Creating a Custom Policy

You can create custom policies if system-defined policies cannot meet your permission requirements.

You can create custom policies in either of the following ways:

Visual editor: Select cloud services, actions, resources, and request conditions. This does not require knowledge of policy syntax.
JSON: Edit JSON policies from scratch or based on an existing policy.

This section provides examples of common DDM custom policies.

Example Policies

Example: Denying DDM instance deletion

A deny policy must be used together with other policies. If the permissions assigned to a user contain both "Allow" and "Deny", the "Deny" permissions take precedence over the "Allow" permissions. The following is an example of a deny policy:

{ 
      "Version": "1.1", 
      "Statement": [ 
            { 
           "Effect": "Deny", 
                  "Action": [ 
                        "ddm:instance:delete" 
                  ] 
            } 
      ] 
}

The following is an example custom policy with both Allow and Deny permissions:

{
	"Version": "1.1",
	"Statement": [{
                               "Effect": "Allow"
			"Action": [
				"*:*:*"
			],
		},
		{
			"Action": [
				"ddm:instance:create",
			],
			"Effect": "Deny"
		}
	]
}

Parent topic: Permissions Management

Предыдущая статья

Creating a User and Granting Permissions

Следующая статья

Database Accounts and Permissions

Была ли эта статья полезна?

Поддержка Юридические документы