Manage accounts
You can manage multiple member accounts in your enterprise from a central location. You can move accounts, freeze logons, restore accounts, grant permissions, and detach accounts. This provides fine-grained control over different levels, such as subsidiaries, departments, and projects. You can also set a billing account to optimize cash flow and improve financial management efficiency.
Background information
Only administrators with the following roles can create and authorize new accounts:
Master account: You can manage all groups and their sub accounts.
Group administrator: If you are not a master account administrator but have been assigned a default role (such as organization or account administrator), you can only manage sub accounts within your assigned group and its subgroups.
Move accounts
You can move an account to another group if your organization chart changes. You can also move accounts to prevent resource obfuscation and achieve resource fencing between different projects or departments. Moving an account affects its management permissions. You must adjust the account permissions after the move.
Log on to the Account Center console and under My Entities, select Account Group.
Select the group that contains the account you want to move, and click Move in the Actions column. You can also select multiple accounts and click
In the dialog box that appears, select the destination group and click Confirm.
After the account is moved, you can view it in the destination group.
Freeze account login
If an Alibaba Cloud account is temporarily not in use or is under a threat, you can freeze its login. After the login is frozen, you cannot log in to the account, but the cloud products running in the account are not affected.
Log on to the Account Center console, and under My Entities, select Account Group.
Select the group that contains the account you want to freeze, and in its Actions column, click Freeze Login.
In the dialog box that appears, click Confirm.
Unfreeze an account
When a security risk for an Alibaba Cloud account is resolved or the account is re-authorized as a corporate member, you can unfreeze the account to resume normal use.
Log on to the Account Center console, and under My Entities, select Account Group.
Select the group that contains the account to restore, and click Unfreeze in the Actions column.
In the dialog box that appears, click Confirm.
Modify account information
You can update a sub account's information, such as its owning enterprise, secure phone number, email, and role permissions.
Log on to the Account Center console, and under My Entity, select Account Group.
For the group that contains the account you want to modify, click Details in the Actions column.
On the account details page that appears, you can modify the following information.
NoteChanging the Enterprise changes the account's authentication and ownership information. This change also affects the invoice title, funds, credit control, and sharing relationships.
The Attached Secure Phone is used to receive messages and for core business scenarios, such as account verification for password recovery or changing Security Settings. Exercise caution when you change it.
Modify account permissions
You can modify account permissions if a member's position changes, project responsibilities are adjusted, or the organization chart is updated. You can grant and revoke permissions on the Account Details page and the Role Details page.
Account details page
Log on to the Account Center console, and under My Entities, select Account Group.
Select the group that contains the account, and in the Actions column, click Details.
Under Advanced Settings, in the Role section, click Modify.
In the Role list, select roles to grant or delete existing roles.
Role details page
Log on to the Account Center console, and under My Entities, select Roles And Permissions.
In the Actions column for the role that you want to authorize, click Details.
On the Authorized Accounts page, click Add Authorized Account. In the dialog box that appears, select multiple accounts and then click Add to grant roles to multiple accounts.
On the Authorized Accounts page, select multiple accounts and click Revoke Permissions to revoke the role's permissions from the selected accounts.
Set a payment account
Set a billing account for a sub account to allocate a separate budget for a specific project or team, or if you need fine-grained management of resource usage.
Log on to the Account Center console, and under My Entities, select Account Group.
Select the group that contains the account, and click Details in the account's Actions column.
In the Payment Account Settings section of Advanced Settings, click Modify.
In the account list, select an account as the Payment Account for the current account.
Remove account relationship
To use an account independently from management by an enterprise administrator, detach it from the organization.
Log on to the Account Center console, and under My Entities, select Account Group.
Select the group that contains the account that requires a billing account, and click Details in the Actions column.
On the Details page, click Remove Relationship and then click Understood to detach the account.
