Share resources only within a resource directory

Step 1: Enable resource sharing

1. Log on to the Resource Management console by using the management account of your resource directory.

2. In the left-side navigation pane, choose Resource Sharing > Settings.

3. Click Enable.

4. In the Service-linked Role for Resource Sharing dialog box, click OK.

   The system creates a service-linked role named AliyunServiceRoleForResourceSharing to obtain the organizational structure of the resource directory. For more information, see Service-linked role for Resource Sharing.

Step 2: Create a resource share

1. Log on to the Resource Management console as a resource owner.

2. In the navigation pane on the left, choose Resource Sharing > Resources I Share.

3. In the top navigation bar, select the region where the resources to be shared reside.

   Important

   If you want to share global resources, such as templates in Resource Orchestration Service (ROS), you can select only the China (Shanghai) region to create resource shares.

4. Click Create Resource Share, and then configure the resource share.

   1. Configure basic information and add resources.

      Enter a resource share name, add tags to the resource share based on your business requirements, and then add select resources to be shared. In this example, vSwitches are selected for sharing.

   2. Add permissions.

      Permissions specify the operations that principals can perform on shared resources. In this example, select AliyunRSDefaultPermissionVSwitch. Click the permission name to view its details.

   3. Add principals.

      Set Principal Scope to Objects Within Resource Directory, set Method to Add from Resource Directory , and then select a folder or member from the resource directory. In this example, a member is selected.

   4. Confirm the configurations and click OK.

Step 3: Verify the result

You can use one of the following methods to check whether resources are successfully shared:

• Resource owner

  On the details page of the resource share in the Resource Management console, check the sharing status. If the status of both the resource and the principal is Associated, the sharing is successful.

• Principal

  In the console of the Alibaba Cloud service to which the resources belong, view and manage the resources. In this example, you can use a member to log on to the VPC console and view the vSwitches that are shared.

  In the list of vSwitches, a blue Shared label appears under the instance name of the shared vSwitch (such as vs3). It belongs to the VPC owned by the resource owner (such as test3).

References

• What is Resource Directory?

• Use a member to log on to the Alibaba Cloud Management Console