All Products
Search
Document Center

Resource Management:Why can't a resource account log on as the root user?

Last Updated:Jun 03, 2026

A resource account does not have a root user. You can only log on with a RAM identity, or switch the resource account to a cloud account first.

Causes

  • Members created in a resource directory are resource accounts. A resource account has no root user (Alibaba Cloud account). You can only log on to the Alibaba Cloud Management Console as a RAM identity (RAM user or RAM role).

  • An Alibaba Cloud account invited to join a resource directory becomes a cloud account. A cloud account can log on as a RAM identity (RAM user or RAM role) or as the root user (Alibaba Cloud account). If you switch a cloud account to a resource account, the root user identity is disabled and root user logon attempts fail.

Solutions

Solution 1: Log on as a RAM identity

Log on to the console with a RAM identity. The following example uses a RAM user:

Solution 2: Log on as the root user (Alibaba Cloud account)

Some operations, such as modifying security settings or payment information, require the root user. Use the management account to switch the resource account to a cloud account, then log on as the root user.

  1. Attach a secure phone number to the resource account.

  2. Switch the resource account to a cloud account.

  3. Retrieve the logon password for the cloud account.

    Use the Forgot Password feature to retrieve the logon password. What do I do if I forget my password?.

    Note

    If the cloud account already has a logon password, skip this step.

  4. Log on to the console using the username and password of your Alibaba Cloud account.

Note

Enabling the root user increases security risks. Keep the credentials secure and promptly switch back to a resource account after use. Switch an Alibaba Cloud account to a resource account.