What is the difference between the multi-application service and RAM?
- The Resource Access Management (RAM) service isolates and manages permissions on resources for accounts. The multi-application service physically isolates resources and data of multiple users in the same Alibaba Cloud account.
- The multi-application service does not support logon or authentication for Alibaba Cloud accounts. You must attach the AliyunVODFullAccess policy to the RAM user in the RAM console to perform fine-grained permission control for applications. AliyunVODFullAccess allows users to access, manage, and perform operations on resources in ApsaraVideo VOD. You must use the multi-application service together with RAM to implement role-based access control.
Why does a permission error occur when I use the multi-application service after I attach the AliyunVODFullAccess policy to the RAM user?
Before you use the multi-application service, you must attach the AliyunVODFullAccess policy and grant the permissions to manage the sub-application to the RAM user or RAM role. For more information, see AttachAppPolicyToIdentity.
Are existing services affected after I activate the multi-application service?
No. ApsaraVideo VOD is backward compatible. By default, data is placed in the default application. If a RAM user or a RAM role in your Alibaba Cloud account is granted permissions to access ApsaraVideo VOD, the RAM user or RAM role is also granted permissions on the default application.
Can I authorize a third-party account to access resources in an application?
Yes, you can use a RAM role to authorize third-party accounts to access resources in an application. For more information, see Use a RAM role to grant permissions across Alibaba Cloud accounts.
Can each application be billed separately?
No. Separate billing is not supported for applications. Resources such as storage resources and domain names are not physically isolated for applications. After all sources such as storage resources, domain names, transcoding resources, and AI processing resources are isolated, the usage and data statistics of each application can be separately calculated or collected. The bills are generated for your Alibaba Cloud account.
Why am I unable to find an existing media asset in the ApsaraVideo VOD console?
Only media assets of the default application are displayed in the ApsaraVideo VOD
console. You can call the SearchMedia operation to query the application to which your media asset belongs. The AppId parameter in the response indicates the ID of the application.