All Products
Document Center

Access the console with a RAM sub-account

Last Updated: Apr 11, 2018

ARMS supports primary account & sub-account access system (RAM) of the Alibaba Cloud. This topic explains how to authorize a sub-account to access ARMS.


To use a RAM sub-account to access the ARMS console, the sub-account must meet the following two conditions:

  • The AccessKeyId and AccessSecretKey are created for this sub-account.
  • The console logon function is enabled, and the logon username and password are set for this sub-account.

For instructions, see Users.

Authorize a sub-account to access the ARMS console

If a sub-account meets the preceding logon prerequisites, it must be authorized before using the ARMS console. Currently, ARMS only supports authorizing a sub-account for full access of the ARMS service resources.

NOTE: Open API does not support the access of a subaccount.

The procedure is as follows:

  1. Log on to the RAM console and select a sub-account to be authorized on the sub-account management page. For instructions, see topic Grant permissions of the RAM document.
  2. Select AliyunARMSFullAccess on the authorization policy page.

After authorization, you can directly log on to the ARMS console.