Prepare account

Step 1: Register an Alibaba Cloud account

1. Go to the Alibaba Cloud official website.

2. In the upper-right corner of the homepage, click Register.

3. On the Register an account page, follow the on-screen instructions to complete the registration.

   Your Alibaba Cloud account is the primary account for resource usage and billing. This account has full permissions for all its resources.

   Warning

   To ensure the security of your account and password, do not share your credentials with others and update your password regularly.

Step 2: Complete real-name registration

You must complete real-name registration to proceed with subsequent operations. You can purchase and use Alibaba Cloud products only after completing real-name registration.

1. Go to the Account Management page.

2. In the left-side navigation pane, click Real-Name Registration and follow the on-screen instructions.

   We recommend that enterprise users complete enterprise registration for additional benefits. For more information about real-name registration, see Real-name Registration.

Step 3: Create an AccessKey

1. Go to the AccessKey Management page.

2. On the AccessKey Management page, click Create AccessKey. The system automatically creates an AccessKey.

3. In the Create AccessKey dialog box, view the AccessKey ID and AccessKey Secret.

   Click Download CSV File to save the AccessKey information or Copy to copy it.

4. Click Close.

   Important

   • To ensure the security of your AccessKey ID and AccessKey Secret, do not share them with others. If you suspect they have been compromised, disable or rotate your AccessKey immediately.

   • The AccessKey Secret is shown only upon creation and cannot be retrieved later. Store it securely.

   • Disabling an AccessKey causes dependent services to fail. Disable AccessKeys with caution and monitor affected services if a key's status changes.

Step 1: Create a RAM user

1. Log on to the RAM console with your Alibaba Cloud account.

2. In the left-side navigation pane, choose Identity Management > Users.

3. On the Users page, click Create User.

4. On the Create User page, in the User Account Information section, enter a logon name and a display name.

   Note

   Click Add User to create multiple RAM users at once.

5. In the Access Mode section, select an access mode.

   • Console Access: Set the console logon password, password reset policy, and multi-factor authentication policy.

     Note

     If you set a custom password, it must meet the complexity requirements. For information about how to configure password complexity rules, see Set password strength for RAM users.

   • OpenAPI Call Access: Automatically generates an AccessKey for the RAM user to access Alibaba Cloud through APIs or other development tools.

     Note

     For security, we recommend selecting only one access mode for each RAM user. This prevents former employees from accessing Alibaba Cloud resources by using a retained AccessKey.

6. Click OK.

7. In the Security Verification dialog box, complete the verification as prompted.

Step 2: Create an AccessKey

1. In the left-side navigation pane, choose Identity Management > Users.

2. On the Users page, click the target RAM user's name.

3. In the User AccessKeys section, click Create AccessKey.

4. In the Create AccessKey dialog box, view the AccessKey ID and AccessKey Secret.

   Click Download CSV File to save the AccessKey information or click Copy to copy it.

5. Click Close.

   Important

   • To ensure the security of your AccessKey ID and AccessKey Secret, do not share them with others. If you suspect they have been compromised, disable or rotate your AccessKey immediately.

   • The AccessKey Secret is shown only upon creation and cannot be retrieved later. Store it securely.

   • Disabling an AccessKey causes dependent services to fail. Disable AccessKeys with caution and monitor affected services if a key's status changes.

Step 3: Grant permissions to a RAM user

1. In the left-side navigation pane, choose Identity Management > Users.

2. On the Users page, find the target RAM user and, in the Actions column, click Add Permissions.

3. In the Add Permissions panel, grant permissions to the RAM user.

   1. For Authorization Scope, select Entire Alibaba Cloud Account.

   2. Enter the principal.

      The principal is the RAM user who will receive the permissions. This field defaults to the current RAM user, but you can also add other RAM users.

   3. Select a permission policy.

      1. Select System Policy and enter nls in the search box. The system automatically finds system policies related to Intelligent Speech Interaction.

      2. From the list of permission policies, click AliyunNLSFullAccess to add it to the selected list on the right.

      The following table describes the system policies for Intelligent Speech Interaction.

      Permission policy name	Notes	Description
      AliyunNLSFullAccess	Grants permissions to manage Intelligent Speech Interaction.	Allows full access to all APIs and the console of Intelligent Speech Interaction.
      AliyunNLSReadOnlyAccess	Grants read-only permissions for Intelligent Speech Interaction.	Allows read-only access to all APIs and the console of Intelligent Speech Interaction.
      AliyunNLSSpeechServiceAccess	Grants permissions to manage the speech services of Intelligent Speech Interaction.	Allows API calls and operations related to the speech services of Intelligent Speech Interaction.
      AliyunNLSSlpAccess	Grants permissions to manage the self-learning platform of Intelligent Speech Interaction.	Allows API calls and operations for hotwords and language models on the Intelligent Speech Interaction self-learning platform.

4. Click OK.

5. Click Done.