Before you can load network instances from another Alibaba Cloud account, you must acquire permissions from the Alibaba Cloud account.

Prerequisites

Before you acquire permissions from another Alibaba Cloud account, you must acquire the following information about the Alibaba Cloud account:
  • The user ID (UID) of the Alibaba Cloud account to which the Cloud Enter Network (CEN) instance belongs.
  • The ID of the CEN instance.

Acquire permissions from a VPC

The following example describes how a CEN instance under Alibaba Cloud Account B can acquire permissions from a virtual private cloud (VPC) that is under Alibaba Cloud Account A. After permissions are acquired, the CEN instance under Account B can load the VPC from Account A.

Notice If Account B acquires permissions from Account A, the CEN instance under Account B can load the network instances from Account A. Proceed with caution.
  1. Log on to the VPC console with Account A.
  2. In the top menu bar, select the region where the VPC is deployed.
  3. On the VPCs page, select the VPC, and click Manage in the Actions column.
  4. In the Authorize Cross Account Attach CEN section, click Authorize Cross Account Attach CEN.
  5. In the Attach to CEN dialog box, enter the UID of Account B and the ID of the CEN instance, and then click OK.
    Grant permissions
  6. Record the UID of Account A and VPC instance ID.You can view the account UID on the Account Management page.
    View the account UID

Acquire permissions from a VBR

The following example describes how a CEN instance under Alibaba Cloud Account B can acquire permissions from a virtual border router (VBR) that is under Alibaba Cloud Account A. After permissions are acquired, the CEN instance under Account B can load the VBR from Account A.
Notice
  • Starting November 1, 2019, a CEN instance cannot load a VBR from another account by default. To load a VBR from another account,submit a ticket.
  • If Account B acquires permissions from Account A, the CEN instance under Account B can load the network instances from Account A. Proceed with caution.
  1. Log on to the Express Connect console with Account A.
  2. In the left-side navigation pane, choose Virtual Border Routers (VBRs) > Virtual Border Routers (VBRs).
  3. In the top menu bar, select the region where the VBR is deployed.
  4. On the Virtual Border Routers (VBRs) page, click the ID of the VBR.
  5. Click the CEN Authorization tab, and then click Authorize CEN of Another Account to Load Instance.
  6. In the Authorize CEN of Another Account to Load Instance pane, enter the UID of Account B and ID of the CEN instance, and then click OK.
    Acquire permissions from a VBR
  7. Record the UID of Account A and VBR ID.You can view the account UID on the Account Management page.
    View the account UID.

Acquire permissions from a CCN instance

The following example describes how a CEN instance under Alibaba Cloud Account B can acquire permissions from a Cloud Connect Network (CCN) instance that is under Alibaba Cloud Account A. After permissions are acquired, the CEN instance under Account B can load the CCN instance from Account A.

Notice If Account B acquires permissions from Account A, the CEN instance under Account B can load the network instances from Account A. Proceed with caution.
  1. Log on to the Smart Access Gateway (SAG) console.
  2. In the left-side navigation pane, click CCN and click the ID of the CCN instance.
  3. Click CEN Cross Account Authorization, enter the UID of Account B and the CEN instance ID, and then click OK.
    Grant permissions
  4. Record the UID of Account A and CCN instance ID.You can view the UID on the Account Management page.
    View the account UID

What to do next

Attach networks