To use a Resource Access Management (RAM) user to manage instances or train models, you must use your Alibaba Cloud account to grant the required permissions to the RAM user. This topic describes how to grant permissions to a RAM user.

Step 1: Create a policy

  1. Log on to the RAM console.
  2. Use the following script to create a policy named autolearningfullaccess. For more information, see Create a custom policy on the JSON tab. 
    {
    "Version": "1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "autolearning:CreateInstance",
                "autolearning:LabelInstance",
                "autolearning:TrainInstance",
                "autolearning:EditInstance",
                "autolearning:ListInstance"
            ],
            "Resource": "*"
        },
        {
            "Action": [
                "ots:ListInstance",
                "ots:GetInstance",
                "ots:ListTable",
                "ots:DescribeTable",
                "ots:GetRow",
                "ots:GetRange",
                "ots:BatchGetRow"
            ],
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}
    The following table describes items in the policy.
    Item Description
    CreateInstance Permissions to create and delete instances.
    EditInstance Permissions to edit instances.
    LabelInstance Permissions to label images and permissions to add, delete, and modify labels.
    TrainInstance Permissions to train models.
    ListInstance Permissions to query instance information.

Step 2: Grant permissions to a RAM user

Attach the autolearningfullaccess policy created in Step 1 to a RAM user. For more information, see Grant permissions to a RAM user.