Updated on 2024-11-05 GMT+08:00

Permissions

Five preset roles are available for workspace members: admin, developer, deployer, operator, and viewer.

  • Admin: This role has all operation permissions in a workspace. You are advised to assign the admin role to the project owner, development owner, and O&M administrator.
  • Developer: This role has permissions to create and manage resources in a workspace. You are advised to assign this role to users who develop and process tasks.
  • Operator: This role has the operation permissions of services such as O&M and scheduling in a workspace, but cannot modify resources or configurations. You are advised to assign this role to users responsible for O&M management and status monitoring.
  • Viewer: This role can view data in a workspace but cannot perform any other operation. You are advised to assign this role to users who only need to view data in a workspace but do not need to perform operations.
  • Deployer: This role is unique to the enterprise mode and has permissions to release task packages in a workspace. In enterprise mode, when a developer submits a script or job version, the system generates a release task. After the developer confirms the release and the deployer approves the release request, the modified job is synchronized to the production environment.

This section describes the permissions of the preset roles.

Operation permissions in this section refer to the permissions required for performing resource operations except addition, deletion, modification, and query, such as importing and exporting data, and executing, canceling, starting, and scheduling tasks.

Management Center

Permission

Admin

Developer

Operator

Viewer

Querying the MRS, DWS, or CDM cluster list

Y

Y

Y

Y

Creating databases

Y

Y

N

N

Deleting databases

Y

Y

N

N

Querying databases

Y

Y

Y

Y

Modifying databases

Y

Y

N

N

Creating data tables

Y

Y

N

N

Deleting data tables

Y

Y

N

N

Querying data tables

Y

Y

Y

Y

Editing data tables

Y

Y

N

N

Creating resource migration tasks

Y

Y

N

N

Operating resource migration tasks

Y

Y

Y

N

Querying resource migration tasks

Y

Y

Y

Y

Creating data connections

Y

Y

N

N

Deleting data connections

Y

Y

N

N

Operating data connections

Y

Y

Y

N

Querying data connections

Y

Y

Y

Y

Editing data connections

Y

Y

N

N

Deleting RDS driver packages

Y

N

N

N

Operating RDS driver packages

Y

N

N

N

Querying RDS driver packages

Y

Y

Y

Y

Creating DLI resource mapping configurations

N

N

N

N

Deleting DLI resource mapping configurations

N

N

N

N

Querying DLI resource mapping configurations

N

N

N

N

DataArts Architecture

Permission

Admin

Developer

Operator

Viewer

Creating atomic metrics

Y

Y

N

N

Deleting atomic metrics

Y

Y

N

N

Querying atomic metrics

Y

Y

Y

Y

Editing atomic metrics

Y

Y

N

N

Performing backup management operations

Y

Y

Y

N

Creating logical entities or physical tables

Y

Y

N

N

Deleting logical entities or physical tables

Y

Y

N

N

Querying logical entities or physical tables

Y

Y

Y

Y

Editing logical entities or physical tables

Y

Y

N

N

Creating configuration centers

Y

N

N

N

Deleting configuration centers

Y

N

N

N

Querying configuration centers

Y

Y

Y

Y

Editing configuration centers

Y

N

N

N

Performing operations in Review Center

Y

Y

N

N

Creating subject designs

Y

Y

N

N

Deleting subject designs

Y

Y

N

N

Querying subject designs

Y

Y

Y

Y

Editing subject designs

Y

Y

N

N

Creating business metrics

Y

Y

N

N

Deleting business metrics

Y

Y

N

N

Querying business metrics

Y

Y

Y

Y

Editing business metrics

Y

Y

N

N

Creating summary tables

Y

Y

N

N

Deleting summary tables

Y

Y

N

N

Querying summary tables

Y

Y

Y

Y

Editing summary tables

Y

Y

N

N

Creating general configurations

Y

Y

N

N

Deleting general configurations

(deleting the drafts of published logical entities or tables)

Y

Y

N

N

Operating general configurations

(importing, exporting, publishing, suspending, synchronizing, and reversing logical entities or tables)

Y

Y

Y

N

Querying general configurations

(querying the drafts of published logical entities or tables)

