You can specify specific RAM identities (RAM users or roles) that are allowed to access an official third-party application. If a security risk occurs, you can revoke access at any time. This assignment feature is available only for official applications. By default, all RAM identities in your account can access unofficial third-party applications.
Assignment methods
On-demand assignment (default): Manually specify specific RAM identities that are allowed to access the application.
Assignment to all: All RAM identities in the account can access the application without requiring manual assignment.
Your Alibaba Cloud account has access to the application by default.
On-demand assignment (default)
Go to the details page of the application. On the Assignments tab, click Create Assignment.

In the Create Assignment panel, select the RAM users or roles that are allowed to access the application and click OK.
You can also revoke the access permissions of a RAM user or role by clicking Delete Assignment.
Assignment to all
On the official application details page, change Assignment Type to Assign all.
