Before you initiate Dedicated Host (DDH) API requests as a RAM user, you must grant the RAM user the corresponding permissions by using your Alibaba Cloud account. You must create an authorization policy and attach the policy to the RAM user. In the policy, you need to use an Alibaba Cloud Resource Name (ARN) to specify the resource that you want the RAM user to access. The following table lists the ARNs of DDH resources.

Resource type ARN
AllocateDedicatedHosts acs:ecs:$regionid:$accountid:ddh/*
DescribeDedicatedHosts acs:ecs:$regionid:$accountid:ddh/$dedicatedhostid
DescribeDedicatedHostTypes No authentication is required.
DescribeDedicatedHostAutoRenew acs:ecs:$regionid:$accountid:ddh/$dedicatedhostid
ModifyDedicatedHostAttribute acs:ecs:$regionid:$accountid:ddh/$dedicatedhostid
ModifyDedicatedHostAutoReleaseTime acs:ecs:$regionid:$accountid:ddh/$dedicatedhostid
ModifyDedicatedHostAutoRenewAttribute acs:ecs:$regionid:$accountid:ddh/$dedicatedhostid
ModifyInstanceDeployment acs:ecs:$regionid:$accountid:instance/$instanceid
acs:ecs:$regionid:$accountid:ddh/$dedicatedhostid
RenewDedicatedHost acs:ecs:$regionid:$accountid:ddh/$dedicatedhostid
ReleaseDedicatedHosts acs:ecs:$regionid:$accountid:ddh/$dedicatedhostid