diff --git a/frontend/build/paas-server.js b/frontend/build/paas-server.js
index 28eb1cc8c..cdf01c7d2 100644
--- a/frontend/build/paas-server.js
+++ b/frontend/build/paas-server.js
@@ -59,7 +59,8 @@ const GLOBAL_VAR = {
     CSRF_COOKIE_NAME: process.env.CSRF_COOKIE_NAME || '',
     SESSION_COOKIE_DOMAIN: process.env.SESSION_COOKIE_DOMAIN || '',
     BK_ITSM_APP_URL: process.env.BK_ITSM_APP_URL || '',
-    ENABLE_MODEL_BUILD: process.env.ENABLE_MODEL_BUILD || ''
+    ENABLE_MODEL_BUILD: process.env.ENABLE_MODEL_BUILD || '',
+    BK_COMPONENT_API_URL: process.env.BK_COMPONENT_API_URL || ''
 }
 
 // APA 重定向回首页，由首页Route响应处理
diff --git a/frontend/src/views/grading-admin/components/render-instance-table.vue b/frontend/src/views/grading-admin/components/render-instance-table.vue
index 06c7c5fd5..7fcc0252f 100644
--- a/frontend/src/views/grading-admin/components/render-instance-table.vue
+++ b/frontend/src/views/grading-admin/components/render-instance-table.vue
@@ -460,7 +460,8 @@
                 window.changeDialog = true
                 const conditionData = this.$refs.renderResourceRef.handleGetValue()
                 const { isEmpty, data } = conditionData
-                if (isEmpty) {
+                if (isEmpty || data[0] === 'none') {
+                    this.isShowResourceInstanceSideslider = false
                     return
                 }
 
diff --git a/frontend/src/views/perm-apply/components/resource-instance-table.vue b/frontend/src/views/perm-apply/components/resource-instance-table.vue
index 87bf3c151..6c56fbdae 100644
--- a/frontend/src/views/perm-apply/components/resource-instance-table.vue
+++ b/frontend/src/views/perm-apply/components/resource-instance-table.vue
@@ -94,7 +94,7 @@
                     </template>
                     <template v-else>
                         <!-- 22 -->
-                        <template v-if="!row.isNew && !row.isExpired && !row.isChanged">
+                        <template v-if="!row.isNew && !row.isExpired">
                             <!-- 33 -->
                             <div class="mock-disabled-select">{{row.expired_display}}</div>
                         </template>
@@ -144,7 +144,7 @@
                                 <bk-button
                                     class="cancel-renewal-action"
                                     outline
-                                    v-if="!row.isNew && !row.isShowRenewal && !row.isChanged"
+                                    v-if="!row.isNew && !row.isShowRenewal"
                                     @click="handleCancelRenewal(row)">
                                     {{ $t(`m.permApply['取消续期']`) }}
                                 </bk-button>
@@ -344,7 +344,6 @@
             list: {
                 handler (value) {
                     this.tableList = value
-                    console.log('this.tableList', this.tableList)
                 },
                 immediate: true
             },
@@ -601,14 +600,20 @@
             },
 
             async handleMainActionSubmit (payload, relatedActions) {
-                const curPayload = _.cloneDeep(payload)
+                let curPayload = _.cloneDeep(payload)
                 this.sliderLoading = true
-                curPayload.forEach(item => {
-                    item.instances = item.instance || []
-                    item.attributes = item.attribute || []
-                    delete item.instance
-                    delete item.attribute
-                })
+                curPayload = curPayload.filter(e => {
+                    if ((e.instance && e.instance.length > 0) || (e.attribute && e.attribute.length > 0)) {
+                        e.instances = e.instance || []
+                        e.attributes = e.attribute || []
+                        delete e.instance
+                        delete e.attribute
+                        return true
+                    }
+                    return false
+                }
+                    
+                )
                 const curData = _.cloneDeep(this.tableList[this.curIndex])
                 curData.related_resource_types = [curData.related_resource_types[this.curResIndex]]
                 curData.related_resource_types[0].condition = curPayload
@@ -660,10 +665,11 @@
                 if (payload.length < 1) {
                     return
                 }
-        
+                
                 payload.forEach(item => {
                     const curIndex = this.tableList.findIndex(sub => sub.id === item.id)
                     if (curIndex > -1) {
+                        const curData = this.tableList[curIndex]
                         this.needEmitFlag = true
                         const inOriginalList = !!this.originalList.filter(
                             original => String(original.id) === String(item.id)
@@ -672,7 +678,7 @@
                         this.tableList.splice(
                             curIndex,
                             1,
-                            new Policy({ ...item, tag: item.tag || 'add', isShowRelatedText: true, inOriginalList }, '', false)
+                            new Policy({ ...item, tag: curData.tag === 'add' ? 'add' : item.tag, isShowRelatedText: true, inOriginalList }, '', false)
                         )
                     }
                 })
diff --git a/frontend/src/views/perm-template/components/render-content.vue b/frontend/src/views/perm-template/components/render-content.vue
index e0e921d83..05435d047 100644
--- a/frontend/src/views/perm-template/components/render-content.vue
+++ b/frontend/src/views/perm-template/components/render-content.vue
@@ -291,8 +291,8 @@
                     this.description = res.data.description
                     this.systemName = res.data.system.name
                     this.originalCustomTmplList = _.cloneDeep(res.data.actions)
-                    this.handleActionLinearData()
-                    this.fetchCommonActions(this.systemValue)
+                    await this.handleActionLinearData()
+                    await this.fetchCommonActions(this.systemValue)
                     this.initialTempName = this.tempName
                     this.initialDescription = this.description
                 } catch (e) {
@@ -570,14 +570,14 @@
                 }
             },
 
-            handleSysSelected (value, option) {
+            async handleSysSelected (value, option) {
                 window.changeDialog = true
                 this.commonActions = []
                 this.linearAction = []
                 this.curSelectActions = []
                 this.requestQueue = ['actions', 'commonActions']
-                this.fetchActions(value)
-                this.fetchCommonActions(value)
+                await this.fetchActions(value)
+                await this.fetchCommonActions(value)
             },
 
             handleSelect (payload) {
diff --git a/release.md b/release.md
index 034dbf4a3..c15832ccc 100644
--- a/release.md
+++ b/release.md
@@ -1,3 +1,16 @@
+# V1.5.4
+
+### 功能优化
+* 自定义权限申请支持实例审批人
+* 跳转申请不合并用户的已有权限
+* 授权api返回策略的实例数量
+
+### 缺陷修复
+* 修复企业微信邮件中续期邮件链接显示问题
+* 我的权限用户组权限查看态提示删除bug 
+* 业务跳转权限中心申请权限，申请期限不能修改
+* 修复通用操作显示问题
+
 # V1.5.3
 
 ### 缺陷修复
diff --git a/saas/VERSION b/saas/VERSION
index 8af85beb5..94fe62c27 100644
--- a/saas/VERSION
+++ b/saas/VERSION
@@ -1 +1 @@
-1.5.3
+1.5.4
diff --git a/saas/backend/api/authorization/mixins.py b/saas/backend/api/authorization/mixins.py
index 5ed6fd439..dbc2b2ef8 100644
--- a/saas/backend/api/authorization/mixins.py
+++ b/saas/backend/api/authorization/mixins.py
@@ -12,12 +12,13 @@
 from typing import List
 
 from rest_framework import exceptions
+from rest_framework.response import Response
 
 from backend.biz.org_sync.syncer import Syncer
 from backend.biz.policy import PolicyBean, PolicyBeanList, PolicyOperationBiz, PolicyQueryBiz
 from backend.biz.role import RoleAuthorizationScopeChecker, RoleBiz
 from backend.common.error_codes import APIException, error_codes
-from backend.service.constants import SubjectType
+from backend.service.constants import ADMIN_USER, SubjectType
 from backend.service.models import Subject
 
 from .constants import AuthorizationAPIEnum, OperateEnum
@@ -59,6 +60,11 @@ def grant_or_revoke(self, operate: OperateEnum, subject: Subject, policy_list: P
         """授权或回收权限"""
         system_id = policy_list.system_id
 
+        # 对于授权Admin，自动忽略
+        if subject.type == SubjectType.USER.value and subject.id.lower() == ADMIN_USER:
+            # 原样返回，PolicyID=0，默认没有执行实际授权
+            return policy_list.policies
+
         # 检测被授权的用户是否存在，不存在则尝试同步
         if subject.type == SubjectType.USER.value:
             self._check_or_sync_user(subject.id)
@@ -104,3 +110,22 @@ def _check_scope(self, subject: Subject, policy_list: PolicyBeanList):
             # 临时方案：校验不通过，则修改分级管理员的权限范围，使其通过
             need_added_policies = scope_checker.list_not_match_policy(system_id, policy_list.policies)
             self.role_biz.inc_update_auth_scope(role.id, system_id, need_added_policies)
+
+    def policy_response(self, policy: PolicyBean):
+        """所有返回单一策略的接口都统一返回的结构"""
+        return Response(
+            {"policy_id": policy.policy_id, "statistics": {"instance_count": policy.count_all_type_instance()}}
+        )
+
+    def batch_policy_response(self, policies: List[PolicyBean]):
+        """所有返回批量策略的接口都统一返回的结构"""
+        return Response(
+            [
+                {
+                    "action": {"id": p.action_id},
+                    "policy_id": p.policy_id,
+                    "statistics": {"instance_count": p.count_all_type_instance()},
+                }
+                for p in policies
+            ]
+        )
diff --git a/saas/backend/api/authorization/views/resource.py b/saas/backend/api/authorization/views/resource.py
index bc6598b85..849e4d479 100644
--- a/saas/backend/api/authorization/views/resource.py
+++ b/saas/backend/api/authorization/views/resource.py
@@ -10,7 +10,6 @@
 """
 from drf_yasg.utils import swagger_auto_schema
 from rest_framework import serializers, status
-from rest_framework.response import Response
 from rest_framework.views import APIView
 
 from backend.api.authentication import ESBAuthentication
@@ -69,7 +68,7 @@ def post(self, request, *args, **kwargs):
 
         audit_context_setter(operate=operate, subject=subject, system_id=system_id, policies=policies)
 
