Authorize and activate

Step 1: Create a role in the RAM console

1. Log on to the Chat App Message Service console.

2. In the left-side navigation pane, click Customer Service Agent.

3. On the service access authorization page, click Go to RAM Console.

The system opens the Alibaba Cloud RAM console role management page in a new window.

Step 2: Select the trusted entity type

1. On the role list page in the RAM console, click Create Role.

2. In the Create Role dialog box, set Trusted Entity Type to Alibaba Cloud Account.

Step 3: Enter the trusted entity account

1. Set Trusted Entity to Other Alibaba Cloud Account.

2. In the input field, enter the following fixed UID: 1084693755814212

Step 4: Create and name the role

1. Click OK.

2. In the Create Role dialog box, set Role Name to CPaaSService.

Step 5: Go to the permission management page

1. After the role is created successfully, click OK.

2. On the role details page, click the Permission Management tab.

3. Click Add Permission.

Step 6: Search for and select the access policy

1. In the Add Permission panel, enter cams in the search box.

2. Find and select the access policy AliyunCamsFullAccess.

3. Click Grant Permission to complete the access policy binding.

Step 7: Edit the trust policy

Open the trust policy editor

1. Click the Trust Policy tab.

2. Click Edit Trust Policy to enter script editing mode.

Edit the trust policy content

1. In the Script Editor, delete all existing content.

2. Copy the following content and paste it into the editor:

   {
     "Statement": [
       {
         "Action": "sts:AssumeRole",
         "Effect": "Allow",
         "Principal": {
           "Service": [
             "cams.aliyuncs.com"
           ]
         }
       }
     ],
     "Version": "1"
   }

3. Click OK to save the trust policy.

Step 8: Verify the authorization

1. Return to the service access authorization page in the Chat App Message Service console.

2. Click Role Created.

3. The system automatically verifies whether the authorization is successful.

Verification successful: The page automatically proceeds to the next step.

Verification failed: Check the following configurations:

• Trusted entity UID: 1084693755814212

• Role name: CPaaSService (case-sensitive)

• Access policy: AliyunCamsFullAccess

• Trust policy JSON is copied completely

After confirming that all configurations are correct, click Role Created to re-verify.

Select a WABA account and business phone numbers

1. On the account configuration page, enter a WABA ID or account name in the search box to find accounts. Only WABA accounts that have been successfully bound to Chat App Message Service are displayed. If no WABA accounts are available, confirm that you have completed WhatsApp channel binding in Channel Management.

2. Click the target WABA account to expand the business phone number list.

3. Select one or more business phone numbers. You can select all bound phone numbers under the WABA account. The selected numbers will be used for session access and messaging in the Customer Service Agent platform.

4. Click Confirm Activation.