You can create RAM user groups to classify and authorize RAM users in your Alibaba Cloud account. This simplifies the management of RAM users and their permissions.

  • If the responsibilities of a RAM user change, you only need to move the RAM user to a RAM user group with the relevant permissions. This does not affect other RAM users.

    For information about how to create a RAM user group, see Create a RAM user group.

  • If the responsibilities of a RAM user group change, you only need to modify the policy attached to the user group. Changes to the policy apply to all RAM users in the RAM user group.

    For information about how to grant permissions to a RAM user group, see Grant permissions to a RAM user group.