IAM Permissions
Elastic Resource Pool
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Creating an elastic resource pool | dli:elasticresourcepool:create |
| Querying all elastic resource pools | / |
| Deleting an elastic resource pool | dli:elasticresourcepool:drop |
| Modifying elastic resource pool information | dli:elasticresourcepool:update |
| Associating a queue with an elastic resource pool | dli:elasticresourcepool:resourceManagement |
| Querying all queues in an elastic resource pool | dli:elasticresourcepool:resourceManagement |
| Modifying the scaling policy of a queue associated with an elastic resource pool | dli:elasticresourcepool:resourceManagement |
| Viewing scaling history of an elastic resource pool | dli:elasticresourcepool:scale |
Queue
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Creating a queue | dli:queue:createQueue |
| Querying all queues | / |
| Deleting a queue | dli:queue:dropQueue |
| Modifying the CIDR block of a queue (deprecated) | dli:queue:updateQueue |
| Querying queue details | / |
| Restarting, scaling out, and scaling in queues | dli:queue:scaleQueue |
| Creating an address connectivity test request | / |
| Querying connectivity test details of a specified address | / |
| Creating a scheduled CU change (deprecated) | dli:queue:scaleQueue |
| Viewing a scheduled CU change (deprecated) | dli:queue:scaleQueue |
| Batch deleting scheduled CU changes (deprecated) | dli:queue:scaleQueue |
| Modifying a scheduled CU change (deprecated) | dli:queue:scaleQueue |
| Deleting a scheduled CU change (deprecated) | dli:queue:scaleQueue |
| Adding queue properties | dli:queue:updateQueue |
| Querying queue properties | / |
| Updating queue properties | dli:queue:updateQueue |
| Deleting queue properties | dli:queue:updateQueue |
| Setting the queue scale-out range | dli:queue:scaleQueue |
Enhanced Datasource Connection
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Creating an enhanced datasource connection | / |
| Querying the enhanced datasource connection list | / |
| Deleting an enhanced datasource connection | / |
| Querying an enhanced datasource connection | / |
| Modifying the host information of an enhanced datasource connection | / |
| Binding a queue | / |
| Unbinding a queue | / |
| Querying authorization of an enhanced datasource connection | / |
| Creating a route for an enhanced datasource connection (deprecated) | / |
| Deleting a route from an enhanced datasource connection (deprecated) | / |
| Creating a route for an enhanced datasource connection | / |
| Deleting a route from an enhanced datasource connection | / |
Package and Package Group
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Uploading a package group (deprecated) | / |
| Querying the package group list (deprecated) | dli:resource:listResource |
| Uploading a JAR package group (deprecated) | / |
| Uploading a file package group (deprecated) | / |
| Uploading a PyFile package group (deprecated) | / |
| Querying resource packages in a group (deprecated) | dli:resource:getResource |
| Deleting a resource package from a group (deprecated) | dli:resource:deleteResource |
| Changing the owner of a group or resource package (deprecated) | dli:resource:updateResource |
Global Variable
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Creating a global variable | / |
| Querying global variables | / |
| Deleting a DLI global variable | dli:variable:delete |
| Modifying a DLI global variable | dli:variable:update |
Datasource Authentication
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Creating datasource authentication (deprecated) | / |
| Querying the datasource authentication list (deprecated) | dli:datasourceauth:list |
| Updating datasource authentication (deprecated) | dli:datasourceauth:update |
| Deleting datasource authentication (deprecated) | dli:datasourceauth:delete |
| Creating datasource authentication | / |
| Querying the datasource authentication list | dli:datasourceauth:listAuth |
| Updating datasource authentication information | dli:datasourceauth:updateAuth |
| Deleting datasource authentication information | dli:datasourceauth:dropAuth |
SQL Job
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Submitting a SQL job | dli:queue:submitJob |
| Canceling a job | dli:queue:cancelJob |
| Querying all SQL jobs | / |
| Querying all SQL jobs (deprecated) | / |
| Previewing SQL job query results | / |
| Querying the job status | / |
| Querying job details | / |
| Checking SQL syntax | / |
| Querying the job execution progress | / |
| Importing table data (deprecated) | dli:table:insertInto |
| Exporting table data (deprecated) | dli:table:select |
| Exporting query results (deprecated) | / |
| Submitting a SQL job (deprecated) | dli:queue:submitJob |
| Canceling a job (deprecated) | dli:queue:cancelJob |
