When using the orchestration service for the first time, you need to create a role (CustomRoleForOOS) for your account that is granted with read/write access to your ECS resources. This role has all default permissions offered by the orchestration service, helping you avoid any permission issues while using the service. For more information about roles, see Role management.

Procedure

In the left-side navigation pane, select "Maintenance & Monitoring > Orchestration".

On the "Create role request" page, confirm the scope of permissions involved for the role, and then click the "Create now" button. The system will automatically complete the authorization process, and subsequent operation orchestration actions will default to being authorized and executed via this role (CustomRoleForOOS).

tip

Cross-service access is performed by using IAM roles. An IAM role is granted permissions to access specific cloud resources, and the current service can assume this role to access resources of other cloud services. For more information, see IAM.

After successful authorization, the role will appear in the role list of Identity and Access Management (IAM). Deleting the role will result in cross-service access failures. Therefore, perform this operation with caution.

Last updated: 2026.06.18 17:49:52

Public security network record in Beijing: No. 11010802032137