Service Catalog:Grant permission to an end user

Console

1. Log on to the RAM console.

2. On the Users page, find the target user and click Add Permissions in the Operation column.

3. In the Grant Permission panel, configure permissions for the RAM user.

   1. For Resource Scope, select Account.

   2. Select Permission Policy: Search for and select AliyunServiceCatalogEndUserFullAccess, which is a System Policy. To grant additional Custom Policies, first create a custom permission policy and then select the required permissions.

      Note

      The AliyunServiceCatalogEndUserFullAccess policy grants end users the permissions required to launch products and manage instances in the Service Catalog console.

4. Click OK.

API

Grant a custom policy

1. Call CreatePolicy to create a custom policy. For more information, see Permission policy elements and Overview of sample policies.

2. Call the AttachPolicyToUser operation to attach the permission policy to the specified RAM user. In the request, set PolicyType to Custom.

Grant a system policy

Call the AttachPolicyToUser operation to attach the permission policy to the specified RAM user. In the request, set PolicyType to System and PolicyName to AliyunServiceCatalogEndUserFullAccess.