When you run services such as Hadoop and Spark in your E-MapReduce (EMR) cluster, you must grant the services the permissions to access other Alibaba Cloud services and perform related operations. Each EMR cluster must be configured with service roles and Elastic Compute Service (ECS) application roles. For more information, see Assign roles to an Alibaba Cloud account.