RAM authorization controls access to the Service Catalog console. Service Catalog authorization controls which products end users can view. Both types are required to manage products.
| Authorization method | Scenario | Authorization purpose | Usage note | References |
| Authorization in the RAM console | Grant RAM users or RAM roles access to Service Catalog. | Grant read-only or read/write permissions on the Service Catalog console. | RAM permissions do not include access to view or use products in Service Catalog. RAM authorization is required only when the administrator is a RAM user or role. Alibaba Cloud accounts already have full permissions to manage all resources. To reduce security risks from excessive permissions, use a RAM user or role as the administrator. |
|
| Authorization in the Service Catalog console | Grant end users access to view products in Service Catalog. | Allow end users to view the product list. | Administrators grant end user permissions on the Portfolio management page. | Grant access to an end user |