访问管理 运维安全中心（堡垒机）

一、服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。

二、DASB_QCSLinkedRoleInUserasset

·策略名称： QcloudAccessForDASBLinkedRoleInUserasset

·策略内容：{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"cvm:DescribeInstances",
"cvm:DescribeInstancesStatus",
"cdb:DescribeDBInstances",
"sqlserver:DescribeDBInstances",
"cynosdb:DescribeInstances",
"cynosdb:DescribeClusters",
"mariadb:DescribeDBInstances",
"postgres:DescribeDBInstances",
"redis:DescribeInstances",
"mongodb:DescribeDBInstances",
"vpc:CreateVpcEndPoint",
"vpc:DescribeVpcEndPoint",
"vpc:DeleteVpcEndPoint",
"dcdb:DescribeDCDBInstances",
"ckafka:DescribeInstances",
"ckafka:DescribeInstancesDetail",
"ckafka:DescribeInstanceAttributes",
"ckafka:DescribeTopic",
"ckafka:DescribeTopicDetail",
"ckafka:DescribeRoute",
"ckafka:CreateRoute",
"cam:ListMaskedSubAccounts",
"cls:pushLog",
"cls:DeleteCloudProductLogTask",
"tke:DescribeClusters",
"tke:DescribeClusterEndpoints",
"ioa:DescribeBusinessResources",
"ioa:BindBusinessResourceConnectorGroup",
"ioa:CreateBusinessResource",
"ioa:DeleteBusinessResource",
"ioa:ModifyBusinessResource",
"ioa:CreateAccountGroup",
"ioa:DescribeAccountGroup",
"ioa:DescribeAccountGroups",
"ioa:DescribeSearchAccountGroupTree",
"ioa:CreateLocalAccount",
"ioa:ModifyLocalAccount",
"ioa:DescribeLocalAccounts",
"ioa:DeleteLocalAccounts",
"ioa:DescribePublicEncryptKey",
"ioa:DescribeSourceTypes",
"ioa:SaveAccountGroupResources",
"ioa:DescribeAccountGroupResources",
"ioa:DeleteAccountGroupResources",
"ioa:DescribeConnectorDownloadUrl",
"ioa:DescribeConnectors",
"ioa:DeleteConnector",
"ioa:CreateConnector",
"ioa:CreateConnectorGroup",
"ioa:DeleteResourceModule",
"ioa:DescribeResourceModules",
"ioa:CreateResourceModule",
"ioa:DescribeGlobalLicense",
"ioa:DescribeConnectorGroups",
"ioa:DeleteConnectorGroup",
"ioa:DeleteAccountGroup"
],
"resource": [
"*"
]
}
]
}