-        return Response({"policy_id": policies[0].policy_id})
+        return self.policy_response(policies[0])
 
 
 class AuthPathView(AuthViewMixin, ExceptionHandlerMixin, APIView):
@@ -114,7 +113,7 @@ def post(self, request, *args, **kwargs):
 
         audit_context_setter(operate=operate, subject=subject, system_id=system_id, policies=policies)
 
-        return Response({"policy_id": policies[0].policy_id})
+        return self.policy_response(policies[0])
 
 
 class AuthBatchInstanceView(AuthViewMixin, ExceptionHandlerMixin, APIView):
@@ -159,7 +158,7 @@ def post(self, request, *args, **kwargs):
 
         audit_context_setter(operate=operate, subject=subject, system_id=system_id, policies=policies)
 
-        return Response([{"action": {"id": p.action_id}, "policy_id": p.policy_id} for p in policies])
+        return self.batch_policy_response(policies)
 
 
 class AuthBatchPathView(AuthViewMixin, ExceptionHandlerMixin, APIView):
@@ -204,4 +203,4 @@ def post(self, request, *args, **kwargs):
 
         audit_context_setter(operate=operate, subject=subject, system_id=system_id, policies=policies)
 
-        return Response([{"action": {"id": p.action_id}, "policy_id": p.policy_id} for p in policies])
+        return self.batch_policy_response(policies)
diff --git a/saas/backend/api/authorization/views/resource_creator_action.py b/saas/backend/api/authorization/views/resource_creator_action.py
index 08246b04a..0721e9c09 100644
--- a/saas/backend/api/authorization/views/resource_creator_action.py
+++ b/saas/backend/api/authorization/views/resource_creator_action.py
@@ -10,7 +10,6 @@
 """
 from drf_yasg.utils import swagger_auto_schema
 from rest_framework import serializers, status
-from rest_framework.response import Response
 from rest_framework.views import APIView
 
 from backend.api.authentication import ESBAuthentication
@@ -78,7 +77,7 @@ def post(self, request, *args, **kwargs):
 
         audit_context_setter(operate=OperateEnum.GRANT.value, subject=subject, system_id=system_id, policies=policies)
 
-        return Response([{"action": {"id": p.action_id}, "policy_id": p.policy_id} for p in policies])
+        return self.batch_policy_response(policies)
 
 
 class BatchResourceCreatorActionView(AuthViewMixin, ExceptionHandlerMixin, APIView):
@@ -130,7 +129,7 @@ def post(self, request, *args, **kwargs):
 
         audit_context_setter(operate=OperateEnum.GRANT.value, subject=subject, system_id=system_id, policies=policies)
 
-        return Response([{"action": {"id": p.action_id}, "policy_id": p.policy_id} for p in policies])
+        return self.batch_policy_response(policies)
 
 
 class ResourceCreatorActionAttributeView(AuthViewMixin, ExceptionHandlerMixin, APIView):
@@ -182,4 +181,4 @@ def post(self, request, *args, **kwargs):
 
         audit_context_setter(operate=OperateEnum.GRANT.value, subject=subject, system_id=system_id, policies=policies)
 
-        return Response([{"action": {"id": p.action_id}, "policy_id": p.policy_id} for p in policies])
+        return self.batch_policy_response(policies)
diff --git a/saas/backend/apps/policy/views.py b/saas/backend/apps/policy/views.py
index f10485010..eb024068e 100644
--- a/saas/backend/apps/policy/views.py
+++ b/saas/backend/apps/policy/views.py
@@ -70,25 +70,20 @@ def list(self, request, *args, **kwargs):
         system_id = slz.validated_data["system_id"]
         cache_id = slz.validated_data["cache_id"]
 
-        subject = SvcSubject(type=SubjectType.USER.value, id=request.user.username)
-
-        policies = self.policy_query_biz.list_by_subject(system_id, subject)
-
         if cache_id != "":
             cached_policy_list = self.application_policy_list_cache.get(cache_id)
             if cached_policy_list.system_id != system_id:
                 raise error_codes.INVALID_ARGS.format(_("请求的system与缓存策略数据的system不一致"))
 
-            # 合并申请数据
-            policy_list = PolicyTagBeanList(system_id, parse_obj_as(List[PolicyTagBean], policies))
             apply_policy_list = PolicyTagBeanList(
                 system_id, parse_obj_as(List[PolicyTagBean], cached_policy_list.policies)
             )
             apply_policy_list.set_tag(PolicyTag.ADD.value)
-            policy_list.merge(apply_policy_list)
 
-            return Response([p.dict() for p in policy_list.policies])
+            return Response([p.dict() for p in apply_policy_list.policies])
 
+        subject = SvcSubject(type=SubjectType.USER.value, id=request.user.username)
+        policies = self.policy_query_biz.list_by_subject(system_id, subject)
         return Response([p.dict() for p in policies])
 
     @swagger_auto_schema(
@@ -239,6 +234,17 @@ def create(self, request, *args, **kwargs):
                 system_id, parse_obj_as(List[PolicyTagBean], add_policy_list.policies)
             )
             tag_add_policy_list.set_tag(PolicyTag.ADD.value)  # 对于新增的部分打tag, 方便前端处理
+
+            # 对已有策略中会增加部分实例的策略打update标签
+            for p in target_policy_list.policies:
+                add_policy = add_policy_list.get(p.action_id)
+                if (
+                    add_policy
+                    and not p.has_related_resource_types(add_policy.related_resource_types)
+                    and p.tag != PolicyTag.ADD.value
+                ):
+                    p.tag = PolicyTag.UPDATE.value
+
             target_policy_list.add(tag_add_policy_list)  # 合并
 
         target_policy_list.fill_empty_fields()
diff --git a/saas/backend/biz/application.py b/saas/backend/biz/application.py
index 92aff57cd..0a9caa49f 100644
--- a/saas/backend/biz/application.py
+++ b/saas/backend/biz/application.py
@@ -11,7 +11,7 @@
 import logging
 from collections import defaultdict
 from itertools import groupby
-from typing import Any, Dict, List, Optional
+from typing import Any, Dict, List, Optional, Tuple
 
 from django.db import transaction
 from django.utils.translation import gettext as _
@@ -54,6 +54,7 @@
 from backend.service.system import SystemService
 from backend.util.cache import region
 
+from .application_process import InstanceAproverHandler, PolicyProcess, PolicyProcessHandler
 from .group import GroupBiz, GroupMemberExpiredAtBean
 from .policy import PolicyBean, PolicyBeanList, PolicyOperationBiz, PolicyQueryBiz
 from .role import RoleBiz, RoleInfo, RoleInfoBean
@@ -247,6 +248,7 @@ def _get_approval_process_with_node_processor(
                 processors = self.approval_processor_biz.get_grade_manager_members_by_group_id(
                     group_id=kwargs["group_id"]
                 )
+            # NOTE: 由于资源实例审批人节点的逻辑涉及到复杂的拆分, 合并逻辑, 不在这里处理
 
             node_with_processor.processors = processors
             nodes_with_processor.append(node_with_processor)
@@ -300,27 +302,33 @@ def create_for_policy(
         action_ids = [p.action_id for p in policy_list.policies]
         action_processes = self.approval_process_svc.list_action_process(system_id=system_id, action_ids=action_ids)
 
-        # 4. 实例化每个流程
-        action_process_dict = {}
+        # 4. 生成policy - process对象列表
+        policy_process_list = []
         for action_process in action_processes:
             process = self._get_approval_process_with_node_processor(action_process.process, system_id=system_id)
-            action_process_dict[action_process.action_id] = process
+            policy = policy_list.get(action_process.action_id)
 
-        # 5. 合并单据
-        merge_process_dict = self._merge_application_by_approval_process(action_process_dict)
+            policy_process_list.append(PolicyProcess(policy=policy, process=process))
 
