Docs

ArkClaw Enterprise

Identity and Access Management

ArkClaw IAM policies

This topic describes the types of IAM policies and those related to ArkClaw to help you quickly understand IAM policies. Two IAM policy types are supported: system default policies and custom policies. You can use system default policies to grant IAM identities directly. If the system default policies can not meet your needs, you can use custom policies to grant permissions precisely and manage resources flexibly.

System default policies

ArkClaw system default policies

The IAM platform has default ArkClaw-related policies preset, with details in the following table.

You can directly assign these system default policies to IAM entities (IAM users, user groups, or roles). System default policies are for authorization only and can not be edited or modified.

System default policy name	Description
ArkClawXFullAccess	Once granted this policy, IAM identities (IAM users, user groups, and roles) gain management permissions for ArkClaw within the permission scope (global permission or project-level permission). For example, IAM identities can create, change, and view resources.
ArkClawXReadOnlyAccess	Once granted this policy, IAM identities (IAM users, user groups, and roles) gain read-only permissions for ArkClaw within the permission scope (global permission or project-level permission). An IAM identity granted with this policy can only view ArkClaw-related resources, but not perform any management on them or view other unauthorized cloud products.

Details of ArkClaw system default policies

tip

For other system default policies, go to the Permission policy console.

Details of the ArkClawXFullAccess policy

Details of the ArkClawXReadOnlyAccess policy

Custom policies

Type	Description	Related documents
Custom policy type	Custom policies are divided into identity-based policies and resource-based policies, depending on the entity with which they are associated.	Identity-based policies Resource-based policies
Custom policy syntax	Custom policy syntax defines policy permissions through policy elements. When creating an identity-based policy and a resource-based policy, the policy elements differ.	General custom policy syntax examples
Create a custom policy	When you use a VolcanoEngine root user or an IAM user with IAM management permissions to authorize, and system default policies can not meet the requirements, you can define refined permissions via custom policies.	Create a custom policy

Last updated: 2026.04.28 19:37:32