Y

Y

Y

Y

Editing general configurations

(editing the drafts of published logical entities or tables)

Y

Y

N

N

Deleting dimension tables

Y

Y

N

N

Querying dimension tables

Y

Y

Y

Y

Creating process designs

Y

Y

N

N

Deleting process designs

Y

Y

N

N

Querying process designs

Y

Y

Y

Y

Editing process designs

Y

Y

N

N

Creating lookup tables

Y

Y

N

N

Deleting lookup tables

Y

Y

N

N

Querying lookup tables

Y

Y

Y

Y

Editing lookup tables

Y

Y

N

N

Creating models

Y

Y

N

N

Deleting models

Y

Y

N

N

Querying models

Y

Y

Y

Y

Editing models

Y

Y

N

N

Creating derivative or compound metrics

Y

Y

N

N

Deleting derivative or compound metrics

Y

Y

N

N

Operating derivative or compound metrics

Y

Y

N

N

Querying derivative or compound metrics

Y

Y

Y

Y

Editing derivative or compound metrics

Y

Y

N

N

Creating associated quality rules

Y

Y

N

N

Deleting associated quality rules

Y

Y

N

N

Querying associated quality rules

Y

Y

Y

Y

Editing associated quality rules

Y

Y

N

N

Creating fact tables

Y

Y

N

N

Deleting fact tables

Y

Y

N

N

Querying fact tables

Y

Y

Y

Y

Editing fact tables

Y

Y

N

N

Creating directories

Y

Y

N

N

Deleting directories

Y

Y

N

N

Querying directories

Y

Y

Y

Y

Editing directories

Y

Y

N

N

Creating dimensions

Y

Y

N

N

Deleting dimensions

Y

Y

N

N

Querying dimensions

Y

Y

Y

Y

Editing dimensions

Y

Y

N

N

Creating time filters

Y

Y

N

N

Deleting time filters

Y

Y

N

N

Querying time filters

Y

Y

Y

Y

Editing time filters

Y

Y

N

N

Creating data standards

Y

Y

N

N

Deleting data standards

Y

Y

N

N

Querying data standards

Y

Y

Y

Y

Editing data standards

Y

Y

N

N

DataArts Migration

Permission

Admin

Developer

Operator

Viewer

Creating clusters

Y

Y

N

N

Deleting clusters

Y

Y

N

N

Operating clusters

Y

Y

Y

N

Querying clusters

Y

Y

Y

Y

Editing clusters

Y

Y

N

N

Operating links

Y

Y

Y

N

Querying links

N

N

N

N

Operating jobs

Y

Y

Y

N

Querying jobs

N

N

N

N

DataArts Factory

Permission

Admin

Developer

Deployer

Operator

Viewer

Creating schemas

Y

Y

N

N

N

Deleting schemas

Y

Y

N

N

N

Querying schemas

Y

Y

N

Y

Y

Editing schemas

Y

Y

N

N

N

Operating backups

Y

Y

N

Y

N

Querying backups

Y

Y

N

Y

Y

Creating PatchData tasks

Y

Y

N

N

N

Operating PatchData tasks

Y

Y

N

Y

N

Querying PatchData tasks

Y

Y

N

Y

Y

Operating dirty data

Y

Y

N

Y

N

Operating backups used for restoration

Y

N

N

Y

N

Querying backups used for restoration

Y

Y

N

Y

Y

Creating directories

Y

Y

N

N

N

Deleting directories

Y

Y

N

N

N

Querying directories

Y

Y

N

Y

Y

Editing directories

Y

Y

N

N

N

Creating notifications

Y

Y

N

N

N

Deleting notifications

Y

Y

N

N

N

Querying notifications

Y

Y

N

Y

Y

Editing notifications

Y

Y

N

N

N

Creating databases

Y

Y

N

N

N

Deleting databases

Y

Y

N

N

N

Querying databases

Y

Y

N

Y

Y

Editing databases

Y

Y

N

N

N

Creating solutions

Y

Y

N

N

N

Deleting solutions

Y

Y

N

N

N

Operating solutions

Y

Y

N

Y

N

Querying solutions

Y

Y

N

Y

Y

Editing solutions

Y

Y

N

N

N

Querying IAM agencies

Y

Y

Y

Y

Y

Updating IAM agencies

