Use RAM Users to Perform Access Control on Resources - Direct Mail

In a multi-user environment, you can create multiple RAM users and grant the RAM users different permissions on Direct Mail resources. This way, you can manage different resources by using different RAM users. This improves the efficiency of resource management and reduces the risks of data leaks. This topic describes how to create a RAM user and grant specific permissions to the RAM user.

Procedure

1. Create a RAM user.

For more information, see Create a RAM user.

2. Create a policy. Alibaba Cloud provides system policies that allow you to access Direct Mail resources.

Create a policy in the Resource Access Management (RAM) Console.

Create a policy file.

Default template:

JSON

{
    "Version": "1",
    "Statement": [
        {
            "Action": "dm:*",
            "Resource": "*",
            "Effect": "Allow"
        }
    ]
}

Example

If you want to create a policy file, specify SingleSendMail for the Action element.

For more information about the syntax, see the RAM documentation.

JSON

{
    "Version": "1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": [
                "dm:SingleSendMail"
            ],
            "Resource": [
                "acs:dm:*:*:*"
            ]
        }
    ]
}