Identity and access control
To use Alibaba Cloud services, you must grant users and applications access to the resources in your Alibaba Cloud account. As you deploy more services on Alibaba Cloud, you must establish an efficient and logical identity and permission management system to ensure that the right people access the right resources.
When you work with Alibaba Cloud services and resources, you must manage two types of identities:
Human identities: These identities represent individuals in an organization, such as security administrators, operations management administrators, and application developers. They typically manage cloud resources using the Alibaba Cloud console, command-line interface (CLI), or dedicated clients.
Programmatic identities: These identities represent applications or services that access cloud resources and data through the Alibaba Cloud OpenAPI.
The following scenarios provide best practices to help you effectively manage human and programmatic identities and their permissions.