grant 为函数计算服务授权报了一个错

[kagawa23]

我是用的ram子账号， 需要什么权限呐？
运行的结果如下
grant demo
Please input the role name:
myRole
Please input the policy name:
myPolicy
Permission grant scenarios:

1. Allow FC write function logs to your log store.
2. Allow FC copy code from your OSS location.
   Please input your choice [1-2]:
   1
   Please input the log project: m'y-log-project
   Please input the log store: my-log-store
   Error: failed to create role myRole due to:{
   "HttpStatus": 403,
   "RequestId": "75ED230B-E2EE-479D-AADD-BB84B906716F",
   "HostId": "ram.aliyuncs.com",
   "Code": "NoPermission",
   "Message": "You are not authorized to do this action. Resource: acs:ram:::role/* Action: ram:CreateRole"
   }