | lts:structConfig:listAllCustomTemplate | 授予权限以查看所有自定义模板。 | Read | - | - | - lts:topics:get | | lts:tag:get | 授予权限以获取标签信息。 | Read | logGroup | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:get | | lts:tag:get | 授予权限以获取标签信息。 | Read | logStream | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:get | | lts:tag:get | 授予权限以获取标签信息。 | Read | accessConfig | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:get | | lts:tag:get | 授予权限以获取标签信息。 | Read | hostGroup | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceTags:get | | lts:tag:list | 授予权限以获取所有的标签信息。 | List | - | - | - lts:topics:get | | lts:subscription:create | 授予权限以创建订阅信息。 | Write | - | - | - lts:subscriptions:create | | lts:subscription:get | 授予权限以获取订阅信息。 | Read | - | - | - lts:subscriptions:get | | lts:subscription:update | 授予权限以更新订阅信息。 | Write | - | - | - lts:subscriptions:put | | lts:subscription:delete | 授予权限以删除订阅信息。 | Write | - | - | - lts:subscriptions:delete | | lts:logStream:getSqlAnalysisResult | 授予权限以获取SQL分析查询结果。 | Read | logStream \* | [g:ResourceTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - | | lts:resource:listResourcesBytags | 授予权限以获取资源列表。 | List | logGroup | - | - lts:resourceInstance:list | | lts:resource:listResourcesBytags | 授予权限以获取资源列表。 | List | logStream | - | - lts:resourceInstance:list | | lts:resource:listResourcesBytags | 授予权限以获取资源列表。 | List | - | - [g:RequestTag/\](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) - [g:TagKeys](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html) | - lts:resourceInstance:list | | lts:log2MetricRule:create | 授予权限以创建日志转指标规则。 | Write | - | - | - | | lts:log2MetricRule:update | 授予权限以更新日志转指标规则。 | Write | - | - | - | | lts:log2MetricRule:delete | 授予权限以删除日志转指标规则。 | Write | - | - | - | | lts:log2MetricRule:list | 授予权限以获取日志转指标规则列表。 | List | - | - | - | | lts:log2MetricRule:get | 授予权限以获取日志转指标规则详情。 | Read | - | - | - | | lts:streamConsume:get | 授予权限以获取流式消费详情。 | Read | - | - | - lts:groups:get | | lts:dsl:get | 授予权限以获取日志加工任务详情。 | Read | - | - | - | | lts:dsl:list | 授予权限以获取日志加工任务列表。 | List | - | - | - | | lts:dsl:create | 授予权限以创建日志加工任务。 | Write | - | - | - | | lts:dsl:update | 授予权限以更新日志加工任务。 | Write | - | - | - | | lts:dsl:delete | 授予权限以删除日志加工任务。 | Write | - | - | - | | lts:aiops:nl2ql | 授予权限以通过自然语言生成sql。 | Read | - | - | - | | lts::listAgentConf | 授予权限以查询Agent采集配置。 | List | - | - | - lts:agentsConf:list | | lts::getEipReportEnable | 授予权限以获取公网上报日志开关。 | Read | - | - | - lts:log:getEipReportEnable | | lts::updateEipReportEnable | 授予权限以更新公网上报日志开关。 | Write | - | - | - lts:log:updateEipReportEnable | LTS的API通常对应着一个或多个授权项。[表2]展示了API与授权项的关系，以及该API需要依赖的授权项。 表2API与授权项的关系 | API | 对应的授权项 | 依赖的授权项 | |:---|:---|:---| | POST /v2/{project_id}/groups | lts:logGroup:createLogGroup | - | | DELETE /v2/{project_id}/groups/{log_group_id} | lts:logGroup:deleteLogGroup | - | | GET /v2/{project_id}/groups | lts:logGroup:listLogGroup | - | | POST /v2/{project_id}/groups/{log_group_id} | lts:logGroup:updateLogGroup | - | | POST /v2/{project_id}/groups/{log_group_id}/streams | lts:logStream:createLogStream | - | | PUT /v2/{project_id}/groups/{log_group_id}/streams-ttl/{log_stream_id} | lts:logStream:updateLogStream | - | | DELETE /v2/{project_id}/groups/{log_group_id}/streams/{log_stream_id} | lts:logStream:deleteLogStream | - | | GET /v2/{project_id}/groups/{log_group_id}/streams | lts:logStream:listLogStream | - | | GET /v2/{project_id}/log-streams | lts:logStream:listLogStream | - | | POST /v2/{project_id}/lts/keyword-count | lts:logStream:searchLogHistogram | - | | POST /v2/{project_id}/groups/{log_group_id}/streams/{log_stream_id}/content/query | lts:logStream:searchLog | - | | POST /v2/{project_id}/groups/{log_group_id}/streams/{log_stream_id}/struct-content/query | lts:logStream:searchStructLog | - | | POST /v2/{project_id}/streams/{log_stream_id}/struct-content/query | lts:logStream:searchStructLog | - | | POST /v2/{project_id}/transfers | lts:transfer:createTransfer | - obs:bucket:PutBucketAcl - obs:bucket:GetBucketAcl - obs:bucket:GetEncryptionConfiguration - obs:bucket:HeadBucket - dis:streams:list - dis:streamPolicies:list | | DELETE /v2/{project_id}/transfers | lts:transfer:deleteTransfer | - | | GET /v2/{project_id}/transfers | lts:transfer:listTransfer | - | | POST /v2/{project_id}/lts/dms/kafka-instance | lts:transfer:registerDmsKafkaInstance | dms:instance:list | | PUT /v2/{project_id}/transfers | lts:transfer:updateTransfer | - obs:bucket:PutBucketAcl - obs:bucket:GetBucketAcl - obs:bucket:GetEncryptionConfiguration - obs:bucket:HeadBucket - dis:streams:list - dis:streamPolicies:list | | POST /v2/{project_id}/collection/disable | lts:configCenter:updateOverCollectSwitch | - | | POST /v2/{project_id}/collection/enable | lts:configCenter:updateOverCollectSwitch | - | | POST /v3/{project_id}/lts/struct/template | lts:structConfig:createStructConfig | - | | POST /v2/{project_id}/lts/struct/template | lts:structConfig:createStructConfig | - | | DELETE /v2/{project_id}/lts/struct/template | lts:structConfig:deleteStructConfig | - | | GET /v3/{project_id}/lts/struct/customtemplate/list | lts:structConfig:listStructTemplate | - | | GET /v3/{project_id}/lts/struct/customtemplate | lts:structConfig:listStructTemplate | - | | GET /v2/{project_id}/lts/struct/template | lts:structConfig:getStructConfig | - | | PUT /v3/{project_id}/lts/struct/template | lts:structConfig:updateStructConfig | - | | PUT /v2/{project_id}/lts/struct/template | lts:structConfig:updateStructConfig | - | | POST /v2/{project_id}/lts/aom-mapping | lts:mappingRule:create | - | | DELETE /v2/{project_id}/lts/aom-mapping | lts:mappingRule:delete | - | | GET /v2/{project_id}/lts/aom-mapping/{rule_id} | lts:mappingRule:get | - | | GET /v2/{project_id}/lts/aom-mapping | lts:mappingRule:list | - | | PUT /v2/{project_id}/lts/aom-mapping | lts:mappingRule:update | - | | GET /v2/{project_id}/lts/notifications/topics | lts:alarmNoticeTemplate:list | smn:topic:list | | POST /v2/{project_id}/lts/alarms/sql-alarm-rule | lts:alarmRule:createSqlAlarmRule | - | | DELETE /v2/{project_id}/lts/alarms/sql-alarm-rule/{sql_alarm_rule_id} | lts:alarmRule:deleteSqlAlarmRule | - | | GET /v2/{project_id}/lts/alarms/sql-alarm-rule | lts:alarmRule:listSqlAlarmRule | - | | PUT /v2/{project_id}/lts/alarms/status | lts:alarmRule:updateSqlAlarmRule | - | | PUT /v2/{project_id}/lts/alarms/sql-alarm-rule | lts:alarmRule:updateSqlAlarmRule | - | | POST /v2/{project_id}/lts/alarms/keywords-alarm-rule | lts:alarmRule:createWordAlarmRule | - | | DELETE /v2/{project_id}/lts/alarms/keywords-alarm-rule/{keywords_alarm_rule_id} | lts:alarmRule:deleteWordAlarmRule | - | | GET /v2/{project_id}/lts/alarms/keywords-alarm-rule | lts:alarmRule:listWordAlarmRule | - | | PUT /v2/{project_id}/lts/alarms/keywords-alarm-rule | lts:alarmRule:updateWordAlarmRule | - | | POST /v2/{project_id}/{domain_id}/lts/alarms/sql-alarm/clear | lts:alarm:cleanAlarm | - | | POST /v2/{project_id}/{domain_id}/lts/alarms/sql-alarm/query | lts:alarm:listAlarm | - | | GET /v2/{project_id}/groups/{log_group_id}/streams/{log_stream_id}/charts | lts:logStream:listChart | - | | POST /v2/{project_id}/{domain_id}/lts/events/notification/templates | lts:alarmNoticeTemplate:create | - | | DELETE /v2/{project_id}/{domain_id}/lts/events/notification/templates | lts:alarmNoticeTemplate:delete | - | | POST /v2/{project_id}/{domain_id}/lts/events/notification/templates/view | lts:alarmNoticeTemplate:list | - | | GET /v2/{project_id}/{domain_id}/lts/events/notification/templates | lts:alarmNoticeTemplate:list | - | | GET /v2/{project_id}/{domain_id}/lts/events/notification/template/{template_name} | lts:alarmNoticeTemplate:get | - | | PUT /v2/{project_id}/{domain_id}/lts/events/notification/templates | lts:alarmNoticeTemplate:update | - | | POST /v3/{project_id}/lts/host-group | lts:hostGroup:create | - | | DELETE /v3/{project_id}/lts/host-group | lts:hostGroup:delete | - | | POST /v3/{project_id}/lts/host-list | lts:host:list | - aom:icmgr:get - aom:icmgr:list | | POST /v3/{project_id}/lts/host-group-list | lts:hostGroup:list | - | | PUT /v3/{project_id}/lts/host-group | lts:hostGroup:update | - | | POST /v3/{project_id}/lts/access-config | lts:accessConfig:create | - | | DELETE /v3/{project_id}/lts/access-config | lts:accessConfig:delete | - | | POST /v3/{project_id}/lts/access-config-list | lts:accessConfig:list | - | | PUT /v3/{project_id}/lts/access-config | lts:accessConfig:update | - | | POST /v1/{project_id}/{resource_type}/{resource_id}/tags/action | lts:tag:create | - | | POST /v1.0/{project_id}/groups/{group_id}/topics/{topic_id}/search-criterias | lts:logStream:createQuickQuery | - | | DELETE /v1.0/{project_id}/groups/{group_id}/topics/{topic_id}/search-criterias | lts:logStream:deleteQuickQuery | - | | GET /v1.0/{project_id}/groups/{group_id}/topics/{topic_id}/search-criterias | lts:logStream:listQuickQuery | - | | GET /v2/{project_id}/lts/history-sql | lts:logStream:getHistorySql | - | | GET /v1.0/{project_id}/lts/groups/{group_id}/search-criterias | lts:logStream:listQuickQuery | - | | POST /v1.0/{project_id}/lts/favorite | lts:logFavorite:create | - | | DELETE /v1.0/{project_id}/lts/favorite/{fav_res_id} | lts:logFavorite:delete | - | | POST /v2/{project_id}/dashboard | lts:dashboard:create | - | | POST /v2/{project_id}/lts/dashboard-group | lts:dashboardGroup:create | - | | POST /v2/{project_id}/lts/timeline-traffic-statistics | lts:trafficStatistic:get | - | | POST /v2/{project_id}/lts/topn-traffic-statistics | lts:trafficStatistic:get | - | | POST /v1.0/{project_id}/groups/{group_id}/stream/{stream_id}/index/config | lts:IndexConfig:create | - | | GET /v1.0/{project_id}/groups/{group_id}/stream/{stream_id}/index/config | lts:IndexConfig:list | - | | POST /v2/{project_id}/groups/{log_group_id}/streams/{log_stream_id}/context | lts:logStream:searchLogContext | - | | POST /v2.0/{project_id}/lts/createAgencyAccess | lts:accessConfig:create | - | | GET /v1/{project_id}/lts/{member_account_id}/all-streams | lts:logConverge:get | - | | GET /v1/{project_id}/lts/log-converge-config/{member_account_id} | lts:logConverge:get | - | | PUT /v1/{project_id}/lts/log-converge-config/switch | lts:logConverge:update | - | | PUT /v1/{project_id}/lts/log-converge-config | lts:logConverge:update | - | | GET /v1/{project_id}/lts/log-converge-config/switch | lts:logConverge:get | - | #### 资源类型（Resource） 资源类型（Resource）表示身份策略所作用的资源。如[表3]中的某些操作指定了可以在该操作指定的资源类型，则必须在具有该操作的身份策略语句中指定该资源的URN，身份策略仅作用于此资源；如未指定，Resource默认为"\*"，则身份策略将应用到所有资源。您也可以在身份策略中设置条件，从而指定资源类型。 LTS定义了以下可以在自定义身份策略的Resource元素中使用的资源类型。 表3LTS支持的资源类型 | 资源类型 | URN | |:---|:---| | logStream | lts:\:\:logStream:\/\ | | logGroup | lts:\:\:logGroup:\ | | dashboard | lts:\:\:dashboard:\ | | accessConfig | lts:\:\:accessConfig:\ | | alarmRule | lts:\:\:alarmRule:\ | | transfer | lts:\:\:transfer:\ | | hostGroup | lts:\:\:hostGroup:\ | #### 条件（Condition） LTS服务不支持在身份策略中的条件键中配置服务级的条件键。LTS可以使用适用于所有服务的全局条件键，请参考[全局条件键](https://support.huaweicloud.com/usermanual-iam5/iam_01_1287.html)。