Share resources only within a resource directory

Step 1: Enable resource sharing

1. Log on to the Resource Management console with the management account of your resource directory.

2. In the left-side navigation pane, choose Resource Sharing > Settings.

3. Click Enable.

4. In the Service-linked Role for Resource Sharing dialog box, click OK.

   The system creates the Service-linked role for Resource Sharing (AliyunServiceRoleForResourceSharing) to obtain the resource directory organizational structure.

Step 2: Create a resource share

1. Log on to the Resource Management console as a resource owner.

2. In the navigation pane on the left, choose Resource Sharing > Resources I Share.

3. In the top navigation bar, select the region where the resources to be shared reside.

   Important

   If you want to share global resources, such as templates in Resource Orchestration Service (ROS), you must select the China (Shanghai) region to create resource shares.

4. Click Create Resource Share, and then configure the resource share.

   1. Configure basic information and add resources.

      Enter a resource share name, add tags based on your business requirements, and then select the resources to share. In this example, vSwitches are selected.

   2. Add permissions.

      Permissions specify the operations that principals can perform on shared resources. In this example, select AliyunRSDefaultPermissionVSwitch. Click the permission name to view details.

   3. Add principals.

      Set Principal Scope to Objects Within Resource Directory, set Method to Add from Resource Directory , and then select a folder or member from the resource directory. In this example, a member is selected.

   4. Confirm the configurations and click OK.

Step 3: Verify the result

You can verify whether resources are shared successfully by using one of the following methods:

• Resource owner

  On the details page of the resource share in the Resource Management console, check the sharing status. If the status of both the resource and the principal is Associated, the resource is shared.

• Principal

  In the console of the Alibaba Cloud service to which the resources belong, view and manage the shared resources. In this example, log on to the VPC console as the member and view the shared vSwitches.

  In the list of vSwitches, a blue Shared label appears under the name of the shared vSwitch (such as vs3). The vSwitch belongs to the VPC owned by the resource owner (such as test3).

References

• What is Resource Directory?

• Use a member to log on to the Alibaba Cloud Management Console