A resource owner can create resource shares to share resources with other accounts.

Background information

  • For more information about the limits on resource shares, see Limits.
  • Resource owners can add resources and principals to resource shares during or after the creation of the resource shares. For more information, see Modify a resource share.

Procedure

  1. Log on to the Resource Management console.
  2. In the left-side navigation pane, choose Resource Sharing > Resources I Share.
  3. In the top navigation bar, select the region where the resources to be shared reside.
    Important If you want to share global resources, such as templates in Resource Orchestration Service (ROS), you can select only the China (Shanghai) region to create resource shares.
  4. On the Resources I Share page, click Create Resource Share.
  5. In the Configure Basic Information and Add Resources step, enter a resource share name in the Resource Share Name field, select the resources that need to be shared, and then click Next.
    Note For more information about the types of resources that can be shared, see Services that work with Resource Sharing.
  6. In the Add Permissions step, select permissions and click Next.
    Built-in permissions are automatically displayed based on the types of selected resources. You can select permissions based on your business requirements. For more information, see Permission library.
  7. In the Add Principals step, add principals and click Next.
    1. Configure Principal Scope.
      • All Accounts: A resource owner can share resources with any account.

        A resource owner can share resources with any account in the following scenarios:

        • An Alibaba Cloud account that is not the management account or a member of a resource directory can share resources with another Alibaba Cloud account that is not the management account or a member of a resource directory.
        • The management account or a member of a resource directory can share resources with an Alibaba Cloud account that is not the management account or a member of the resource directory.
        • The management account or a member of a resource directory can share resources with all members in the resource directory, all members in a specific folder in the resource directory, or a specific member in the resource directory.
          Important Resource sharing across resource directories is not supported.
      • Objects Within Resource Directory: A resource owner can share resources only with objects within a resource directory. This indicates that the management account or a member of a resource directory can share resources with all members in the resource directory, all members in a specific folder in the resource directory, or a specific member in the resource directory.
    2. Configure Add Mode and add principals.
      • Add from Resource Directory
        Important This mode can be used only by the management account of a resource directory.

        Select principals from the resource directory.

        • Root folder: If you select the Root folder, the added resources are shared with all members in the resource directory.
        • Specific folder: If you select a folder other than the Root folder, the added resources are shared with all members in the selected folder.
        • Member: If you select a member, the added resources are shared only with the member.
      • Add Manually

        Select an option from the Principal Type drop-down list, enter an ID in the field that appears, and then click Add.

        • Resource Directory: If you select this option, the ID of the current resource directory is automatically displayed for the Resource Directory ID parameter that appears. In this case, the added resources are shared with all members in the resource directory.
        • Folder: If you select this option, you must enter a folder ID in the Folder ID field that appears. In this case, the added resources are shared with all members in the folder.
        • Alibaba Cloud Account: If you select this option, you must enter a member ID in the Principal ID field that appears. In this case, the added resources are shared only with the member.
  8. In the Confirm and Submit step, click OK.

Result

After the resource share is created, it is in the Enabled state.