All Products
Search
Document Center

ApsaraDB for OceanBase:Apply for cross-account authorization

Last Updated:Jun 03, 2024

Data transmission supports data migration or data synchronization between two Alibaba Cloud accounts, provided that you have obtained authorization from the other Alibaba Cloud account. This topic describes how to apply for authorization from another Alibaba Cloud account.

Background

Before you purchase and use Alibaba Cloud products and services, such as database and ECS instances, you must create and configure an Alibaba Cloud account. An Alibaba Cloud account can be an individual account or enterprise account and both types of accounts require real-name authentication. When you use Alibaba Cloud products and services, you may need authorization from another Alibaba Cloud account to access cloud resources, migrate data, or synchronize data. Therefore, the data transmission service supports data migration and synchronization between two Alibaba Cloud accounts.

For example, if Account A needs to access an OceanBase Database instance or VPC of Account B, Account A can apply for authorization from Account B.

Submit an authorization application

  1. Go to the Cross-Account Authorization tab.

    1. Log on to the ApsaraDB for OceanBase console.

    2. In the left-side navigation pane, choose Data Transmission > System Management.

    3. On the System Management page, click the Cross-Account Authorization tab to go to the My Applications list.

  2. In the My Applications list, click Apply for Cross-Alibaba Cloud Authorization in the upper-right corner.

  3. In the Apply for Cross-Alibaba Cloud Authorization dialog box, specify the parameters.

    Parameter

    Description

    Target UID

    Enter the UID of the account to be accessed. For more information about how to obtain the UID of an Alibaba Cloud account, see Obtain the UID of the target user.

    Target Role

    The default value is AliyunOceanBaseMigrationServiceRole.

    Reason for Application

    Enter the reason for your authorization application. This parameter is optional.

  4. Click Submit.

  5. After you submit an application, request the target account owner to log on to the ApsaraDB for OceanBase console with the corresponding Alibaba Cloud account, choose System Management > Cross-Account Authorization > Applications Received, and then approve your application.

    You can choose System Management > Cross-Account Authorization > My Applications to view the approval progress.

Cancel an authorization application

You can cancel an authorization application in the Pending Authorization state.

  1. Go to the Cross-Account Authorization tab and click My Applications.

  2. In the My Applications list, click Cancel in the Actions column for the corresponding application.

    image

  3. In the dialog box that appears, click Cancel Application.

    Then, status of the application changes to Cancelled.

Revoke an authorization application

You can revoke an authorization application in the Authorized state.

  1. Go to the Cross-Account Authorization tab and click My Applications.

  2. In the My Applications list, click Revoke in the Actions column for the corresponding application.

    image

  3. (Optional) Before you revoke an authorization, notify the applicant to release the associated data migration or synchronization project.

    Note

    If no associated project exists, skip this step.

    image

  4. In the Revoke Authorization dialog box, enter revoke and click Revoke Authorization.

    Then, the status of the application changes to Revoked.

Resubmit an authorization application

You can resubmit an authorization application in the Cancelled, Revoked or Rejected state.

  1. Go to the Cross-Account Authorization tab and click My Applications.

  2. In the My Applications list, click Apply Again in the Actions column for the corresponding application.

    image

  3. In the Apply Again dialog box, specify Reason for Application.

    Note

    The target UID and role to be authorized cannot be modified. The Reason for Application field is optional.

  4. Click Apply.

  5. After you submit an application, request the target account owner to log on to the ApsaraDB for OceanBase console with the corresponding Alibaba Cloud account, choose System Management > Cross-Account Authorization > Applications Received, and then approve your application.

References

Approve a cross-account authorization application

View cross-account authorization