To embed the Database Autonomy Service (DAS) console into a self-managed O&M platform using password-free access, you need a RAM user with specific permissions. Complete the steps in this topic before you configure the console embedment.
Prerequisites
Before you begin, ensure that you have:
-
An Alibaba Cloud account with permission to manage Resource Access Management (RAM) users
-
Access to the RAM console
Create a RAM user
Log on to the RAM console by using an Alibaba Cloud account or a RAM user who has administrative rights.
-
Log on to the RAM console using your Alibaba Cloud account.
-
Create a RAM user. For details, see Create a RAM user.
ImportantIn the Access Mode section, select OpenAPI Access for the RAM user to call the AssumeRole operation.
Grant required permissions
Grant both of the following policies to the RAM user. For details, see Grant permissions to the RAM user.
| Policy | What it allows |
|---|---|
AliyunHDMReadOnlyAccess |
Read-only access to DAS resources in the embedded console |
AliyunSTSAssumeRoleAccess |
Permission for the RAM user to call the STS AssumeRole operation and obtain temporary credentials |
What's next
After you grant the required permissions, configure the console embedment. For details, see Embed the DAS console.