Manage sub-accounts and assign licenses

Super Admin

Sub-accounts

Use Alibaba Cloud RAM to manage sub-accounts

1. Create an Alibaba Cloud RAM user. Before you add a sub-account in the RPA Console Member Management menu, you must first create a RAM user in the Alibaba Cloud RAM console. As shown in the following figure.

   Important

   To ensure compatibility with Alibaba Cloud RPA, use the following settings when you create a RAM user:

   • Access mode: Select Console Access.

   • Multi-factor authentication (MFA): We recommend selecting 'Not required'.

     • If enabled, you must authenticate when logging in to the robot or editor client with the RAM user.

     • If your corporate security policy requires MFA, you can use the Dynamic Login Code method to log in to the client and meet compliance requirements.

2. Return to the Member Management page in the Alibaba Cloud RPA console, click Create Account, as shown in the following figure.

   Main field	Description
   Member account	Select an existing RAM user to bind.
   Member nickname	Enter a nickname for the account. The nickname can be 1 to 16 characters long and can include letters, numbers, and the following special characters: @ . - _
   Department	The highest-level department in the organization management tree is selected by default. To change the department, first create an organization tree.
   Role	Select a role for the account from the drop-down list. The role defines the account's permissions and what it can see in the console. To create a new role or modify an existing one, go to System Settings > Role List.
   Email	Enter the email address associated with the account.
   Robot license	An account must have a robot license to log in to the robot client. For more information about the assignment process, see the following sections.
   Editor license	An account must have an editor license to log in to the editor client. For more information about the assignment process, see the following sections.

Manage sub-accounts using Alibaba Cloud IDaaS

For more information, see Manage sub-accounts using Alibaba Cloud IDaaS.

Change the account management system

Public Cloud RPA provides two account systems for managing sub-accounts: Alibaba Cloud RAM and Alibaba Cloud IDaaS.

• The account system stores account information, such as usernames, passwords, and other logon methods. Public Cloud RPA links these accounts to the RPA service.

• Only one account system can be active at a time.

• To switch the account system, go to the Member Management page and click "Settings" in the upper-right corner.

  Important

  Impact of switching the account system:

  • All sub-accounts in RPA are deleted. Only the main account remains. This does not affect account information previously created in Alibaba Cloud RAM or Alibaba Cloud IDaaS.

  • All licenses for bound RPA editors and robots are released. The corresponding clients will become unusable.

  • After the switch, re-create the sub-accounts in the selected account system and bind the licenses for the editors and robots.

Assign editors

After you assign an editor license to an account, you can use that account to log on to the editor client and develop automation processes. You can assign editor licenses in two ways.

• Method 1: Select a member, either an Alibaba Cloud account or a sub-account, and then add or modify their license.

• Method 2: Assign licenses in a batch. Select multiple members from the member list and assign licenses to them in a single operation. Batch operations support only Professional Edition editor licenses and Professional Edition robot licenses.

Assign on-premises robots

Log on to the client

After you create sub-accounts and assign licenses, you can log on to the client. The following table summarizes the logon methods for different account types. For more information, see Log on to the client.

Three built-in roles are provided by default. You can view them in System Settings - Role List:

• Super Admin: This role is only for your Alibaba Cloud account. It cannot be assigned to sub-accounts.

• administrator: This role does not have Member Management permissions, unlike the Super Admin. To make a sub-account an administrator, see Add RPA console administrator permissions to a sub-account.

• Employee: This role is for business users. It only lets them request and use RPA applications.

You can also add custom roles in System Settings - Role List.