Resource Access Management (RAM) allows you to manage domain names by group. You can grant RAM users permissions on different API operations as needed to regulate access control. This topic describes how to create a RAM user and grant permissions to the RAM user.

Background information

RAM is an Alibaba Cloud service that manages user identities and access permissions on resources. One Alibaba Cloud account can create multiple RAM users and grant permissions to RAM users as needed. RAM allows you to manage permissions that each user has on different resources. For more information, see What is RAM?.


  1. Create a RAM user.
    For more information, see Create a RAM user.
  2. Optional:Create a custom permission policy about Alibaba Cloud CDN.
    RAM provides the following system permission policies: AliyunCDNFullAccess and AliyunCDNReadOnlyAccess. If you require finer-grained access control, you can create custom permission policies. For more information, see Use RAM to manage CDN permissions.
  3. Log on to the Alibaba Cloud CDN console as the RAM user.
    Note You cannot manage DCDN as a RAM user.The procedures for managing other features are the same between a RAM user and an Alibaba Cloud account.

    Log on to the Alibaba Cloud Management Console as a RAM user at For more information, see Log on to the console as a RAM user.