Platform For AI:Use RAM to manage permissions

RAM provides centralized access control across your organization. You can assign unique logon passwords and AccessKeys to RAM users, bind multi-factor authentication (MFA) devices, and configure granular permissions to enforce the principle of least privilege.

RAM integrates with your existing identity infrastructure. Single sign-on (SSO) lets users authenticate to Alibaba Cloud with their enterprise identity provider (IdP) credentials. DingTalk integration allows users to log on using DingTalk accounts. The System for Cross-domain Identity Management (SCIM) synchronizes corporate user accounts to RAM automatically.

PAI (Platform for AI) may require dependent services such as Realtime Compute for Apache Flink, Object Storage Service (OSS), and Virtual Private Cloud (VPC) for AI development. Activate these services with an Alibaba Cloud account or an authorized RAM user. To see which services PAI depends on, log on to the PAI console and go to the Dependent Services page.

For the permissions required by each PAI module, see the following topics:

• Grant the permissions that are required to use iTAG

• Grant the permissions that are required to use Machine Learning Designer

• Grant the permissions that are required to use DSW

• Grant the permissions that are required to use DLC

• Grant the permissions that are required to use EAS