Create an assume role configuration

task australia Updated Sep 10, 2026 1 min read create-assume-role-config.md

Create a service account assume role configuration to facilitate cross-account access. This supports access from a management account to a member account, or from a trusted account to a trusting account. All related accounts are automatically loaded, avoiding the need to add them individually.

Before you begin

Make sure that the accessor account credentials are configured in the ServiceNow AI Platform.

Role required: sn_itom_ccg.scheduling_admin

About this task

If permanent credentials aren't defined for the member account, Cloud Configuration Governance checks the Cloud Service Account Assume Role Config [sn_itom_ccg_service_account_assume_role_config] table to identify the special configuration associated with the management account. It then uses the management account credentials to generate temporary credentials for the member accounts. If the configuration exists in the table, Cloud Configuration Governance uses the temporary credentials acquired by specifying a role and its configuration in the Amazon Web Services (AWS) Security Token Services API AssumeRole action.

Procedure

Navigate to All > Cloud Configuration Governance > Assume Role Config.
Select New.
Fill the values on the Service Account Assume Role Config form.

For a description of the form fields, see Cloud Configuration Governance Service Account Assume Role Config form.
Select Submit.

Parent Topic:Set up Cloud Configuration Governance for AWS

44 lines · 2.6 KB Wrap lines

---
title: Create an assume role configuration
description: Create a service account assume role configuration to facilitate cross-account access. This supports access from a management account to a member account, or from a trusted account to a trusting account. All related accounts are automatically loaded, avoiding the need to add them individually.
locale: en-US
canonical_url: https://www.servicenow.com/docs/r/australia/it-operations-management/itom-cloud-accelerate/create-assume-role-config.html
release: australia
product: ITOM Cloud Accelerate
classification: itom-cloud-accelerate
topic_type: task
last_updated: "2026-09-10"
reading_time_minutes: 1
breadcrumb: [Set up AWS, Explore, Cloud Configuration Governance, ITOM Cloud Accelerate, IT Operations Management]
---

# Create an assume role configuration

## Before you begin

Make sure that the accessor account credentials are configured in the ServiceNow AI Platform.

Role required: sn\_itom\_ccg.scheduling\_admin

## About this task

If permanent credentials aren't defined for the member account, Cloud Configuration Governance checks the Cloud Service Account Assume Role Config \[sn\_itom\_ccg\_service\_account\_assume\_role\_config\] table to identify the special configuration associated with the management account. It then uses the management account credentials to generate temporary credentials for the member accounts. If the configuration exists in the table, Cloud Configuration Governance uses the temporary credentials acquired by specifying a role and its configuration in the Amazon Web Services \(AWS\) Security Token Services API AssumeRole action.

## Procedure

1. Navigate to **All** &gt; **Cloud Configuration Governance** &gt; **Assume Role Config**.

2. Select **New**.

3. Fill the values on the Service Account Assume Role Config form.

For a description of the form fields, see [Cloud Configuration Governance Service Account Assume Role Config form](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-cloud-accelerate/ccg-service-account-assume-role-config-form.md).

4. Select **Submit**.

**Parent Topic:**[Set up Cloud Configuration Governance for AWS](https://raw.githubusercontent.com/ServiceNow/ServiceNowDocs/australia/markdown/australia/it-operations-management/itom-cloud-accelerate/set-up-ccg-for-aws.md)