This topic describes how to use Resource Access Management (RAM) for domain resource authorization. If you do not need to use RAM, ignore this topic.

After you use Alibaba Cloud account A to register a domain name, this account has full permissions to perform operations on your domain resources by default. RAM allows you to grant permissions on accessing and managing domain resources of your Alibaba Cloud account to a RAM user.

When you authorize a RAM user to manage domain names, we recommend that you enable the multi-factor authentication (MFA) service for the RAM user to ensure account security. For more information, see Enable the MFA service for an Alibaba Cloud account.

Before using RAM to grant permissions and allocate access domain resources, carefully read Resource Access Management and the API reference.