Skip to main content

Permissions and usage policies

Token Plan purchase and subscription permissions, RAM user authorization, usage scope, API Key rules, and data usage policy.

Purchase and subscription

  • The primary account can purchase Token Plan directly.
  • RAM users can purchase, manage subscriptions, or use models only after the primary account grants authorization.
  • The same verified identity can purchase only one Personal Edition subscription and one Team Edition subscription, which can be purchased at the same time. Team Edition supports multiple seats, up to 1,000 seats.

RAM user authorization

Before a RAM user uses Token Plan, the primary account must complete the following authorization:
  1. Token Plan permissions: Grant AliyunTokenPlanReadOnlyAccess (read-only) or AliyunTokenPlanFullAccess (management).
  2. Billing center permissions: Grant AliyunBSSReadOnlyAccess (read-only) or AliyunBSSFullAccess (management).
  3. Model Studio console permissions: On the Account Management page, assign the administrator or subscription plan permission to the RAM user.
RAM users do not need separate identity verification. As long as the primary account has completed identity verification and usage permissions are assigned to the RAM user, the RAM user can use Token Plan normally.
Without billing center permissions, the My Subscriptions page may be empty after a RAM user signs in.

Plan usage scope

Token Plan is limited to coding tools and agent tools (such as Claude Code, Cursor, Qwen Code, Qoder, and OpenClaw) for interactive use, and must not be used in automated scripts, custom application backends, or any non-interactive batch call scenarios. Models are connected through the tools' extension mechanisms (Skill, Slash Command, or Agent). Calls initiated interactively within a tool are considered normal use. Using the Token Plan API Key for calls outside the allowed scope may be considered a violation or abuse and may result in subscription suspension or API Key banning.

API key usage rules

  • Token Plan API Key: Starts with sk-sp- and is used only for Token Plan model calls. It is displayed in full only once when generated.
  • Personal Edition devices: The same API Key can be configured on multiple devices owned by the subscriber (such as a home computer and an office computer), but only the subscriber can use it.
  • No sharing: The API Key is for the subscriber's own use only and must not be shared or publicly disclosed. Sharing an API Key with others may be deemed a violation and result in a ban.

Data usage policy

EditionData usage rules
Personal EditionDuring use, model inputs and model-generated content are used for service improvement and model optimization. Stopping use of the Personal Edition service terminates subsequent data authorization but does not cover data already authorized for use. For detailed terms, see Section 5.2 of the Alibaba Cloud Model Studio Service Agreement.
Team EditionConversation data is not used to train models.

FAQ

Yes. The primary account can purchase directly. RAM users must first be authorized by the primary account for Token Plan permissions, billing center permissions, and account management permissions.
Token Plan system policies, billing center permissions, and Model Studio console account management permissions. For specific policies, see "RAM user authorization" above.
Usually because the RAM user lacks billing center permissions. Grant AliyunBSSReadOnlyAccess (read-only) or AliyunBSSFullAccess (management).
Yes, after authorization by the primary account. RAM authorization determines only management permissions. Actual calls require the corresponding Token Plan API Key.