The Hologres Management Console uses RAM for authentication and to manage development permissions for instances. This topic describes common issues related to permissions in the Hologres Management Console and provides solutions.
Issue summary
You must have the required permissions to manage Hologres instances in the Hologres Management Console. For solutions to common permission-related issues, click the following links.
How can a RAM user purchase Hologres?
A RAM user must be granted permissions by an Alibaba Cloud account to purchase a Hologres instance. For more information, see Grant permissions to a RAM user.
After a RAM user purchases an instance, the Alibaba Cloud account must also grant development permissions for that instance to the RAM user. For more information, see Grant development permissions on an instance to a RAM user.
A RAM user cannot view the instance list or instance IDs
Symptom
The RAM user selects the correct region but cannot view the purchased instance. The following error message is reported: You do not have the permissions to view all instances. Ask the Alibaba Cloud account to grant the hologram:ListInstances permission for the "xxx/*" resource to the current user.
Cause
The current RAM user does not have the permissions to view the instance list.
Solution
The Alibaba Cloud account must log on to the RAM console and grant the AliyunHologresReadOnlyAccess permission to the RAM user.
A RAM user has no operational permissions on an instance
Symptom
A RAM user who is granted superuser permissions cannot purchase, upgrade, or downgrade an instance, or change the billing method of an instance from pay-as-you-go to subscription. The following error message is reported: RAM user authentication failed.
Cause
Operations such as purchasing, upgrading, downgrading, and changing the billing method involve billing and are controlled by the Alibaba Cloud account. The current RAM user does not have the required permissions.
Solution
The Alibaba Cloud account must log on to the RAM console and grant the AliyunHologresFullAccess and AliyunBSSOrderAccess permissions to the RAM user.