All Products
Search
Document Center

Resource Access Management:Manage console logon settings for a RAM user

Last Updated:Dec 12, 2023

This topic describes how to enable console logon, and view, modify, or clear console logon settings for a Resource Access Management (RAM) user.

Enable console logon for a RAM user

You can enable console logon for a RAM user and configure parameters such as the logon password.

  1. Log on to the RAM console with your Alibaba Cloud account or as a RAM user that has administrative rights.

  2. In the left-side navigation pane, choose Identities > Users.

  3. In the User Logon Name/Display Name column, click the username of the specific RAM user.

  4. In the Console Logon Management section of the Authentication tab, click Enable Console Logon.

  5. In the Modify Logon Settings panel, configure the following parameters.

    • Console Password Logon: Select Enabled.

    • Set Logon Password: Select Automatically Generate Default Password or Custom Logon Password based on your business requirements.

      Warning

      After a password is configured, keep the new password confidential and notify the RAM user of the password. If you do not notify the RAM user of the password, the RAM user cannot log on the Alibaba Cloud Management Console.

    • Password Reset: Set this parameter to specify whether to reset the password upon the next logon of the RAM user.

    • Enable MFA: Set this parameter to specify whether to enable multi-factor authentication (MFA) for the RAM user.

      Note

      If you select Required, the page on which you can enable an MFA device automatically appears upon the next logon of the RAM user.

  6. In the Modify Logon Settings panel, click OK.

View console logon settings of a RAM user

After you enable console logon for a RAM user, you can view the console logon settings.

  1. Log on to the RAM console with your Alibaba Cloud account or as a RAM user that has administrative rights.

  2. In the left-side navigation pane, choose Identities > Users.

  3. In the User Logon Name/Display Name column, click the username of the specific RAM user.

  4. In the Console Logon Management section of the Authentication tab, view the console logon settings.

    • Console Access: indicates whether console logon is enabled.

    • Last Console Logon: indicates the last time that the RAM user logged on to the console.

    • Required to Enable MFA: indicates whether MFA is required when the RAM user logs on to the console.

    • Reset Password at Next Logon: indicates whether password resetting is required when the RAM user logs on to the console the next time.

Modify console logon settings for a RAM user

After you enable console logon for a RAM user, you can modify console logon settings based on your business requirements. For example, you can disable console logon or modify the logon password.

  1. Log on to the RAM console with your Alibaba Cloud account or as a RAM user that has administrative rights.

  2. In the left-side navigation pane, choose Identities > Users.

  3. In the User Logon Name/Display Name column, click the username of the specific RAM user.

  4. In the Console Logon Management section of the Authentication tab, click Modify Logon Settings.

  5. In the Modify Logon Settings panel, configure the following parameters.

    • Console Password Logon: Select Disabled.

      Note

      If you select Disabled, you can still modify logon settings for the RAM user. However, the settings after modification do not take effect. The settings take effect only after you select Enabled.

    • Set Logon Password: Select Automatically Generate Default Password or Custom Logon Password based on your business requirements.

      Warning

      After a password is configured, keep the new password confidential and notify the RAM user of the password. If you do not notify the RAM user of the password, the RAM user cannot log on the Alibaba Cloud Management Console.

    • Password Reset: Set this parameter to specify whether to reset the password upon the next logon of the RAM user.

    • Enable MFA: Set this parameter to specify whether to enable multi-factor authentication (MFA) for the RAM user.

      Note

      If you select Required, the page on which you can enable an MFA device automatically appears upon the next logon of the RAM user.

  6. In the Modify Logon Settings panel, click OK.

Clear console logon settings for a RAM user

You can clear console logon settings for a RAM user with a few clicks and disable console logon for the RAM user.

Warning

The console logon settings cannot be automatically restored after the settings are cleared. Proceed with caution.

  1. Log on to the RAM console with your Alibaba Cloud account or as a RAM user that has administrative rights.

  2. In the left-side navigation pane, choose Identities > Users.

  3. In the User Logon Name/Display Name column, click the username of the specific RAM user.

  4. In the Console Logon Management section of the Authentication tab, click Remove Logon Settings.

  5. In the Remove Logon Settings message, click OK.