Resource Management:Create a resource share

Procedure

1. Log on to the Resource Management console.

2. In the left-side navigation pane, choose Resource Sharing > Resources I Share.

3. In the top navigation bar, select the region where the resources to be shared reside.

   Important

   If you want to share global resources, such as templates in Resource Orchestration Service (ROS), you can select only the China (Shanghai) region to create resource shares.

4. Click Create Resource Share. On the page that appears, configure the parameters.

   1. Configure basic information and add resources.

      Enter a resource share name, add tags to the resource share based on your business requirements, and then add select resources to be shared.

   2. Add permissions.

      The permissions define the operations that principals can perform on the resources. Built-in permissions are automatically displayed based on the types of selected resources. You can select permissions based on your business requirements. For more information, see Permission library.

   3. Add principals.

      1. Configure Principal Scope.

         • All Accounts: A resource owner can share resources with any account.

           A resource owner can share resources with any account in the following scenarios:

           • An Alibaba Cloud account that is not the management account or a member of a resource directory shares resources with another Alibaba Cloud account that is not the management account or a member of a resource directory.

           • The management account or a member of a resource directory shares resources with an Alibaba Cloud account that is not the management account or a member of the resource directory.

           • The management account or a member of a resource directory shares resources with all members in the resource directory, all members in a specific folder in the resource directory, or a specific member in the resource directory.

             Important

             Resource sharing across resource directories is not supported.

         • Objects Within Resource Directory: A resource owner can share resources only with objects within a resource directory. This indicates that the management account or a member of a resource directory can share resources with all members in the resource directory, all members in a specific folder in the resource directory, or a specific member in the resource directory.

      2. Configure Method and add principals.

         • Add from Resource Directory

           Important

           This method can be used only by the management account of a resource directory.

           Select principals from the resource directory.

           • Root folder: If you select the Root folder, the added resources are shared with all members in the resource directory.

           • Specific folder: If you select a folder other than the Root folder, the added resources are shared with all members in the selected folder.

           • Member: If you select a member, the added resources are shared only with the member.

         • Add Manually

           Select an option from the Principal Type drop-down list, enter an ID in the field that appears, and then click Add.

           • Resource Directory: If you select this option, the ID of the current resource directory is automatically displayed for the Resource Directory ID parameter that appears. In this case, the added resources are shared with all members in the resource directory.

           • Folder (Organization Unit): If you select this option, you must enter a folder ID in the Folder ID field that appears. In this case, the selected resources are shared with all members in the folder.

           • Alibaba Cloud Account: If you select this option, you must enter an account ID in the Principal ID field that appears. In this case, the added resources are shared only with the account.

   4. Confirm the configurations and click OK.