All Products
Search

This Product

    CloudOps Orchestration Service:Query the RAM policy required for template execution

    Document Center

    CloudOps Orchestration Service:Query the RAM policy required for template execution

    Last Updated:Aug 19, 2024

    This topic describes how to call an API operation in OpenAPI Explorer to query the permissions that are required to execute a template and the permissions that are not granted to the specified RAM role to execute the template.

    Procedure

    1. Go to the API Debugging page of the GenerateExecutionPolicy operation.

    2. Specify the TemplateName and RamRole parameters and click Call Now.image

      Important

      • You do not need to specify the RamRole parameter if you use the permissions of the current Alibaba Cloud account to create an execution.

      • The RamRole parameter is required if you use the permissions of the specified RAM role to create an execution.

    3. Check the values of the Policy and MissingPolicy parameters in the response. The Policy parameter indicates the permissions that are required to execute the template. The MissingPolicy parameter indicates the permissions that are not granted to the specified RAM role to execute the template.

    4. Grant the required permissions to the specified RAM role based on the RAM policy information returned in the response. For more information, see Grant permissions to a RAM user and Grant permissions to a RAM role.