Authorize through the GDB console

Updated at:

To import data from an Object Storage Service (OSS) bucket, you must have permission to access the bucket. This topic describes how to grant this authorization and obtain the Alibaba Cloud Resource Name (ARN) of the required role using the Graph Database (GDB) console.

Authorize GDB to access OSS

Note

You can use an Alibaba Cloud account or a RAM user that has the AliyunGDBFullAccess permission to perform the following operations.

  1. Log on to the GDB console.
  2. Click Data Import - OSS Authorization.

  3. Check the authorization result.
    • Success: The system displays the message Service-linked role created successfully. GDB can now access your OSS.
    • Failure: The system displays the message Authorization failed. If the authorization fails, use an Alibaba Cloud account or a RAM user that has the AliyunGDBFullAccess permission.

Obtain the ARN information

After you authorize GDB to access OSS, the system automatically creates the AliyunServiceRoleForGDB service-linked role. To import data from OSS, you need the Alibaba Cloud Resource Name (ARN) of this role. You can obtain the ARN using one of the following methods:

  • Log on to the RAM console to view the ARN.

  • If a RAM user cannot log on to the RAM console, you can obtain the ARN by replacing <Aliuid> in the following example with the UID of your Alibaba Cloud account:

    acs:ram::<Aliuid>:role/aliyunserviceroleforgdb

    For example, if the UID of your Alibaba Cloud account is 123456789, the ARN is acs:ram::123456789:role/aliyunserviceroleforgdb.

    Note

    Log on to the Alibaba Cloud Management Console. Move the pointer over the profile picture in the upper-right corner to obtain the UID of your Alibaba Cloud account.