Grant a RAM user the permissions to log on to the DMS console
To log on to the Data Management (DMS) console as a RAM user, attach the AliyunDMSLoginConsoleAccess policy to that user.
Prerequisites
Before you begin, make sure that you have:
Permission to manage RAM users — for example, the AliyunRAMUserManageAccess policy is attached to your account
Attach the policy
Go to the Users page in the RAM console.
Find the RAM user, then click Attach Policy in the Actions column corresponding to the RAM user.
Search for and select AliyunDMSLoginConsoleAccess, then click OK. When the status of the attach operation changes to Completed, the policy is attached to the RAM user.
NoteWhen you attach the policy, select Account for Resource Scope. The AliyunDMSLoginConsoleAccess policy does not support resource group-based authorization.
What's next
AliyunDMSLoginConsoleAccess only grants console login access. To give the RAM user access to specific DMS features, attach additional policies based on your requirements:
AliyunDMSFullAccess — full access to all DMS features
AliyunDMSReadOnlyAccess — read-only access to DMS
For more granular control, attach a custom policy instead.