Compute
Elastic Cloud Server
Huawei Cloud Flexus
Bare Metal Server
Auto Scaling
Image Management Service
Dedicated Host
FunctionGraph
Cloud Phone Host
Huawei Cloud EulerOS
Networking
Virtual Private Cloud
Elastic IP
Elastic Load Balance
NAT Gateway
Direct Connect
Virtual Private Network
VPC Endpoint
Cloud Connect
Enterprise Router
Enterprise Switch
Global Accelerator
Management & Governance
Cloud Eye
Identity and Access Management
Cloud Trace Service
Resource Formation Service
Tag Management Service
Log Tank Service
Config
OneAccess
Resource Access Manager
Simple Message Notification
Application Performance Management
Application Operations Management
Organizations
Optimization Advisor
IAM Identity Center
Cloud Operations Center
Resource Governance Center
Migration
Server Migration Service
Object Storage Migration Service
Cloud Data Migration
Migration Center
Cloud Ecosystem
KooGallery
Partner Center
User Support
My Account
Billing Center
Cost Center
Resource Center
Enterprise Management
Service Tickets
HUAWEI CLOUD (International) FAQs
ICP Filing
Support Plans
My Credentials
Customer Operation Capabilities
Partner Support Plans
Professional Services
Analytics
MapReduce Service
Data Lake Insight
CloudTable Service
Cloud Search Service
Data Lake Visualization
Data Ingestion Service
GaussDB(DWS)
DataArts Studio
Data Lake Factory
DataArts Lake Formation
IoT
IoT Device Access
Others
Product Pricing Details
System Permissions
Console Quick Start
Common FAQs
Instructions for Associating with a HUAWEI CLOUD Partner
Message Center
Security & Compliance
Security Technologies and Applications
Web Application Firewall
Host Security Service
Cloud Firewall
SecMaster
Anti-DDoS Service
Data Encryption Workshop
Database Security Service
Cloud Bastion Host
Data Security Center
Cloud Certificate Manager
Edge Security
Situation Awareness
Managed Threat Detection
Blockchain
Blockchain Service
Web3 Node Engine Service
Media Services
Media Processing Center
Video On Demand
Live
SparkRTC
MetaStudio
Storage
Object Storage Service
Elastic Volume Service
Cloud Backup and Recovery
Storage Disaster Recovery Service
Scalable File Service Turbo
Scalable File Service
Volume Backup Service
Cloud Server Backup Service
Data Express Service
Dedicated Distributed Storage Service
Containers
Cloud Container Engine
SoftWare Repository for Container
Application Service Mesh
Ubiquitous Cloud Native Service
Cloud Container Instance
Databases
Relational Database Service
Document Database Service
Data Admin Service
Data Replication Service
GeminiDB
GaussDB
Distributed Database Middleware
Database and Application Migration UGO
TaurusDB
Middleware
Distributed Cache Service
API Gateway
Distributed Message Service for Kafka
Distributed Message Service for RabbitMQ
Distributed Message Service for RocketMQ
Cloud Service Engine
Multi-Site High Availability Service
EventGrid
Dedicated Cloud
Dedicated Computing Cluster
Business Applications
Workspace
ROMA Connect
Message & SMS
Domain Name Service
Edge Data Center Management
Meeting
AI
Face Recognition Service
Graph Engine Service
Content Moderation
Image Recognition
Optical Character Recognition
ModelArts
ImageSearch
Conversational Bot Service
Speech Interaction Service
Huawei HiLens
Video Intelligent Analysis Service
Developer Tools
SDK Developer Guide
API Request Signing Guide
Terraform
Koo Command Line Interface
Content Delivery & Edge Computing
Content Delivery Network
Intelligent EdgeFabric
CloudPond
Intelligent EdgeCloud
Solutions
SAP Cloud
High Performance Computing
Developer Services
ServiceStage
CodeArts
CodeArts PerfTest
CodeArts Req
CodeArts Pipeline
CodeArts Build
CodeArts Deploy
CodeArts Artifact
CodeArts TestPlan
CodeArts Check
CodeArts Repo
Cloud Application Engine
MacroVerse aPaaS
KooMessage
KooPhone
KooDrive

Permissions

Updated on 2024-11-05 GMT+08:00

Five preset roles are available for workspace members: admin, developer, deployer, operator, and viewer.

