You can use Resource Access Management (RAM) users to prevent security risks caused by AccessKey pair and password leaks. This topic describes how to create a RAM user and grant the required permissions to the RAM user.

Prerequisites

RAM and ApsaraVideo Live are activated.

Create a RAM user

For more information, see Create a RAM user.

Grant permissions to the RAM user

  1. Log on to the RAM console by using your Alibaba Cloud account.
  2. In the left-side navigation pane, choose Identities > Users.
  3. On the Users page, find the RAM user to which you want to attach the custom policy, and click Add Permissions in the Actions column.
  4. In the Add Permissions panel, configure the required parameters.
    Authorization
    1. In the Authorized Scope section, select Alibaba Cloud Account.
    2. Click System Policy.
    3. Enter AliyunLive in the search box. The system automatically displays all policies that are related to ApsaraVideo Live.
    4. Click AliyunLiveFullAccess to add the policy to the Selected list.
    Note The AliyunLiveFullAccess policy grants the RAM user full permissions on ApsaraVideo Live. The RAM user can call all API operations of ApsaraVideo Live and manage all accelerated domain names.

    If the RAM user needs to use the recording and transcoding features, you must grant the RAM user the required permissions on ApsaraVideo Media Processing. In this case, you can use the system policy AliyunMTSFullAccess.

    You can use system policies or custom policies to grant permissions to a RAM user. For information about the definition of system policies, see Policy. For information about how to use custom policies, see Customize a policy.

  5. Click OK.
  6. Click Complete.

What to do next

Use the created RAM user to log on to the Alibaba Cloud Management Console. For more information, see Log on to the Alibaba Cloud Management Console as a RAM user.