-        # 6. 根据合并的单据，组装出调用Service层创建单据所需数据
+        # 5. 通过管道填充可能的资源实例审批人/分级管理员审批节点的审批人
+        pipeline: List[PolicyProcessHandler] = [InstanceAproverHandler()]  # NOTE: 未来需要实现分级管理员审批handler
+        for pipe in pipeline:
+            policy_process_list = pipe.handle(policy_process_list)
+
+        # 6. 依据审批流程合并策略
+        policy_list_process = self._merge_policies_by_approval_process(system_id, policy_process_list)
+
+        # 7. 根据合并的单据，组装出调用Service层创建单据所需数据
         new_data_list = []
-        for process, action_ids in merge_process_dict.items():
-            # 从申请数据里获取对应Actions要申请的策略
-            policies = [policy_list.get(action_id) for action_id in action_ids]
+        for policy_list, process in policy_list_process:
             # 组装申请数据
             application_data = GrantActionApplicationData(
                 type=application_type,
                 applicant_info=applicant_info,
                 reason=data.reason,
                 content=GrantActionApplicationContent(
-                    system=system_info, policies=parse_obj_as(List[ApplicationPolicyInfo], policies)
+                    system=system_info,
+                    policies=parse_obj_as(List[ApplicationPolicyInfo], policy_list.policies),
                 ),
             )
             new_data_list.append((application_data, process))
@@ -333,6 +341,26 @@ def create_for_policy(
 
         return applications
 
+    def _merge_policies_by_approval_process(
+        self, system_id, policy_process_list: List[PolicyProcess]
+    ) -> List[Tuple[PolicyBeanList, ApprovalProcessWithNodeProcessor]]:
+        """聚合审批流程相同的策略"""
+        # 聚合相同流程所有的polices
+        merge_process_dict = defaultdict(list)
+        for policy_process in policy_process_list:
+            merge_process_dict[policy_process.process].append(policy_process.policy)
+
+        policy_list_process = []
+        # 流程相同的策略中, 合并action_id一样的策略
+        for _process, _policies in merge_process_dict.items():
+            policy_list = PolicyBeanList(system_id, [])
+            for p in _policies:
+                policy_list.add(PolicyBeanList(system_id, [p]))
+
+            policy_list_process.append((policy_list, _process))
+
+        return policy_list_process
+
     def create_for_renew_policy(
         self, policy_infos: List[ApplicationRenewPolicyInfoBean], applicant: str, reason: str
     ) -> List[Application]:
diff --git a/saas/backend/biz/application_process.py b/saas/backend/biz/application_process.py
new file mode 100644
index 000000000..7cfba44bf
--- /dev/null
+++ b/saas/backend/biz/application_process.py
@@ -0,0 +1,180 @@
+# -*- coding: utf-8 -*-
+"""
+TencentBlueKing is pleased to support the open source community by making 蓝鲸智云-权限中心(BlueKing-IAM) available.
+Copyright (C) 2017-2021 THL A29 Limited, a Tencent company. All rights reserved.
+Licensed under the MIT License (the "License"); you may not use this file except in compliance with the License.
+You may obtain a copy of the License at http://opensource.org/licenses/MIT
+Unless required by applicable law or agreed to in writing, software distributed under the License is distributed on
+an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the
+specific language governing permissions and limitations under the License.
+"""
+from abc import ABC, abstractmethod
+from copy import deepcopy
+from typing import List
+
+from pydantic import BaseModel
+
+from backend.biz.resource import ResourceBiz, ResourceNodeAttributeDictBean, ResourceNodeBean
+from backend.service.constants import ANY_ID
+from backend.service.models.approval import ApprovalProcessWithNodeProcessor
+
+from .policy import ConditionBean, InstanceBean, PolicyBean, PolicyEmptyException, RelatedResourceBean
+
+
+class PolicyProcess(BaseModel):
+    """
+    策略关联的审批流程对象
+
+    用于自定义申请
+    """
+
+    policy: PolicyBean
+    process: ApprovalProcessWithNodeProcessor
+
+
+class PolicyProcessHandler(ABC):
+    """
+    处理policy - process的管道
+    """
+
+    @abstractmethod
+    def handle(self, policy_process_list: List[PolicyProcess]) -> List[PolicyProcess]:
+        pass
+
+
+class InstanceAproverHandler(PolicyProcessHandler):
+    """
+    实例审批人处理管道
+    """
+
+    resource_biz = ResourceBiz()
+
+    def handle(self, policy_process_list: List[PolicyProcess]) -> List[PolicyProcess]:
+        # 返回的结果
+        policy_process_results = []
+        # 需要处理的有实例审批人节点的policy_process
+        policy_process_with_approver_node = []
+        # 需要查询实例审批人的资源实例
+        resource_nodes = set()
+
+        for policy_process in policy_process_list:
+            # 没有实例审批人节点不需要处理
+            if not policy_process.process.has_instance_approver_node():
+                policy_process_results.append(policy_process)
+                continue
+
+            # 保存需要处理实例审批人的policy_process
+            policy_process_with_approver_node.append(policy_process)
+            # 筛选出需要查询实例审批人的资源实例
+            for resource_node in self._list_approver_resource_node_by_policy(policy_process.policy):
+                resource_nodes.add(resource_node)
+
+        # 没有需要查询资源审批人的实例节点
+        if not resource_nodes:
+            return policy_process_list
+
+        # 查询资源实例的审批人
+        resource_approver_dict = self.resource_biz.fetch_resource_approver(list(resource_nodes))
+        if resource_approver_dict.is_empty():
+            return policy_process_list
+
+        # 依据实例审批人信息, 拆分policy, 添加到结果中
+        for policy_process in policy_process_with_approver_node:
+            policy_process_results.extend(
+                self._split_policy_process_by_resource_approver_dict(policy_process, resource_approver_dict)
+            )
+
+        return policy_process_results
+
+    def _split_policy_process_by_resource_approver_dict(
+        self, policy_process: PolicyProcess, resource_approver_dict: ResourceNodeAttributeDictBean
+    ) -> List[PolicyProcess]:
+        """
+        通过实例审批人信息, 分离policy_process为独立的实例policy
+        """
+        if len(policy_process.policy.related_resource_types) != 1:
+            return [policy_process]
+
+        policy = policy_process.policy
+        process = policy_process.process
+        rrt = policy.related_resource_types[0]
+
+        policy_process_list: List[PolicyProcess] = []
+        for condition in rrt.condition:
+            # 忽略有属性的condition
+            if not condition.has_no_attributes():
+                continue
+
+            # 遍历所有的实例路径, 筛选出有查询有实例审批人的实例
+            for instance in condition.instances:
+                for path in instance.path:
+                    last_node = path[-1]
+                    if last_node.id == ANY_ID:
+                        if len(path) < 2:
+                            continue
+                        last_node = path[-2]
+
+                    resource_node = ResourceNodeBean.parse_obj(last_node)
+                    if not resource_approver_dict.get_attribute(resource_node):
+                        continue
+
+                    # 复制出单实例的policy
+                    copied_policy = self._copy_policy_by_instance_path(policy, rrt, instance, path)
+
+                    # 复制出新的审批流程, 并填充实例审批人
+                    copied_process = deepcopy(process)
+                    copied_process.set_instance_approver(resource_approver_dict.get_attribute(resource_node))
+
+                    policy_process_list.append(PolicyProcess(policy=copied_policy, process=copied_process))
+
+        # 如果没有拆分处理部分实例, 直接返回原始的policy_process
+        if not policy_process_list:
+            return [policy_process]
+
+        # 把原始的策略剔除拆分的部分
+        for part_policy_process in policy_process_list:
+            try:
+                policy_process.policy.remove_related_resource_types(part_policy_process.policy.related_resource_types)
+            except PolicyEmptyException:
+                # 如果原始的策略全部删完了, 直接返回拆分的部分
+                return policy_process_list
+
+        # 原始拆分后剩余的部分填回来
+        policy_process_list.append(policy_process)
+        return policy_process_list
+
+    def _copy_policy_by_instance_path(self, policy, rrt, instance, path):
+        # 复制出单实例的policy
+        copied_policy = PolicyBean(
+            related_resource_types=[
+                RelatedResourceBean(
+                    condition=[
+                        ConditionBean(
+                            attributes=[],
+                            instances=[InstanceBean(path=[path], **instance.dict(exclude={"path"}))],
+                        )
+                    ],
+                    **rrt.dict(exclude={"condition"}),
+                )
+            ],
+            **policy.dict(exclude={"related_resource_types"}),
+        )
+        return copied_policy
+
+    def _list_approver_resource_node_by_policy(self, policy: PolicyBean) -> List[ResourceNodeBean]:
+        """列出policies中所有资源的节点"""
+        # 需要查询资源实例审批人的节点集合
+        resource_node_set = set()
+        # 只支持关联1个资源类型的操作查询资源审批人
+        if len(policy.related_resource_types) != 1:
+            return []
+
+        rrt = policy.related_resource_types[0]
+        for path in rrt.iter_path_list(ignore_attribute=True):
+            last_node = path.nodes[-1]
+            if last_node.id == ANY_ID:
+                if len(path.nodes) < 2:
+                    continue
+                last_node = path.nodes[-2]
+            resource_node_set.add(ResourceNodeBean.parse_obj(last_node))
+        return list(resource_node_set)
diff --git a/saas/backend/biz/policy.py b/saas/backend/biz/policy.py
index aba812cad..173322893 100644
--- a/saas/backend/biz/policy.py
+++ b/saas/backend/biz/policy.py
@@ -14,6 +14,7 @@
 from itertools import chain, groupby
 from typing import Any, Dict, Iterable, List, Optional, Set, Tuple
 
