<p class="shortdesc">You can use a master account to create and manage multiple subaccounts in the RAM console.</p> <section class="section prereq" id="create_suba__prereq_wp2_scl_zkb"><div class="tasklabel"><h2 class="doc-tairway">Before you begin</h2></div> <p class="p">Make sure you have signed up on Ping An Cloud and passed real-name authentication.</p> </section> <section class="section context"><div class="tasklabel"><h2 class="doc-tairway">About this task</h2></div> <p class="p">An authorization policy defines the access right of an subaccount to a specific cloud resource. In the RAM console, you can use a master account to create multiple subaccounts and assign them different authorization policies to manage subaccounts flexibly. </p> <div class="note note note_note"><span class="note__title">Note:</span> To create subaccounts for the first time, you must use a master account. Subaccounts with related RAM management authority can also be used to create subaccounts.</div> </section> <section id="create_suba__steps_lvf_b14_xkb"><div class="tasklabel"><h2 class="doc-tairway">Procedure</h2></div><ol class="ol steps" id="create_suba__steps_lvf_b14_xkb"><li class="li step stepexpand" id="create_suba__step_ydn_byh_hlb"> <span class="ph cmd">Log in to the <a class="xref" href="/console/ram/overview" target="_blank">RAM Console</a> .</span> </li><li class="li step stepexpand"> <span class="ph cmd">In the left navigation pane, click <span class="ph uicontrol">User</span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">In the upper-right corner of the page, click <span class="ph uicontrol">Create</span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">On the <span class="keyword wintitle">Create User</span> page, configure the following user information:</span> <div class="itemgroup info"> <img class="image" id="create_suba__image_ybz_12l_zkb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20203107175944-123324ca9a65.png"> <ul class="ul" id="create_suba__ul_xv4_d14_xkb"> <li class="li"><span class="ph uicontrol">Login Name</span>: Login name of the subaccount, which is the same as the username of the subaccount that is used for logging into the Ping An Cloud.</li> <li class="li"><span class="ph uicontrol">Display Name</span>: Name displayed in the console.</li> <li class="li"><span class="ph uicontrol">Email</span>: Mailbox of the subaccount.</li> <li class="li"><span class="ph uicontrol">Password</span>: Password of the subaccount.</li> <li class="li"><span class="ph uicontrol">AK/SK</span>: Select whether to automatically generate AK and SK.<div class="note note note_note"><span class="note__title">Note:</span> Some cloud resources use AK and SK symmetric encryption to verify user identity.</div></li> </ul> </div> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Create</span>.</span> </li><li class="li step stepexpand"> <span class="ph cmd">In the user list, locate the subaccount you have created, and then click <span class="ph uicontrol">Authorization</span> in the <span class="ph uicontrol">Operations</span> column.</span> </li><li class="li step stepexpand"> <span class="ph cmd">On the <span class="ph uicontrol">Authorization</span> page, enter the name of resource (for example, ECS) to be authorized to the subaccount, and then click <img class="image" id="create_suba__image_cq1_j2l_zkb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20203107175944-14916786920b.png">.</span> <div class="itemgroup info"> <img class="image" id="create_suba__image_rhz_g2l_zkb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20203107175944-1d0c5ead9a25.png"> </div> </li><li class="li step stepexpand"> <span class="ph cmd">In the available policy list, select an authorization policy, and then click <img class="image" id="create_suba__image_u2k_p2l_zkb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20203107175944-1977baae9500.png">. Use this method to add more authorization policies.</span> <div class="itemgroup info"> <div class="note note note_note"><span class="note__title">Note:</span> <p class="p">The subaccount can access resources as defined in the selected authorization policies. You cannot add the same authorization policy to one account.</p> </div> </div> </li><li class="li step stepexpand"> <span class="ph cmd">Click <span class="ph uicontrol">Confirm</span> after you add all authorization policies.</span> </li></ol></section> <section class="section result" id="create_suba__result_wrv_s2l_zkb"><div class="tasklabel"><h2 class="doc-tairway">Results</h2></div> <p class="p">Click the user in the user list, and then click the <span class="ph uicontrol">User Policy</span> tab to view the policies that have been authorized to the user.</p> <img class="image" id="create_suba__image_rnt_w2l_zkb" src="https://obs-cn-shanghai.yun.pingan.com/pcp-portal/20203107175944-101d40c9906c.png" width="750"> </section>