This topic provides answers to frequently asked questions about using Operation Orchestration Service (OOS).

Why is the following error returned when I use OOS as a RAM user: User has no permission to do the action: (ListTemplates)?

Cause: The Resource Access Management (RAM) user does not have the permission to execute the specified API action of OOS.

Solution: Log on to the RAM console by using an Alibaba Cloud account or an administrator account. Authorize the RAM user to execute the specified API action or all API actions. For example, configure "Action": "oos:*" to authorize the RAM user to execute all API actions. For more information, see Access control.

{
  "Statement": [
      {
          "Effect": "Allow",
          "Action": "oos:*",
          "Resource": "*"
      }
  ],
  "Version": "1"
}

Why is the following error returned when I use OOS as a RAM user: User has no permission to do the action: (PassRole)?

Cause: The RAM user is not allowed to use OOS as the specified RAM role because of lacking the permission of the PassRole policy.

Solution: Log on to the RAM console by using an Alibaba Cloud account or an administrator account. Attach the PassRole policy to the RAM user. For more information, see Access control.

{
  "Statement": [
      {
          "Effect": "Allow",
          "Action": "oos:*",
          "Resource": "*"
      }
  ],
  "Version": "1"
}

Why is the following error returned when I execute a template: Assumes role failed Code: EntityNotExist.Role, msg: The role not exists: acs:ram::111111:role/OOSServiceRole.?

Cause: You have not created the default RAM role for your OOS service to access your Alibaba Cloud resources.

Solution: Log on to the RAM console by using an Alibaba Cloud account or an administrator account. Attach the required trust policy to the RAM role OOSServiceRole assumed by your OOS service. For more information, see Grant RAM permissions for OOS.

Why is the following error returned when I execute a template: Assumes role failed Code: NoPermission, msg: You are not authorized to do this action. You should be authorized by RAM.?

Cause: You have not attached the required trust policy to the RAM role for your OOS service.

Solution: Log on to the RAM console by using an Alibaba Cloud account or an administrator account. Attach the required trust policy to the RAM role OOSServiceRole assumed by your OOS service. For more information, see Grant RAM permissions for OOS.

{
  "Statement": [
      {
          "Action": "sts:AssumeRole",
          "Effect": "Allow",
          "Principal": {
              "Service": [
                  "oos.aliyuncs.com"
              ]
          }
      }
  ],
  "Version": "1"
}