A user group is a physical identity that contains multiple RAM users. You can create RAM user groups to classify and authorize RAM users. This simplifies the management of RAM users and permissions.

Scenarios

  • If the permissions of a RAM user change, you need only to move the RAM user to a RAM user group with the required permissions. This does not affect other RAM users.
  • If the permissions of a RAM user group change, you need only to modify the policies that are attached to the group. The changes to the policies apply to all RAM users in the RAM user group.

Procedure

  1. Log on to the RAM console by using an Alibaba Cloud account or a RAM user or a RAM role that has administrative rights.
  2. Create a user group.

    For more information, see Create a user group.

  3. Add RAM users to or remove RAM users from the user group.

    For more information, see Add a RAM user to a RAM user group or Remove a RAM user from a RAM user group.

  4. Grant permissions to the RAM user group.

    If you grant permissions to the RAM user group, all RAM users in the group have the permissions. For more information, see Grant permissions to a RAM user group.

Limits

For more information, see Limits.