Authorizing Data Management (DMS) to access cloud resources grants it permission to access other Alibaba Cloud data services. After authorization, you can use DMS to query, modify, and manage resources in services such as RDS, MaxCompute, and Object Storage Service (OSS).
Prerequisites
You are using an Alibaba Cloud account (primary account) or a RAM user (sub-account) with the AdministratorAccess policy.
-
To view the permissions of a RAM user, see View the permissions of a RAM user.
-
To grant additional permissions to a RAM user, see Manage permissions for a RAM user.
Authorization
Authorization is a one-time process for each Alibaba Cloud account:
-
If an Alibaba Cloud account performs the authorization, RAM users under that account do not need to do so again.
-
If a RAM user performs the authorization, the parent Alibaba Cloud account and all other RAM users under that account do not need to do so again.
Authorize an Alibaba Cloud account
-
Log in to the Data Management (DMS) 5.0 console console.
-
In the Cloud Resource Authorization dialog box, click Go to RAM Role Authorization.
Note-
The Cloud Resource Authorization dialog box appears only the first time you log in to the DMS console.
-
If the Cloud Resource Authorization dialog box does not appear, go to the RAM Quick Authorization page.
-
-
On the RAM Quick Authorization page, click Confirm Authorization.
On the page, the role name is AliyunDMSDefaultRole, and the attached system policy is AliyunDMSRolePolicy.
Authorize a RAM user
-
Go to the Cloud Resource Access Authorization page.
-
On the RAM Quick Authorization page, click Confirm Authorization.