When a RAM user of the management account assumes a role to access a member account, you can adjust the logon session duration for that role.
Log on to a member account by assuming a role
Resource Directory automatically creates a RAM role named ResourceDirectoryAccountAccessRole for each member and sets the management account as the trusted entity. To access a member account, use a RAM user of the management account with the required permissions to assume the member's ResourceDirectoryAccountAccessRole. For more information, see Use a RAM role to log on to the Alibaba Cloud Management Console.
Navigate to Resource Management > Resource Directory. On the directory management page, select the target folder. On the Members tab, find the target member in the list and click Log On in the Actions column.
Adjust the logon session duration
When you assume the ResourceDirectoryAccountAccessRole to access a member account, your session is governed by the maximum session duration configured for the role. You are automatically logged out when the session expires. On the role details page, click Edit to adjust the maximum session duration. Valid values: 3,600 seconds (1 hour) to 43,200 seconds (12 hours). Default value: 3,600 seconds (1 hour). For more information, see Set the maximum session duration for a RAM role.