  • Admin: This role has all operation permissions in a workspace. You are advised to assign the admin role to the project owner, development owner, and O&M administrator.
  • Developer: This role has permissions to create and manage resources in a workspace. You are advised to assign this role to users who develop and process tasks.
  • Operator: This role has the operation permissions of services such as O&M and scheduling in a workspace, but cannot modify resources or configurations. You are advised to assign this role to users responsible for O&M management and status monitoring.
  • Viewer: This role can view data in a workspace but cannot perform any other operation. You are advised to assign this role to users who only need to view data in a workspace but do not need to perform operations.
  • Deployer: This role is unique to the enterprise mode and has permissions to release task packages in a workspace. In enterprise mode, when a developer submits a script or job version, the system generates a release task. After the developer confirms the release and the deployer approves the release request, the modified job is synchronized to the production environment.

This section describes the permissions of the preset roles.

NOTICE:

Operation permissions in this section refer to the permissions required for performing resource operations except addition, deletion, modification, and query, such as importing and exporting data, and executing, canceling, starting, and scheduling tasks.

Management Center

Permission

Admin

Developer

Operator

Viewer

Querying the MRS, DWS, or CDM cluster list

Y

Y

Y

Y

Creating databases

Y

Y

N

N

Deleting databases

Y

Y

N

N

Querying databases

Y

Y

Y

Y

Modifying databases

Y

Y

N

N

Creating data tables

Y

Y

N

N

Deleting data tables

Y

Y

N

N

Querying data tables

Y

Y

Y

Y

Editing data tables

Y

Y

N

N

Creating resource migration tasks

Y

Y

N

N

Operating resource migration tasks

Y

Y

Y

N

Querying resource migration tasks

Y

Y

Y

Y

Creating data connections

Y

Y

N

N

Deleting data connections

Y

Y

N

N

Operating data connections

Y

Y

Y

N

Querying data connections

Y

Y

Y

Y

Editing data connections

Y

Y

N

N

Deleting RDS driver packages

Y

N

N

N

Operating RDS driver packages

Y

N

N

N

Querying RDS driver packages

Y

Y

Y

Y

Creating DLI resource mapping configurations

N

N

N

N

Deleting DLI resource mapping configurations

N

N

N

N

Querying DLI resource mapping configurations

N

N

N

N

DataArts Architecture

Permission

Admin

Developer

Operator

Viewer

Creating atomic metrics

Y

Y

N

N

Deleting atomic metrics

Y

Y

N

N

Querying atomic metrics

Y

Y

Y

Y

Editing atomic metrics

Y

Y

N

N

Performing backup management operations

Y

Y

Y

N

Creating logical entities or physical tables

Y

Y

N

N

Deleting logical entities or physical tables

Y

Y

N

N

Querying logical entities or physical tables

Y

Y

Y

Y

Editing logical entities or physical tables

Y

Y

N

N

Creating configuration centers

Y

N

N

N

Deleting configuration centers

Y

N

N

N

Querying configuration centers

Y

Y

Y

Y

Editing configuration centers

Y

N

N

N

Performing operations in Review Center

Y

Y

N

N

Creating subject designs

Y

Y

N

N

Deleting subject designs

Y

Y

N

N

Querying subject designs

Y

Y

Y

Y

Editing subject designs

Y

Y

N

N

Creating business metrics

Y

Y

N

N

Deleting business metrics

Y

Y

N

N

Querying business metrics

Y

Y

Y

Y

Editing business metrics

Y

Y

N

N

Creating summary tables

Y

Y

N

N

Deleting summary tables

Y

Y

N

N

Querying summary tables

Y

Y

Y

Y

Editing summary tables

Y

Y

N

N

Creating general configurations

Y

Y

N

N

Deleting general configurations

(deleting the drafts of published logical entities or tables)

Y

Y

N

N

Operating general configurations

(importing, exporting, publishing, suspending, synchronizing, and reversing logical entities or tables)

Y

Y

Y

N

Querying general configurations

(querying the drafts of published logical entities or tables)

Y

Y

Y

Y

Editing general configurations

(editing the drafts of published logical entities or tables)

