If an operation requires a root user, switch the resource account to a cloud account. After the operation, switch the cloud account back to a resource account promptly to ensure security.
Prerequisites
-
For traceability, perform this operation by using a RAM user from the management account that has the AliyunResourceDirectoryFullAccess permission. For more information, see Create a RAM user.
-
The resource account must have a security mobile number or email address. Otherwise, you cannot switch it to a cloud account. For more information, see Manage member account mobile numbers or Change a member's account name (security email address).
Procedure
-
Log on to the Resource Management console.
-
In the navigation pane on the left, choose .
-
In the Resource Organization View or Member List View, for the target member, click Switch in the Actions column.
-
In the Switch to Cloud Account dialog box, read the risk notifications, select the acknowledgment checkbox, and then click OK.
Results
After a successful switch, the following changes are made to the member:
-
The member type changes from resource account to cloud account.
-
The member's root user is enabled.
ImportantUse the password retrieval feature to set a login password for the root user. Only then can the root user log on to the Alibaba Cloud Management Console. If you have already set a password for the root user, you can continue to use it and do not need to reset it. Enabling the root user increases the security risks for the account. Protect the root user's credentials to prevent unauthorized access.