云审计服务 CTS-权限管理:细粒度权限说明
下载云审计服务 CTS用户手册完整版
细粒度权限说明
权限名称 |
权限描述 |
权限依赖 |
应用场景 |
|---|---|---|---|
cts:quota:get |
查询租户追踪器配额信息 |
- |
查询租户追踪器配额信息 |
cts:trace:list |
查询审计事件 |
- |
查出系统记录的7天内资源操作记录 |
cts:trace:listResource |
- |
||
cts:trace:listTraceUser |
- |
||
cts:notification:create |
创建关键操作通知 |
smn:topic:listTopic iam:agencies:listAgencies iam:agencies:createAgency iam:permissions:grantRoleToAgencyOnProject iam:permissions:listRolesForAgencyOnProject iam:projects:listProjects iam:groups:listGroups iam:users:listUsers iam:users:listUsersForGroup |
创建关键操作通知 |
cts:notification:update |
修改关键操作通知 |
修改关键操作通知 |
|
cts:notification:delete |
删除关键操作通知 |
- |
删除关键操作通知 |
cts:notification:list |
查询所有关键操作通知 |
- |
查询所有关键操作通知 |
cts:tracker:delete |
删除追踪器 |
- |
删除已创建的追踪器 |
cts:tracker:update |
更新追踪器 |
iam:agencies:listAgencies iam:agencies:createAgency iam:permissions:grantRoleToAgencyOnProject iam:permissions:listRolesForAgencyOnProject iam:projects:listProjects iam:groups:listGroups iam:users:listUsersForGroup lts:topics:list lts:topics:create lts:topics:get lts:logstreams:list lts:groups:get lts:groups:list lts:groups:create obs:bucket:CreateBucket obs:bucket:HeadBucket obs:bucket:GetLifecycleConfiguration obs:bucket:PutLifecycleConfiguration obs:bucket:GetBucketAcl obs:bucket:PutBucketAcl obs:bucket:ListAllMyBuckets kms:cmk:list kms:cmk:get eps:enterpriseProjects:list organizations:trustedServices:list organizations:organizations:get organizations:deletgatedAdministrators:list organizations:accounts:list organizations:deletgatedServices:list |
修改已创建追踪器的配置项 |
cts:tracker:create |
创建追踪器 |
创建一个追踪器用来关联系统记录的所有操作 |
|
cts:tracker:list |
查询所有追踪器 |
obs:bucket:GetBucketAcl obs:bucket:ListAllMyBuckets |
查看追踪器的详细信息 |
cts:tag:create |
批量添加资源标签 |
- |
批量添加资源标签 |
cts:tag:delete |
批量删除资源标签 |
- |
批量删除资源标签 |
