IAM Permissions
Elastic Resource Pool
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Creating an elastic resource pool |
dli:elasticresourcepool:create |
Querying all elastic resource pools |
/ |
Deleting an elastic resource pool |
dli:elasticresourcepool:drop |
Modifying elastic resource pool information |
dli:elasticresourcepool:update |
Associating a queue with an elastic resource pool |
dli:elasticresourcepool:resourceManagement |
Querying all queues in an elastic resource pool |
dli:elasticresourcepool:resourceManagement |
Modifying the scaling policy of a queue associated with an elastic resource pool |
dli:elasticresourcepool:resourceManagement |
Viewing scaling history of an elastic resource pool |
dli:elasticresourcepool:scale |
Queue
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Creating a queue |
dli:queue:createQueue |
Querying all queues |
/ |
Deleting a queue |
dli:queue:dropQueue |
Modifying the CIDR block of a queue (deprecated) |
dli:queue:updateQueue |
Querying queue details |
/ |
Restarting, scaling out, and scaling in queues |
dli:queue:scaleQueue |
Creating an address connectivity test request |
/ |
Querying connectivity test details of a specified address |
/ |
Creating a scheduled CU change (deprecated) |
dli:queue:scaleQueue |
Viewing a scheduled CU change (deprecated) |
dli:queue:scaleQueue |
Batch deleting scheduled CU changes (deprecated) |
dli:queue:scaleQueue |
Modifying a scheduled CU change (deprecated) |
dli:queue:scaleQueue |
Deleting a scheduled CU change (deprecated) |
dli:queue:scaleQueue |
Adding queue properties |
dli:queue:updateQueue |
Querying queue properties |
/ |
Updating queue properties |
dli:queue:updateQueue |
Deleting queue properties |
dli:queue:updateQueue |
Setting the queue scale-out range |
dli:queue:scaleQueue |
Buying a yearly/monthly elastic resource pool |
dli:elasticresourcepool:create |
Modifying the specifications of a yearly/monthly elastic resource pool |
dli:elasticresourcepool:scale |
Enhanced Datasource Connection
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Creating an enhanced datasource connection |
/ |
Querying the enhanced datasource connection list |
/ |
Deleting an enhanced datasource connection |
/ |
Querying an enhanced datasource connection |
/ |
Modifying the host information of an enhanced datasource connection |
/ |
Binding a queue |
/ |
Unbinding a queue |
/ |
Querying authorization of an enhanced datasource connection |
/ |
Creating a route for an enhanced datasource connection (deprecated) |
/ |
Deleting a route from an enhanced datasource connection (deprecated) |
/ |
Creating a route for an enhanced datasource connection |
/ |
Deleting a route from an enhanced datasource connection |
/ |
Package and Package Group
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Uploading a package group (deprecated) |
/ |
Querying the package group list (deprecated) |
dli:resource:listResource |
Uploading a JAR package group (deprecated) |
/ |
Uploading a file package group (deprecated) |
/ |
Uploading a PyFile package group (deprecated) |
/ |
Querying resource packages in a group (deprecated) |
dli:resource:getResource |
Deleting a resource package from a group (deprecated) |
dli:resource:deleteResource |
Changing the owner of a group or resource package (deprecated) |
dli:resource:updateResource |
Global Variable
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Creating a global variable |
/ |
Querying global variables |
/ |
Deleting a DLI global variable |
dli:variable:delete |
Modifying a DLI global variable |
dli:variable:update |
Datasource Authentication
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Creating datasource authentication (deprecated) |
/ |
Querying the datasource authentication list (deprecated) |
dli:datasourceauth:list |
Updating datasource authentication (deprecated) |
dli:datasourceauth:update |
Deleting datasource authentication (deprecated) |
dli:datasourceauth:delete |
Creating datasource authentication |
/ |
Querying the datasource authentication list |
dli:datasourceauth:listAuth |
Updating datasource authentication information |
dli:datasourceauth:updateAuth |
Deleting datasource authentication information |
dli:datasourceauth:dropAuth |
SQL Job
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Submitting a SQL job |
dli:queue:submitJob |
Canceling a job |
dli:queue:cancelJob |
Querying all SQL jobs |
/ |
Querying all SQL jobs (deprecated) |
/ |
Previewing SQL job query results |
/ |
Querying the job status |
/ |
Querying job details |
/ |
Checking SQL syntax |
/ |
Querying the job execution progress |
/ |
Importing table data (deprecated) |
dli:table:insertInto |
Exporting table data (deprecated) |
