| Parameter | Type | Description | Example |
|---|---|---|---|
| object | The authorization chain settings. In most cases, this parameter is left empty. Note
If Account A is used to call an API operation of Intelligent Media Management (IMM) to process Object Storage Service (OSS) data in Account B, you must set the ServiceRole parameter to a role in Account A, and set the Chain parameter to a role in Account B. Then, you can use Account A to call the operation to process OSS data in Account B.
| ||
| ServiceRole | string | The service role in the account that is used to call an IMM API operation. The role must have the | AliyunSTSAssumeForIMMServiceRole |
| Policy | string | The policy that is attached to the role specified by the ServiceRole parameter. For example, the policy allows access to OSS. This parameter is optional. | {"Statement": [{"Action": "oss:*","Effect": "Allow","Resource": "*"}],"Version": "1"} |
| Chain | array<object> | The authorization chains. All roles in the array must have the | |
| Chain | object | The authorization chain. | |
| AssumeRoleFor | string | The ID of the account that you use to grant permissions. | 10232100246xxxxx |
| Role | string | The RAM role that can be assumed. | AliyunOSSRole |
| RoleType | string | The role type. Valid values:
| user |