This topic describes the operations that you must perform before you migrate data.
Step 1: Create a RAM user that is used to migrate data
To ensure data security, we recommend that you create a Resource Access Management (RAM) user and grant permissions to the RAM user based on the principle of least privilege.
If you want to migrate data across Alibaba Cloud accounts, you must create RAM users for the Alibaba Cloud account to which the source file system belongs and the Alibaba Cloud account to which the destination file system belongs. Then, you must grant the required permissions to both RAM users. Save the logon name, password, AccessKey ID, and AccessKey secret generated for each RAM user by the corresponding Alibaba Cloud account.
Log on to the RAM console.
In the left-side navigation pane, choose .
On the Users page, click Create User.
In the User Account Information section of the Create User page, configure the Logon Name and Display Name parameters.
In the Access Mode section, select Console Access and Using permanent AccessKey to access. Then, save the generated logon name, password, AccessKey ID, and AccessKey secret.
Console Access: If you select this option, you must configure the console password, password reset settings, and multi-factor authentication (MFA) settings.
Using permanent AccessKey to access: If you select this option, an AccessKey pair is automatically created for the RAM user. The RAM user can call API operations or use other development tools to access Alibaba Cloud resources.
Step 2: Grant permissions to the RAM user
After the RAM user is created, find the RAM user on the Users page and click Add Permissions in the Actions column. Attach the system policy AliyunOSSImportFullAccess to the RAM user.