You can remove permissions from a RAM role if the RAM role no longer needs the permissions. This topic describes how to remove permissions from a RAM role.

Note You cannot remove permissions from a service linked role because the policies that are attached to the role are predefined by the linked cloud service. For more information about service linked roles, see Service linked roles.

Method 1

You can remove permissions from a RAM role on the Grants page.

  1. Log on to the RAM console by using an Alibaba Cloud account.
  2. In the left-side navigation pane, click Grants under Permissions.
  3. On the Grants page, find the RAM role, and click Revoke Permission in the Actions column.
  4. In the message that appears, click OK.

Method 2

You can remove permissions from a RAM role on the RAM Roles page.

  1. Log on to the RAM console by using an Alibaba Cloud account.
  2. In the left-side navigation pane, click RAM Roles.
  3. On the RAM Roles page, click the name of the RAM role in the RAM Role Name column.
  4. On the Permissions tab, find the policy that you want to detach from the RAM role, and click Remove Permission in the Actions column.
  5. In the message that appears, click OK.