Sls grant

How to Use SLS Authorization File to Grant Permissions to RAM Account

This guide explains how to create a RAM account and grant permissions from scratch. If you have already performed these steps before, you can skip this section.

Steps¶

1. Download the SLS authorization file during the registration process for Guance's exclusive SLS plan, open it, and copy the JSON backup. This will be used later.

For details on the registration process, refer to the document Activating Guance Exclusive Plan via Alibaba Cloud Marketplace.

1. Log in to Alibaba Cloud using your primary account and complete real-name verification (if no prompt appears, it means verification has already been completed).

2. Click on the profile picture in the top-right corner, then select AccessKey Management.

1. Start using the sub-user AccessKey.

1. Create an AccessKey.

Note: Since the AccessKey Secret can only be viewed once, it is recommended to copy and back it up after creation.

1. Go to RAM Access Control > Users, create a RAM user, and click Add Permissions.

1. Click Create Permission Policy.

1. Click Script Editor and paste the JSON copied in the first step here.

1. Add this permission policy to the authorization.

1. Enable the Log Service for your Alibaba Cloud account.