This topic describes how to use the OOS console or OpenAPI to obtain the permissions required for a template execution and to identify any missing permissions for a specified RAM role.
Console
Log on to the OOS console. In the left-side navigation pane, choose Automation Tasks > Public Task Templates or Custom Task Templates. Find the target template and click Create Execution.
On the Basic Information page, click Next: Set Parameters.
On the Set Parameters page, expand Advanced Options. Under RAM Role Assumed by OOS, select Specify a RAM role and use its permissions.
Hover over the View the permission policy required to execute this template link to see the minimum required RAM policy.
OpenAPI
Navigate to the GenerateExecutionPolicy API debugging page.
Enter the TemplateName and RamRole parameters, and then click Call Now.
ImportantIf you use your current account's permissions to create the execution, omit the RamRole parameter.
If you use a specific RAM role to create the execution, you must provide its name in the RamRole parameter.
In the response, the Policy field lists the permissions required to execute the template, while the MissingPolicy field lists the permissions that the specified RAM role lacks.
After you obtain the policy, grant the required permissions. For more information, see Grant permissions to a RAM user and Manage the permissions of a RAM role.