You can control access to the Mobile Push service using an Alibaba Cloud account or a Resource Access Management (RAM) user. To allow a RAM user to use Mobile Push features, the parent Alibaba Cloud account must grant the required access policies to the RAM user.
Prerequisites
You have an Alibaba Cloud account. For more information, see Account Management.
You have activated the Multiexperience Development Platform (EMAS) service. For more information, see Quick Start.
You have opened the Alibaba Cloud Management Console homepage.
Procedure
Open the RAM console
On the Alibaba Cloud Management Console homepage, hover over your profile picture in the upper-right corner to open the shortcut menu.
In the shortcut menu, click Access Control to open the RAM console.
Create an entity
You can control access based on a user, user group, or RAM role. If you have not created the required entity, create one first.
To perform operations on the Resource Access Management page, see the following documents:
Create a user. For more information, see Create a RAM user.
Create a user group. For more information, see Create a RAM user group.
Create a RAM role. For more information, see RAM role overview.
Grant permissions
On the Resource Access Management page, select Permission Management > Authorization. The Authorization page is displayed.
On the Authorization page, click Add Authorization to open the panel on the right.
In the panel on the right, configure the authorization settings. The following table describes the parameters.
Options
Description
Resource Scope
Set this parameter to Account Level.
Account Level: The permissions apply to the current Alibaba Cloud account.
Resource Group Level: The permissions apply to the specified resource group.
Authorized Entity
Enter a keyword to search for and select the user, user group, or RAM role that you created.
Access Policy
Select System Policy or Custom Policy.
Enter a keyword to search for the system policies for Mobile Push. These policies include the following:
AliyunMPushFullAccess: Grants permissions to manage Mobile Push (MPush).
AliyunMPushReadOnlyAccess: Grants permissions to read data from Mobile Push (MPush).
You must create custom policies before you can use them. For more information, see Create a custom policy.
To operate in the EMAS Mobile Push console, enter the MHub keyword to search for MHub-related policies. These policies include the following:
AliyunMHubFullAccess: Grants permissions to manage Multiexperience Development Platform (EMAS).
AliyunMHubReadOnlyAccess: Grants permissions to read data from Multiexperience Development Platform (EMAS).
For more information, see Grant system policies to a RAM user.
Select the required system policies for Mobile Push and add them to the Selected Access Policies list on the right.
ImportantSelect at least one system policy for Mobile Push.
Click OK to save the settings.
Related content
Resource Access Management (RAM) is an Alibaba Cloud service. For more information, see Resource Access Management.