Help Center/ FunctionGraph/ User Guide/ Managing Functions/ Sharing Functions Based on RAM
Updated on 2025-08-19 GMT+08:00
View PDF
Share

Sharing Functions Based on RAM

Based on RAM, FunctionGraph allows you to share functions across accounts. After accepting a sharing invitation, principals can access and use the shared functions.

Function owners can specify sharing permissions based on the least privilege principle and usage requirements, so that principals can only access functions within permissions. This improves function security. For more information about the RAM service, see What Is RAM?.

If your account is managed by Huawei Cloud Organizations, you can share functions more easily. If your account is in an organization, you can share functions either with individual accounts or with all accounts in the organization or in an organization unit (OU) without having to enumerate each account. For details, see Enabling Sharing with Organizations.

Notes and Constraints

  • Only the owner can share functions with other accounts. Principals cannot share functions shared by other accounts with other accounts. Principals can only view and invoke shared functions.
  • You need to enable Sharing with Organizations to share functions with your organizations or OU. For more information, see Enabling Sharing with Organizations.
  • A principal can accept a maximum of 50 shared functions.
  • To specify resource share details, set the Resource Type to functiongraph:function.
  • After the function share is created, principals need to accept the share invitation within a specified period before using the functions. For details, see Responding to a Resource Sharing Invitation.
  • Currently, FunctionGraph supports only sharing of functions.

Creating a Function Share

The function owner needs to create a resource share on the RAM management console. For details, see Creating a Resource Share.

Viewing and Using Shared Functions

  1. Log in to the FunctionGraph console. In the navigation pane, choose Functions > Function List.
  2. On the Shared tab, you can view the function resources shared by other accounts.
    • If you are a function owner, you can find the corresponding share on the RAM management console based on the share name and view the resource status, permissions, and principals. For details, see Viewing a Resource Share.
    • If you are a function principal, you can find the corresponding share on the RAM management console based on the share name and view the resource status, permissions, and owners. For details, see Viewing Resources Shared with You.
    Figure 1 Viewing shared functions
  3. You can click the function name to view the function details and invoke the function.

Stopping Function Sharing

  • If a function share is no longer needed, the owner can delete it at any time. The shared functions will not be deleted. After a function share is deleted, the specified principals cannot use the functions in the share. For details, see Deleting a Resource Share.
  • The owner can update a function share at any time, including updating its name, description, tags, shared functions, permissions, and principals. For details, see Updating a Resource Share.
  • You can leave the function share if you do not need it. But the functions in the share will no longer be accessible then.

    You can leave a function share only if your account is an individual Huawei Cloud account instead of a part of an organization. For details, see Leaving a Resource Share.

Parent Topic: Managing Functions