// Module included in the following assemblies:
//
// * cloud_experts_tutorials/cloud-experts-getting-started/cloud-experts-getting-started-deploying/cloud-experts-getting-started-detailed-ui.adoc

:_mod-docs-content-type: PROCEDURE

[id="cloud-experts-getting-started-detailed-ui-ocm-manager-role_{context}"]
= Creating an {cluster-manager} user role

[role="_abstract"]
The user role needs to be created so that {product-title} can verify your AWS identity. This role has no permissions, and it is only used to create a trust relationship between the installation program account and your {cluster-manager} role resources. For more information, see the user role documentation in _Additional resources_.

.Procedure
. Check if a user role already exists by running the following command:
+
[source,terminal]
----
$ rosa list user-role
----

. Run the following command to create the user role and to link it to your Red{nbsp}Hat account:
+
[source,terminal]
----
$ rosa create user-role --mode auto --yes
----
+
**Example output**
+
[source,terminal]
----
I: Creating User role
I: Creating ocm user role using 'arn:aws:iam::000000000000:user/rosa-user'
I: Created role 'ManagedOpenShift-User-rosa-user-Role' with ARN 'arn:aws:iam::000000000000:role/ManagedOpenShift-User-rosa-user-Role'
I: Linking User role
I: Successfully linked role ARN 'arn:aws:iam::000000000000:role/ManagedOpenShift-User-rosa-user-Role' with account '1rbOQez0z5j1YolInhcXY000000'
----
+
[NOTE]
====
As before, you can define `--mode manual` if you'd prefer to run the AWS CLI commands yourself. The CLI outputs the AWS commands and the relevant JSON files are created in the current directory. Make sure to link the role.
====

. Click *Step 3: Account roles*.