| Querying job execution results (deprecated) | / |
| Creating a data upload task (deprecated) | / |
| Authenticating a data upload (deprecated) | / |
| Committing final data (deprecated) | / |
| Creating a data download channel | / |
| Creating a SQL template | / |
| Viewing all SQL templates | / |
| Batch deleting SQL templates | / |
| Updating a SQL template | / |
| Querying all sample SQL templates | / |
Spark Job
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Creating a batch processing job | / |
| Querying the batch processing job list | / |
| Querying batch processing job details | / |
| Canceling a batch processing job | / |
| Querying the status of a batch processing job | / |
| Querying batch processing job logs (deprecated) | / |
| Creating a job template | / |
| Querying the job template list | / |
| Modifying a job template | / |
| Querying a job template | / |
Flink Job
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Creating a Flink SQL job | dli:jobs:create |
| Updating a Flink SQL job | dli:jobs:update |
| Creating a Flink Jar job | dli:jobs:create |
| Updating a Flink Jar job | dli:jobs:update |
| Batch running jobs | dli:jobs:start |
| Batch stopping jobs | dli:jobs:stop |
| Querying the job list | dli:jobs:listAll |
| Querying job details | dli:jobs:get |
| Deleting a job | dli:jobs:delete |
| Batch deleting jobs | dli:jobs:delete |
| Exporting a Flink job | dli:jobs:export |
| Importing a Flink job | dli:jobs:create |
| Generating a static stream graph for a Flink SQL job | dli:jobs:get |
| Querying the job execution plan | dli:jobs:get |
| Importing a savepoint | dli:jobs:update |
| Creating a savepoint | dli:jobs:update |
| Checking job existence (protected) | / |
| Checking Flink SQL syntax (protected) | / |
| Querying jobmanager logs of a running job (protected) | / |
| Querying taskmanager logs of a running job (protected) | / |
| Querying job commit logs (protected) | / |
| Creating a template | / |
| Querying the template list | / |
| Deleting a template | / |
| Updating a template | / |
| Checking Flink template existence (Protected) | / |
| Querying the sample Flink system template list (protected) | / |
Permission Management
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Granting data access control to users or projects | / |
| Checking the permissions granted to a user | / |
| Granting queue permissions to a user (deprecated) | / |
| Querying queue users (deprecated) | / |
| Granting data permissions to users (deprecated) | / |
| Querying database users (deprecated) | / |
| Querying table users (deprecated) | / |
| Querying user permissions on a table (deprecated) | / |
| Querying the list of cross-project permissions on a database (protected) | / |
| Querying specific project permissions on a database (protected) | / |
| Querying the list of cross-project permissions on a table (protected) | / |
| Querying specific project permissions on a table (protected) | / |
| Querying cross-project permissions on a column (protected) | / |
| Changing a database name (protected) | dli:database:updateDatabase |
Quota
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Querying a user's quota list | / |
Data Catalog
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Querying information about all catalogs in a project | dli:catalog:list |
| Binding or unbinding a catalog mapping | dli:catalog:bind |
| Describing a catalog | dli:catalog:get |
Database
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Querying all databases (deprecated) | dli:database:list |
| Creating a database (deprecated) | dli:database:create |
| Changing a database owner (deprecated) | dli:database:update |
| Deleting a database (deprecated) | dli:database:dropDatabase |
Table
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Querying all tables (deprecated) | dli:database:displayAllTables |
| Creating a table (deprecated) | dli:database:createTable |
| Changing a table owner (deprecated) | dli:table:update |
| Describing a table (deprecated) | dli:table:describe |
| Deleting a table (deprecated) | dli:table:delete |
| Previewing a table (deprecated) | dli:table:select |
| Querying the partition list (deprecated) | dli:table:showPartitions |
SQL Inspection Rule
| Operation | Permission (service:resource:action) (Role/Policy-based Authorization) |
|---|---|
| Creating a SQL inspection rule | dli:sqldefendrule:create |
| Modifying a SQL inspection rule | dli:sqldefendrule:update |
| Deleting a SQL inspection rule | dli:sqldefendrule:delete |
| Querying a SQL inspection rule | dli:sqldefendrule:get |
| Querying the SQL inspection rule list | dli:sqldefendrule:list |
Feedback
Was this page helpful?
Provide feedbackThank you very much for your feedback. We will continue working to improve the documentation.