Y

N

N

N

N

Operating environment variables

Y

Y

N

N

N

Querying environment variables

Y

Y

N

Y

Y

Editing environment variables

Y

Y

N

N

N

Operating job nodes

Y

Y

N

Y

N

Viewing release packages

Y

Y

Y

Y

Y

Operating release packages

Y

N

Y

Y

N

Creating data connections

Y

Y

N

N

N

Deleting data connections

Y

Y

N

N

N

Operating data links

Y

Y

N

Y

N

Querying data connections

Y

Y

N

Y

Y

Editing data connections

Y

Y

N

N

N

Canceling release

Y

Y

Y

Y

N

Creating data tables

Y

Y

N

N

N

Deleting data tables

Y

Y

N

N

N

Querying data tables

Y

Y

N

Y

Y

Editing data tables

Y

Y

N

N

N

Operating job instances

Y

Y

N

Y

N

Querying job instances

Y

Y

N

Y

Y

Creating resources

Y

Y

N

N

N

Deleting resources

Y

Y

N

N

N

Operating resources

Y

Y

N

Y

N

Querying resources

Y

Y

N

Y

Y

Editing resources

Y

Y

N

N

N

Editing environment variable mappings

N

N

N

N

N

Operating script editing locks

Y

Y

N

Y

N

Creating scripts

Y

Y

N

N

N

Deleting scripts

Y

Y

N

N

N

Operating scripts

Y

Y

N

Y

N

Querying scripts

Y

Y

N

Y

Y

Editing scripts

Y

Y

N

N

N

Adding job tags

Y

Y

N

Y

N

Deleting job tags

Y

Y

N

Y

N

Querying job tags

Y

Y

N

Y

Y

Creating jobs

Y

Y

N

N

N

Deleting jobs

Y

Y

N

N

N

Operating jobs

Y

Y

N

Y

N

Querying jobs

Y

Y

N

Y

Y

Editing jobs

Y

Y

N

Y

N

Querying details about job editing locks

Y

Y

N

Y

Y

Operating job editing locks

Y

Y

N

Y

N

DataArts Quality

Permission

Admin

Developer

Operator

Viewer

Data quality monitoring

Querying the dashboard

Y

Y

Y

Y

Operating instances

Y

Y

Y

N

Querying instances

Y

Y

Y

Y

Creating rule templates

Y

N

N

N

Deleting rule templates

Y

N

N

N

Operating rule templates

Y

N

N

N

Querying rule templates

Y

Y

Y

Y

Editing rule templates

Y

N

N

N

Querying the execution result

Y

Y

N

N

Creating rules

Y

Y

N

N

Deleting rules

Y

Y

N

N

Operating rules

Y

Y

Y

N

Querying rules

Y

Y

Y

Y

Editing rules

Y

Y

N

N

Editing quality scores

Y

N

N

N

Creating directories

Y

Y

N

N

Deleting directories

Y

Y

N

N

Querying directories

Y

Y

Y

Y

Editing directories

Y

Y

N

N

Business metric monitoring

Querying the dashboard

Y

Y

Y

Y

Operating instances

Y

Y

Y

N

Querying instances

Y

Y

Y

Y

Creating scenarios

Y

Y

N

N

Deleting scenarios

Y

Y

N

N

Operating scenarios

Y

Y

Y

N

Querying scenarios

Y

Y

Y

Y

Editing scenarios

Y

Y

N

N

Creating metrics

Y

Y

N

N

Deleting metrics

Y

Y

N

N

Querying metrics

Y

Y

Y

Y

Editing metrics

Y

Y

N

N

Creating rules

Y

Y

N

N

Deleting rules

Y

Y

N

N

Querying rules

Y

Y

Y

Y

Editing rules

Y

Y

N

N

Creating directories

Y

Y

N

N

Deleting directories

Y

Y

N

N

Querying directories

Y

Y

Y

Y

Editing directories

Y

Y

N

N

DataArts Catalog

Permission

Admin

Developer

Operator

Viewer

Querying data sources

Y

Y

Y

N

Operating task instances

Y

Y

Y

N

Querying task instances

Y

Y

Y

Y

Creating collection tasks

Y

Y

N

N

Deleting collection tasks

Y

Y

N

N

Operating collection tasks

Y

Y

Y

N

Querying collection tasks

Y

Y

Y

Y

Editing collection tasks

Y

Y

N

N

