Prepare a RAM account

Last Updated: Apr 03, 2018

If only yourself to use this product, please prepare your account according to the Prepare Alibaba Cloud account, and skip this section.

If you are planning to invite other users to use this product, please create and manage your sub-accounts through the Resource Access Management (RAM).

Procedure

Create a sub-account

  1. Log on to Alibaba Cloud DTplus Console with the primary account.

  2. Choose Base Services > Resource Access Management > Users.

  3. Click Create User, as shown in the folloiwng figure.

    CreateUser

  4. Enter the user information, and then click OK to complete the user creation.

    EnterInfo

Enable a sub-account to log on the console

  1. In the user list, select a user who needs to be managed.

  2. Click Manage next to the user name, as shown in the following figure.

    ManageUser

  3. Click Enable Console Logon, as shown in the following figure.

    Enable

  4. Set a new password for this sub-account, as shown in the following figure.

    SetPassword

Create an access key of sub-account

The access key is important for the smooth operation of the tasks that you create in the DataWorks, therefore the primary account needs to create an access key for the sub account, or allow sub-account users to create and manage their own access keys information by themselves.

Create an access key for sub-account

  1. Choose Base Services > Resource Access Management > Users.

  2. In the user list, select a user, and click Manage to enter the user management page.

  3. Click Create Access Key, as shown in the following figure.

    CreateAccessKey

  4. After the access key is created, click Save Access Key Information to complete the creation.

    Note: The Access Key Secret of the sub-account only appears once, please keep it properly when you create it. If lost, you must re-create a new one.

    SaveKey

Allow sub-account users to create and manage their own access keys

  1. In the RAM page, click Settings to enter the settings page.

    Settings

  2. Click User Security Settings tab, and tick the Allow the user to manage theri own AccessKey.

    Allow

  3. Click Save Changes to complete the settings.

Delivery sub-accounts to other users

Subaccounts belong to a primary account. They have no resources and billing system. The operation cost of the sub-account in the DTplus product are paid by primary account. Therefore, the primary account needs to view the RAM user login link and its own business alias, and inform these information to the subaccount.

Log on to the RAM by using the primary account, and choose Settings > Enterprise Alias Settings to view the business alias.

When a sub-account is delivered to other users, it is necessary to provide the following information.

  • Logon link of RAM users
  • Enterprise alias of primary account
  • User name and password of sub-account
  • Access key ID and access key secret of sub-account
  • The sub-account enables to log on the console
  • The sub-account allows to manage their own access key

The sub-account authorization generally refers to the following two aspects.

  • Whether to authorize the RAM access control (This is not required to authorize)
  • The Dataworks is authorized by the project. You can add a sub-account user to a project and assign a role permission to complete the authorization. For more information, see Add users and roles.

Subsequent Steps

Currently, you have learned how to prepare an RAM sub-account, and you can continue to learn the next tutorial. In the next tutorial you can learn how to add project members and assign roles for the sub-accounts. For more information, see Create a project.

Thank you! We've received your feedback.