+from django.conf import settings
 from django.core.cache import cache
 from django.utils.decorators import method_decorator
 from django.utils.translation import gettext as _
@@ -393,7 +394,11 @@ def remove_by_ids(self, ids: List[str]):
         """
         移除指定id的condition
         """
+        if self.is_any:
+            return
+
         self.conditions = [condition for condition in self.conditions if condition.id not in ids]
+        self.is_empty = len(self.conditions) == 0
 
 
 class RelatedResourceBean(RelatedResource):
@@ -618,17 +623,17 @@ def set_related_resource_type(self, resource_type: RelatedResourceBean):
                 related_resource_type.condition = resource_type.condition
                 break
 
-    def add_related_resource_types(self, related_resource: List[RelatedResourceBean]) -> "PolicyBean":
+    def add_related_resource_types(self, related_resources: List[RelatedResourceBean]) -> "PolicyBean":
         """
         合并
         """
         resource_type_list = RelatedResourceBeanList(self.related_resource_types)
-        resource_type_list.add(RelatedResourceBeanList(related_resource))
+        resource_type_list.add(RelatedResourceBeanList(related_resources))
 
         self.related_resource_types = resource_type_list.related_resource_types
         return self
 
-    def has_related_resource_types(self, related_resource: List[RelatedResourceBean]) -> bool:
+    def has_related_resource_types(self, related_resources: List[RelatedResourceBean]) -> bool:
         """
         包含
 
@@ -637,12 +642,12 @@ def has_related_resource_types(self, related_resource: List[RelatedResourceBean]
         if self.is_unrelated():
             return True
 
-        resource_type_list = RelatedResourceBeanList(deepcopy(related_resource))
+        resource_type_list = RelatedResourceBeanList(deepcopy(related_resources))
         resource_type_list.sub(RelatedResourceBeanList(self.related_resource_types))
 
         return resource_type_list.is_empty
 
-    def remove_related_resource_types(self, related_resource: List[RelatedResourceBean]) -> "PolicyBean":
+    def remove_related_resource_types(self, related_resources: List[RelatedResourceBean]) -> "PolicyBean":
         """
         裁剪
         """
@@ -650,7 +655,7 @@ def remove_related_resource_types(self, related_resource: List[RelatedResourceBe
             raise PolicyEmptyException
 
         resource_type_list = RelatedResourceBeanList(self.related_resource_types)
-        resource_type_list.sub(RelatedResourceBeanList(related_resource))
+        resource_type_list.sub(RelatedResourceBeanList(related_resources))
 
         if resource_type_list.is_empty:
             raise PolicyEmptyException
@@ -666,6 +671,12 @@ def list_path_node(self) -> List[PathNodeBean]:
                 nodes.extend(path_list.nodes)
         return nodes
 
+    def count_all_type_instance(self) -> int:
+        """
+        这里是统计所有实例总数，Action关联多种资源类型是一起计算的
+        """
+        return sum([rrt.count_instance() for rrt in self.related_resource_types])
+
 
 class PolicyBeanList:
     action_svc = ActionService()
@@ -770,7 +781,7 @@ def split_to_update_and_delete_for_revoke(
         self, delete_policy_list: "PolicyBeanList"
     ) -> Tuple["PolicyBeanList", "PolicyBeanList"]:
         """
-        回收权限时, 分离出需要更新的策略与删除的策略ID
+        回收权限时, 分离出需要更新的策略与删除的策略
 
         self: 原来已有的policy list
         delete_policy_list: 需要回收的policy list
@@ -844,7 +855,7 @@ def check_instance_selection(self, ignore_path=False):
                     continue
                 rrt.check_selection(resource_type.instance_selections, ignore_path)
 
-    def list_path_node(self) -> List[PathNodeBean]:
+    def _list_path_node(self) -> List[PathNodeBean]:
         """
         查询策略包含的资源范围 - 所有路径上的节点，包括叶子节点
         """
@@ -859,13 +870,13 @@ def check_resource_name(self):
         特别注意：该函数只能用于校验新增的策略，不能校验老策略，因为老的资源实例可能被删除或重命名了
         """
         # 获取策略里的资源的所有节点
-        path_nodes = self.list_path_node()
+        path_nodes = self._list_path_node()
         # 查询资源实例的实际名称
         resource_name_dict = self.resource_biz.fetch_resource_name(parse_obj_as(List[ResourceNodeBean], path_nodes))
 
         # 校验从接入系统查询的资源实例名称与提交的数据里的名称是否一致
         for node in path_nodes:
-            real_name = resource_name_dict.get_name(node.system_id, node.type, node.id)
+            real_name = resource_name_dict.get_attribute(ResourceNodeBean.parse_obj(node))
             # 任意需要特殊判断：只要包含无限制即可
             if node.id == ANY_ID and real_name in node.name:
                 continue
@@ -877,6 +888,19 @@ def check_resource_name(self):
                     )
                 )
 
+    def check_instance_count_limit(self):
+        """
+        检查策略里的实例数量，避免大规模实例超限
+        """
+        for p in self.policies:
+            for rrt in p.related_resource_types:
+                if rrt.count_instance() > settings.SINGLE_POLICY_MAX_INSTANCES_LIMIT:
+                    raise error_codes.VALIDATE_ERROR.format(
+                        "操作[{}]关联的[{}]的实例数已达上限{}个，请改用范围或者属性授权。".format(
+                            p.action_id, rrt.type, settings.SINGLE_POLICY_MAX_INSTANCES_LIMIT
+                        )
+                    )
+
 
 class SystemCounterBean(SystemCounter):
     name: str = ""
@@ -1088,6 +1112,9 @@ def update(self, system_id: str, subject: Subject, policies: List[PolicyBean]) -
             policy.expired_at = old_policy.expired_at
             policy.policy_id = old_policy.policy_id
 
+        # 检查策略里的实例数量，避免大规模实例超限
+        update_policy_list.check_instance_count_limit()
+
         self.svc.alter(system_id, subject, update_policies=update_policy_list.to_svc_policies())
 
         return update_policy_list.policies
@@ -1103,6 +1130,11 @@ def alter(self, system_id: str, subject: Subject, policies: List[PolicyBean]):
         create_policy_list, update_policy_list = old_policy_list.split_to_creation_and_update_for_grant(
             new_policy_list
         )
+
+        # 检查策略里的实例数量，避免大规模实例超限
+        create_policy_list.check_instance_count_limit()
+        update_policy_list.check_instance_count_limit()
+
         self.svc.alter(
             system_id,
             subject,
diff --git a/saas/backend/biz/policy_tag.py b/saas/backend/biz/policy_tag.py
index a31a19cb1..acaac21c5 100644
--- a/saas/backend/biz/policy_tag.py
+++ b/saas/backend/biz/policy_tag.py
@@ -23,7 +23,7 @@
 from backend.service.models import Attribute, Value
 from backend.service.utils.translate import translate_path
 
-from .constants import ConditionTag, PolicyTag
+from .constants import ConditionTag
 
 
 class AbstractTagBean(ABC):
@@ -241,23 +241,6 @@ def set_tag(self, tag: str):
     def get(self, action_id: str) -> Optional[PolicyTagBean]:
         return self._policy_dict.get(action_id, None)
 
-    def merge(self, new_policy_list: "PolicyTagBeanList") -> "PolicyTagBeanList":  # type: ignore
-        """
-        合并权限
-
-        仅用于合并无权限跳转权限, 需要打tag
-        """
-        for p in new_policy_list.policies:
-            old_policy = self.get(p.action_id)
-            if not old_policy:
-                self.policies.append(p)
-                self._policy_dict[p.action_id] = p
-                continue
-
-            old_policy.tag = PolicyTag.UPDATE.value
-            old_policy.add_related_resource_types(p.related_resource_types)
-        return self
-
 
 class ConditionTagBiz:
     def compare_and_tag(
diff --git a/saas/backend/biz/resource.py b/saas/backend/biz/resource.py
index 08794a840..2d87c8f96 100644
--- a/saas/backend/biz/resource.py
+++ b/saas/backend/biz/resource.py
@@ -73,15 +73,18 @@ def __eq__(self, other):
         return self.system_id == other.system_id and self.type == other.type and self.id == other.id
 
 
-class ResourceNodeNameDictBean(BaseModel):
-    data: Dict[ResourceNodeBean, str]
+class ResourceNodeAttributeDictBean(BaseModel):
+    data: Dict[ResourceNodeBean, Any]
 
     def has(self, system_id: str, _type: str, _id: str):
         return ResourceNodeBean(system_id=system_id, type=_type, id=_id) in self.data
 
-    def get_name(self, system_id: str, _type: str, _id: str):
-        """获取资源实例名称"""
-        return self.data.get(ResourceNodeBean(system_id=system_id, type=_type, id=_id), None)
+    def get_attribute(self, node: ResourceNodeBean):
+        """获取资源属性"""
+        return self.data.get(node, None)
+
+    def is_empty(self):
+        return len(self.data) == 0
 
 
 class ResourceBiz:
@@ -171,7 +174,7 @@ def fetch_auth_attributes(
 
     def fetch_resource_name(
         self, resource_node_beans: List[ResourceNodeBean], raise_not_found_exception=False
-    ) -> ResourceNodeNameDictBean:
+    ) -> ResourceNodeAttributeDictBean:
         """获取资源实例名称, 默认查询不到的资源不会有异常"""
         resource_name_dict: Dict[ResourceNodeBean, str] = {}
 
