ARMS supports primary account & sub-account access system (RAM) of the Alibaba Cloud. This topic explains how to authorize a sub-account to access ARMS.
To use a RAM sub-account to access the ARMS console, the sub-account must meet the following two conditions:
- The AccessKeyId and AccessSecretKey are created for this sub-account.
- The console logon function is enabled, and the logon username and password are set for this sub-account.
For instructions, see Users.
Authorize a sub-account to access the ARMS console
If a sub-account meets the preceding logon prerequisites, it must be authorized before using the ARMS console. Currently, ARMS only supports authorizing a sub-account for full access of the ARMS service resources.
NOTE: Open API does not support the access of a subaccount.
The procedure is as follows:
- Log on to the RAM console and select a sub-account to be authorized on the sub-account management page. For instructions, see topic Grant permissions of the RAM document.
- Select AliyunARMSFullAccess on the authorization policy page.
After authorization, you can directly log on to the ARMS console.