Performs a member deletion check.
Operation description
Before you delete a member, you must call this API operation to check whether the member can be deleted.
Debugging
Authorization information
The following table shows the authorization information corresponding to the API. The authorization information can be used in the Action policy element to grant a RAM user or RAM role the permissions to call this API operation. Description:
- Operation: the value that you can use in the Action element to specify the operation on a resource.
- Access level: the access level of each operation. The levels are read, write, and list.
- Resource type: the type of the resource on which you can authorize the RAM user or the RAM role to perform the operation. Take note of the following items:
- The required resource types are displayed in bold characters.
- If the permissions cannot be granted at the resource level,
All Resourcesis used in the Resource type column of the operation.
- Condition Key: the condition key that is defined by the cloud service.
- Associated operation: other operations that the RAM user or the RAM role must have permissions to perform to complete the operation. To complete the operation, the RAM user or the RAM role must have the permissions to perform the associated operations.
| Operation | Access level | Resource type | Condition key | Associated operation |
|---|---|---|---|---|
| resourcemanager:CheckAccountDelete | get | *Account acs:resourcemanager::{#accountId}:account/{#ResourceDirectoryPath} |
| none |
Request parameters
| Parameter | Type | Required | Description | Example |
|---|---|---|---|---|
| AccountId | string | Yes | The Alibaba Cloud account ID of the member that you want to delete. | 179855839641**** |
Response parameters
Examples
Sample success responses
JSONformat
{
"RequestId": "7CDDDCEF-CDFD-0825-B7D7-217BE0897B22"
}Error codes
| HTTP status code | Error code | Error message | Description |
|---|---|---|---|
| 400 | MissingParameter.AccountId | You must specify AccountId. | The AccountId parameter is not configured. |
| 400 | InvalidParameter.AccountId | The AccountId is invalid. | The value of the AccountId parameter is invalid. Specify a 16-digit ID. |
| 404 | EntityNotExists.Account | This resource directory account does not exist. | The member does not exist. Create such a member first. |
| 404 | EntityNotExists.ResourceDirectory | The resource directory for the account is not enabled. We recommend that you first enable the resource directory for the account. | The account is not used to enable a resource directory. Use the account to enable a resource directory first. |
| 409 | AccountTypeOrStatusMismatch | You cannot perform the action on the member account. | You cannot perform the operation on the member. |
| 409 | InvalidControlPolicyEnablementStatus | The control policy enablement status is not valid to perform this operation. | You cannot perform the operation when the access control policy is enabled. |
| 409 | NoLicense.ResourceDirectory | The resource directory has not enabled the delete operation. | The member deletion feature is disabled for the resource directory. |
| 409 | UnknownError.Account | The deletion failed. An unknown error occurred. Please try again later. | Delete failed. An unknown error occurred. Try again later. |
| 409 | CallerIdentityError.DeleteAccount | Please use the RAM user or role of the management account to delete. | Only a RAM user or RAM role within the management account can be used to perform this operation. |
| 409 | RemoveConfilctAccountAsDelegatedAdministator | You attempted to remove a member that is registered as a delegated administrator. To complete this operation, you must first deregister this account as a delegated administrator. | The member is a delegated administrator account of a trusted service. Remove the delegated administrator account for the trusted service first. |
| 409 | LegalEntityDifferent | The account legal entity is different from the one of the Management Account. | The legal entity of the account is inconsistent with that of the management account. |
| 409 | MemberTypeError.DeleteAccount | You can only delete accounts of the resource account type created by Resource Directory. | - |
For a list of error codes, visit the Service error codes.
Change history
| Change time | Summary of changes | Operation |
|---|
No change history
What to do next
You can call the GetAccountDeletionCheckResult operation to query the deletion check result.