Editing approvals

Y

Y

N

N

Editing asset reports

Y

Y

N

N

Creating tags

Y

Y

N

N

Deleting tags

Y

Y

N

N

Querying tags

Y

Y

Y

Y

Editing tags

Y

Y

N

N

Creating assets

Y

Y

N

N

Deleting assets

Y

Y

N

N

Operating assets

Y

Y

Y

N

Querying assets

Y

Y

Y

Y

Editing assets

Y

Y

N

N

Creating directories

Y

Y

N

N

Deleting directories

Y

Y

N

N

Querying directories

Y

Y

Y

Y

Editing directories

Y

Y

N

N

Creating classifications

Y

Y

N

N

Deleting classifications

Y

Y

N

N

Querying classifications

Y

Y

Y

Y

Editing classifications

Y

Y

N

N

Creating data permission rules

Y

N

N

N

Deleting data permission rules

Y

N

N

N

Querying data permission rules

Y

Y

Y

Y

Editing data permission rules

Y

N

N

N

DataArts DataService

Permission

Admin

Developer

Operator

Viewer

Creating throttling policies

Y

Y

N

N

Deleting throttling policies

Y

Y

N

N

Operating throttling policies

Y

Y

Y

N

Querying throttling policies

Y

Y

Y

Y

Editing throttling policies

Y

Y

N

N

Creating applications

Y

Y

N

N

Deleting applications

Y

Y

N

N

Operating applications

Y

Y

Y

N

Querying applications

Y

Y

Y

Y

Editing applications

Y

Y

N

N

Operating reviews

Y

Y

Y

N

Querying reviews

Y

Y

Y

Y

Creating API catalogs

Y

Y

Y

N

Deleting API catalogs

Y

Y

Y

N

Querying API catalogs

Y

Y

Y

Y

Editing API catalogs

Y

Y

Y

N

Operating clusters

Y

Y

N

N

Querying clusters

Y

Y

Y

Y

Adding reviewers

Y

N

N

N

Deleting reviewers

Y

N

N

N

Operating reviewers

Y

Y

Y

N

Querying reviewers

Y

Y

Y

N

Creating APIs

Y

Y

N

N

Deleting APIs

Y

Y

N

N

Operating APIs

Y

Y

Y

N

Querying APIs

Y

Y

Y

Y

Editing APIs

Y

Y

N

N

Querying data sources

Y

Y

N

N

Querying the dashboard

Y

Y

Y

Y

DataArts Security

Permission

Admin

Developer

Operator

Viewer

Creating data source tracing tasks

Y

Y

N

N

Deleting data source tracing tasks

Y

Y

N

N

Operating data source tracing tasks

Y

Y

N

N

Querying data source tracing tasks

Y

Y

Y

Y

Editing data source tracing tasks

Y

Y

N

N

Creating data classifications

Y

Y

Y

N

Deleting data classifications

Y

Y

Y

N

Querying data classifications

Y

Y

Y

Y

Editing data classifications

Y

Y

Y

N

Creating access permissions management tasks

Y

Y

N

N

Deleting access permissions management tasks

Y

Y

N

N

Querying access permissions management tasks

Y

Y

Y

Y

Editing access permissions management tasks

Y

Y

N

N

Creating dynamic policies

Y

N

N

N

Deleting dynamic policies

Y

N

N

N

Querying dynamic policies

Y

Y

Y

Y

Editing dynamic policies

Y

N

N

N

Creating security levels

Y

Y

N

N

Deleting security levels

Y

Y

N

N

Querying security levels

Y

Y

Y

Y

Editing security levels

Y

Y

N

N

Creating dynamic masking policies

Y

N

N

N

Deleting dynamic masking policies

Y

N

N

N

Querying dynamic masking policies

Y

Y

Y

Y

Editing dynamic masking policies

Y

N

N

N

Creating dynamic masking subscription policies

Y

N

N

N

Deleting dynamic masking subscription policies

Y

N

N

N

Querying dynamic masking subscription policies

Y

Y

Y

Y

Creating resource permission policies

Y

N

N

N

Deleting resource permission policies

