Skip to main content

Access Management

Access Management lets you control user permissions and resource access. You can manage users, create custom roles, and configure function and data permissions.

First-time Setup

To set up user access for the first time, follow these steps in order:

  1. Create a role - Define permissions and access levels
  2. Add users - Invite users to the platform
  3. Assign roles - Grant users the appropriate role

Users

User List

View and manage all users in the platform. Administrators can add, edit, or remove users and assign roles at any time.


user-list


Add a user

  1. Click Add User.
  2. Select an Alibaba Cloud RAM Role from the dropdown menu. RAM roles cannot distinguish GPU permissions and have access to all GPUs by default.
  3. Select a role from the dropdown menu. You can select one or more roles.

add-user-modal


Roles

Role List

View and manage all custom roles in the platform. Administrators can create, edit, or delete roles and configure permissions at any time.


role-list


Create a role

Create and configure custom roles by specifying permissions.


create-role


Role information

Provide the following details:

  • Role Name: The name of the role.
  • Description: A description of the role's purpose and permissions.

Function Permissions

Control access to platform features:

FeaturePermission Levels
DeploymentsOne's own data, Full Access
UsageNo Access, One's own data, Full Access
BillingNo Access, One's own data, Full Access
SecretsOne's own data, Full Access
Access ManagementNo Access, Full Access
Cluster ManagementNo Access, Full Access

Data Permissions

Configure GPU resource access and expiration settings:

  • GPU Spec: Choose how to set expiration times:
    • Uniform Expiration Time: Apply the same expiration time to all GPU resources.
    • Individual Expiration Times: Set different expiration times for each GPU resource.

Next Steps

Cluster Management

Register and manage your Kubernetes clusters for private deployments.

Dedicated Gateway

Set up custom domains for your API endpoints with dedicated gateways.