@@ -196,7 +199,7 @@ def fetch_resource_name(
                 resource_node = ResourceNodeBean(system_id=system_id, type=resource_type_id, id=r.id)
                 resource_name_dict[resource_node] = r.display_name
 
-        name_dict_bean = ResourceNodeNameDictBean(data=resource_name_dict)
+        name_dict_bean = ResourceNodeAttributeDictBean(data=resource_name_dict)
 
         # 默认对于查询不到的资源实例Name，需要抛异常
         if raise_not_found_exception:
@@ -209,3 +212,43 @@ def fetch_resource_name(
                     )
 
         return name_dict_bean
+
+    def fetch_resource_approver(
+        self, resource_node_beans: List[ResourceNodeBean], raise_not_found_exception=False
+    ) -> ResourceNodeAttributeDictBean:
+        """获取资源实例审批人, 默认查询不到的资源不会有异常"""
+        resource_attribute_dict: Dict[ResourceNodeBean, Any] = {}
+
+        # 按system_id、resource_type_id 分组批量查询
+        resource_ids_dict = defaultdict(list)
+        for r in resource_node_beans:
+            # 任意实例不需要查询
+            if r.id == "*":
+                continue
+            # 需要查询的实例，添加到对应资源类型分组里
+            resource_ids_dict[(r.system_id, r.type)].append(r.id)
+
+        # 查询
+        for k, ids in resource_ids_dict.items():
+            system_id, resource_type_id = k
+            # 接口查询
+            rp = self.new_resource_provider(system_id, resource_type_id)
+            resource_approver_attrubutes = rp.fetch_instance_approver(ids)
+            # 遍历返回的数据
+            for r in resource_approver_attrubutes:
+                resource_node = ResourceNodeBean(system_id=system_id, type=resource_type_id, id=r.id)
+                resource_attribute_dict[resource_node] = r.approver
+
+        attribute_dict_bean = ResourceNodeAttributeDictBean(data=resource_attribute_dict)
+
+        # 默认对于查询不到的资源实例Name，需要抛异常
+        if raise_not_found_exception:
+            # 校验每个资源是否都能查询到对应的资源Name
+            for r in resource_node_beans:
+                if not attribute_dict_bean.has(r.system_id, r.type, r.id):
+                    raise error_codes.INVALID_ARGS.format(
+                        "The resource(system_id:{}, type:{}, id:{}) _bk_iam_approver_ cannot be "
+                        "queried through the API - fetch_instance_info".format(r.system_id, r.type, r.id)
+                    )
+
+        return attribute_dict_bean
diff --git a/saas/backend/component/itsm.py b/saas/backend/component/itsm.py
index d9d99e5e6..3b0949dce 100644
--- a/saas/backend/component/itsm.py
+++ b/saas/backend/component/itsm.py
@@ -40,6 +40,7 @@ def create_ticket(
     organization_names: str,
     reason: str,
     content: Dict,
+    **kwargs,
 ) -> Dict:
     """获取审批流程，并根据单据创建者判断是否实例化审批节点"""
     url_path = "/api/c/compapi/v2/itsm/create_ticket/"
@@ -55,6 +56,9 @@ def create_ticket(
             {"key": "content", "value": content},
         ],
     }
+    # 填充额外的fields
+    for k, v in kwargs.items():
+        data["fields"].append({"key": k, "value": v})  # type: ignore
     return _call_esb_api(http_post, url_path, data=data)
 
 
diff --git a/saas/backend/plugins/application_ticket/itsm/itsm.py b/saas/backend/plugins/application_ticket/itsm/itsm.py
index a14025b03..d69c05ea5 100644
--- a/saas/backend/plugins/application_ticket/itsm/itsm.py
+++ b/saas/backend/plugins/application_ticket/itsm/itsm.py
@@ -77,8 +77,14 @@ def create_for_policy(
     ) -> str:
         """创建 - 申请或续期自定义权限单据"""
         params = self._generate_ticket_common_params(data, process, callback_url)
-        params["title"] = f"{data.content.system.name}权限申请"
+        params["title"] = f"申请{data.content.system.name}{len(data.content.policies)}个操作权限"
         params["content"] = {"schemes": FORM_SCHEMES, "form_data": [ActionTable.from_application(data.content).dict()]}
+
+        # 如果审批流程中包含资源审批人, 并且资源审批人不为空
+        # 增加 has_instance_approver 字段, 用于itsm审批流程走分支
+        if process.has_instance_approver_node():
+            params["has_instance_approver"] = int(process.has_instance_approver_node(judge_empty=True))
+
         ticket = itsm.create_ticket(**params)
         return ticket["sn"]
 
@@ -87,11 +93,14 @@ def create_for_group(
     ) -> str:
         """创建 - 申请加入或续期用户组单据"""
         params = self._generate_ticket_common_params(data, process, callback_url)
-        params["title"] = (
+
+        title_prefix = (
             f"申请加入 {len(data.content.groups)} 个用户组"
             if data.type == ApplicationTypeEnum.JOIN_GROUP
             else f"申请续期 {len(data.content.groups)} 个用户组"
         )
+        params["title"] = "{}：{}".format(title_prefix, "、".join([one.name for one in data.content.groups]))
+
         params["content"] = {"schemes": FORM_SCHEMES, "form_data": [GroupTable.from_application(data.content).dict()]}
         ticket = itsm.create_ticket(**params)
         return ticket["sn"]
@@ -101,7 +110,10 @@ def create_for_grade_manager(
     ) -> str:
         """创建 - 创建或更新分级管理员"""
         params = self._generate_ticket_common_params(data, process, callback_url)
-        params["title"] = "申请创建分级管理员" if data.type == ApplicationTypeEnum.CREATE_RATING_MANAGER.value else "申请编辑分级管理员"
+
+        title_prefix = "申请创建分级管理员" if data.type == ApplicationTypeEnum.CREATE_RATING_MANAGER.value else "申请编辑分级管理员"
+        params["title"] = f"{title_prefix}：{data.content.name}"
+
         params["content"] = {
             "schemes": FORM_SCHEMES,
             "form_data": GradeManagerForm.from_application(data.content).form_data,
diff --git a/saas/backend/plugins/approval_process/itsm.py b/saas/backend/plugins/approval_process/itsm.py
index ecc346e98..911cb75f1 100644
--- a/saas/backend/plugins/approval_process/itsm.py
+++ b/saas/backend/plugins/approval_process/itsm.py
@@ -87,11 +87,11 @@ def get_process_nodes(self, process_id: int) -> List[ApprovalProcessNode]:
         nodes = itsm.get_process_nodes(process_id)
         for node in nodes:
             # 转换为IAM规定的结构所需要流程处理者来源和类型
-            source, _type = ProcessorSourceEnum.OTHER.value, node["processors"]
+            source, _type = ProcessorSourceEnum.OTHER.value, node["processors"]  # NOTE: other的节点iam无需处理
             if node["processors_type"] == "IAM":
                 source = ProcessorSourceEnum.IAM.value
                 # 对于来源于IAM，需要检查角色是否满足
-                if node["processors"] not in IAM_SUPPORT_PROCESSOR_TYPES:
+                if _type not in IAM_SUPPORT_PROCESSOR_TYPES:
                     raise error_codes.ITSM_PROCESSOR_NOT_SUPPORT.format(f"process_id: {process_id}, node:{node}")
 
             process_nodes.append(
diff --git a/saas/backend/service/constants.py b/saas/backend/service/constants.py
index c3381894a..e3df09ece 100644
--- a/saas/backend/service/constants.py
+++ b/saas/backend/service/constants.py
@@ -184,13 +184,31 @@ class ApplicationTypeEnum(ChoicesEnum, LowerStrEnum):
     )
 
 
+# IAM支持的审批流程节点类型
+class ProcessorNodeTypeEnum(LowerStrEnum):
+    SUPER_MANAGER = auto()
+    SYSTEM_MANAGER = auto()
+    RATING_MANAGER = auto()
+    INSTANCE_APPROVER = auto()
+
+
 # 每一种申请单据，对应的审批流程节点可以支持的ROLE
 APPLICATION_SUPPORT_PROCESSOR_ROLE_MAP = {
-    ApplicationTypeEnum.GRANT_ACTION.value: (RoleType.SUPER_MANAGER.value, RoleType.SYSTEM_MANAGER.value),
-    ApplicationTypeEnum.JOIN_GROUP.value: (RoleType.SUPER_MANAGER.value, RoleType.RATING_MANAGER.value),
-    ApplicationTypeEnum.JOIN_RATING_MANAGER.value: (RoleType.SUPER_MANAGER.value, RoleType.RATING_MANAGER.value),
-    ApplicationTypeEnum.CREATE_RATING_MANAGER.value: (RoleType.SUPER_MANAGER.value,),
-    ApplicationTypeEnum.UPDATE_RATING_MANAGER.value: (RoleType.SUPER_MANAGER.value,),
+    ApplicationTypeEnum.GRANT_ACTION.value: (
+        ProcessorNodeTypeEnum.SUPER_MANAGER.value,
+        ProcessorNodeTypeEnum.SYSTEM_MANAGER.value,
+        ProcessorNodeTypeEnum.INSTANCE_APPROVER.value,
+    ),
+    ApplicationTypeEnum.JOIN_GROUP.value: (
+        ProcessorNodeTypeEnum.SUPER_MANAGER.value,
+        ProcessorNodeTypeEnum.RATING_MANAGER.value,
+    ),
+    ApplicationTypeEnum.JOIN_RATING_MANAGER.value: (
+        ProcessorNodeTypeEnum.SUPER_MANAGER.value,
+        ProcessorNodeTypeEnum.RATING_MANAGER.value,
+    ),
+    ApplicationTypeEnum.CREATE_RATING_MANAGER.value: (ProcessorNodeTypeEnum.SUPER_MANAGER.value,),
+    ApplicationTypeEnum.UPDATE_RATING_MANAGER.value: (ProcessorNodeTypeEnum.SUPER_MANAGER.value,),
 }
 
