Manage policy grants

Procedure

1. Log on to the RAM console as a RAM administrator.

2. In the left navigation pane, choose Permissions > Policies.

3. On the Policies page, click the name of the target policy.

4. On the policy details page, click the Grants tab.

   • View grant records: View the grant details of the policy, including Principal, Resource Scope, and Granted At.

   • Grant permissions: Click Grant Permission and follow the instructions to grant the policy to a RAM user, RAM user group, or RAM role.

   • Revoke permissions: To revoke the policy from a RAM user, RAM user group, or RAM role, click Revoke Permission in the Actions column of the target grant record.

     Note

     You can select multiple grant records and click Revoke Permission below the list to revoke permissions in bulk.