The following tables list the API operations available for use in Resource Access Management (RAM).
Note Alibaba Cloud provides OpenAPI Explorer to simplify API usage. You can use OpenAPI Explorer to debug API operations and dynamically
generate SDK sample code.
User management
| Operation | Description |
|---|---|
| CreateUser | Creates a RAM user. |
| GetUser | Queries the information about a RAM user. |
| UpdateUser | Modifies the information about a RAM user. |
| DeleteUser | Deletes a RAM user. |
| ListUsers | Queries all RAM users. |
| CreateLoginProfile | Enables console logon for a RAM user. |
| GetLoginProfile | Queries the logon configurations of a RAM user. |
| DeleteLoginProfile | Disables console logon for a RAM user. |
| UpdateLoginProfile | Modifies the logon configurations of a RAM user. |
| CreateAccessKey | Creates an AccessKey pair for a RAM user. |
| UpdateAccessKey | Changes the status of an AccessKey pair that belongs to a RAM user. |
| DeleteAccessKey | Deletes an AccessKey pair of a RAM user. |
| ListAccessKeys | Queries AccessKey pairs that belong to an Alibaba Cloud account or a RAM user. |
| CreateVirtualMFADevice | Creates a multi-factor authentication (MFA) device. |
| ListVirtualMFADevices | Queries MFA devices. |
| DeleteVirtualMFADevice | Deletes an MFA device. |
| BindMFADevice | Binds an MFA device to a RAM user. |
| UnbindMFADevice | Unbinds an MFA device from a RAM user. |
| GetUserMFAInfo | Queries the MFA device that is attached to a RAM user. |
| ChangePassword | Changes the password of a RAM user. |
User group management
| Operation | Description |
|---|---|
| CreateGroup | Creates a RAM user group. |
| GetGroup | Queries the information about a RAM user group. |
| UpdateGroup | Modifies the information about a RAM user group. |
| ListGroups | Queries RAM user groups. |
| DeleteGroup | Deletes a RAM user group. |
| AddUserToGroup | Adds a RAM user to a RAM user group. |
| RemoveUserFromGroup | Removes a RAM user from a RAM user group. |
| ListGroupsForUser | Queries the RAM user groups to which a RAM user belongs. |
| ListUsersForGroup | Queries RAM users in a RAM user group. |
Role management
| Operation | Description |
|---|---|
| CreateRole | Creates a RAM role. |
| GetRole | Queries the information about a RAM role. |
| UpdateRole | Modifies the information about a RAM role. |
| ListRoles | Queries RAM roles. |
| DeleteRole | Deletes a RAM role. |
Policy management
| Operation | Description |
|---|---|
| CreatePolicy | Creates a policy. |
| GetPolicy | Queries the information about a policy. |
| DeletePolicy | Deletes a policy. |
| UpdatePolicyDescription | Modifies the description of a custom policy. |
| ListPolicies | Queries policies. |
| CreatePolicyVersion | Creates a version for a policy. |
| GetPolicyVersion | Queries the information about a policy version. |
| DeletePolicyVersion | Deletes a policy version. |
| ListPolicyVersions | Queries the versions of a policy. |
| SetDefaultPolicyVersion | Specifies a version for a policy as the default version. |
| AttachPolicyToUser | Attaches a policy to a RAM user. |
| DetachPolicyFromUser | Detaches a policy from a RAM user. |
| AttachPolicyToGroup | Attaches a policy to a RAM user group. |
| DetachPolicyFromGroup | Detaches a policy from a RAM user group. |
| AttachPolicyToRole | Attaches a policy to a RAM role. |
| DetachPolicyFromRole | Detaches a policy from a RAM role. |
| ListEntitiesForPolicy | Queries the entities to which a policy is attached. |
| ListPoliciesForUser | Queries the policies that are attached to a RAM user. |
| ListPoliciesForGroup | Queries the policies that are attached to a RAM user group. |
| ListPoliciesForRole | Queries the policies that are attached to a RAM role. |
Security control
| Operation | Description |
|---|---|
| SetAccountAlias | Configures an alias for an Alibaba Cloud account. |
| GetAccountAlias | Queries the alias of an Alibaba Cloud account. |
| ClearAccountAlias | Deletes the alias of an Alibaba Cloud account. |
| SetPasswordPolicy | Configures the password policy for RAM users, including the password strength. |
| GetPasswordPolicy | Queries the password policy of RAM users, including the password strength. |
| SetSecurityPreference | Configures the security preferences. |