 
@@ -203,9 +221,10 @@ class ProcessorSourceEnum(ChoicesEnum, StrEnum):
 
 # 对于IAM来源的处理者，IAM有固定支持的处理者类型
 IAM_SUPPORT_PROCESSOR_TYPES = [
-    RoleType.SUPER_MANAGER.value,
-    RoleType.SYSTEM_MANAGER.value,
-    RoleType.RATING_MANAGER.value,
+    ProcessorNodeTypeEnum.SUPER_MANAGER.value,
+    ProcessorNodeTypeEnum.SYSTEM_MANAGER.value,
+    ProcessorNodeTypeEnum.RATING_MANAGER.value,
+    ProcessorNodeTypeEnum.INSTANCE_APPROVER.value,
 ]
 
 
diff --git a/saas/backend/service/models/approval.py b/saas/backend/service/models/approval.py
index affdf46c0..ac9778881 100644
--- a/saas/backend/service/models/approval.py
+++ b/saas/backend/service/models/approval.py
@@ -12,7 +12,12 @@
 
 from pydantic import BaseModel
 
-from ..constants import APPLICATION_SUPPORT_PROCESSOR_ROLE_MAP, ApplicationTypeEnum, ProcessorSourceEnum
+from ..constants import (
+    APPLICATION_SUPPORT_PROCESSOR_ROLE_MAP,
+    ApplicationTypeEnum,
+    ProcessorNodeTypeEnum,
+    ProcessorSourceEnum,
+)
 
 
 class ApprovalProcess(BaseModel):
@@ -108,7 +113,7 @@ def __eq__(self, other):
         )
 
 
-class ApprovalProcessWithNodeProcessor(ApprovalProcess):
+class ApprovalProcessWithNodeProcessor(ApprovalProcessWithNode):
     """附带流程里的每个节点, 且每个节点都附带具体处理人"""
 
     nodes: List[ApprovalProcessNodeWithProcessor] = []
@@ -119,3 +124,23 @@ def __hash__(self):
 
     def __eq__(self, other):
         return self.id == other.id and self.nodes == other.nodes
+
+    def set_instance_approver(self, approver: List[str]):
+        for node in self.nodes:
+            if node.is_iam_source() and node.processor_type == ProcessorNodeTypeEnum.INSTANCE_APPROVER.value:
+                node.processors = approver
+
+    def has_instance_approver_node(self, judge_empty=False) -> bool:
+        """
+        是否包含资源审批人节点
+
+        judge_empty: 是否判断节点的审批人为空
+        """
+        for node in self.nodes:
+            if node.is_iam_source() and node.processor_type == ProcessorNodeTypeEnum.INSTANCE_APPROVER.value:
+                # 判断节点审批人是否为空
+                if judge_empty and len(node.processors) == 0:
+                    return False
+
+                return True
+        return False
diff --git a/saas/backend/service/models/resource.py b/saas/backend/service/models/resource.py
index ea543d8a8..890d43749 100644
--- a/saas/backend/service/models/resource.py
+++ b/saas/backend/service/models/resource.py
@@ -8,7 +8,7 @@
 an "AS IS" BASIS, WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied. See the License for the
 specific language governing permissions and limitations under the License.
 """
-from typing import Any, Dict
+from typing import Any, Dict, List
 
 from pydantic import BaseModel
 
@@ -44,3 +44,8 @@ class ResourceInstanceInfo(BaseModel):
     id: str
     # 由于查询某个资源的属性接口是动态传入要查询的属性，属性key是不固定的，属性值可能是list[str/bool/int]/str/bool/int
     attributes: Dict[str, Any]
+
+
+class ResourceApproverAttribute(BaseModel):
+    id: str
+    approver: List[str]
diff --git a/saas/backend/service/resource.py b/saas/backend/service/resource.py
index d54f8977b..f15085943 100644
--- a/saas/backend/service/resource.py
+++ b/saas/backend/service/resource.py
@@ -14,6 +14,7 @@
 from redis.exceptions import RedisError
 
 from backend.component import iam, resource_provider
+from backend.service.models.resource import ResourceApproverAttribute
 from backend.util.basic import chunked
 from backend.util.cache import redis_region, region
 
@@ -134,6 +135,7 @@ class ResourceProvider:
     """资源提供者"""
 
     name_attribute = "display_name"
+    approver_attribute = "_bk_iam_approver_"
 
     def __init__(self, system_id: str, resource_type_id: str):
         """初始化：认证信息、请求客户端"""
@@ -258,3 +260,21 @@ def fetch_instance_name(self, ids: List[str]) -> List[ResourceInstanceBaseInfo]:
         )
 
         return results
+
+    def fetch_instance_approver(self, ids: List[str]) -> List[ResourceApproverAttribute]:
+        """批量查询资源实例的实例审批人属性"""
+        instance_infos = self.fetch_instance_info(ids, [self.approver_attribute])
+
+        results = []
+        for one in instance_infos:
+            if self.approver_attribute not in one.attributes:
+                continue
+
+            # 兼容可能返回 list/string 的情况
+            approver = one.attributes[self.approver_attribute]
+            if isinstance(approver, list) and approver:
+                results.append(ResourceApproverAttribute(id=one.id, approver=approver))
+            elif isinstance(approver, str) and approver:
+                results.append(ResourceApproverAttribute(id=one.id, approver=[approver]))
+
+        return results
diff --git a/saas/backend/trans/open.py b/saas/backend/trans/open.py
index 95fae2556..03fd13b6e 100644
--- a/saas/backend/trans/open.py
+++ b/saas/backend/trans/open.py
@@ -86,7 +86,7 @@ def fill_instance_name(self):
         for path in self.paths:
             for node in path:
                 if node.name == "":
-                    node.name = name_provider.get_name(node.system_id, node.type, node.id)
+                    node.name = name_provider.get_attribute(ResourceNodeBean.parse_obj(node))
 
 
 class OpenPolicy(BaseModel):
diff --git a/saas/resources/version_log/V1.5.4_2021-09-29.md b/saas/resources/version_log/V1.5.4_2021-09-29.md
new file mode 100644
index 000000000..af01bac3b
--- /dev/null
+++ b/saas/resources/version_log/V1.5.4_2021-09-29.md
@@ -0,0 +1,12 @@
+# V1.5.4 版本更新日志
+
+### 功能优化
+* 自定义权限申请支持实例审批人
+* 跳转申请不合并用户的已有权限
+* 授权api返回策略的实例数量
+
+### 缺陷修复
+* 修复企业微信邮件中续期邮件链接显示问题
+* 我的权限用户组权限查看态提示删除bug 
+* 业务跳转权限中心申请权限，申请期限不能修改
+* 修复通用操作显示问题
diff --git a/saas/resources/version_log/V1.5.4_2021-09-29_en.md b/saas/resources/version_log/V1.5.4_2021-09-29_en.md
new file mode 100644
index 000000000..10003c2e1
--- /dev/null
+++ b/saas/resources/version_log/V1.5.4_2021-09-29_en.md
@@ -0,0 +1,12 @@
+# V1.5.4 ChangeLog
+
+### Optimization Updates
+* Custom permission application supports instance approvers
+* The jump application does not merge the user's existing permissions
+* The number of instances of the authorization api return strategy
+
+### Bug Fixes
+* Fixed the display problem of the renewal email link in the corporate WeChat email
+* My permission user group permission check status prompt delete bug
+* The business jump permission center applies for permission, the application period cannot be modified
+* Fix the display problem of general operation
diff --git a/saas/tests/biz/policy_tests.py b/saas/tests/biz/policy_tests.py
index 999b2ccf9..49e2b4010 100644
--- a/saas/tests/biz/policy_tests.py
+++ b/saas/tests/biz/policy_tests.py
@@ -1,10 +1,27 @@
+from copy import deepcopy
 from typing import List
 
 import pytest
 
-from backend.biz.policy import InstanceBean, InstanceBeanList, PathNodeBean, PathNodeBeanList
+from backend.biz.policy import (
+    ConditionBean,
+    ConditionBeanList,
+    InstanceBean,
+    InstanceBeanList,
+    PathNodeBean,
+    PathNodeBeanList,
+    PolicyBean,
+    PolicyBeanList,
+    PolicyEmptyException,
+    RelatedResourceBean,
+    RelatedResourceBeanList,
+    group_paths,
+)
 from backend.common.error_codes import APIException
+from backend.common.time import PERMANENT_SECONDS, expired_at_display
+from backend.service.constants import SelectionMode
 from backend.service.models import PathResourceType, ResourceTypeDict
+from backend.service.models.action import Action, RelatedResourceType
 from backend.service.models.instance_selection import InstanceSelection
 
