All Products
Search

This Product

    Smart Access Gateway:Authorize a cross-account network instance

    Document Center

    Smart Access Gateway:Authorize a cross-account network instance

    Last Updated:Sep 15, 2026

    Configure cross-account authorization to allow another Alibaba Cloud account to attach your Smart Access Gateway (SAG) instance to its Cloud Connect Network (CCN) instance or Virtual Border Router (VBR) instance. This establishes network connectivity.

    Prerequisites

    You have the Account UID of the other Alibaba Cloud account and the ID of its CCN or VBR instance.

    Procedure

    1. Log on to the Smart Access Gateway console.
    2. In the left-side navigation pane, click Smart Access Gateway > Instances.
    3. In the top menu bar, select the target region.
    4. In the Smart Access Gateway page, find the target Smart Access Gateway instance.

    5. Navigate to the Network Configuration page for the target SAG instance in one of the following ways:

      • Click the ID of the target SAG instance. On the instance details page, click Network Configuration.

      • In the Operation column of the target SAG instance, click Network Configuration.

    6. Click the Network Instance Details tab.

    7. In the Authorized Cross-account Instances section, click Authorize CCN Instance.

    8. In the Authorize CCN Instance dialog box, configure the parameters and click OK.

      Parameter

      Description

      Authorized Account UID

      The UID of the Alibaba Cloud account that you want to authorize. For example: 168840159596****.

      Network Type

      The type of network instance to authorize. SAG supports the following network types:

      • CCN: Select this type to authorize a CCN instance.

      • Virtual Border Router: Select this type to authorize a VBR instance.

      Target CCN Instance ID

      The ID of the target CCN instance. For example: ccn-6dhj3m2fz7p6og****.

      Note

      Required only if Network Type is set to CCN.

      Region

      The region where the peer VBR is deployed.

      Note

      Required only if Network Type is set to Virtual Border Router.

      Peer VBR ID

      The ID of the peer VBR instance. For example: vbr-o6w14e21pzziti4tp****.

      Note

      Required only if Network Type is set to Virtual Border Router.

      Do you want to enable secure draining?

      Specifies whether to enable secure draining. This feature is disabled by default.

    Related documents

    • GrantSagInstanceToVbr: Grants a VBR instance belonging to another Alibaba Cloud account permissions on an SAG instance.

    • GrantSagInstanceToCcn: Grants a CCN instance belonging to another Alibaba Cloud account permissions on an SAG instance.