Introduction

Terms

Resource Access Management (RAM) is an Alibaba Cloud service for identity management and resource access control. You can use RAM to create and manage user accounts, such as for employees, systems, or applications. You can also control the permissions that these user accounts have to operate your resources. When multiple users in your enterprise need to collaborate on resources, RAM lets you avoid sharing your Alibaba Cloud account keys. This helps you reduce security risks for your enterprise by assigning the least privilege to users.

To manage and use Network Quality Analyzer with more control, you can use Alibaba Cloud RAM to grant access permissions to your RAM users and roles.

Manage RAM user access to Network Quality Analyzer

An Alibaba Cloud account holder may need to delegate the operation and maintenance of Network Quality Analyzer to a RAM user. A RAM user may also need to access the service. In these situations, the account holder must grant the RAM user permissions to access or operate Network Quality Analyzer. For more information, see Grant RAM users permissions to access Network Quality Analyzer.

Service-linked role for Network Quality Analyzer

Network Quality Analyzer requires authorization through a service-linked role to access data from Simple Log Service (SLS). For more information, see Manage service-linked roles.

RAM policy definition

You can create a single custom policy that grants a RAM user permissions to access Network Quality Analyzer and manage service-linked roles. The following shows the complete policy:

{
    "Statement": [
        {
            "Action": "ram:CreateServiceLinkedRole",
            "Resource": "acs:ram:*:{AliyunUid}:role/*",
            "Effect": "Allow",
            "Condition": {
                "StringEquals": {
                    "ram:ServiceName": [
                        "data-sync.ipa.aliyuncs.com"
                    ]
                }
            }
        },
        {
            "Action": "ipa:*",
            "Resource": "acs:ipa:*:{AliyunUid}:*",
            "Effect": "Allow"
        }
    ],
    "Version": "1"
}