ApsaraMQ for MQTT:Activate ApsaraMQ for MQTT and grant permissions to a RAM user

Activate ApsaraMQ for MQTT

1. Log on to the ApsaraMQ for MQTT console.

2. On the Overview page, click Activate for Free.

3. On the service activation page, click Activate Now.

   Note

   ApsaraMQ for MQTT is provided as part of ApsaraMQ for RocketMQ. Activating ApsaraMQ for RocketMQ automatically activates ApsaraMQ for MQTT. Activation is free.

Grant permissions to a RAM user

If you use an Alibaba Cloud account, you already have full access to ApsaraMQ for MQTT resources. Skip this section.

If you use a RAM user, grant the required permissions through your Alibaba Cloud account before the RAM user can access ApsaraMQ for MQTT resources.

1. Log on to the RAM console as a RAM administrator.

2. In the left-side navigation pane, choose Identities > Users.

3. On the Users page, find the RAM user and click Add Permissions in the Actions column.

   

   To grant permissions to multiple RAM users at once, select the users and click Add Permissions at the bottom of the page.

4. In the Grant Permission panel, configure the following parameters:

   1. Set Resource Scope.

      • Account: The authorization applies to the current Alibaba Cloud account.

      • ResourceGroup: The authorization applies to a specific resource group.

      Important

      If you select ResourceGroup, make sure that the cloud service supports resource groups. For more information, see Services that work with Resource Group. For more information about resource group-based authorization, see Use a resource group to grant a RAM user the permissions to manage a specific ECS instance.

   2. Verify the Principal.

      The principal is the RAM user to which you want to grant permissions. The current RAM user is selected by default.

   3. Select a Policy.

      A policy defines a set of permissions. Select one or more policies from the following types:

      • System policies: Predefined by Alibaba Cloud. You can use but not modify these policies. Alibaba Cloud maintains version updates. For more information, see Services that work with RAM.

        Note

        The system flags high-risk policies such as AdministratorAccess and AliyunRAMFullAccess. Avoid attaching these policies unless necessary.

      • Custom policies: Created and managed by you based on your business requirements. For more information, see Create a custom policy.

   4. Click Grant permissions.

5. Click Close.

System policies for ApsaraMQ for MQTT

The following table lists the system policies available for ApsaraMQ for MQTT. Attach a policy based on the access level that the RAM user needs.