After you add a product to a product portfolio, you can grant an end user the permissions to access the product. If the end user no longer needs the permissions, you can revoke the permissions from the end user.
Prerequisites
You are granted the administrative rights of Service Catalog. For more information, see Grant permissions to the administrator.
A product portfolio is created and a product is added to the product portfolio. For more information, see Add an existing product to the product portfolio
An end user is created in the current administrator account. The end user can be a RAM user or a RAM role. For more information, see Create a RAM user and Create a RAM role for a trusted Alibaba Cloud account.
Grant the end user the permissions to access the product
- Log on to the Service Catalog console as the administrator.
- In the left-side navigation pane, choose .
On the Portfolio management page, click the name of the product portfolio to which the product belongs.
Click the Access tab and click Grant access.
In the Add authorization relationship panel, grant the end user the permissions to access the product.
Grant a RAM user the permissions to access the product
Click the RAM user tab.
On the RAM Users tab, find the RAM user for which you want to grant the permissions to access the product and click Authorization in the Operation column.
Grant a RAM role the permissions to access the product
Click the RAM role tab.
On the RAM Role tab, find the RAM role to which you want to grant the permissions to access the product and click Authorization in the Operation column.
After the permissions are granted to the RAM user or RAM role, Authorized is displayed in the Operation column of the RAM user or RAM role.
Revoke the permissions to access the product from the end user
If the end user no longer needs the permissions to access the product, you can revoke the permissions from the end user. This ensures security.
- In the left-side navigation pane, choose .
On the Portfolio management page, click the name of the product portfolio to which the product belongs.
Click the Access tab, find the end user from which you want to revoke the permissions, and then click Remove access in the Operation column.
In the Cancellation of authorization message, check the information and click OK.