Use RAM to manage permissions of O&M engineers

Solution

You can categorize the O&M requirements by product to make them easier to manage. More specifically, you can set an O&M owner and assign different O&M engineers to different categories of requirements and attach your specified policies to these engineers, as shown in the following figure.

Example

This example describes how to set the RAM user alice@secloud.onaliyun.com as the database O&M owner, so that the user can manage RDS and DTS.

1. Log on to the RAM console.
2. Create a RAM user.
3. In the User Logon Name/Display Name column, find the target RAM user.
4. Click Add Permissions.
5. In the Policy Name column, click AliyunRDSFullAccess and AliyunDTSFullAccess.
6. Click OK.
7. Click Finished.