dli:table:select |
Exporting query results (deprecated) |
/ |
Submitting a SQL job (deprecated) |
dli:queue:submitJob |
Canceling a job (deprecated) |
dli:queue:cancelJob |
Querying job execution results (deprecated) |
/ |
Creating a data upload task (deprecated) |
/ |
Authenticating a data upload (deprecated) |
/ |
Committing final data (deprecated) |
/ |
Creating a data download channel |
/ |
Creating a SQL template |
/ |
Viewing all SQL templates |
/ |
Batch deleting SQL templates |
/ |
Updating a SQL template |
/ |
Querying all sample SQL templates |
/ |
Spark Job
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Creating a batch processing job |
/ |
Querying the batch processing job list |
/ |
Querying batch processing job details |
/ |
Canceling a batch processing job |
/ |
Querying the status of a batch processing job |
/ |
Querying batch processing job logs (deprecated) |
/ |
Creating a job template |
/ |
Querying the job template list |
/ |
Modifying a job template |
/ |
Querying a job template |
/ |
Flink Job
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Creating a Flink SQL job |
dli:jobs:create |
Updating a Flink SQL job |
dli:jobs:update |
Creating a Flink Jar job |
dli:jobs:create |
Updating a Flink Jar job |
dli:jobs:update |
Batch running jobs |
dli:jobs:start |
Batch stopping jobs |
dli:jobs:stop |
Querying the job list |
dli:jobs:listAll |
Querying job details |
dli:jobs:get |
Deleting a job |
dli:jobs:delete |
Batch deleting jobs |
dli:jobs:delete |
Exporting a Flink job |
dli:jobs:export |
Importing a Flink job |
dli:jobs:create |
Generating a static stream graph for a Flink SQL job |
dli:jobs:get |
Querying the job execution plan |
dli:jobs:get |
Importing a savepoint |
dli:jobs:update |
Creating a savepoint |
dli:jobs:update |
Checking job existence (protected) |
/ |
Checking Flink SQL syntax (protected) |
/ |
Querying jobmanager logs of a running job (protected) |
/ |
Querying taskmanager logs of a running job (protected) |
/ |
Querying job commit logs (protected) |
/ |
Creating a template |
/ |
Querying the template list |
/ |
Deleting a template |
/ |
Updating a template |
/ |
Checking Flink template existence (Protected) |
/ |
Querying the sample Flink system template list (protected) |
/ |
Permission Management
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Granting data access control to users or projects |
/ |
Checking the permissions granted to a user |
/ |
Granting queue permissions to a user (deprecated) |
/ |
Querying queue users (deprecated) |
/ |
Granting data permissions to users (deprecated) |
/ |
Querying database users (deprecated) |
/ |
Querying table users (deprecated) |
/ |
Querying user permissions on a table (deprecated) |
/ |
Querying the list of cross-project permissions on a database (protected) |
/ |
Querying specific project permissions on a database (protected) |
/ |
Querying the list of cross-project permissions on a table (protected) |
/ |
Querying specific project permissions on a table (protected) |
/ |
Querying cross-project permissions on a column (protected) |
/ |
Changing a database name (protected) |
dli:database:updateDatabase |
Quota
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Querying a user's quota list |
/ |
Data Catalog
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Querying information about all catalogs in a project |
dli:catalog:list |
Binding or unbinding a catalog mapping |
dli:catalog:bind |
Describing a catalog |
dli:catalog:get |
Database
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Querying all databases (deprecated) |
dli:database:list |
Creating a database (deprecated) |
dli:database:create |
Changing a database owner (deprecated) |
dli:database:update |
Deleting a database (deprecated) |
dli:database:dropDatabase |
Table
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Querying all tables (deprecated) |
dli:database:displayAllTables |
Creating a table (deprecated) |
dli:database:createTable |
Changing a table owner (deprecated) |
dli:table:update |
Describing a table (deprecated) |
dli:table:describe |
Deleting a table (deprecated) |
dli:table:delete |
Previewing a table (deprecated) |
dli:table:select |
Querying the partition list (deprecated) |
dli:table:showPartitions |
SQL Inspection Rule
Operation |
Permission (service:resource:action) (Role/Policy-based Authorization) |
---|---|
Creating a SQL inspection rule |
dli:sqldefendrule:create |
Modifying a SQL inspection rule |
dli:sqldefendrule:update |
Deleting a SQL inspection rule |
dli:sqldefendrule:delete |
Querying a SQL inspection rule |
dli:sqldefendrule:get |
Querying the SQL inspection rule list |
dli:sqldefendrule:list |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.