All Products
Search
Document Center

Resource Access Management:Assign user access to third-party applications

Last Updated:Dec 05, 2025

You can specify specific RAM identities (RAM users or roles) that are allowed to access an official third-party application. If a security risk occurs, you can revoke access at any time. This assignment feature is available only for official applications. By default, all RAM identities in your account can access unofficial third-party applications.

Assignment methods

  • On-demand assignment (default): Manually specify specific RAM identities that are allowed to access the application.

  • Assignment to all: All RAM identities in the account can access the application without requiring manual assignment.

Note

Your Alibaba Cloud account has access to the application by default.

On-demand assignment (default)

  1. Install an official application.

  2. Go to the details page of the application. On the Assignments tab, click Create Assignment.

    image

  3. In the Create Assignment panel, select the RAM users or roles that are allowed to access the application and click OK.

You can also revoke the access permissions of a RAM user or role by clicking Delete Assignment.

Assignment to all

  1. Install an official application.

  2. On the official application details page, change Assignment Type to Assign all.

    image