A RAM user group is an entity type in Resource Access Management (RAM). You can use RAM user groups to classify and grant permissions to RAM users who have the same responsibilities. This simplifies the management of RAM users and their permissions.
Scenarios
If the responsibilities of a RAM user change, you can simply move the RAM user to a group that corresponds to the new responsibilities. This change does not affect other RAM users.
If the permissions of a RAM user group change, you can simply modify the access policy of the group. The changes apply to all RAM users in that group.
Procedure
Log on to the RAM console using an Alibaba Cloud account, or a RAM user or RAM role that has administrative permissions.
Create a RAM user group.
For more information, see Create a RAM user group.
Add RAM users to or remove RAM users from the RAM user group.
For more information, see Add a RAM user to a RAM user group or Remove a RAM user from a RAM user group.
Grant permissions to the RAM user group.
After you grant permissions to a RAM user group, all RAM users in the group inherit those permissions. For more information, see Grant permissions to a user group.
Limits
For information about the limits on RAM user groups, see Limits.