Help Center> Cloud Stream Service> User Guide> User Service Migration Guide> Preparations for Migration> Step 1: Grant Permissions
View PDF

Step 1: Grant Permissions

Before migrating user data from CS to DLI, log in to the DLI console using the master account to grant permissions.

Procedure

  1. Enable DLI.

    Log in to the management console. In the upper part of the page, search for Data Lake Insight. If you log in to the DLI console for the first time, the Service Authorization page is displayed. Click Agree to go to the Overview page of the DLI console.

  2. Grant permissions to tenants.

    If enterprise-level multi-tenant management is used, you need to grant DLI permissions to the member accounts. Same as CS, DLI uses Identity and Access Management (IAM) to implement fine-grained permissions management for your enterprise-level tenants.

Mapping Between System Policies and Roles

Table 1 Mapping between system policies and roles

CS Policy/Role

DLI Policy/Role

Description

Permission Type

CS FullAccess

DLI FullAccess

Full permissions for the service

System-defined policy

CS CommonOperations

-

Common user permissions for CS. Users who are granted with these permissions can create, delete, and modify jobs and templates.

System-defined policy

CS ReadOnlyAccess

DLI ReadOnlyAccess

Read-only permissions for the service

System-defined policy

CS Tenant Admin

Tenant Administrator/DLI Service Admin

Administrator permissions. Users who are granted with these permissions can perform all operations on service resources.

System-defined role

CS Tenant User

DLI Service User

Common user permissions for CS. Users who are granted with these permissions can create, delete, and modify jobs and templates.

System-defined role

Permissions Mapping

Table 2 Permissions mapping

CS

DLI

Description

cs:jobs:get

dli:jobs:get

Obtain job details.

cs:jobs:list

dli:jobs:list

Obtain the list of jobs in an account.

-

dli:jobs:list_all

Obtain the list of jobs in a project.

cs:jobs:create

dli:jobs:create

Create a job.

cs:jobs:update

dli:jobs:update

Modify a job.

cs:jobs:delete

dli:jobs:delete

Delete a job.

cs:jobs:start

dli:queue:submit_job

Start a job.

cs:jobs:stop

dli:queue:cancel_job

Stop a job.

cs:clusters:create

dli:queue:create_queue

Create a queue.

cs:clusters:delete

dli:queue:drop_queue

Delete a queue.