All Products
Search

This Product

    ID Verification:Authorize a RAM user to access ID Verification

    Document Center

    ID Verification:Authorize a RAM user to access ID Verification

    Last Updated:Sep 15, 2026

    ID Verification supports access through RAM users. Create and authorize RAM users with specific permissions to call the ID Verification SDK or API, and generate AccessKey pairs for API authentication.

    Prerequisites

    • ID Verification is activated for your Alibaba Cloud account. For more information, see Activate ID Verification.

    • You have access to the Alibaba Cloud account.

    Procedure

    1. Sign in to the RAM console using your Alibaba Cloud account or as a RAM user with administrative permissions (a user to which the AliyunRAMFullAccess policy is attached).

    2. In the left-side navigation pane, choose Identities > Users.

    3. Optional. Click Create User to create a RAM user.

      If you have created a RAM user, skip this step. For instructions, see Create a RAM user.

    4. Grant permissions on ID Verification to the RAM user.

      Note

      An Alibaba Cloud account has full control over all resources within it. If your account credentials are disclosed, security risks may occur. We strongly recommend that you grant RAM users only the minimum permissions required for ID Verification (principle of least privilege).

      1. On the Users page, find the RAM user to which you want to grant permissions and click Add Permissions in the Actions column.

      2. In the Select Policy section of the Add Permissions panel, click System Policy and select the policies to attach to the RAM user.

        The following table lists the System Policies for ID Verification. Search by keyword, such as AntCloud, to find and attach a policy.

        Policy

        Note

        Description

        AliyunAntCloudAuthFullAccess

        Management permissions on ID Verification

        Grants the following permissions:

        • Call API operations.

        • View call details.

        • Purchase products.

        AliyunYundunCloudAuthFullAccess

        Access permissions on the ID Verification console

        Grants the following permissions:

        • View call counts and verification details in the ID Verification console.

      3. Click OK. Then, click Complete.

    5. Optional. To call API operations as the RAM user, create an AccessKey pair for the RAM user. The AccessKey pair authenticates API calls.

      For more information about how to create an AccessKey pair for a RAM user, see Create an AccessKey.

      Note

      Create AccessKey pairs only for RAM users that need API access.

      After authorization, the RAM user can integrate ID Verification into your app or view API call information.