Resource Directory organizes your enterprise accounts into a directory structure that reflects your business relationships. In this tutorial, you build that structure and place each account at the appropriate level. By the end, your folders and member accounts form a multi-level directory tree.
Step 1: Enable Resource Directory
The Alibaba Cloud account that you use to enable Resource Directory must meet the following requirements:
-
Enterprise account: You must use an enterprise-type Alibaba Cloud account to enable Resource Directory. Personal accounts are not supported.
-
Security information: The account must have a security mobile number or a (login email address).
-
Not a Resource Directory member: The account must not be a member of another Resource Directory.
After your Alibaba Cloud account meets the preceding requirements, you can enable Resource Directory. However, as a best practice, do not use an account that has business resources deployed to enable Resource Directory. You can go to Resource Center to view the resources owned by the current logon account, and then select an appropriate method to enable Resource Directory. The following methods are recommended:
-
Use the current account to enable Resource Directory
Use this method if the current account has no resources and runs no business workloads.
-
Create a new management account to enable Resource Directory
Use this method if the current account contains resources or runs business workloads.
This method creates a new Alibaba Cloud account as the management account. The new account inherits enterprise identity verification from your current account, which automatically becomes a member.
WarningAfter your current account becomes a member, only the new management account can remove it from the Resource Directory.
The following procedure uses the current logon account as an example to show how to enable Resource Directory:
-
Log on to the Resource Management console.
-
In the navigation pane on the left, choose .
-
If the billing information for the current account is incomplete, a pop-up message appears when you hover over the Enable Resource Directory button to inform you of the missing information. This message is a strong recommendation and not a blocker. You can still click Enable Resource Directory to complete the enablement. We recommend that you first click the Complete Now link in the pop-up to complete your billing information before you proceed.
-
Click Enable Resource Directory.
After enabling Resource Directory, the system creates a Root folder and sets your current account as the management account.
The system also automatically creates a service-linked role named
AliyunServiceRoleForResourceDirectoryin the management account. This role grants trusted services access to your Resource Directory. For more information, see RAM roles in Resource Directory.
Step 2: Create a folder
A folder is an organizational unit in Resource Directory. A folder typically represents an enterprise branch, business line, or product project, and it can contain members and nested subfolders to form a tree-shaped resource organization.
-
Log on to the Resource Management console with a management account.
-
In the navigation pane on the left, choose .
-
In the upper-right corner of the page, click Resource Organization View.
-
Choose one of the following methods to create a folder:
-
In the resource directory tree on the left, click the
icon next to the target folder, and then click Create Folder.NoteA subfolder is created under the target folder.
-
In the resource directory tree on the left, click the target folder. On the Member tab, click Create Folder.
NoteA subfolder is created under the target folder.
-
-
In the Create Folder dialog box, enter a name in the Folder Name field, and then click OK.
NoteFolder names must be unique within a resource directory.
Step 3: Create or invite a member
A member of Resource Directory is either a resource account or a cloud account. A resource account is created in Resource Directory to host one of your projects or applications on Alibaba Cloud. A cloud account is an existing Alibaba Cloud account that joins Resource Directory by invitation.
Create a member
Create a member when you need a resource account for a project or application.
-
Log on to the Resource Management console with a management account.
-
In the navigation pane on the left, choose .
-
To create a member, do one of the following:
-
In the upper-right corner of the page, click Resource Organization View. On the Member tab, click Create Member Account.
-
In the upper-right corner of the page, click Member List View, and then click Create Member Account.
-
-
On the Create Member Account page, configure the member information. Agree to the relevant agreements, and then click OK.
-
Account Name: Enter a name for the member. The account name must be unique within the resource directory. The name must be 2 to 50 characters in length and can contain letters, digits, and the following special characters:
_.-. The name must start and end with a letter or digit and cannot contain consecutive special characters_.-. -
Display Name: Enter the display name for the member. The display name must be 2 to 50 characters in length and can contain Chinese characters, letters, digits, and the following special characters:
_.-. -
Billing Account: Specify the settlement method for the member.
-
Use Management Account for Settlement of New Member: Uses the management account of the resource directory as the billing account under financial trusteeship.
-
Use Existing Member for Settlement of New Member: Uses an existing member of the resource directory as the billing account under financial trusteeship. In the Specify Member panel, you must select a member from the directory tree of the resource directory.
NoteA member cannot be selected if it does not have payment capabilities. For more information about member payment capabilities, see Financial Trusteeship.
-
Use New Member Itself for Settlement: Uses the current member as its own billing account.
-
-
Tag: Optional. Add tags to the member to simplify member management.
-
Parent Folder: Specify the parent folder for the member.
-
Invite a member
Invite a member when you already have an Alibaba Cloud account to add to Resource Directory.
-
Log on to the Resource Management console with a management account.
In the left-side navigation pane, choose .
Click Invite Member.
In the Invite Member dialog box, enter the required information, review and select the risk notice, and then click OK.
Parameter
Description
Account ID or logon email address
Account ID: To find an account ID, see How do I find my Alibaba Cloud account ID?.
Logon email address: The email address that you used to register the account. If an account does not have a logon email, use its account ID.
To invite multiple accounts, enter their account IDs or logon email addresses, separated by commas.
Remarks
Enter a remark for the invitation. This helps the invitee verify the invitation's authenticity and respond faster.
Tag
Add a tag to the member for easier filtering and management.
Parent Folder
By default, the invited member is placed in the Root folder. You can click Modify to move the member to a different folder. You can also change the folder after the member accepts the invitation.
The invited Alibaba Cloud account can view the invitation in the Resource Management console or in the invitation email. The invited account then assesses the impact of joining Resource Directory and accepts or rejects the invitation. For more information, see Respond to an invitation.