If you have created more than one RAM user under your Alibaba Cloud account, you can create RAM user groups to classify and organize these RAM users for easier user and permission management. For example, you can assign RAM users with identical responsibilities to the same group.

Background information

Adding RAM users to user groups brings the following benefits:

  • If the responsibilities of a RAM user change, you only need to move the user to a RAM user group with the appropriate permissions. This action does not affect other RAM users.
  • If the responsibilities of a RAM user group change, you only need to modify the policy that is attached to the user group. Changes to the policy apply to all the RAM users in the group.

Create a RAM user group

  1. Log on to the RAM console.
  2. In the left-side navigation pane, click Groups and click Create Group.
  3. In the dialog box that appears, enter a group name and click OK.

Manage group members

  1. Log on to the RAM console. In the left-side navigation pane, click Groups, and find the target RAM user group.
    Note You can also enter the keywords of group names for a fuzzy match.
  2. Click Management to manage group members.
    • To add a group member, click Edit Group Member, select the target RAM user in the left column, click the rightwards arrow, and then click OK.
      Note To delete a group member, select the target member in the right column and click the leftwards arrow.
    • To delete a group member, click Management. In the Group Member Management section, find the target group member, click Remove from Group, and then click OK.

Rename a RAM user group

  1. Log on to the RAM console. In the left-side navigation pane, click Groups, find the target RAM user group, and then click the group name.
  2. In the Basic Information section, click Edit Basic Info.
  3. Specify the Group Name field and click OK.

Delete a RAM user group

  1. Log on to the RAM console. In the left-side navigation pane, click Groups and find the target RAM user group.
  2. Click Delete.
    Note If the target RAM user group contains any members or is attached with any policies, you must select Unlink Dependent Objects to delete the group.

Grant permissions to a RAM user group

For more information about how to grant permissions to a RAM user group, see Permission granting.