This topic describes how to enable console logon, and view, modify, or clear console logon settings for a Resource Access Management (RAM) user.

Enable console logon for a RAM user

You can enable console logon for a RAM user and configure parameters such as the logon password.

  1. Log on to the RAM console by using your Alibaba Cloud account.
  2. In the left-side navigation pane, choose Identities > Users.
  3. In the User Logon Name/Display Name column, click the username of ta specific RAM user.
  4. In the Console Logon Management section of the Authentication tab, click Enable Console Logon.
  5. In the Modify Logon Settings panel, configure the following parameters.
    • Console Password Logon: Select Enabled.
    • Set Logon Password: Select Automatically Generate Default Password or Custom Logon Password based on your business requirements.
      Note We recommend that you save the password for subsequent use.
    • Password Reset: Set this parameter to specify whether to reset the password upon the next logon of the RAM user.
    • Enable MFA: Set this parameter to specify whether to enable multi-factor authentication (MFA) for the RAM user.
      Note If you select Required, the page on which you can enable an MFA device automatically appears upon the next logon of the RAM user.
  6. Click OK.

View console logon settings of a RAM user

After you enable console logon for a RAM user, you can view the console logon settings.

  1. Log on to the RAM console by using your Alibaba Cloud account.
  2. In the left-side navigation pane, choose Identities > Users.
  3. In the User Logon Name/Display Name column, click the username of ta specific RAM user.
  4. In the Console Logon Management section of the Authentication tab, view the console logon settings.
    • Console Access: indicates whether console logon is enabled.
    • Last Console Logon: indicates the last time that the RAM user logged on to the console.
    • Required to Enable MFA: indicates whether MFA is required when the RAM user logs on to the console.
    • Reset Password at Next Logon: indicates whether password resetting is required when the RAM user logs on to the console the next time.
    • Logon Method: indicates that username-password logon is enabled for the RAM user. You can move the pointer over the icon to the right of the Logon Method parameter and click the link to log on to the console as the RAM user. You can also copy the link and paste the link to the address bar of your browser to log on to the console.

Modify console logon settings for a RAM user

After you enable console logon for a RAM user, you can modify console logon settings based on your business requirements. For example, you can disable console logon or modify the logon password.

  1. Log on to the RAM console by using your Alibaba Cloud account.
  2. In the left-side navigation pane, choose Identities > Users.
  3. In the User Logon Name/Display Name column, click the username of ta specific RAM user.
  4. In the Console Logon Management section of the Authentication tab, click Modify Logon Settings.
  5. In the Modify Logon Settings panel, configure the following parameters.
    • Console Password Logon: Select Disabled.
      Note If you select Disabled, you can still modify logon settings for the RAM user. However, the settings after modification do not take effect. The settings take effect only after you select Enabled.
    • Set Logon Password: Select Automatically Generate Default Password or Custom Logon Password based on your business requirements.
      Note We recommend that you save the password for subsequent use.
    • Password Reset: Set this parameter to specify whether to reset the password upon the next logon of the RAM user.
    • Enable MFA: Set this parameter to specify whether to enable multi-factor authentication (MFA) for the RAM user.
      Note If you select Required, the page on which you can enable an MFA device automatically appears upon the next logon of the RAM user.
  6. In the Modify Logon Settings panel, click OK.

Clear console logon settings for a RAM user

You can clear console logon settings for a RAM user with a few clicks and disable console logon for the RAM user.

Notice The console logon settings cannot be automatically restored after the settings are cleared. Proceed with caution.
  1. Log on to the RAM console by using your Alibaba Cloud account.
  2. In the left-side navigation pane, choose Identities > Users.
  3. In the User Logon Name/Display Name column, click the username of ta specific RAM user.
  4. In the Console Logon Management section of the Authentication tab, click Remove Logon Settings.
  5. In the Remove Logon Settings message, click OK.