Basic Concepts

Resource Owner (Principal Sharing with You)

An account used to create and manage resources. A resource owner can use RAM to create a resource share to share specified resources with other accounts. For details about how to view the information about a resource owner, see Viewing Principals Sharing with You.

Resource User (Principal You Share With)

The principal that the resource owner shares resources with. A resource user is usually an individual account. When Sharing with Organizations is enabled, a resource user can also be an organization or organizational unit (OU). For details about how to view the information about a resource user, see Viewing Principals You Share With.

Resource Share

A unit for resource sharing. Resource shares are created by resource owners. Each resource share consists of one or more resource groups, RAM managed permissions, and principals. For details about how to create a resource share, see Creating a Resource Share.

RAM Managed Permission

A permission that defines what actions principals can take on shared resources. There is at least one RAM managed permission for each shareable resource type. If a resource type has only one RAM managed permission, it is used automatically by default. If a resource type has more than one RAM managed permission, you can choose which one to use in a resource share. For details about how to view RAM managed permissions, see Viewing the RAM Permissions Library.

Resource Sharing Invitation

When a resource owner attempts to share resources with principals, RAM issues an invitation. The principals can accept or reject the invitation. When Sharing with Organizations is enabled, a resource owner can share resources with accounts within the same organization, and the accounts accept the resource sharing invitations by default. For details about how to accept or reject a resource sharing invitation, see Responding to a Resource Sharing Invitation.

Previous topic: Sharable Cloud Services and Resource Types