Share resources with any account - Resource Management - Alibaba Cloud Documentation Center

A Resource Owner can share resources with any Principal, regardless of whether the Resource Owner or the Principal is a member of a Resource Directory.

Use cases

You can share resources with any account in the following scenarios:

An Alibaba Cloud account that is not the management account or a member of a resource directory can share resources with another Alibaba Cloud account that is not the management account or a member of a resource directory.
The management account or a member of a resource directory can share resources with an Alibaba Cloud account that is not the management account or a member of the resource directory.
The management account or a member of a resource directory can share resources with all members in the resource directory, all members in a specific folder in the resource directory, or a specific member in the resource directory.
Important
Resource sharing across resource directories is not supported.

This topic shows how to share a vSwitch from Alibaba Cloud Account A with Alibaba Cloud Account B when neither account is in a Resource Directory.

Step 1: Create a Resource Share

Use Alibaba Cloud Account A to create a Resource Share, add the vSwitch to be shared, and specify Alibaba Cloud Account B as the Principal.

Log on to the Resource Management console with Alibaba Cloud Account A.
In the navigation pane on the left, choose Resource Sharing > Resources I Share.
In the upper-left corner of the top navigation bar, select the region where the resource is located.
Click Create Resource Share and configure the Resource Share.
1. Configure basic information and add a resource.
  Enter a name for the Resource Share, add a Tag to it as needed, and then add the resource to be shared. In this example, the resource is a vSwitch.
2. Associate a permission.
  The permission specifies the actions that the Principal can perform on the shared resource. For this example, select AliyunRSDefaultPermissionVSwitch. You can click the permission name to view its details.
3. Associate a Principal.
  Set Principal Scope to All Accounts, set Principal Type to Alibaba Cloud Account, and then enter the account ID of the Principal. In this example, enter the ID of Alibaba Cloud Account B.
4. Review and submit.

Step 2: Accept the resource sharing invitation

Alibaba Cloud Account B accepts the invitation from Alibaba Cloud Account A to share the vSwitch.

Log on to the Resource Management console with Alibaba Cloud Account B.
In the navigation pane on the left, choose Resource Sharing > Resources Shared To Me.
In the upper-left corner of the top navigation bar, select the region where the shared resource is located.
Find the target Resource Share and click Accept in the Status column.
In the Accept Resource Sharing Invitation dialog box, click Accept.

Note

If a single Resource Share contains multiple resources, the Principal only needs to accept the invitation once.

Step 3: Verify the result

You can use either of the following methods to verify that the resource was shared successfully:

Resource Owner (Alibaba Cloud Account A)
On the Resource Share details page in the Resource Management console, check the sharing status. The sharing is successful if the status of both the resource and the Principal is Associated.
Principal (Alibaba Cloud Account B)
View and manage the shared resource in the console of the corresponding service. In this example, log on to the VPC console to view the shared vSwitch.