Create a RAM user and grant permissions to the RAM user

Procedure

1. Log on to the RAM console by using an Alibaba Cloud account or a RAM user who has administrative rights.

2. In the left-side navigation pane, choose Identities > Users.

3. On the Users page, click Create User.

   

4. In the User Account Information section of the Create User page, configure the following parameters:

   • Logon Name: The logon name can be up to 64 characters in length, and can contain letters, digits, periods (.), hyphens (-), and underscores (_).

   • Display Name: The display name can be up to 128 characters in length.

   • Tag: Click the icon and enter a tag key and a tag value. You can add one or more tags to the RAM user. This way, you can manage the RAM user based on the tags.

   Note

   You can click Add User to create multiple RAM users at a time.

5. Select OpenAPI Access for Access Method.

6. Click OK and complete the verification. The AccessKey pair of the RAM user is automatically generated.

7. Click Copy in the Actions column and store the copied information including the username, password, and AccessKey pair.

   Important

   Make sure to store the logon password and AccessKey pair (AccessKey ID and AccessKey secret).

8. On the Users page, find the RAM user and click Add Permissions in the Actions column.

9. In the Grant Permission panel, grant permissions to the RAM user.
   

   Select Alibaba Cloud Account for Authorized Scope. You cannot grant permissions to a specific resource group. For more information about resource groups, see Differences and relationships among the Resource Directory, Resource Group, and Tag services.

   Enter rtc in the field under System Policy, select the policies that are displayed, and then click OK.

10. Optional:If you want to grant the console logon permissions to the RAM user, click the user logon name. On the page that appears, enable console logon on the Authentication tab. For more information, see Manage console logon settings.