Prerequisites
You have registered an Alibaba Cloud account. If you do not have an account, please register an account.
You have created a RAM user. If you have not created one, please create a RAM user.
NoteFor more information about how to configure permissions for a RAM account, see Configure permissions.
Procedure
In the Resource Access Management (RAM) authentication system, each Action corresponds to an API request in the mPaaS console. You can determine the name of an Action as shown in the following figure.

The format of an Action is mpaas:XxxYyy. For example, the Action indicated by the arrow in the figure is mpaas:ListMdsUpgradePackages.
For example:
{
"Version": "1",
"Statement": [
{
"Action": [
"mpaas:ListMdsUpgradePackages"
],
"Resource": "*",
"Effect": "Deny"
},
{
"Action": [
"mpaas:*"
],
"Resource": "*",
"Effect": "Allow"
}
]
}This authorization policy grants all permissions for the mPaaS product except for the ListMdsUpgradePackages API operation.