Create a Digital Employee

更新时间:
复制 MD 格式

Create a Digital Employee (Agent) in STAROps by configuring basic information and associating a RAM role.

Prerequisites

  • You have registered and logged in to the STAROps console.

  • Your account has the permissions to create Digital Employees.

  • At least one Workspace has been created.

Procedure

  1. Log on to the STAROps console.

  2. In the left-side navigation pane, click Digital Employees to go to the Digital Employee management page.

  3. Click Create Digital Employee.

  4. In the Create Digital Employee panel, configure the following parameters.

    Parameter

    Required

    Description

    ID

    Yes

    The unique identifier of the Digital Employee. Only lowercase letters, digits, hyphens (-), and underscores (_) are allowed. Must be 1 to 64 characters. Cannot be modified after creation.

    Display Name

    Yes

    The display name of the Digital Employee. Use a name that reflects the employee's responsibilities, for example, K8s Cluster O&M Expert.

    RAM Role Type

    Yes

    The type of RAM role used by the Digital Employee for cloud resource operations. Select Service Role or Custom Role.

    • Service Role: Automatically created by STAROps with common observability data read permissions.

    • Custom Role: Manually created in the RAM console with custom permission policies. Use this option when you need access to specific cloud resources or write operations.

    RAM Role ARN

    Yes

    The ARN of the RAM role assigned to the Digital Employee for running tasks. This determines which cloud resources the employee can access. If you select Service Role, this field is automatically populated. If you select Custom Role, enter the ARN manually. Example: acs:ram::<accountId>:role/<roleName>.

    Description

    No

    A description of the Digital Employee's responsibilities. This helps the AI understand the employee's role and scope. For example: Responsible for daily inspection and alert analysis of the production K8s cluster.

    Default Rules

    No

    The core configuration that guides the Digital Employee's behavior, written in Markdown format. Define behavioral boundaries with positive directives and negative constraints. For more information, see Configure Default Rules.

  5. Click OK.

Result

After the Digital Employee is created, you are redirected to the Digital Employee management page where the new employee appears in the list.

What to do next

  • Configure default rules to define the behavior of the Digital Employee. For more information, see Configure Default Rules.

  • Add Skills to extend the task-handling capabilities of the Digital Employee. For more information, see Skill Management.

  • Connect MCP services to allow the Digital Employee to access external systems. For more information, see MCP Service Configuration.

FAQ

What do I do if I see "Insufficient permissions" when creating a Digital Employee?

Verify that the current RAM user has the cms:CreateDigitalEmployee permission. If you are using a RAM user account, ask your administrator to attach a policy containing this action to your RAM user in the RAM console. For more information, see Digital Employee permission configuration.

What do I do if the creation fails with an "Invalid RAM role ARN" error?

Check the following:

  • The ARN format is correct. The standard format is acs:ram::<accountId>:role/<roleName>.

  • The RAM role has been created and its trusted entity includes the CloudMonitor (CMS) service.

  • The RAM role is enabled (not disabled or deleted).