Y

N

N

N

Querying resource permission policies

Y

Y

Y

Y

Editing resource permission policies

Y

N

N

N

Operating security task scheduling

Y

Y

Y

N

Creating permission applications

Y

Y

Y

N

Querying permission applications

Y

Y

Y

Y

Editing permission applications

Y

Y

Y

N

Creating user synchronization tasks

Y

Y

Y

N

Deleting user synchronization tasks

Y

Y

Y

N

Querying user synchronization tasks

Y

Y

Y

Y

Editing user synchronization tasks

Y

Y

Y

N

Creating data masking tasks

Y

Y

N

N

Deleting data masking tasks

Y

Y

N

N

Operating data masking tasks

Y

Y

N

N

Querying data masking tasks

Y

Y

Y

Y

Editing data masking tasks

Y

Y

N

N

Operating fine-grained permission control

Y

N

N

N

Querying fine-grained permission control

Y

Y

Y

Y

Editing fine-grained permission control

Y

N

N

N

Creating permission sets

Y

Y

Y

N

Deleting permission sets

Y

Y

Y

N

Querying permission sets

Y

Y

Y

Y

Editing permission sets

Y

Y

Y

N

Querying the dashboard

Y

Y

Y

Y

Creating cross-source permission synchronization policies

Y

N

N

N

Deleting cross-source permission synchronization policies

Y

N

N

N

Querying cross-source permission synchronization policies

Y

Y

Y

Y

Editing cross-source permission synchronization policies

Y

N

N

N

Querying member management tasks

Y

Y

Y

Y

Editing member management tasks

Y

Y

Y

N

Adding permission set members

Y

Y

Y

N

Deleting permission set members

Y

Y

Y

N

Querying permission set members

Y

Y

Y

Y

Querying agencies

Y

Y

Y

Y

Creating data masking policies

Y

Y

N

N

Deleting data masking policies

Y

Y

N

N

Operating data masking policies

Y

Y

Y

Y

Querying data masking policies

Y

Y

Y

Y

Editing data masking policies

Y

Y

N

N

Querying data access audit

Y

N

N

N

Creating rule groups

Y

Y

Y

N

Deleting rule groups

Y

Y

N

N

Operating rule groups

Y

Y

Y

N

Querying rule groups

Y

Y

Y

Y

Editing rule groups

Y

Y

Y

N

Querying logs of permission synchronization failures

Y

Y

Y

Y

Creating sensitive data discovery tasks

Y

Y

Y

N

Deleting sensitive data discovery tasks

Y

Y

N

N

Operating sensitive data discovery tasks

Y

Y

Y

N

Querying sensitive data discovery tasks

Y

Y

Y

Y

Editing sensitive data discovery tasks

Y

Y

N

N

Creating permission sets

Y

Y

Y

N

Deleting permission sets

Y

Y

Y

N

Querying permission sets

Y

Y

Y

Y

Editing permission sets

Y

Y

Y

N

Querying data sources

Y

Y

Y

Y

Querying catalog permission policies

Y

Y

Y

Y

Creating row-level access policies

Y

N

N

N

Deleting row-level access policies

Y

N

N

N

Querying row-level access policies

Y

Y

Y

Y

Editing row-level access policies

Y

N

N

N

Creating queue policies

Y

N

N

N

Deleting queue policies

Y

N

N

N

Querying queue policies

Y

Y

Y

Y

Editing queue policies

Y

N

N

N

Creating security diagnosis tasks

Y

N

N

N

Querying security diagnosis tasks

Y

Y

Y

Y

Querying resource permission configuration

Y

Y

N

N

Creating data watermarking tasks

Y

Y

N

N

Deleting data watermarking tasks

Y

Y

N

N

Operating data watermarking tasks

Y

Y

N

N

Querying data watermarking tasks

Y

Y

Y

Y

Editing data watermarking tasks

Y

Y

N

N