A resource account does not have a root user. You can only log on with a RAM identity, or switch the resource account to a cloud account first.
Causes
-
Members created in a resource directory are resource accounts. A resource account has no root user (Alibaba Cloud account). You can only log on to the Alibaba Cloud Management Console as a RAM identity (RAM user or RAM role).
-
An Alibaba Cloud account invited to join a resource directory becomes a cloud account. A cloud account can log on as a RAM identity (RAM user or RAM role) or as the root user (Alibaba Cloud account). If you switch a cloud account to a resource account, the root user identity is disabled and root user logon attempts fail.
Solutions
Solution 1: Log on as a RAM identity
Log on to the console with a RAM identity. The following example uses a RAM user:
-
If a RAM user exists for the resource account, go to the RAM User Logon page and log on with the RAM user credentials. Log on to the Alibaba Cloud Management Console as a RAM user.
-
If no RAM user exists, use the management account to create one for the resource account, then log on. Log on to the Alibaba Cloud Management Console as a RAM user.
Solution 2: Log on as the root user (Alibaba Cloud account)
Some operations, such as modifying security settings or payment information, require the root user. Use the management account to switch the resource account to a cloud account, then log on as the root user.
-
Attach a secure phone number to the resource account.
-
Switch the resource account to a cloud account.
-
Retrieve the logon password for the cloud account.
Use the Forgot Password feature to retrieve the logon password. What do I do if I forget my password?.
NoteIf the cloud account already has a logon password, skip this step.
-
Log on to the console using the username and password of your Alibaba Cloud account.
Enabling the root user increases security risks. Keep the credentials secure and promptly switch back to a resource account after use. Switch an Alibaba Cloud account to a resource account.