After you use a RAM user of the management account of your resource directory to assume the RAM role of a member in the resource directory and log on to the Alibaba Cloud Management Console, you can adjust the logon session duration of the member. This topic describes how to adjust the logon session duration of a member.
Logon to the Alibaba Cloud Management Console by using a RAM user of the management account of a resource directory to assume the RAM role of a member in the resource directory
Resource Directory automatically creates a RAM role named ResourceDirectoryAccountAccessRole for each member in a resource directory and specifies the management account of the resource directory as the trusted entity of the RAM role. This way, the management account has permissions to assume the RAM roles of all members in the resource directory and log on to the Alibaba Cloud Management Console. You can create a RAM user within the management account and grant administrative permissions to the RAM user. Then, you can use the RAM user to assume the RAM role ResourceDirectoryAccountAccessRole of a member and log on to the Alibaba Cloud Management Console. For more information, see Use a RAM role to log on to the Alibaba Cloud Management Console.
Adjust the logon session duration
After you use the preceding method to log on to the Alibaba Cloud Management Console, the logon session duration is limited by the maximum session duration of the RAM role ResourceDirectoryAccountAccessRole. If the maximum session duration is reached, you are forced to log off from the Alibaba Cloud Management Console. You can click Edit on the right side of Max Session Duration on the details page of the role in the RAM console to adjust the maximum session duration. For more information, see Specify the maximum session duration for a RAM role.
