After you configure an account baseline, you can create accounts in the account factory. New accounts automatically inherit baseline configurations, helping you create controlled resource accounts, reduce account creation costs, and accelerate business delivery.
Background
We recommend that you complete the account baseline configuration before creating accounts. For more information, see Configure the account baseline.
You can also apply the account baseline to existing accounts. For more information, see Apply the account baseline to an existing account.
Procedure
-
Log on to the Agentic Cloud Governance Center console.
-
In the left-side navigation pane, choose Landing Zone > Account Factory.
-
On the Account Factory page, click Create Account in the Get Started with Account Factory section.
-
Optional: If multiple baselines exist, select a baseline in the Orchestration for Account Baseline dialog box and click Confirm.
-
In the Basic Information section, configure the account details.
-
Account Name: Unique account identifier. Cannot be changed after creation.
-
Member Account Name: Display name in the resource directory. Can be changed after creation.
-
Parent Folder: Resource directory folder for the account. Can be changed after creation.
-
RAM Default Domain Name: Default domain name for RAM user logon and SSO, serving as a unique identifier. Format:
<AccountAlias>.onaliyun.com, where<AccountAlias>is the account alias. If no alias is specified, the Alibaba Cloud account ID is used as the account alias:<AccountID>.onaliyun.com. You can also set a custom domain name. For more information, see Manage RAM user logon domains.
-
-
In the Billing Method section, select a settlement method.
Settlement method
Description
Supported features
Unsupported features
Default Main Account
The main financial account manages funds, bills, and invoices of the created account.
Contractual discount inheritance, centralized bill management, consolidated invoicing, payments by the main financial account for other accounts, resource sharing, and tiered pricing for pay-as-you-go services
Payments by managed accounts, voucher use for managed accounts, and budget control (balance transfer, credit control transfer) for managed accounts
Self-pay
The account pays and manages its own bills.
Independent bill management, payments made by the account, independent invoicing, and the use of vouchers
Contractual discount inheritance, budget control, payments made for other accounts, resource sharing, and tiered pricing for pay-as-you-go services
Other Account
Another member centrally manages settlement, cost allocation, and budgets.
Contractual discount inheritance, centralized bill management, consolidated invoicing, payments made by the main financial account for other accounts, resource sharing, and tiered pricing for pay-as-you-go services
Payments by managed accounts, voucher use for managed accounts, and budget control (balance transfer, credit control transfer) for managed accounts
-
In the Bind CloudSSO Permissions section, select an access configuration to attach to a user or user group.
-
Optional: Configure other parameters in the baseline template.
Default baseline items such as Guardrails retain their settings and are not displayed on this page.
-
Click Next: Preview to review your settings.
-
Click Execute.