How to authorize a RAM user as a Service Catalog administrator - Service Catalog

A Service Catalog administrator defines, manages, and distributes compliant IT services and requires permissions to manage the Service Catalog console, products, portfolios, constraints, and end-user access. An administrator can be an Alibaba Cloud account, a RAM user, or a RAM role. The following example uses a RAM user.

Prerequisites

A RAM user is created. For more information, see Create a RAM user.

Procedure

Console

Log on to the RAM console.
On the Users page, find the target user and click Add Permissions in the Operation column.
In the Grant Permission panel, configure the following settings.
1. For Resource Scope, select Account.
2. For Policy, search for and select AliyunServiceCatalogAdminFullAccess. This is a system policy. If you need to grant other custom policies, you must first create a custom permission policy and then select the policy.
  
  Note
  AliyunServiceCatalogAdminFullAccess grants full administrative permissions for Service Catalog, including access to all features available to end users and other administrators.
Click OK.

API

Grant a custom policy

Call the CreatePolicy operation to create a custom policy. For more information, see Basic elements of a permission policy and Overview of the permission policy example library.
Call the AttachPolicyToUser operation to attach the permission policy to the specified RAM user. Set the PolicyType parameter to Custom.

Grant a system policy

Call the AttachPolicyToUser operation to attach the permission policy to the specified RAM user. Set the PolicyType parameter to System and the PolicyName parameter to AliyunServiceCatalogAdminFullAccess.