To use a RAM user to manage instances or train models, you must use your Alibaba Cloud account to authorize the RAM user. This topic describes how to authorize a RAM user.

Step 1: Create a permission policy

  1. Log on to the RAM console.
  2. In the left-side navigation pane, choose Permissions > Policies.
  3. On the Policies page, click Create Policy.
  4. On the Create Custom Policy page, set the Policy Name parameter to autolearningfullaccess.
  5. On the Create Custom Policy page, set the Configuration Mode parameter to Script. You can modify the Policy Document parameter as needed.
    The following code provides an example of the policy content:
        "Version": "1",
        "Statement": [
                "Effect": "Allow",
                "Action": [
                "Resource": "*"
                "Action": [
                "Resource": "*",
                "Effect": "Allow"
    Permission Description
    CreateInstance The permission to create and delete instances.
    EditInstance The permission to edit instances.
    LabelInstance The permission to label images and the permission to add, delete, and modify labels.
    TrainInstance The permission to train models.
    ListInstance The permission to query instance information.

Step 2: Grant permissions to the RAM user

  1. In the left-side navigation pane of the RAM console, choose Identities > Users.
  2. On the Users page, find the RAM user to which you want to grant permissions and click Add Permissions in the Actions column.
  3. In the Add Permissions panel, click the Custom Policy tab in the Select Policy section.
  4. Optional:In the Select Policy field, enter the permission policy name autolearningfullaccess to search for the policy.
  5. In the list of custom policies below the Select Policy section, select autolearningfullaccess.
  6. Click OK.