All Products
Search

This Product

    Resource Access Management:List of operations by function

    Document Center

    Resource Access Management:List of operations by function

    Last Updated:Mar 11, 2024
    This product(Ram/2015-05-01) OpenAPI adopts RPC Signature style. See signature details in Description of the signature mechanism. We have packaged SDKs for common programming languages for developers. Developers can directly call the OpenAPI of this product by downloading the SDK without paying attention to the technical details. If the existing SDK cannot meet the usage requirements, you can connect through the signature mechanism. It will take about 5 working days. Therefore, it is recommended to join our DingTalk service group (11370001915) and sign under the guidance of experts.
    Before using the API, you need to prepare your identity account and access key (AccessKey) to effectively access the API through client tools (SDK, CLI, etc.). For details see getAccessKey.

    User management

    APITitleDescription
    RAM UserRAM User
    CreateUserCreateUserCreates a Resource Access Management (RAM) user.
    GetUserGetUserQueries the information about a RAM user.
    UpdateUserUpdateUserModifies the information about a RAM user.
    DeleteUserDeleteUserYou can call this operation to delete a RAM user.
    ListUsersListUsersQueries the information about all RAM users.
    Login ProfileLogin Profile
    CreateLoginProfileCreateLoginProfileEnables console logon for a RAM user.
    GetLoginProfileGetLoginProfileQueries the logon configurations of a RAM user.
    UpdateLoginProfileUpdateLoginProfileModifies the logon configurations of a RAM user.
    DeleteLoginProfileDeleteLoginProfileDisables console logon for a RAM user.
    ChangePasswordChangePasswordChanges the password that is used to log on to the Alibaba Cloud Management Console.
    AccessKeyAccessKey
    CreateAccessKeyCreateAccessKeyCreates an AccessKey pair for a RAM user.
    UpdateAccessKeyUpdateAccessKeyChanges the status of an AccessKey that belongs to a RAM user.
    DeleteAccessKeyDeleteAccessKeyDeletes an AccessKey pair of a RAM user.
    ListAccessKeysListAccessKeysQueries the list of all AccessKey pairs that belong to a RAM user.
    MFAMFA
    CreateVirtualMFADeviceCreateVirtualMFADeviceCreates a multi-factor authentication (MFA) device.
    GetUserMFAInfoGetUserMFAInfoQueries the multi-factor authentication (MFA) device that is attached to a Resource Access Management (RAM) user.
    DeleteVirtualMFADeviceDeleteVirtualMFADeviceDeletes a multi-factor authentication (MFA) device.
    ListVirtualMFADevicesListVirtualMFADevicesQueries the list of all multi-factor authentication (MFA) devices.
    BindMFADeviceBindMFADeviceAttaches a multi-factor authentication (MFA) device to a RAM user.
    UnbindMFADeviceUnbindMFADeviceDetaches a multi-factor authentication (MFA) device from a RAM user.

    User group management

    APITitleDescription
    CreateGroupCreateGroupCreates a RAM user group.
    GetGroupGetGroupQueries the information of a RAM user group.
    UpdateGroupUpdateGroupModifies a RAM user group.
    DeleteGroupDeleteGroupDeletes a RAM user group.
    ListGroupsListGroupsQueries RAM user groups.
    ListGroupsForUserListGroupsForUserQueries the Resource Access Management (RAM) user groups to which a RAM user belongs.
    ListUsersForGroupListUsersForGroupQueries RAM users in a RAM user group.
    AddUserToGroupAddUserToGroupAdds a RAM user to a RAM user group.
    RemoveUserFromGroupRemoveUserFromGroupRemoves a RAM user from a RAM user group.

    Role management

    APITitleDescription
    CreateRoleCreateRoleCreates a RAM role.
    DeleteRoleDeleteRoleDeletes a RAM role.
    UpdateRoleUpdateRoleChanges the description of a RAM role.
    GetRoleGetRoleQueries information of a RAM role.
    ListRolesListRolesQueries the list of all RAM roles.

    Permission management

    APITitleDescription
    Permission Policy ManagementPermission Policy Management
    CreatePolicyCreatePolicyCreates a custom policy.
    GetPolicyGetPolicyQueries the information of a policy.
    UpdatePolicyDescriptionUpdatePolicyDescriptionModifies the description of a custom policy.
    DeletePolicyDeletePolicyDeletes a policy.
    ListPoliciesListPoliciesQueries a list of policies.
    CreatePolicyVersionCreatePolicyVersionCreates a version for a policy.
    GetPolicyVersionGetPolicyVersionQueries the information of a policy version.
    DeletePolicyVersionDeletePolicyVersionDeletes a policy version.
    ListPolicyVersionsListPolicyVersionsQueries the versions of a policy.
    SetDefaultPolicyVersionSetDefaultPolicyVersionSets the default version of a policy.
    Authorization ManagementAuthorization Management
    AttachPolicyToUserAttachPolicyToUserAttaches a policy to a RAM user.
    DetachPolicyFromUserDetachPolicyFromUserDetaches a policy from a RAM user.
    AttachPolicyToGroupAttachPolicyToGroupAttaches a policy to a RAM user group.
    DetachPolicyFromGroupDetachPolicyFromGroupDetaches a policy from a RAM user group.
    AttachPolicyToRoleAttachPolicyToRoleAttaches a policy to a RAM role.
    DetachPolicyFromRoleDetachPolicyFromRoleDetaches a policy from a RAM role.
    ListPoliciesForUserListPoliciesForUserQueries the policies that are attached to a RAM user.
    ListPoliciesForGroupListPoliciesForGroupQueries the policies that are attached to a RAM user group.
    ListPoliciesForRoleListPoliciesForRoleQueries the policies that are attached to a RAM role.
    ListEntitiesForPolicyListEntitiesForPolicyQueries the entities to which a policy is attached.

    Security management

    APITitleDescription
    SetAccountAliasSetAccountAliasYou can call this operation to specify an alias for an Alibaba Cloud account.
    GetAccountAliasGetAccountAliasQueries the alias of an Alibaba Cloud account.
    ClearAccountAliasClearAccountAliasDeletes the alias of the Alibaba Cloud account.
    SetPasswordPolicySetPasswordPolicyConfigures the password policy for RAM users, including the password strength.
    GetPasswordPolicyGetPasswordPolicyQueries the password policy, including the password strength, of RAM users.
    SetSecurityPreferenceSetSecurityPreferenceConfigures the security preferences.
    GetSecurityPreferenceGetSecurityPreferenceQueries the security preferences.

    Permission analysis and diagnostics

    APITitleDescription
    DecodeDiagnosticMessageDecodeDiagnosticMessageDecodes the diagnostic information in the response that contains an access denied error. The error is caused by no RAM permissions.