When a RAM user from a management account assumes a role to log on to a member account, the session duration is adjustable. This topic describes how to modify this duration.
Log on to a member account by assuming a role
Resource Directory automatically creates a RAM role named ResourceDirectoryAccountAccessRole for each member. The management account of the resource directory is automatically set as the trusted entity for this role. This configuration allows the management account to assume the role and log on to each member account. To do this, you can use a RAM user within the management account, grant it the necessary permissions, and then use that user to assume the ResourceDirectoryAccountAccessRole of a member. For more information, see Use a RAM role to log on to the Alibaba Cloud Management Console.
Adjust the logon session duration
When you log on by assuming ResourceDirectoryAccountAccessRole, your session duration is limited by the maximum session duration configured for that role. If the limit is reached, you are automatically logged out. To change this setting, go to the role's details page in the RAM console. Find the Max Session Duration parameter and click Edit. Valid values: 3600 seconds (1 hour) to 43200 seconds (12 hours). Default value: 3600 seconds (1 hour). For more information, see Specify the maximum session duration for a RAM role.
