Grant a RAM user the permissions to log on to the DMS console

Updated at:

To log on to the Data Management (DMS) console as a RAM user, attach the AliyunDMSLoginConsoleAccess policy to that user.

Prerequisites

Before you begin, make sure that you have:

  • Permission to manage RAM users — for example, the AliyunRAMUserManageAccess policy is attached to your account

Attach the policy

  1. Go to the Users page in the RAM console.

  2. Find the RAM user, then click Attach Policy in the Actions column corresponding to the RAM user.

  3. Search for and select AliyunDMSLoginConsoleAccess, then click OK. When the status of the attach operation changes to Completed, the policy is attached to the RAM user.

    Note

    When you attach the policy, select Account for Resource Scope. The AliyunDMSLoginConsoleAccess policy does not support resource group-based authorization.

What's next

AliyunDMSLoginConsoleAccess only grants console login access. To give the RAM user access to specific DMS features, attach additional policies based on your requirements:

For more granular control, attach a custom policy instead.