访问管理 高性能计算平台

一、服务（相关）角色是由腾讯云服务预定义，经用户授权后相应服务即可通过扮演服务相关角色对用户资源进行访问操作。这篇档介绍具体服务相关角色的使用场景及相关权限策略信息。

二、THPC_QCSLinkedRoleInWorkspace

·策略名称： QcloudAccessForWKSLinkedRoleInAcrossService

·策略内容：{
"version": "2.0",
"statement": [
{
"effect": "allow",
"action": [
"cvm:RunInstances",
"cvm:DescribeInstances",
"cvm:TerminateInstances",
"cvm:DescribeUserAvailableInstanceTypes",
"cvm:DescribeInstanceConfigInfos",
"cvm:DescribeImages",
"cvm:CreateLaunchTemplate",
"cvm:DeleteLaunchTemplate",
"cvm:DescribeLaunchTemplateVersions",
"cvm:RenewInstances",
"cvm:DescribeInstancesStatus",
"cvm:ModifyInstancesRenewFlag",
"cvm:InquiryPriceRunInstances",
"cvm:InquiryStoragePrice",
"cvm:SwitchParameterRunInstances",
"cvm:SwitchParameterRenewInstances",
"cvm:SwitchParameterTerminateInstances",
"tag:GetTagValues",
"tag:DescribeResourceTagsByResourceIds",
"tag:DescribeTags",
"tag:DescribeTagKeys",
"tag:ModifyResourceTags",
"tag:AttachResourcesTag",
"tag:DetachResourcesTag",
"vpc:DescribeVpcEx",
"vpc:DescribeSubnetEx",
"vpc:CheckBandwidthPackage",
"cvm:DescribeZones"
],
"resource": "*"
},
{
"action": [
"finance:trade"
],
"effect": "allow",
"resource": [
"qcs::cvm:::*",
"qcs::thpc:::*"
]
}
]
}

三、THPC_QCSLinkedRoleInAcrossService

使用场景： 当前角色为高性能计算平台（THPC）服务相关角色，该角色将在已关联策略的权限范围内访问你的其他云服务资源。权限策略

·策略名称： QcloudAccessForTHPCLinkedRoleInAcrossService

·策略内容：{
"version": "2.0",
"statement": [
{
"action": [
"tat:RunCommand",
"tat:DescribeInvocationTasks",
"tat:DescribeAutomationAgentStatus",
"as:DescribeAutoScalingGroups",
"as:ScaleOutInstances",
"as:DescribeAutoScalingActivities",
"as:ModifyDesiredCapacity",
"as:RemoveInstances",
"cvm:RunInstances",
"cvm:DescribeInstances",
"cvm:TerminateInstances",
"cvm:DescribeImages",
"tat:DescribeInvocations",
"cfs:CreateCfsFileSystem",
"cfs:DescribeCfsFileSystems",
"cfs:DescribeMountTargets",
"goosefs:DescribeFileSystems",
"cvm:CreateLaunchTemplate",
"cvm:DeleteLaunchTemplate",
"cvm:DescribeLaunchTemplateVersions",
"finance:trade",
"kms:BindCloudResource",
"cos:GetObject",
"batch:AttachInstances",
"batch:DetachInstances",
"batch:CreateComputeEnv",
"batch:DeleteComputeEnv",
"batch:DescribeComputeEnvs",
"batch:DescribeComputeEnv",
"batch:SubmitJob",
"batch:TerminateJob",
"batch:DeleteJob",
"batch:DescribeJobs",
"batch:DescribeJob",
"batch:DescribeJobSubmitInfo",
"cvm:RenewInstances",
"cvm:DescribeInstancesStatus",
"cvm:ModifyInstancesRenewFlag",
"cvm:InquiryPriceRunInstances",
"cvm:InquiryStoragePrice",
"cvm:SwitchParameterRunInstances",
"cvm:SwitchParameterRenewInstances",
"cvm:SwitchParameterTerminateInstances",
"tag:GetTagValues",
"tag:DescribeResourceTagsByResourceIds",
"tag:DescribeTags",
"tag:DescribeTagKeys",
"tag:ModifyResourceTags",
"tag:AttachResourcesTag",
"tag:DetachResourcesTag",
"vpc:DescribeVpcEx",
"vpc:DescribeSubnetEx",
"vpc:CheckBandwidthPackage",
"cvm:*",
"tcr:DescribeInstances",
"tcr:CreateInstanceToken",
"tcr:DescribeRepositories",
"tcr:DescribeImages",
"tcr:DescribeRegions",
"cfs:DeleteCfsFileSystem",
"tcr:PullRepository",
"tcr:PullRepositoryPersonal",
"batch:Describe*",
"batch:TerminateComputeNode",
"batch:ModifyComputeEnv",
"batch:RetryJobs",
"batch:TerminateTaskInstance",
"batch:TerminateComputeNodes",
"batch:CreateTaskTemplate",
"batch:ModifyTaskTemplate",
"batch:DeleteTaskTemplates",
"batch:ValidateBatchAssumeRole",
"batch:*",
"monitor:DescribePrometheusInstances",
"monitor:CreatePrometheusMultiTenantInstancePostPayMode",
"monitor:TerminatePrometheusInstances",
"monitor:CreateExporterIntegration",
"monitor:DeleteExporterIntegration",
"monitor:UpdateExporterIntegration",
"monitor:DescribeExporterIntegrations",
"vpc:CreateVpcEndPoint",
"vpc:DeleteVpcEndPoint",
"vpc:ModifyVpcEndPointAttribute",
"vpc:DescribeVpcEndPoint",
"goosefs:DescribeClusters",
"goosefs:QueryClientNodeMountCommand"
],
"resource": "*",
"effect": "allow"
}
]
}