 
@@ -52,7 +69,7 @@ def path_node_bean_list(path_node_bean: PathNodeBean):
     path_node_bean1.type_name_en = "type_name_en1"
     return PathNodeBeanList(
         nodes=[
-            path_node_bean,
+            path_node_bean.copy(deep=True),
             path_node_bean1,
         ]
     )
@@ -147,7 +164,7 @@ def instance_bean(path_node_bean: PathNodeBean):
     path_node_bean1.type = "type1"
     path_node_bean1.type_name = "type_name1"
     path_node_bean1.type_name_en = "type_name_en1"
-    return InstanceBean(path=[[path_node_bean, path_node_bean1]], type="type")
+    return InstanceBean(path=[[path_node_bean.copy(deep=True), path_node_bean1]], type="type")
 
 
 def gen_paths():
@@ -266,12 +283,20 @@ def test_check_instance_selection_ignore_path(self, instance_bean: InstanceBean)
         instance_bean.check_instance_selection("system_id", "type", [instance_selection], ignore_path=True)
         assert len(instance_bean.path[0]) == 1
 
+    def test_check_instance_selection_ignore_path_any(self, instance_bean: InstanceBean):
+        instance_selection = gen_instance_selection(
+            [{"system_id": "system_id", "id": "type"}, {"system_id": "system_id", "id": "type1"}], ignore_iam_path=True
+        )
+        instance_bean.path[0][-1].id = "*"
+        instance_bean.check_instance_selection("system_id", "type", [instance_selection], ignore_path=True)
+        assert len(instance_bean.path[0]) == 2
+
 
 @pytest.fixture()
 def instance_bean_list(instance_bean: InstanceBean):
     instance_bean1 = instance_bean.copy(deep=True)
     instance_bean1.type = "type1"
-    return InstanceBeanList([instance_bean, instance_bean1])
+    return InstanceBeanList([instance_bean.copy(deep=True), instance_bean1])
 
 
 class TestInstanceBeanList:
@@ -313,8 +338,408 @@ def test_sub(self, instance_bean_list: InstanceBeanList):
         assert len(instance_bean_list.instances) == 0
 
