All Products
Search
Document Center

E-MapReduce:Assign roles to an Alibaba Cloud account

Last Updated:Mar 26, 2026

Before using EMR Serverless Spark, assign two default roles to your Alibaba Cloud account: AliyunServiceRoleForEMRServerlessSpark and AliyunEMRSparkJobRunDefaultRole.

In most cases, role assignment is triggered automatically when you first purchase EMR Serverless Spark.

Prerequisites

Before you begin, make sure you have:

  • Purchased EMR Serverless Spark

  • (For RAM users only) The AliyunRAMFullAccess permission, which is required to assign the AliyunEMRSparkJobRunDefaultRole role

Note

You can assign the AliyunEMRSparkJobRunDefaultRole role to an Alibaba Cloud account or a Resource Access Management (RAM) user that has the AliyunRAMFullAccess permission.

Assign the roles

  1. Log on to the EMR console.

  2. In the left-side navigation pane, choose EMR Serverless > Spark.

  3. On the Dependency Check page, find the AliyunServiceRoleForEMRServerlessSpark role and click Approve.

  4. On the Dependency Check page, find the AliyunEMRSparkJobRunDefaultRole role and click Authorize.

  5. In the lower part of the Cloud Resource Access Authorization page, click Agree to Authorization.

What's next

To use a Resource Access Management (RAM) user to perform operations in EMR Serverless Spark, you must grant the required permissions to the RAM user. For more information, see Grant permissions to a RAM user.