CreateResourceAccount - Resource Management - Alibaba Cloud Documentation Center

Creates a member of the resource account type.

Operation description

A member serves as a container for resources and is also an organizational unit in a resource directory. A member indicates a project or application. The resources of different members are isolated.

Debugging

OpenAPI Explorer automatically calculates the signature value. For your convenience, we recommend that you call this operation in OpenAPI Explorer.

Debug

Authorization information

The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:

Operation: the value that you can use in the Action element to specify the operation on a resource.
Access level: the access level of each operation. The levels are read, write, and list.
Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
- The required resource types are displayed in bold characters.
- If the permissions cannot be granted at the resource level, All Resources is used in the Resource type column of the operation.
Condition Key: the condition key that is defined by the cloud service.
Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.

Operation	Access level	Resource type	Condition key	Associated operation
resourcemanager:CreateResourceAccount	Write	All Resources *	none	none

Request parameters

Parameter	Type	Required	Description	Example
DisplayName	string	Yes	The display name of the member. The name must be 2 to 50 characters in length. The name can contain letters, digits, underscores (_), periods (.), hyphens (-), and spaces. The name must be unique in the resource directory.	Dev
ParentFolderId	string	No	The ID of the parent folder.	fd-r23M55****
PayerAccountId	string	No	The ID of the billing account. If you leave this parameter empty, the newly created member is used as its billing account.	12323344****
AccountNamePrefix	string	No	The prefix for the Alibaba Cloud account name of the member. If you leave this parameter empty, the system randomly generates a prefix. The prefix must be 2 to 37 characters in length. The prefix can contain letters, digits, and special characters but cannot contain consecutive special characters. The prefix must start with a letter or digit and end with a letter or digit. Valid special characters include underscores (`_`), periods (`.`), and hyphens (-). The complete Alibaba Cloud account name of a member is in the @.aliyunid.com format, such as `alice@rd-3G****.aliyunid.com`. Each name must be unique in the resource directory.	alice
Tag	object []	No	The tag of the member.
Key	string	No	The tag key.	k1
Value	string	No	The tag value.	v1
ResellAccountType	string	No	The identity type of the member. Valid values: resell (default): The member is an account for a reseller. A relationship is automatically established between the member and the reseller. The management account of the resource directory must be used as the billing account of the member. non_resell: The member is not an account for a reseller. The member is an account that is not associated with a reseller. You can directly use the account to purchase Alibaba Cloud resources. The member is used as its own billing account. Note This parameter is available only for resellers at the international site (alibabacloud.com).	resell

For more information about common request parameters, see Common parameters.

Response parameters

Parameter	Type	Description	Example
	object	The returned result.
Account	object	The information about the member.
Status	string	The status of the member. The value CreateSuccess indicates that the member is created.	CreateSuccess
Type	string	The type of the member. The value ResourceAccount indicates that the member is a resource account.	ResourceAccount
DisplayName	string	The display name of the member.	Dev
FolderId	string	The ID of the folder.	fd-r23M55****
ResourceDirectoryId	string	The ID of the resource directory.	rd-3G****
JoinTime	string	The time when the member joined the resource directory. The time is displayed in UTC.	2020-12-31T03:37:39.456Z
AccountId	string	The ID of the member.	112730938585****
JoinMethod	string	The way in which the member joins the resource directory. Valid values: invited: The member is invited to join the resource directory. created: The member is directly created in the resource directory.	created
ModifyTime	string	The time when the member was modified. The time is displayed in UTC.	2020-12-31T03:37:39.456Z
AccountName	string	The Alibaba Cloud account ID of the member.	alice@rd-3g****.aliyunid.com
RequestId	string	The request ID.	B356A415-D860-43E5-865A-E2193D62BBD6

Examples

Sample success responses

JSONformat

{
  "Account": {
    "Status": "CreateSuccess",
    "Type": "ResourceAccount",
    "DisplayName": "Dev",
    "FolderId": "fd-r23M55****",
    "ResourceDirectoryId": "rd-3G****",
    "JoinTime": "2020-12-31T03:37:39.456Z",
    "AccountId": "112730938585****",
    "JoinMethod": "created",
    "ModifyTime": "2020-12-31T03:37:39.456Z",
    "AccountName": "alice@rd-3g****.aliyunid.com"
  },
  "RequestId": "B356A415-D860-43E5-865A-E2193D62BBD6"
}

