edit-icon download-icon

Create a sub-account

Last Updated: Apr 26, 2018

If you are the sole user of this product, skip this section. To create your own account, see Prepare Alibaba Cloud account.

To invite other users to use this product, you can create and manage your sub-accounts through the Resource Access Management (RAM).

Procedure

Create a sub-account

  1. Log on to the Alibaba Cloud DTplus Console with the primary account.

  2. Choose Base Services > Resource Access Management > Users.

  3. Click Create User as shown in the following figure.

    CreateUser

  4. Enter the user information, and click OK to complete the user creation.

    EnterInfo

Enable a sub-account to log on the console

  1. From the user list, select the user whose sub-account needs to be managed.

  2. Select Manage from the Actions column, as shown in the following figure.

    ManageUser

  3. Click Enable Console Logon, as shown in the following figure.

    Enable

  4. For this sub-account, enter the User Name and create a New Password and retype your password in the Confirm New Password field, as shown in the following figure.

    SetPassword

Create an AccessKey for a sub-account

The AccessKey facilitates smooth operation of the tasks created in DataWorks. Therefore, a primary account must create an AccessKey for the sub-account, or allow sub-account users to create and manage their own AccessKey information by themselves.

Create an AccessKey for a sub-account

  1. Choose Base Services > Resource Access Management > Users.

  2. From the user list, select a user, and click Manage to enter the user management page.

  3. Click Create AccessKey, as shown in the following figure.

    CreateAccessKey

  4. Once you create the AccessKey, click Save AccessKey Information to complete the action.

    Note: The AccessKeySecret of the sub-account appears only once. You must record and keep it confidential for further use. In case you lose it, create a new one.

    SaveKey

Allow sub-account users to create and manage their own AccessKeys

  1. In the RAM page, click Settings to enter the settings page.

    Settings

  2. Click User Security Settings tab, and select Allow the user to manage their own AccessKey option box.

    Allow

  3. Click Save Changes to complete the settings.

Delivery sub-accounts to other users

Sub-accounts belong to a primary account. Thus, sub-accounts do not have resources and billing system of their own. The operation cost of a DTplus sub-account is borne by the primary account. Therefore, the primary account views the RAM user log on link and its own enterprise alias, and provide this information to a subaccount.

Log on to RAM using the primary account, and choose Settings > Enterprise Alias Settings to view enterprise alias.

When a sub-account is delivered to its users, you must provide the following details:

  • Logon link of RAM users
  • Enterprise alias of primary account
  • User name and password of sub-account
  • AccessKey ID and AccessKeySecret of a sub-account

A sub-account users can then log on to the console and manage their own AccessKey and account.

A sub-account authorization has the following two aspects:

  • Authorizing the RAM access control. (Optional).
  • The Dataworks is authorized by the project. You can add a sub-account user to the project and assign a role permission to complete the authorization. For more information, see Add users and roles.

Subsequent Steps

In this tutorial, you have learned how to prepare an RAM sub-account. The next tutorial explains how to add project members and assign roles to a sub-account. For more information, see Create a project.

Thank you! We've received your feedback.