Docs

Cloud Monitor

Management permission

Cloud Monitor service-linked roles

Cloud Monitor service-linked roles

In some scenarios, Cloud Monitor must access other cloud services. These permissions are granted through service-associated roles.

tip

For more information about service-associated roles, see Service-associated roles.

Application scenarios

When Cloud Monitor automatically installs the host monitoring add-on, access permissions on Elastic Compute Service (ECS) need to be obtained through a service-associated role.

When you use the log monitoring feature, you need to grant read permissions on Torch Log Service (TLS) by using a service-associated role.

When you use the alerting feature of Cloud Monitor, you need to grant query permissions on other cloud service instances by using a service-associated role.

Permission description

The following table describes the permissions of Cloud Monitor service-associated roles.

Role Name	Role Description
ServiceRoleForCM	The role is used by Cloud Monitor to access the resources of other cloud services.
ServiceRolePolicyForVolcECS	This role provides the cross-service association policy between Cloud Monitor and ECS.

Last updated: 2026.07.10 14:02:23