The following tables list API operations available for use in Resource Access Management (RAM).

RAM user management

Operation Description
CreateUser Creates a RAM user.
GetUser Queries the information of a RAM user.
UpdateUser Modifies a RAM user.
DeleteUser Deletes a RAM user.
ListUsers Queries the list of all RAM users.
CreateLoginProfile Enables console logon for a RAM user.
GetLoginProfile Queries the logon configurations of a RAM user.
DeleteLoginProfile Disables console logon for a RAM user.
UpdateLoginProfile Modifies the logon configurations of a RAM user.
CreateAccessKey Creates an AccessKey pair for a RAM user.
UpdateAccessKey Changes the status of an AccessKey pair that belongs to a RAM user.
DeleteAccessKey Deletes an AccessKey pair of a RAM user.
ListAccessKeys Queries the list of all AccessKey pairs that belong to a RAM user.
CreateVirtualMFADevice Creates a multi-factor authentication (MFA) device.
ListVirtualMFADevices Queries the list of all MFA devices.
DeleteVirtualMFADevice Deletes an MFA device.
BindMFADevice Attaches an MFA device to a RAM user.
UnbindMFADevice Detaches an MFA device from a RAM user.
GetUserMFAInfo Queries the MFA device that is attached to a RAM user.
ChangePassword Changes the password of a RAM user.

RAM user group management

Operation Description
CreateGroup Creates a RAM user group.
GetGroup Queries the information of a RAM user group.
UpdateGroup Modifies a RAM user group.
ListGroups Queries the list of all RAM user groups.
DeleteGroup Deletes a RAM user group.
AddUserToGroup Adds a RAM user to a RAM user group.
RemoveUserFromGroup Removes a RAM user from a RAM user group.
ListGroupsForUser Queries the RAM user groups that a RAM user has joined.
ListUsersForGroup Queries RAM users in a RAM user group.

RAM role management

Operation Description
CreateRole Creates a RAM role.
GetRole Queries the information of a RAM role.
UpdateRole Modifies a RAM role.
ListRoles Queries the list of all RAM roles.
DeleteRole Deletes a RAM role.

Policy management

Operation Description
CreatePolicy Creates a policy.
GetPolicy Queries the information of a policy.
DeletePolicy Deletes a policy.
ListPolicies Queries a list of policies.
CreatePolicyVersion Creates a version for a policy.
GetPolicyVersion Queries the information of a policy version.
DeletePolicyVersion Deletes a policy version.
ListPolicyVersions Queries the versions of a policy.
SetDefaultPolicyVersion Sets the default version of a policy.
AttachPolicyToUser Attaches a policy to a RAM user.
DetachPolicyFromUser Detaches a policy from a RAM user.
AttachPolicyToGroup Attaches a policy to a RAM user group.
DetachPolicyFromGroup Detaches a policy from a RAM user group.
AttachPolicyToRole Attaches a policy to a RAM role.
DetachPolicyFromRole Detaches a policy from a RAM role.
ListEntitiesForPolicy Queries the entities to which a policy is attached.
ListPoliciesForUser Queries the policies that are attached to a RAM user.
ListPoliciesForGroup Queries the policies that are attached to a RAM user group.
ListPoliciesForRole Queries the policies that are attached to a RAM role.

Security control

Operation Description
SetAccountAlias Sets the alias of an Alibaba Cloud account.
GetAccountAlias Queries the alias of an Alibaba Cloud account.
ClearAccountAlias Deletes the alias of an Alibaba Cloud account.
SetPasswordPolicy Sets the password policy, including the password strength, for RAM users.
GetPasswordPolicy Queries the password policy, including the password strength, of RAM users.
SetSecurityPreference Sets the security preferences.