Resource-level permissions specify which resources a user can manipulate. Cloud Block Storage (CBS) supports resource-level permission on some CBS operations that control which resources and when a user can manipulate.
The following table describes the types of resources that can be authorized in Cloud Access Management (CAM):

The CBS APIs describe the CBS API operations which currently support resource-level permission control as well as the resources and condition keys supported by each operation. When setting the resource path, you need to replace the variable parameters such as $region and $account with your actual parameters. You can also use the * wildcard in the path. For related operation examples, see Console Example.

Note：

CBS API operations not listed in the table do not support resource-level permission. You can still authorize a user to perform these operations, but you must specify * as the resource element in the policy statement.

CBS APIs