Multi-account management

Prerequisites

You have activated SASE. For more information, see Getting Started.

Procedure

Before you can use the multi-account management feature, you must first enable Resource Directory, add a delegated administrator account, and invite member accounts. Then, you can use the multi-account management feature of SASE to add multiple member accounts for centralized management.

Step 1: Enable Resource Directory

With Resource Directory, you can organize your Alibaba Cloud accounts into a structured hierarchy to manage them based on your business needs. After you enable Resource Directory, your account becomes the management account and has full control over the Resource Directory. For more information, see Enable a resource directory.

Step 2: Invite member accounts

You can invite Alibaba Cloud accounts that are outside your Resource Directory to join it as members. This enables unified management of your resources. After an account accepts the invitation, it becomes a member of the Resource Directory and can be managed centrally. For more information, see Invite an Alibaba Cloud account to join a resource directory.

Step 3: Add a delegated administrator account

The management account of Resource Directory can designate a member as the delegated administrator account for a trusted service. After designation, the delegated administrator account is authorized by the management account to access organization and member information and perform business management tasks within the trusted service. This approach separates organization management tasks from business management tasks: the management account performs organization management tasks for Resource Directory, and the delegated administrator account performs business management tasks for the trusted service. For more information, see Manage a delegated administrator account.

Step 4: Manage member accounts

You can use the multi-account management feature of Cloud SASE to add member accounts from your Resource Directory and centrally manage their access permissions.

1. Log on to the Secure Access Service Edge console.

2. On the Multi-account Management tab, click Added Member.

3. In the Added Member dialog box, select the desired member accounts and add them to the Selected Member Accounts list on the right.

4. Click OK.

   After you add the member accounts, you can view information such as Account UID, Account Name, and Added At in the member account list. You can also perform the following operations:

   • Add remarks

     In the Actions column of the member account list, click Remarks for an account to add notes. This helps you distinguish between multiple member accounts.

   • Delete a member account

     In the Actions column of the member account list, click Delete for an account to remove it. After a member account is deleted, the current account no longer manages it.