To share PolarDB resources with team members such as developers or operators, create Resource Access Management (RAM) users and grant them the specific permissions they need. After permissions are granted, RAM users can log on to the console and access the PolarDB resources you specify.
Prerequisites
Before you begin, ensure that you have:
-
To use an Alibaba Cloud account, log on with your Alibaba Cloud account.
-
To use a RAM user, log on as a RAM user.
NoteThe logon format for a RAM user is
RAM-user-name@company-alias.
Create a RAM user and grant permissions
-
Create a RAM user. See Create a RAM user for detailed steps.
-
Grant permissions to the RAM user. Two methods are available: After you grant permissions, the RAM user can access only the resources covered by the policies you attached. To follow the principle of least privilege, grant only the permissions the user needs.
-
On the Users page — Grant permissions directly from the RAM user's profile. See Grant permissions on the Users page.
-
On the Grants page — Grant permissions from the centralized authorization page. See Grant permissions on the Grants page.
-
-
Log on to the console as the RAM user. See Log on to the console as a RAM user.
What's next
To manage RAM users further—such as adding users to groups, assigning roles, or granting group-level permissions—see the RAM User Guide.
You can also perform other operations on RAM users, such as adding them to user groups, assigning roles to them, or granting permissions to user groups or roles. For more information, see RAM User Guide.