All Products
Search
Document Center

Resource Access Management:Overview of a RAM user group

Last Updated:Mar 10, 2026

A RAM user group is a collection of RAM users who share the same responsibilities. You can grant permissions to a user group instead of individual RAM users, which simplifies permission management.

Use cases

  • If a RAM user's responsibilities change, you need only move the user to a different group. Other RAM users are not affected.

  • If the permissions of a RAM user group change, you need only modify the policies attached to the group. The changes apply to all RAM users in that group.

Procedure

  1. Log on to the RAM console by using an Alibaba Cloud account or as a RAM administrator.

  2. Create a RAM user group.

  3. Add RAM users to or remove RAM users from the RAM user group.

  4. Grant permissions to the RAM user group.

    After you grant permissions to a RAM user group, all RAM users in the group inherit those permissions.

Limitations

For information about the limits on RAM user groups, see Limitations.