 
-"""
-PolicyBeanList sub
-1. 需要sub没有关联资源类型的操作
-2. 需要sub都是任意的操作
-"""
+@pytest.fixture()
+def condition_bean(instance_bean: InstanceBean):
+    return ConditionBean(instances=[instance_bean.copy(deep=True)], attributes=[])
+
+
+class TestConditionBean:
+    def test_fill_empty_fields(self, condition_bean: ConditionBean):
+        resource_type_dict = ResourceTypeDict(data={("system_id", "type"): {"name": "test", "name_en": "test_en"}})
+        condition_bean = condition_bean.copy(deep=True)
+        condition_bean.fill_empty_fields(resource_type_dict)
+        assert condition_bean.instances[0].path[0][0].type_name == "test"
+        assert condition_bean.instances[0].path[0][0].type_name_en == "test_en"
+
+    def test_get_system_id_set(self, condition_bean: ConditionBean):
+        system_id_set = condition_bean.get_system_id_set()
+        assert system_id_set == {"system_id"}
+
+    def test_add_instances(self, condition_bean: ConditionBean, instance_bean: InstanceBean):
+        condition_bean.add_instances([instance_bean])
+        assert len(condition_bean.instances) == 1
+        assert len(condition_bean.instances[0].path) == 1
+
+    def test_remove_instances(self, condition_bean: ConditionBean, instance_bean: InstanceBean):
+        condition_bean.remove_instances([instance_bean])
+        assert len(condition_bean.instances) == 0
+
+    def test_count_instance(self, condition_bean: ConditionBean):
+        assert condition_bean.count_instance("type") == 1
+
+
+@pytest.fixture()
+def condition_bean_list(condition_bean: ConditionBean):
+    return ConditionBeanList([condition_bean.copy(deep=True)])
+
+
+class TestConditionBeanList:
+    def test_init_empty(self):
+        condition_bean_list = ConditionBeanList([])
+        assert condition_bean_list.is_any
+        assert not condition_bean_list.is_empty
+
+    def test_init(self, condition_bean_list: ConditionBeanList):
+        assert not condition_bean_list.is_any
+        assert not condition_bean_list.is_empty
+
+    def test_add(self, condition_bean_list: ConditionBeanList):
+        new_condition = condition_bean_list.conditions[0].copy(deep=True)
+        new_condition.instances[0].path[0][-1].id = "test"
+        condition_bean_list.add(ConditionBeanList([new_condition]))
+        assert len(condition_bean_list.conditions) == 1
+        assert len(condition_bean_list.conditions[0].instances) == 1
+        assert len(condition_bean_list.conditions[0].instances[0].path) == 2
+
+    def test_sub(self, condition_bean_list: ConditionBeanList):
+        condition_bean_list.sub(condition_bean_list)
+        assert condition_bean_list.is_empty
+
+    def test_remove_by_ids(self, condition_bean_list: ConditionBeanList):
+        condition_bean_list.remove_by_ids(condition_bean_list.conditions[0].id)
+        assert condition_bean_list.is_empty
+
+
+@pytest.fixture()
+def related_resource_bean(condition_bean: ConditionBean):
+    return RelatedResourceBean(system_id="system_id", type="type", condition=[condition_bean.copy(deep=True)])
+
+
+class TestRelatedResourceBean:
+    def test_fill_empty_fields(self, related_resource_bean: RelatedResourceBean, resource_type_dict: ResourceTypeDict):
+        rrt = RelatedResourceType(system_id="system_id", id="type", name="name", name_en="name_en")
+        related_resource_bean.fill_empty_fields(rrt, resource_type_dict)
+        assert related_resource_bean.selection_mode == SelectionMode.INSTANCE.value
+        assert related_resource_bean.name == "name_test"
+        assert related_resource_bean.name_en == "name_en_test"
+        assert related_resource_bean.condition[0].instances[0].name == "name_test"
+
+    def test_get_system_id_set(self, related_resource_bean: RelatedResourceBean):
+        assert related_resource_bean.get_system_id_set() == {"system_id"}
+
+    @pytest.mark.parametrize(
+        "instance_selection, raise_exception",
+        [
+            (
+                gen_instance_selection(
+                    [{"system_id": "system_id", "id": "type"}, {"system_id": "system_id", "id": "type1"}]
+                ),
+                False,
+            ),
+            (gen_instance_selection([{"system_id": "system_id", "id": "type"}]), True),
+        ],
+    )
+    def test_check_selection(self, related_resource_bean: RelatedResourceBean, instance_selection, raise_exception):
+        try:
+            related_resource_bean.check_selection([instance_selection])
+            assert not raise_exception
+        except APIException:
+            assert raise_exception
+
+    def test_check_selection_ignore_path(self, related_resource_bean: RelatedResourceBean):
+        instance_selection = gen_instance_selection(
+            [{"system_id": "system_id", "id": "type"}, {"system_id": "system_id", "id": "type1"}], ignore_iam_path=True
+        )
+        related_resource_bean.check_selection([instance_selection], ignore_path=True)
+        assert len(related_resource_bean.condition[0].instances[0].path[0]) == 1
+
+    def test_count_instance(self, related_resource_bean: RelatedResourceBean):
+        assert related_resource_bean.count_instance() == 1
+
+    @pytest.mark.parametrize(
+        "instance_selection, length",
+        [
+            (
+                gen_instance_selection(
+                    [{"system_id": "system_id", "id": "type"}, {"system_id": "system_id", "id": "type1"}]
+                ),
+                1,
+            ),
+            (gen_instance_selection([{"system_id": "system_id", "id": "type"}]), 0),
+        ],
+    )
+    def test_clone_and_filter_by_instance_selections(
+        self, related_resource_bean: RelatedResourceBean, instance_selection, length
+    ):
+        instance_bean1 = related_resource_bean.clone_and_filter_by_instance_selections([instance_selection])
+        if instance_bean1 is not None:
+            assert len(related_resource_bean.condition[0].instances[0].path) == length
+        else:
+            assert 0 == length
+
+    def test_iter_path_list(self, related_resource_bean: RelatedResourceBean):
+        _list = list(related_resource_bean.iter_path_list())
+        assert len(_list) == 1
+
+
+@pytest.fixture()
+def related_resource_bean_list(related_resource_bean: RelatedResourceBean):
+    return RelatedResourceBeanList([related_resource_bean.copy(deep=True)])
+
+
+class TestRelatedResourceBeanList:
+    def test_get_condition_list(self, related_resource_bean_list: RelatedResourceBeanList):
+        condition_list = related_resource_bean_list.get_condition_list("system_id", "type")
+        assert condition_list
+
+    def test_add(self, related_resource_bean_list: RelatedResourceBeanList):
+        new_related_resource_bean_list = deepcopy(related_resource_bean_list)
+        related_resource_bean_list.add(new_related_resource_bean_list)
+        assert len(related_resource_bean_list._condition_list_dict) == 1
+
+    def test_sub(self, related_resource_bean_list: RelatedResourceBeanList):
+        new_related_resource_bean_list = deepcopy(related_resource_bean_list)
+        related_resource_bean_list.sub(new_related_resource_bean_list)
+        assert related_resource_bean_list.is_empty
+
+
+@pytest.fixture()
+def policy_bean(related_resource_bean: RelatedResourceBean):
+    return PolicyBean(action_id="action_id", related_resource_types=[related_resource_bean.copy(deep=True)])
+
+
+class TestPolicyBean:
+    def test_dict(self, policy_bean: PolicyBean):
+        data = policy_bean.dict()
+        assert "id" in data
+
+    def test_fill_empty_fields(self, policy_bean: PolicyBean, resource_type_dict: ResourceTypeDict):
+        action = Action(
+            id="action_id",
+            name="action_name",
+            name_en="action_name_en",
+            description="",
+            description_en="",
+            related_resource_types=[
+                RelatedResourceType(system_id="system_id", id="type", name="name", name_en="name_en")
+            ],
+        )
+        policy_bean.fill_empty_fields(action, resource_type_dict)
+        assert policy_bean.name == "action_name"
+        assert policy_bean.name_en == "action_name_en"
+        assert policy_bean.related_resource_types[0].name == "name_test"
+
+    def test_get_system_id_set(self, policy_bean: PolicyBean):
+        assert policy_bean.get_system_id_set() == {"system_id"}
+
+    def test_get_related_resource_type(self, policy_bean: PolicyBean):
+        assert policy_bean.get_related_resource_type("system_id", "type")
+
+    def test_set_expired_at(self, policy_bean: PolicyBean):
+        policy_bean.set_expired_at(PERMANENT_SECONDS)
+        assert policy_bean.expired_at == PERMANENT_SECONDS
+        assert policy_bean.expired_display == expired_at_display(PERMANENT_SECONDS)
+
+    def test_is_unrelated(self, policy_bean: PolicyBean):
+        assert not policy_bean.is_unrelated()
+
+    def test_set_related_resource_type(self, policy_bean: PolicyBean, related_resource_bean: RelatedResourceBean):
+        related_resource_bean.condition = []
+        policy_bean.set_related_resource_type(related_resource_bean)
+        assert len(policy_bean.related_resource_types[0].condition) == 0
+
+    def test_add_related_resource_types(self, policy_bean: PolicyBean, related_resource_bean: RelatedResourceBean):
+        related_resource_bean.condition[0].instances[0].path[0][-1].id = "id2"
+        policy_bean.add_related_resource_types([related_resource_bean])
+        assert len(policy_bean.related_resource_types[0].condition[0].instances[0].path) == 2
+
+    def test_has_related_resource_types(self, policy_bean: PolicyBean):
+        assert policy_bean.has_related_resource_types(policy_bean.related_resource_types)
+        policy_bean.related_resource_types = []
+        assert policy_bean.has_related_resource_types(policy_bean.related_resource_types)
+
+    def test_remove_related_resource_types(self, policy_bean: PolicyBean):
+        try:
+            policy_bean.remove_related_resource_types(policy_bean.related_resource_types)
+            assert False
+        except PolicyEmptyException:
+            assert True
+
+        policy_bean.related_resource_types = []
+        try:
+            policy_bean.remove_related_resource_types(policy_bean.related_resource_types)
+            assert False
+        except PolicyEmptyException:
+            assert True
+
+    def test_list_path_node(self, policy_bean: PolicyBean):
+        assert len(policy_bean.list_path_node()) == 2
+
+
+@pytest.fixture()
+def policy_bean_list(policy_bean: PolicyBean):
+    return PolicyBeanList("system_id", [policy_bean])
+
+
+class TestPolicyBeanList:
+    def test_get_system_id_set(self, policy_bean_list: PolicyBeanList):
+        assert policy_bean_list.get_system_id_set() == {"system_id"}
+
+    def test_get(self, policy_bean_list: PolicyBeanList):
+        assert policy_bean_list.get("action_id")
+
+    def test_split_to_creation_and_update_for_grant(self, policy_bean_list: PolicyBeanList):
+        new_policy_list = deepcopy(policy_bean_list)
+        new_policy_list.policies[0].action_id = "action_id2"
+        cp, up = policy_bean_list.split_to_creation_and_update_for_grant(new_policy_list)
+        assert len(cp.policies) == 1
+        assert cp.policies[0].action_id == "action_id2"
+        assert len(up.policies) == 0
+
+        new_policy_list = deepcopy(policy_bean_list)
+        cp, up = policy_bean_list.split_to_creation_and_update_for_grant(new_policy_list)
+        assert len(cp.policies) == 0
+        assert len(up.policies) == 0
+
+        new_policy_list = deepcopy(policy_bean_list)
+        new_policy_list.policies[0].related_resource_types[0].condition[0].instances[0].path[0][-1].id = "id2"
+        cp, up = policy_bean_list.split_to_creation_and_update_for_grant(new_policy_list)
+        assert len(cp.policies) == 0
+        assert len(up.policies) == 1
+        assert len(up.policies[0].related_resource_types[0].condition[0].instances[0].path) == 2
+
+        new_policy_list = deepcopy(policy_bean_list)
+        new_policy_list.policies[0].set_expired_at(123)
+        cp, up = policy_bean_list.split_to_creation_and_update_for_grant(new_policy_list)
+        assert len(cp.policies) == 0
+        assert len(up.policies) == 1
+
+    def test_split_to_update_and_delete_for_revoke(self, policy_bean_list: PolicyBeanList):
+        up, du = policy_bean_list.split_to_update_and_delete_for_revoke(policy_bean_list)
+        assert len(up.policies) == 0
+        assert len(du.policies) == 1
+
+        new_policy_list = deepcopy(policy_bean_list)
+        new_policy_list.policies[0].related_resource_types[0].condition[0].instances[0].path[0][-1].id = "id2"
+        up, du = new_policy_list.split_to_update_and_delete_for_revoke(policy_bean_list)
+        assert len(up.policies) == 1
+        assert len(du.policies) == 0
+
+        new_policy_list.policies[0].related_resource_types = []
+        up, du = new_policy_list.split_to_update_and_delete_for_revoke(new_policy_list)
+        assert len(up.policies) == 0
+        assert len(du.policies) == 1
+
+    def test_add(self, policy_bean_list: PolicyBeanList):
+        new_policy_list = deepcopy(policy_bean_list)
+        new_policy_list.policies[0].related_resource_types[0].condition[0].instances[0].path[0][-1].id = "id2"
+        policy_bean_list.add(new_policy_list)
+        assert len(policy_bean_list.policies[0].related_resource_types[0].condition[0].instances[0].path) == 2
+
+    def test_sub(self, policy_bean_list: PolicyBeanList):
+        new_policy_list = deepcopy(policy_bean_list)
+        new_policy_list.policies[0].action_id = "action_id2"
+        subtraction = policy_bean_list.sub(new_policy_list)
+        assert len(subtraction.policies) == 0
+
+        subtraction = new_policy_list.sub(policy_bean_list)
+        assert len(subtraction.policies) == 1
+
+        new_policy_list = deepcopy(policy_bean_list)
+        new_path = deepcopy(new_policy_list.policies[0].related_resource_types[0].condition[0].instances[0].path[0])
+        new_path[-1].id = "id2"
+        new_policy_list.policies[0].related_resource_types[0].condition[0].instances[0].path.append(new_path)
+        subtraction = new_policy_list.sub(policy_bean_list)
+        assert len(subtraction.policies) == 1
+        assert len(subtraction.policies[0].related_resource_types[0].condition[0].instances[0].path) == 1
+        assert subtraction.policies[0].related_resource_types[0].condition[0].instances[0].path[0][-1].id == "id2"
+
+    def test_list_path_node(self, policy_bean_list: PolicyBeanList):
+        nodes = policy_bean_list._list_path_node()
+        assert len(nodes) == 2
+
+
+def test_group_paths():
+    paths = [
+        [
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type",
+                "id": "id",
+            },
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type1",
+                "id": "id2",
+            },
+        ]
+    ]
+    assert len(group_paths(paths)) == 1
+
+    paths = [
+        [
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type",
+                "id": "id",
+            },
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type1",
+                "id": "id2",
+            },
+        ],
+        [
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type",
+                "id": "id",
+            },
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type1",
+                "id": "*",
+            },
+        ],
+    ]
+    assert len(group_paths(paths)) == 2
+
+    paths = [
+        [
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type",
+                "id": "id",
+            },
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type1",
+                "id": "id2",
+            },
+        ],
+        [
+            {
+                "system_id": "system_id",
+                "name": "name",
+                "type_name_en": "type_name_en",
+                "type_name": "type_name",
+                "type": "type",
+                "id": "id",
+            }
+        ],
+    ]
+    assert len(group_paths(paths)) == 2