AnalyticDB：Perform authorization

Create a RAM user.

1. Use Alibaba Cloud account A or the RAM administrator to log on to the RAM console.

2. In the left-side navigation pane, choose Identities > Users.

3. On the Users page, click Create User.

4. In the User Account Information section of the Create User page, configure the following parameters:

   • Logon Name: The logon name can be up to 64 characters in length, and can contain letters, digits, periods (.), hyphens (-), and underscores (_).

   • Display Name: The display name can be up to 128 characters in length.

   • Tag: Click the icon and enter a tag key and a tag value. You can add one or more tags to the RAM user. This way, you can manage the RAM user based on the tags.

   Note

   You can click Add User to create multiple RAM users at a time.

5. In the Access Mode section, select Console Password Logon and configure the logon security settings. The settings specify whether to use a system-generated or custom logon password, reset the password upon the next logon, and enable multi-factor authentication (MFA). For more information, see the "Console Access" section of the Create a RAM user topic.

6. Click OK.

Create a policy that allows the RAM user to assume any role.

1. In the left-side navigation pane, choose Permissions > Policies.

2. On the Policies page, click Create Policy.

3. On the Create Policy page, click the JSON tab.

4. Enter the following policy content in the code editor and click Next to edit policy information.

   {
       "Version": "1",
       "Statement": [
           {
               "Action": "ram:PassRole",
               "Resource": "*",
               "Effect": "Allow"
           }
       ]
   }

5. Configure the Name and Description parameters.

6. Click OK.