This topic describes how to authorize a Resource Access Management (RAM) user. If you want to manage instances and train models as a RAM user, you must first use your Alibaba Cloud account to authorize the RAM user.

Step 1: Create a permission policy

  1. Log on to the RAM console.
  2. In the left-side navigation pane, choose Permissions > Policies.
  3. On the Policies page, click Create Policy.
  4. On the Create Custom Policy page that appears, enter autolearningfullaccess in the Policy Name field.
  5. On the Create Custom Policy page, select Script in the Configuration Mode section, and modify Policy Document based on your requirements.
    The following is an example of Policy Document:
    {
          "Version": "1",
          "Statement": [
            {
              "Effect": "Allow",
              "Action": [
                "autolearning:CreateInstance",
                "autolearning:LabelInstance",
                "autolearning:TrainInstance",
                "autolearning:EditInstance",
                "autolearning:ListInstance"
              ],
              "Resource": "*"
            }
          ]
    }
    Permission Description
    CreateInstance The permission to create and delete instances.
    EditInstance The permission to edit instances.
    LabelInstance The permission to label images and the permission to add, delete, and modify labels.
    TrainInstance The permission to train models.
    ListInstance The permission to query instance information.

Step 2: Authorize the RAM user

  1. In the left-side pane, choose Identities > Users.
  2. On the Users page, find the target RAM user and click Add Permissions in the Actions column.
  3. On the Add Permissions page, select Custom Policy in the Select Policy field.
  4. Optional:In the Select Policy field, enter the permission policy name autolearningfullaccess.
  5. In the list below the Select Policy section, select autolearningfullaccess.
  6. Click OK.