Create RAM users each employee, and set login passwords or create AccessKey credentials as needed

When creating RAM for users, give each user both web console AND AccessKey credentials: there is no need to keep these separate

When there are multiple RAM users under a cloud account, create user groups to classify and authorize RAM users with the same responsibilities

Use system policies to bind reasonable permissions policies to users or user groups, and customize policies for more fine-grained control