All Products
Document Center

Resource Management:Share resources with objects in a resource directory

Last Updated:May 11, 2023

You can use the management account or a member of a resource directory to share resources with all members in the resource directory, all members in a specific folder in the resource directory, or a specific member in the resource directory.

Background information

In this example, a resource owner (the management account or a member of a resource directory) shares one or more vSwitches in a virtual private cloud (VPC) within the resource owner to a member in the resource directory.

Step 1: Enable resource sharing

  1. Use the management account of your resource directory to log on to the Resource Management console.

  2. In the left-side navigation pane, choose Resource Sharing > Configure.

  3. On the Settings page, click Enable.

  4. In the Service-linked Role for Resource Sharing dialog box, click OK.

    The system creates a service-linked role named AliyunServiceRoleForResourceSharing to obtain the organizational structure of the resource directory. For more information, see Service-linked role for Resource Sharing.

Step 2: Create a resource share

  1. Log on to the Resource Management console as a resource owner.

  2. In the left-side navigation pane, choose Resource Sharing > Resources I Share.

  3. In the top navigation bar, select the region where the resources to be shared reside.


    If you want to share global resources, such as templates in Resource Orchestration Service (ROS), you can select only the China (Shanghai) region to create resource shares.

  4. On the Resources I Share page, click Create Resource Share.

  5. In the Configure Basic Information and Add Resources step, enter a resource share name in the Resource Share Name field, select the vSwitches that need to be shared, and then click Next.

  6. In the Add Permissions step, select the AliyunRSDefaultPermissionVSwitch permission and click Next.

  7. In the Add Principals step, add a principal and click Next.

    1. Select Objects Within Resource Directory for Principal Scope.

    2. Select Add from Resource Directory for Add Mode.

    3. Select the member from the resource directory.

  8. In the Confirm and Submit step, click OK.

    Then, you can use the member to access the vSwitches that are shared by the resource owner.