I've got an account used by an external automation tool to mute alerts/unmanage nodes via API. I'd like to extend its use to stop/start cloud instances via API. I can use the account to manage/unmanage the cloud instances, but when trying to stop/start instances I receive the error "Access to Orion.Cloud.AWS.Instances.stopinstance verb denied". I can't find any documentation indicating what specific rights on the Orion account are needed.
My account (which is an admin) has no issue stopping/starting them in this manner, but I'd like to grant only the minimum rights to this or another account used for this purpose. I gave the account "Allow nodes to be rebooted" under SAM settings, but that didn't do the trick. Any ideas?