Resource Access Management (RAM) is a free service that is provided by Alibaba Cloud for identity management and access control. You can use RAM to manage access to and permissions on Alibaba Cloud services.
RAM enables you to establish a centralized access control system. You can assign unique logon passwords and access keys to different members, bind multi-factor authentication (MFA) devices to RAM users, and configure permissions for each RAM user. RAM enforces the principle of least privilege and ensures the security of your assets.
You can integrate RAM with the account system of your organization to streamline user access. For example, single sign-on (SSO) enables users to access Alibaba Cloud services by using existing enterprise identity provider (IdO) credentials. Integration with DingTalk accounts allows users to log on to Alibaba Cloud accounts by using DingTalk credentials. The System for Cross-domain Identity Management (SCIM) can synchronize the user accounts of your corporate system to RAM.
When you use Platform for AI (PAI) for AI development, you may need to use other Alibaba Cloud services, including Realtime Compute for Apache Flink, Object Storage Service (OSS), and Virtual Private Cloud (VPC). You must activate the dependent services by using an Alibaba Cloud account or an authorized RAM user. To view the details of the dependent services, log on to the PAI console and go to the Dependent Services page.
For information about the required permissions to use each module in PAI, see the following topics: