The Serverless service supports access control using an Alibaba Cloud account or a Resource Access Management (RAM) user. To allow a RAM user to use Serverless features, an Alibaba Cloud account must grant the required access policies to the RAM user.
Prerequisites
You have registered and logged in to an Alibaba Cloud account. For more information, see Account Management.
The Multiexperience Development Platform (EMAS) service is activated. For more information, see Quick Start.
The Alibaba Cloud Management Console home page is open.
Procedure
Open the RAM console
On the Alibaba Cloud Management Console home page, move the mouse over the profile picture in the upper-right corner to open the shortcut menu.
From the shortcut menu, select Resource Access Management to open the Resource Access Management (RAM) page.
Create an entity
You can control access based on a user, user group, or RAM role. If the required entity does not exist, you must create it.
On the Resource Access Management page, refer to the following documents for instructions on how to perform the required operations:
Create a RAM user. For more information, see Create a RAM user.
Create a RAM user group. For more information, see Create a RAM user group.
Create a RAM role. For more information, see RAM role overview.
Grant permissions
On the RAM page, choose Permission Management > Authorization to open the Authorization page.
On the Authorization page, click Grant Permission to open the panel on the right.
In the panel on the right, configure the following authorization settings:
Option
Instructions
Resource Scope
Select Account Level.
Account Level: The permissions take effect within the current Alibaba Cloud account.
Resource Group Level: The permissions take effect within the specified resource group.
Principal
Enter a keyword to search for and select an existing user, user group, or RAM role.
Access Policy
Select the System Policy or Custom Policy option.
Enter a keyword to search for system policies for Serverless and Multiexperience Development Platform (EMAS), such as:
AliyunMHubFullAccess: Grants permissions to manage Multiexperience Development Platform (EMAS).
AliyunMHubReadOnlyAccess: Grants read-only permissions for Multiexperience Development Platform (EMAS).
AliyunMPServerlessFullAccess: Grants permissions to manage Serverless for Mini Programs.
AliyunMPServerlessReadOnlyAccess: Grants read-only permissions for Serverless for Mini Programs.
You must create custom policies before you can use them. For more information, see Create a custom policy.
As needed, select the system policies for Multiexperience Development Platform (EMAS) and Serverless, and add them to the Selected Access Policies list on the right.
ImportantSelect at least one system policy for Multiexperience Development Platform (EMAS).
Select at least one system policy for Serverless.
Click OK to save the settings.
Related topics
RAM is a general-purpose Alibaba Cloud service. For more information, see Resource Access Management.