Grant solution lab permissions to a RAM user

Updated at:

Create a custom policy to grant a RAM user the permissions required for hands-on labs and free trials on the Alibaba Cloud solution platform.

Prerequisites

  • A RAM user is created. Create a RAM user.

  • You use a RAM user with RAM administrative permissions, such as the AliyunRAMFullAccess policy.

Scenarios

Alibaba Cloud technical solutions provide best practices, online deployment, and free trials for common business scenarios.

Create a custom policy and grant it to a RAM user so that the user can access hands-on labs and free trials on the solution platform.

Procedure

Step 1: Create a custom policy

  1. Log on to the RAM console.

  2. In the left-side navigation pane, choose Permissions > Policies.

  3. On the Policies page, click Create Policy.

  4. On the Create Policy page, click the JSON Editor tab.

  5. Copy the following policy into the editor to replace the existing content, and click OK.

    {
      "Version": "1",
      "Statement": [
        {
          "Effect": "Allow",
          "Action": "techsolution:StartExperience",
          "Resource": "acs:techsolution::*:*"
        },
        {
          "Effect": "Allow",
          "Action": "developeradc:*",
          "Resource": "acs:developeradc::*:*"
        }
      ]
    }
    Note

    This policy grants only solution platform permissions. To complete a lab, also grant permissions for each required cloud service as described in the respective service documentation.

  6. Enter a Policy Name, such as SolutionPracticeAccess or SolutionTrialAccess, and an optional Note.

  7. Click OK.

Step 2: Grant permissions to the RAM user

  1. In the left-side navigation pane of the RAM console, choose Identities > Users.

  2. In the user list, find the target RAM user and click Grant Permissions in the Actions column.

  3. In the Policies area of the Grant Permission panel, click the All Types drop-down list and select Custom Policy.

  4. Search for and select the custom policy from Step 1, such as SolutionPracticeAccess.

  5. Click OK.

  6. Verify the authorization and click close.

References