All Products
Search
Document Center

Resource Management:Why can't I log on to a resource account as the root user?

Last Updated:Aug 29, 2025

This topic explains the reasons why you cannot log on to a resource account as the root user and provides solutions.

Causes

  • A member account created within a resource directory is known as a resource account. By design, a resource account does not have a root user. You can only log on to the Alibaba Cloud Management Console by using a Resource Access Management (RAM) identity: a RAM user or a RAM role.

  • An existing Alibaba Cloud account that is invited to join a resource directory is known as a cloud account. You can log on to a cloud account by using a RAM identity or as the root user. However, if you convert a cloud account to a resource account, its root user is disabled, and any subsequent logon attempts as the root user will fail.

Solutions

Solution 1: Log on by using a RAM identity (recommended)

The recommended method is to log on to the console by using a RAM identity that belongs to the resource account. The following example uses a RAM user:

Solution 2: Log on as the root user

If you must perform specific operations that require a root user, such as modifying security settings or payment information, use the management account of the resource directory to convert the resource account to a cloud account. You can then log on as the root user of the cloud account.

  1. Bind a mobile phone number to the resource account.

  2. Convert the resource account to a cloud account.

  3. Retrieve the password for the cloud account.

    You can use the password retrieval feature to reset the password. For more information, see Retrieve a password on the Alibaba Cloud official website.

    Note

    If the cloud account already has a logon password, you can skip this step.

  4. Log on to the console with the cloud account's username and password.

Note

Enabling the root user increases the security risks of the account. Keep the root user credentials secure to prevent unauthorized access. For security purposes, we recommend that you convert the cloud account back to a resource account as soon as you complete the required tasks. For more information, see Switch a cloud account to a resource account.