Error codes

HTTP status code	Error code	Error message	Description
400	MissingParameter.Account.DisplayName	You must specify DisplayName.	You must specify the display name.
400	InvalidParameter.Account.DisplayName	The DisplayName of account is invalid.	The display name is invalid. The display name can contain only letters, digits, underscores (_), periods (.), and hyphens (-).
400	InvalidParameter.Account.DisplayName.Length	The DisplayName of the account exceeds the length limit.	The display name of account exceeds the length limit. The name must be 2 to 50 characters in length.
400	InvalidParameter.ParentFolderId	The ParentFolderId is invalid.	The specified ID of the parent folder is invalid. The ID must either be a 6-character string that starts with r- or a 10-character string that starts with fd-. The ID can contain letters and digits.
400	InvalidParameter.Account.AccountNamePrefix	The account name prefix is invalid.	The account name prefix is invalid.
400	InvalidParameter.Account.AccountNamePrefix.Length	The account name prefix exceeds the length limit.	The length of the account name prefix exceeds the upper limit.
400	NotSupport.Site.Action	Site does not allow current action.	Site does not allow current action.
404	EntityNotExists.ResourceDirectory	The resource directory for the account is not enabled. We recommend that you first enable the resource directory for the account.	The resource directory for the account is not enabled. We recommend that you first enable the resource directory for the account.
404	EntityNotExists.Folder	The resource directory folder does not exist.	The specified resource directory does not exist. We recommend that you first create a resource directory.
409	LimitExceeded.Account	The maximum number of member accounts in a resource directory exceeds the limit.	The maximum number of member accounts in a resource directory exceeds the limit.
409	InvalidParameter.Account.DisplayName.AlreadyUsed	The displayname of account has been used.	The display name of account has been used. You must specify a valid display name.
409	EntityAlreadyExists.ResourceDirectory.Account	The email address that the system generates when you create a member account already exists. Try again later.	The email address that the system generates when you create a member account already exists. Try again later.
409	Invalid.PayRelation	Failed to create a member. The specified billing account is unavailable. Please change to another billing account and try again.	Failed to create a member. The specified billing account is unavailable. Please change to another billing account and try again.
409	NotSupport.PayerAccountInAnotherResourceDirectory	The specified settlement account does not exist in the resource directory. You must specify a valid settlement account.	-
409	CreateAccountDisabled	The specified resource directory cannot create a new account.	-
409	PaymentAccountEnterpriseVerifyError	The type of the payment account is not enterprise verified.	The type of the payment account must be enterprise verified.
409	PaymentAccountFinancialRelationshipVerifyError	The payment account must not be the beneficiary account from other financial relationships.	The payment account must not be the beneficiary account from other financial relationships.
409	PaymentAccountEnterpriseTypeError	The type of the payment account is not enterprise.	The type of the payment account must be enterprise.
409	PaymentAccountFinancialRelationshipsChangeFrequencyVerifyError	The financial relationship of payment account changes too frequently. Please try again later.	The financial relationship of payment account changes too frequently. Please try again later.
409	MemberAccountVirtualCloudOperatorVerifyError	The type of the member account must not be virtual operator.	-
409	MemberAccountResellerVerifyError	The type of the member account must not be reseller.	-
409	PaymentAccountVirtualCloudOperatorVerifyError	The type of the payment account must not be virtual operator.	The type of the member account must not be virtual operator.
409	PaymentAccountResellerVerifyError	The type of the payment account must not be reseller.	The type of the member account must not be reseller.
409	InconsistentEnterpriseNameError	The enterprise name of the payment account and the member account must be consistent.	-
409	PaymentAccountEnterpriseInvoiceError	No enterprise invoice header information is set for the payment account.	No enterprise invoice header information is set for the payment account.
409	UnknownFinancialError	An unknown financial error occurred.	An unknown financial error occurred.
409	BusinessRestricted	Business is restricted. Please contact your customer service manager.	Business is restricted. Please contact your customer service manager.
409	PaymentAccountCreditIdentityTypeError	Non-credit identity type or insufficient credit limit, cannot be used as payment account.	The account cannot be used as a billing account because the account is not of the credit identity type or the balance in your credit card is insufficient.

For a list of error codes, visit the Service error codes.

Change history

Change time

Summary of changes

Operation

2023-04-27

The Error code has changed

see changesets

Change item	Change content
Error Codes	The Error code has changed.
	delete Error Codes: 400
	delete Error Codes: 404
	delete Error Codes: 409