Use RAM to manage permissions of O&M engineers

Solution

The company can set an O&M owner, assign different O&M engineers to different O&M requirements, and then attach specified policies to these engineers.

Procedure

This section uses an example to describe how to set a RAM user as the database O&M owner. In this example, the RAM user is alice@secloud.onaliyun.com. The RAM user can then manage ApsaraDB for RDS and Data Transmission Service (DTS).

1. Log on to the RAM console with an Alibaba Cloud account.
2. Create a RAM user.
3. In the User Logon Name/Display Name column, find the RAM user.
4. Click Add Permissions in the Actions column. In the Add Permissions pane, the Principal field is automatically filled in.
5. In the Authorization Policy Name column, click AliyunRDSFullAccess and AliyunDTSFullAccess.
6. Click OK.
7. Click Finished.
   Note The following table describes the policies that you can use to grant other O&M permissions to the RAM user.