Cloud Governance Center:Use the account baseline to create an account

Background

Before you create an account in the account factory, we recommend that you complete the configurations of the account baseline. For more information, see Configure the account baseline.

You can also apply the account baseline to an existing account. For more information, see Apply the account baseline to an existing account.

Procedure

1. Log on to the Cloud Governance Center console.

2. In the left-side navigation pane, choose Landing Zone > Account Factory.

3. On the Account Factory page, click Create Account in the Get Started with Account Factory section.

4. Optional: If multiple baselines exist, select a baseline in the Orchestration for Account Baseline dialog box and click Confirm.

5. In the Basic Information section, configure the basic information about the account.

   • Account Name: the unique identifier of the account. The name cannot be modified after the account is created.

   • Member Account Name: the name of the account that is displayed in the resource directory. The name can be modified after the account is created.

   • Parent Folder: the folder in the resource directory to which the account belongs. You can change the folder after the account is created.

   • RAM Default Domain Name: the default domain name of the Resource Access Management (RAM) user. The default domain name can serve as a unique identifier for RAM user logon and single sign-on (SSO). The default domain name is in the <AccountAlias>.onaliyun.com format, in which <AccountAlias> is the alias of the account. If you do not specify an account alias, the ID of the Alibaba Cloud account is used as the account alias, and the default domain name is in the <AccountID>.onaliyun.com format. You can also specify a new default domain name based on your business requirements. For more information, see View and modify the default domain name.

   • Member Identity: You need to specify an identity for the account that you are creating only when the current administrator account is a reseller account that is registered with the international site (alibabacloud.com).

     • Reseller Account: A distribution relationship is automatically established between the account and your reseller. You must use the administrator account to pay the bills of this account.

     • Not Reseller Account: The account is an ordinary Alibaba Cloud account, and no distribution relationship is established between the account and your reseller. You can directly use the account to purchase resources and must pay the fees for the resources by yourself.

6. In the Billing Method section, select a settlement method based on your business requirements.

   Settlement method	Description	Supported feature	Unsupported feature
   Default Main Account	Authorizes the main financial account to manage the financial assets, such as funds, bills, and invoices, of the created account.	Contractual discount inheritance, centralized bill management, consolidated invoicing, payments that are made by the main financial account for other accounts, resource sharing, and tiered pricing for pay-as-you-go services	Payments that are made by the managed accounts, the use of vouchers for the managed accounts, and budget control, such as balance transfer and credit control transfer, for the managed accounts
   Self-pay	Allows the account to pay and manage its own bills.	Independent bill management, payments made by the account, independent invoicing, and the use of vouchers	Contractual discount inheritance, budget control, payments made for other accounts, resource sharing, and tiered pricing for pay-as-you-go services
   Other Account	Entrusts another member to centrally manage the settlement, cost allocation, and budgets of bills.	Contractual discount inheritance, centralized bill management, consolidated invoicing, payments made by the main financial account for other accounts, resource sharing, and tiered pricing for pay-as-you-go services	Payments that are made by the managed accounts, the use of vouchers for the managed accounts, and budget control, such as balance transfer and credit control transfer, for the managed accounts

   For more information, see Trusteeship Overview.

7. In the Bind CloudSSO Permissions section, select an access configuration that you want to attach to a user or user group.

8. Optional: Configure other parameters in the baseline template.

   The settings of default baseline items such as Guardrails are retained. The default baseline items are not displayed on the Create Accounts page.

9. Click Next: Preview to preview the parameter settings.

10. Click Execute.