Help Center> > User Guide >Service Authorization

Service Authorization

CGS requires access permissions for Cloud Container Engine (CCE) to protect its clusters and Software Repository for Container (SWR) to scan its images. Before authorization, CGS cannot access CCE or SWR.


  • Your account has not used CGS before.
  • You have obtained the account (with the Security Administrator, Agent Operator, Tenant Guest, and CGS Administrator permissions) and password for logging in to the management console.


  1. Log in to the management console.
  2. Go to the service authorization page, as shown in Figure 1.

    Figure 1 Accessing the service authorization page

Viewing the Service Agency List

Once service authorization has succeeded, an agency named cgs_admin_trust on CGS will be created. Go to the agency list to view the details.

  1. Log in to the management console.
  2. Go to the service agency list, as shown in Figure 2.

    Figure 2 Accessing the service agency list

Agency Creation Failed

If the number of agencies in your account has reached the maximum, an agency will fail to be created.

To solve this problem, delete unnecessary agencies on the Agencies page or contact IAM customer service to increase the quota.