Enabling Sharing with Organizations

Scenario

If you use Huawei Cloud Organizations to manage your accounts, you can enable sharing with Organizations to share resources more easily. If your account is in an organization, you can share resources either with individual accounts or with all accounts in an organization unit (OU) or in the entire organization without having to enumerate each account.

To share resources within your organization, you first need to use the RAM console to enable sharing with Organizations. When you share resources in your organization, the accounts in your organization can access and use the shared resources without exchanging invitations.

If you no longer need to share resources with the entire organization or OUs, you can disable sharing with Organizations. After this function is disabled, you cannot set the principal type to an organization when you create a resource share.

Only the organization administrator can enable or disable Sharing with Organizations.

When sharing with Organizations is enabled:

• If a member account exits the organization or is removed from the organization by the organization administrator, the principals within the organization will be disassociated from all resource shares that the member account has created. In addition, the member account will be disassociated from any resource shares that are shared with the member account within the organization.
• If the organization administrator deletes an OU from the organization, the OU will be disassociated from all resource shares that are shared with the OU.
• If the organization administrator deletes the entire organization, all accounts in the organization will be disassociated from any resource shares that are shared with the organization.

Procedure

1. Log in to the Huawei Cloud management console.
2. Click in the upper left corner and choose Management & Governance > Resource Access Manager. The Resource Access Manager page is displayed.
3. In the navigation pane, choose Settings and turn on the toggle key Enable sharing with Organizations.
   Figure 1 Enabling sharing with Organizations
   
   

   • The toggle switch Sharing with Organizations of RAM is associated with the Trusted Service switch of Organizations. Specifically, if RAM is enabled as a trusted service in the Organizations service, sharing with Organizations will be automatically enabled, and vice versa. For details about how to enable a trusted service, see Enabling or Disabling a Trusted Service.
   • If you disable RAM from being a trusted service in your organization, the organization, OUs, and member accounts will lose access to the previously shared resources.