Designates a member of a resource directory as the delegated administrator for a trusted service.
Operation description
After designation, the delegated administrator can access the resource directory structure and members, and perform service-related management on behalf of the management account. Limits:
-
Only trusted services that support the delegated administrator feature can be used. Supported trusted services.
-
Only the management account of a resource directory, or a RAM user or RAM role authorized by the management account, can call this operation.
-
Each trusted service defines its own maximum number of delegated administrators.
Try it now
Test
RAM authorization
Request parameters
|
Parameter |
Type |
Required |
Description |
Example |
| AccountId |
string |
Yes |
The Alibaba Cloud account ID of the member to designate as a delegated administrator. |
181761095690**** |
| ServicePrincipal |
string |
Yes |
The identifier of the trusted service. For valid values, see the |
cloudfw.aliyuncs.com |
Response elements
|
Element |
Type |
Description |
Example |
|
object |
The response. |
||
| RequestId |
string |
The request ID. |
0A45FC8F-54D2-4A65-8338-25E5DEBDA304 |
Examples
Success response
JSON format
{
"RequestId": "0A45FC8F-54D2-4A65-8338-25E5DEBDA304"
}Error codes
|
HTTP status code |
Error code |
Error message |
Description |
|---|---|---|---|
| 409 | InvalidParameter.ServicePrincipal | The specified ServicePrincipal is invalid. | |
| 409 | AccountAlreadyRegistered | The specified account is already a delegated administrator for this service. | |
| 409 | DelegatedAccountNumberExceeded | The maximum number of delegated administrators for the service principal is exceeded. | |
| 409 | CannotRegisterMasterAsDelegatedAdministrator | You attempted to register the enterprise management account as a delegated administrator for the service. You can designate only a member account as a delegated administrator. |
See Error Codes for a complete list.
Release notes
See Release Notes for a complete list.