Features, DataSync Resources, and Access Permissions

DataSync resources that support access control

We provide one resource type that supports access control: Transfer Job.

---

DataSync features and the permissions required to perform them

We provide 3 main permission groups (List, Read, Write), described in the table below:

DataSync feature	Permissions required (Action)	Meaning	DataSync resources (Resource)	Tool	Account type
List group:
ListTransferJob	ListTransferJob	Displays the list of transfer jobs.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
ListJobRunHistories	ListTransferJob ListJobRunHistories	Displays the transfer job run-history list.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
Read group:
GetTransferJob	ListTransferJob GetTransferJob	Retrieves transfer job information.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
GetRunningJobStatics	ListJobRunHistories GetRunningJobStatics	Retrieves detailed transfer job run results (excluding the Monitoring section).	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
GetMonitorJobStatics	ListJobRunHistories GetMonitorJobStatics	Retrieves detailed transfer job run results (Monitoring).	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
Write group:
CreateTransferJob	ListTransferJob GetTransferJob CreateTransferJob vStorage: ListRegions ListProjects ListContainers ListDirectories GetRegions GetProjects GetContainers GetDirectories vMonitor Platform: ListLogProjects GetLogProjects	Creates a transfer job.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
DeleteTransferJob	ListTransferJob GetTransferJob DeleteTransferJob	Deletes a transfer job.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
RunTransferJob	ListTransferJob GetTransferJob RunTransferJob	Runs a transfer job.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
UpdateTransferJob	ListTransferJob GetTransferJob UpdateTransferJob vStorage: ListRegions ListProjects ListContainers ListDirectories GetRegions GetProjects GetContainers GetDirectories vMonitor Platform: ListLogProjects GetLogProjects	Updates a previously created transfer job.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
CancelTransferJob	ListTransferJob GetTransferJob CancelTransferJob	Stops a running transfer job.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account
RetryTransferJob	ListTransferJob GetTransferJob ListJobRunHistories GetRunningJobStatics GetMonitorJobStatics RetryTransferJob	Retries a transfer job based on the results of the previous run.	All resources Specific resource: transfer job id.	DataSync Portal	Root User Account IAM User Account

Predefined permissions provided by DataSync

We provide a set of preconfigured permission sets, described below. You can attach them directly to IAM User Accounts for quick authorization without creating a detailed policy.

Predefined roles	Description	Resource
DataSync Full Access	ListTransferJob ListJobRunHistories GetTransferJob GetRunningJobStatics CreateTransferJob DeleteTransferJob RunTransferJob UpdateTransferJob CancelTransferJob RetryTransferJob	All resources
DataSync Read Only Access	ListTransferJob ListJobRunHistories GetTransferJob GetRunningJobStatics	All resources
DataSync IAM User Full Access	ListTransferJob ListJobRunHistories GetTransferJob GetRunningJobStatics CreateTransferJob DeleteTransferJob RunTransferJob UpdateTransferJob CancelTransferJob RetryTransferJob	All resources
DataSync IAM User Read Only Access	ListTransferJob ListJobRunHistories GetTransferJob GetRunningJobStatics	All resources