Grant solution lab permissions to a RAM user
Create a custom policy to grant a RAM user the permissions required for hands-on labs and free trials on the Alibaba Cloud solution platform.
Prerequisites
-
A RAM user is created. Create a RAM user.
-
You use a RAM user with RAM administrative permissions, such as the
AliyunRAMFullAccesspolicy.
Scenarios
Alibaba Cloud technical solutions provide best practices, online deployment, and free trials for common business scenarios.
Create a custom policy and grant it to a RAM user so that the user can access hands-on labs and free trials on the solution platform.
Procedure
Step 1: Create a custom policy
-
Log on to the RAM console.
-
In the left-side navigation pane, choose .
-
On the Policies page, click Create Policy.
-
On the Create Policy page, click the JSON Editor tab.
-
Copy the following policy into the editor to replace the existing content, and click OK.
{ "Version": "1", "Statement": [ { "Effect": "Allow", "Action": "techsolution:StartExperience", "Resource": "acs:techsolution::*:*" }, { "Effect": "Allow", "Action": "developeradc:*", "Resource": "acs:developeradc::*:*" } ] }NoteThis policy grants only solution platform permissions. To complete a lab, also grant permissions for each required cloud service as described in the respective service documentation.
-
Enter a Policy Name, such as
SolutionPracticeAccessorSolutionTrialAccess, and an optional Note. -
Click OK.
Step 2: Grant permissions to the RAM user
-
In the left-side navigation pane of the RAM console, choose .
-
In the user list, find the target RAM user and click Grant Permissions in the Actions column.
-
In the Policies area of the Grant Permission panel, click the All Types drop-down list and select Custom Policy.
-
Search for and select the custom policy from Step 1, such as
SolutionPracticeAccess. -
Click OK.
-
Verify the authorization and click close.