All Products
Search
Document Center

Cloud Enterprise Network:ModifyGrantInstanceToTransitRouter

Last Updated:Aug 12, 2026

Modifies the payer for a cross-account network instance connection of a transit router instance.

Operation description

The ModifyGrantInstanceToTransitRouter operation supports modifying only the payer for cross-account virtual private cloud (VPC) instances, virtual border router (VBR) instances, and IPsec instances connected to a transit router instance.

Try it now

Try this API in OpenAPI Explorer, no manual signing needed. Successful calls auto-generate SDK code matching your parameters. Download it with built-in credential security for local usage.

Test

RAM authorization

The table below describes the authorization required to call this API. You can define it in a Resource Access Management (RAM) policy. The table's columns are detailed below:

  • Action: The actions can be used in the Action element of RAM permission policy statements to grant permissions to perform the operation.

  • API: The API that you can call to perform the action.

  • Access level: The predefined level of access granted for each API. Valid values: create, list, get, update, and delete.

  • Resource type: The type of the resource that supports authorization to perform the action. It indicates if the action supports resource-level permission. The specified resource must be compatible with the action. Otherwise, the policy will be ineffective.

    • For APIs with resource-level permissions, required resource types are marked with an asterisk (*). Specify the corresponding Alibaba Cloud Resource Name (ARN) in the Resource element of the policy.

    • For APIs without resource-level permissions, it is shown as All Resources. Use an asterisk (*) in the Resource element of the policy.

  • Condition key: The condition keys defined by the service. The key allows for granular control, applying to either actions alone or actions associated with specific resources. In addition to service-specific condition keys, Alibaba Cloud provides a set of common condition keys applicable across all RAM-supported services.

  • Dependent action: The dependent actions required to run the action. To complete the action, the RAM user or the RAM role must have the permissions to perform all dependent actions.

Action

Access level

Resource type

Condition key

Dependent action

cen:ModifyGrantInstanceToTransitRouter

update

*All Resource

*

None None

Request syntax

POST  HTTP/1.1

Request parameters

Parameter

Type

Required

Description

Example

CenId

string

Yes

The Cloud Enterprise Network (CEN) instance ID.

cen-dc4vwznpwbobrl****

InstanceId

string

Yes

The network instance ID.

vpc-bp1h8vbrbcgohcju5****

OrderType

string

Yes

The payer of the network instance.

Valid values:

  • PayByResourceOwner :

    The account that owns the network instance pays the fees.

  • PayByCenOwner :

    The account that owns the CEN instance pays the fees.

PayByCenOwner

ClientToken

string

No

The client token that is used to ensure the idempotence of the request.

You can use the client to generate the token, but you must make sure that the token is unique among different requests. The token can contain only ASCII characters.

Note

If you do not specify this parameter, the system automatically uses the RequestId as the ClientToken. The RequestId of each API request may be different.

123e4567-e89b-12d3-a456-42665544****

Response elements

Element

Type

Description

Example

object

Schema of Response

RequestId

string

The unique ID of the request. You can use this ID to troubleshoot issues.

F7DDDC17-FA06-4AC2-8F35-59D2470FCFC1

Examples

Success response

JSON format

{
  "RequestId": "F7DDDC17-FA06-4AC2-8F35-59D2470FCFC1"
}

Error codes

HTTP status code

Error code

Error message

Description

400 OperationUnsupported.action This action is not support. The error message returned because this operation is not supported in the specified region.
400 OperationFailed.GrantCrossAccountNotExist Cross-account authorization does not exist. Cross-account authorization does not exist.
400 MissingParameter.CenId The parameter CenId is mandatory. The parameter CenId is mandatory.
400 MissingParameter.InstanceId The parameter InstanceId is mandatory. The parameter InstanceId is mandatory.
400 MissingParameter.OrderType The parameter OrderType is mandatory. The parameter OrderType is mandatory.
400 InvalidParameter.OrderType The specified parameter OrderType is invalid. The specified parameter OrderType is invalid.
400 Forbbiden.TransitRouterServiceNotOpen The user has not open transit router service. The error message returned because the transit router is disabled. Enable the transit router and try again.
400 Forbidden.TransitRouterServiceExpired The transit router service is out of service. The transit router service has been suspended due for payment. Please renew the service and try again.
400 Forbidden.CenOwnerTransitRouterServiceNotOpen The cen owner user has not opened transit router service. The transit router service for the cen owner's account is not currently opened. Please inform them to open the transit router service and then try again.
400 Forbidden.CenOwnerTransitRouterServiceExpired The transit router service of the account to which the cen belongs has been suspended due to arrears. Please notify the other party to renew the service and try again. The transit router service of the account to which the cen belongs has been suspended. Please notify the other party to renew the service and try again.
400 InvalidParameter.CenId The specified parameter CenId is invalid.

See Error Codes for a complete list.

Release notes

See Release Notes for a complete list.