Manage policy grants

Procedure

1. Log on to the RAM console as a RAM administrator.

2. In the left navigation pane, choose Permissions > Policies.

3. On the Policies page, click the name of the target policy.

4. On the policy details page, click the Grants tab.

   • View grant records: View the policy's grant information, including Principal, Resource Scope, and Attach Date.

   • Grant permissions: Click Grant Permission and follow the on-screen instructions to grant the policy to a RAM user, RAM user group, or RAM role.

   • Revoke permissions: To revoke the policy from a RAM user, RAM user group, or RAM role, click Revoke Permission in the Actions column for the target grant record.

     Note

     You can select multiple grant records and click Revoke Permission below the list to revoke the permissions in bulk.