访问管理 材料研究平台

一、服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。

二、MRP_QCSLinkedRoleInSimulate

·策略名称： QcloudAccessForMRPLinkedRoleInSimulate

·策略内容：{
"version": "2.0",
"statement": [
{
"action": [
"cos:PutBucket",
"cos:GetBucket",
"cos:HeadBucket",
"cos:DeleteBucket",
"cos:PutBucketACL",
"cos:GetBucketACL",
"cos:PutBucketCORS",
"cos:GetBucketCORS",
"cos:DeleteBucketCORS",
"cos:PutObject",
"cos:PutObjectCopy",
"cos:PostObject",
"cos:GetObject",
"cos:HeadObject",
"cos:DeleteObject",
"cos:DeleteMultipleObjects",
"cos:OptionsObject",
"cos:PostObjectRestore",
"cos:PutObjectACL",
"cos:GetObjectACL",
"cos:InitiateMultipartUpload",
"cos:UploadPart",
"cos:UploadPartCopy",
"cos:CompleteMultipartUpload",
"cos:AbortMultipartUpload",
"cos:ListParts",
"cos:ListMultipartUploads",
"cvm:DescribeInstances",
"cvm:DescribeInstanceVncUrl",
"cvm:InquiryPriceRunInstances",
"cvm:InquiryPriceRenewInstances",
"cvm:InquiryPriceResetInstance",
"cvm:InquiryPriceResetInstancesType",
"cvm:InquiryPriceResizeInstanceDisks",
"cvm:RunInstances",
"cvm:StartInstances",
"cvm:RebootInstances",
"cvm:StopInstances",
"cvm:RenewInstances",
"cvm:ResetInstance",
"cvm:TerminateInstances",
"cvm:ResetInstancesType",
"cvm:ResizeInstanceDisks",
"cvm:ResetInstancesPassword",
"cvm:ModifyInstancesAttribute",
"cvm:ModifyInstancesProject",
"cvm:ModifyInstancesRenewFlag",
"cvm:DescribeInstancesStatus",
"cvm:DescribeImages",
"cvm:DescribeImageSharePermission",
"cvm:CreateImage",
"cvm:ModifyImageSharePermission",
"cvm:SyncImages",
"cvm:ModifyImageAttribute",
"cvm:DeleteImages",
"batch:TerminateComputeNodes",
"batch:TerminateComputeNode",
"batch:ModifyComputeEnv",
"batch:DetachInstances",
"batch:DescribeComputeEnvs",
"batch:DescribeComputeEnvCreateInfos",
"batch:DescribeComputeEnvCreateInfo",
"batch:DescribeComputeEnvActivities",
"batch:DescribeComputeEnv",
"batch:DeleteComputeEnv",
"batch:CreateCpmComputeEnv",
"batch:CreateComputeEnv",
"batch:AttachInstances",
"tke:ModifyClusterEndpointSP",
"tke:ModifyClusterAttribute",
"tke:DescribeClusterSecurity",
"tke:DescribeClusters",
"tke:DescribeClusterEndpointVipStatus",
"tke:DescribeClusterEndpointStatus",
"tke:DeleteClusterEndpointVip",
"tke:DeleteClusterEndpoint",
"tke:DeleteCluster",
"tke:CreateClusterEndpointVip",
"tke:CreateClusterEndpoint",
"tke:CreateCluster",
"tke:AcquireClusterAdminRole",
"vpc:DescribeSubnetEx",
"finance:trade",
"batch:DescribeJob",
"batch:DeleteJob",
"batch:DescribeJobSubmitInfo",
"batch:DescribeJobs",
"batch:RetryJobs",
"batch:SubmitJob",
"batch:TerminateJob",
"cam:PassRole",
"cvm:Describe*",
"cvm:Inquiry*"
],
"resource": "*",
"effect": "allow"
}
]
}

三、MRP_QCSLinkedRoleInCloudShell

使用场景： 当前角色为材料研究平台（MRP）服务相关角色，该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略

·策略名称： QcloudAccessForMRPLinkedRoleInCloudShell

·策略内容：{
"version": "2.0",
"statement": [
{
"action": [
"cos:PutBucket",
"cos:GetBucket",
"cos:HeadBucket",
"cos:DeleteBucket",
"cos:PutBucketACL",
"cos:GetBucketACL",
"cos:PutBucketCORS",
"cos:GetBucketCORS",
"cos:DeleteBucketCORS",
"cos:PutObject",
"cos:PutObjectCopy",
"cos:PostObject",
"cos:GetObject",
"cos:HeadObject",
"cos:DeleteObject",
"cos:DeleteMultipleObjects",
"cos:OptionsObject",
"cos:PostObjectRestore",
"cos:PutObjectACL",
"cos:GetObjectACL",
"cos:InitiateMultipartUpload",
"cos:UploadPart",
"cos:UploadPartCopy",
"cos:CompleteMultipartUpload",
"cos:AbortMultipartUpload",
"cos:ListParts",
"cos:ListMultipartUploads",
"cos:GetObjectTagging",
"vpc:DescribeVpcEx",
"vpc:DescribeVpcLimits",
"vpc:DescribeSubnet",
"vpc:DescribeSubnetEx",
"vpc:CreateVpc",
"vpc:CreateSubnet",
"cvm:DescribeSecurityGroups",
"cvm:DescribeSecurityGroupLimits",
"cvm:CreateSecurityGroup",
"cvm:CreateSecurityGroupPolicy",
"cvm:ModifySecurityGroupPolicys",
"cvm:DescribeImages",
"cvm:RunInstances",
"cvm:DescribeInstances",
"cvm:DescribeInstancesStatus",
"cvm:InquiryPriceRunInstances",
"cvm:InquiryPriceRenewInstances",
"cvm:InquiryPriceResetInstance",
"cvm:InquiryPriceResizeInstanceDisks",
"cvm:TerminateInstances",
"cvm:ResetInstance",
"cvm:StartInstances",
"cvm:RenewInstances",
"cvm:ResetInstancesType",
"cvm:ResizeInstanceDisks",
"cvm:Describe*",
"cvm:Inquiry*"
],
"resource": "*",
"effect": "allow"
},
{
"effect": "allow",
"action": "finance:trade",
"resource": [
"qcs::cos:::*",
"qcs::cvm:::*"
]
}
]
}