Authentication rules for Mobile Push API calls made by RAM users

To allow a RAM user to log on to the console:

1. Search for "Mobile Cloud" and grant read-only and management permissions as needed. At a minimum, you must grant the read-only permission.

2. Search for "Mobile Push" and grant read-only and management permissions as needed. At a minimum, you must grant the read-only permission.

• If you grant the read-only permission, you must also grant permissions for each API operation.

• If you grant the management permission, the RAM user can use all features of Mobile Push. This includes permissions for all the OpenAPI operations listed below.

When a RAM user calls the Mobile Push OpenAPI to access app resources in an Alibaba Cloud account, the Mobile Push service checks permissions with Resource Access Management (RAM). This check ensures that the resource owner has granted the necessary permissions to the caller.

Each Mobile Push API determines the required resource permissions based on the resources involved and the API semantics. The following tables list the authentication rule for each API.

About the app

Pushes

Device binding

Queries and statistics