Create RAM users or roles and grant them specific PTS permissions to avoid exposing your Alibaba Cloud account credentials and reduce security risks.
Prerequisites
PTS has been activated. For more information, see billing overview.
Grant permissions to a RAM user
-
Create a RAM user. If you already have a RAM user, skip this step.
-
Grant the RAM user full or read-only access to PTS as needed.
Full access
-
Log on to the RAM console using your Alibaba Cloud account or as a RAM administrator.
-
In the left-side navigation pane, choose .
-
On the Users page, find the target RAM user and click Add Permissions in the Actions column.
-
In the Grant Permission panel, add the
AliyunPTSFullAccesspermission to the RAM user. Click OK.
Read-only access
-
Log on to the RAM console using your Alibaba Cloud account or as a RAM administrator.
-
In the left-side navigation pane, choose .
-
On the Users page, find the target RAM user and click Add Permissions in the Actions column.
-
In the Grant Permission panel, add the
AliyunPTSReadOnlyAccesspermission to the RAM user. Click OK.
-
Grant permissions to a RAM role
The PTS console supports role-based sign-in.
-
Create a RAM role for a trusted Alibaba Cloud account. If you already have a RAM role, skip this step.
-
Grant the RAM role full or read-only access to PTS as needed.
Full access
-
Log on to the RAM console using your Alibaba Cloud account or as a RAM administrator.
-
In the left-side navigation pane, choose .
-
On the Roles page, find the target RAM role and click Grant Permission in the Actions column.
-
In the Grant Permission panel, add the
AliyunPTSFullAccesspermission to the RAM role. Click OK.
Read-only access
-
Log on to the RAM console using your Alibaba Cloud account or as a RAM administrator.
-
In the left-side navigation pane, choose .
-
On the Roles page, find the target RAM role and click Grant Permission in the Actions column.
-
In the Grant Permission panel, add the
AliyunPTSReadOnlyAccesspermission to the RAM role. Click OK.
-