This topic describes the logon methods that are supported by Realtime Compute for Apache Flink.
Logon type | Description | Logon method | References |
Alibaba Cloud account | An Alibaba Cloud account owns Alibaba Cloud resources and has all permissions on resources within the account. Resource usage is calculated and billed to the Alibaba Cloud account. | Logon by using an Alibaba Cloud account | |
RAM user | A RAM user is an entity that you create in Resource Access Management (RAM) to represent an individual or a program that requires to access Alibaba Cloud. After you create a RAM user and grant the required permissions on a service to the RAM user, you can use the RAM user to access the service. For more information, see Create a RAM user. | Logon as a RAM user | Log on to the Alibaba Cloud Management Console as a RAM user |
RAM role | A RAM role is a virtual identity to which policies can be attached. A RAM role does not have permanent identity credentials, such as a logon password or an AccessKey pair. A RAM role can be used only after the role is assumed by a trusted entity. For more information, see RAM role overview. | Logon by using a RAM user of Alibaba Cloud Account A to assume a RAM role of Alibaba Cloud Account A | |
Logon by using a RAM user of Alibaba Cloud Account B to assume a RAM role of Alibaba Cloud Account A | Use a RAM role to grant permissions across Alibaba Cloud accounts | ||
Member in a resource directory | The Resource Directory service allows you to manage the relationships among a number of accounts and resources. A member can be a resource account or cloud account. Members that are created in a resource directory are resource accounts. A resource account is used to isolate the resources of a project or application on Alibaba Cloud from other resources. For more information, see Resource Directory overview. | Logon by using a RAM user of the management account of a resource directory to assume the RAM role of a member in a resource directory | Use a RAM role to log on to the Alibaba Cloud Management Console |
Logon as a RAM user created for a member of a resource directory | Log on to the Alibaba Cloud Management Console as a RAM user | ||
Logon by using an Alibaba Cloud account (root user) (not recommended) | Log on to the Alibaba Cloud Management Console as the root user of a member | ||
Logon by using a CloudSSO user to assume a RAM role | |||
Logon by using a RAM user that has the same username as a CloudSSO user |
If you use your Alibaba Cloud account to log on to the Realtime Compute for Apache Flink console and access resources that belong to the account, no authorization is required. If you use other methods to log on to the Realtime Compute for Apache Flink console, you must be granted the required permissions to use related features. For more information, see Permission management.