This topic shows you how to authorize RAM users to manage Data Science Workshop (DSW) instances and assign service-linked roles to DSW.
Background information
For more information about the structure and syntax of permission policies, see Policy structure and syntax.
Assign a service-linked role to DSW by using the Alibaba Cloud account
To ensure that the DSW can provide services normally, you must use your Alibaba Cloud account to assign the AliyunPAIDSWDefaultRole role to DSW.
- Log on to the Resource Access Management (RAM) console.
- In the left-side navigation pane, click Roles.
- On the Roles page, search for the AliyunPAIDSWDefaultRole role.
- If the role is displayed in the search result, the role is assigned to DSW.
- If the role is not displayed, you must assign the role to DSW. For more information, see Assign service-linked roles.
Authorize RAM users
You can use your Alibaba Cloud account to authorize RAM users to manage DSW instances. Then, the RAM users can create, start, stop, and delete DSW instances.
- Log on to the RAM console.
- Create a custom policy.
- Attach the custom policy to a RAM user.
- In the left-side navigation pane, choose .
- On the Users page, click Add Permissions in the Actions column.
- Optional:In the Add Permissions panel, click Custom Policy.
- In the Select Policy section, enter DSW_Notebook_Access.
- Click DSW_Notebook_Access in the Authorization Policy Name column. Then, the policy is displayed in the Selected section.
- Click OK.
Assign service-linked roles
If you are a first-time user of DSW, you must first assign service-linked roles to DSW so that DSW can access the required resources.