How to create and authorize a RAM user - - Alibaba Cloud Documentation Center

You can control access to OpenSearch Vector Search Edition by creating and authorizing RAM users. This allows you to grant specific permissions, such as creating instances and viewing monitoring metrics. Two types of permission policies are supported: system policies and custom policies.

Create a RAM user

A RAM user is an identity in Resource Access Management (RAM) that represents a person or an application. After you create a RAM user and grant the necessary permissions, the user can access your resources.

For detailed steps, see Create a RAM user.

Authorize a RAM user

After you grant permissions to a RAM user, they can access the corresponding OpenSearch Vector Search Edition resources. You can grant permissions by attaching system policies or custom policies. For detailed steps, see Grant permissions to a RAM user and Create a custom permission policy.

Common permission policies

(System policy) Management permissions:

AliyunSearchEngineFullAccess
(System policy) Read-only permissions:

AliyunSearchEngineReadOnlyAccess

(Custom policy) Instance monitoring permissions:

{
    "Version": "1",
    "Statement": [
        {
            "Effect": "Allow",
            "Action": "elasticsearch:*",
            "Resource": "acs:elasticsearch:*:*:emonProjects/*"
        },
        {
            "Action": "ims:*",
            "Effect": "Allow",
            "Resource": "acs:ims:*:*:application/*"
        }
    ]
}

(System policy) View and configure alerts:

AliyunElasticsearchReadOnlyAccess and AliyunElasticsearchFullAccess