Y

Y

N

N

Deleting dimension tables

Y

Y

N

N

Querying dimension tables

Y

Y

Y

Y

Creating process designs

Y

Y

N

N

Deleting process designs

Y

Y

N

N

Querying process designs

Y

Y

Y

Y

Editing process designs

Y

Y

N

N

Creating lookup tables

Y

Y

N

N

Deleting lookup tables

Y

Y

N

N

Querying lookup tables

Y

Y

Y

Y

Editing lookup tables

Y

Y

N

N

Creating models

Y

Y

N

N

Deleting models

Y

Y

N

N

Querying models

Y

Y

Y

Y

Editing models

Y

Y

N

N

Creating derivative or compound metrics

Y

Y

N

N

Deleting derivative or compound metrics

Y

Y

N

N

Operating derivative or compound metrics

Y

Y

N

N

Querying derivative or compound metrics

Y

Y

Y

Y

Editing derivative or compound metrics

Y

Y

N

N

Creating associated quality rules

Y

Y

N

N

Deleting associated quality rules

Y

Y

N

N

Querying associated quality rules

Y

Y

Y

Y

Editing associated quality rules

Y

Y

N

N

Creating fact tables

Y

Y

N

N

Deleting fact tables

Y

Y

N

N

Querying fact tables

Y

Y

Y

Y

Editing fact tables

Y

Y

N

N

Creating directories

Y

Y

N

N

Deleting directories

Y

Y

N

N

Querying directories

Y

Y

Y

Y

Editing directories

Y

Y

N

N

Creating dimensions

Y

Y

N

N

Deleting dimensions

Y

Y

N

N

Querying dimensions

Y

Y

Y

Y

Editing dimensions

Y

Y

N

N

Creating time filters

Y

Y

N

N

Deleting time filters

Y

Y

N

N

Querying time filters

Y

Y

Y

Y

Editing time filters

Y

Y

N

N

Creating data standards

Y

Y

N

N

Deleting data standards

Y

Y

N

N

Querying data standards

Y

Y

Y

Y

Editing data standards

Y

Y

N

N

DataArts Migration

Permission

Admin

Developer

Operator

Viewer

Creating clusters

Y

Y

N

N

Deleting clusters

Y

Y

N

N

Operating clusters

Y

Y

Y

N

Querying clusters

Y

Y

Y

Y

Editing clusters

Y

Y

N

N

Operating links

Y

Y

Y

N

Querying links

N

N

N

N

Operating jobs

Y

Y

Y

N

Querying jobs

N

N

N

N

DataArts Factory

Permission

Admin

Developer

Deployer

Operator

Viewer

Creating schemas

Y

Y

N

N

N

Deleting schemas

Y

Y

N

N

N

Querying schemas

Y

Y

N

Y

Y

Editing schemas

Y

Y

N

N

N

Operating backups

Y

Y

N

Y

N

Querying backups

Y

Y

N

Y

Y

Creating PatchData tasks

Y

Y

N

N

N

Operating PatchData tasks

Y

Y

N

Y

N

Querying PatchData tasks

Y

Y

N

Y

Y

Operating dirty data

Y

Y

N

Y

N

Operating backups used for restoration

Y

N

N

Y

N

Querying backups used for restoration

Y

Y

N

Y

Y

Creating directories

Y

Y

N

N

N

Deleting directories

Y

Y

N

N

N

Querying directories

Y

Y

N

Y

Y

Editing directories

Y

Y

N

N

N

Creating notifications

Y

Y

N

N

N

Deleting notifications

Y

Y

N

N

N

Querying notifications

Y

Y

N

Y

Y

Editing notifications

Y

Y

N

N

N

Creating databases

Y

Y

N

N

N

Deleting databases

Y

Y

N

N

N

Querying databases

Y

Y

N

Y

Y

Editing databases

Y

Y

N

N

N

Creating solutions

Y

Y

N

N

N

Deleting solutions

Y

Y

N

N

N

Operating solutions

Y

Y

N

Y

N

Querying solutions

Y

Y

N

Y

Y

Editing solutions

Y

Y

N

N

N

Querying IAM agencies

Y

Y

Y

Y

Y

Updating IAM agencies

Y

N

N

N

N

Operating environment variables

Y

Y

N

N

N

Querying environment variables

Y

Y

N

Y

Y

Editing environment variables

Y

Y

N

N

N

Operating job nodes

Y

Y

N

Y

N

Viewing release packages

Y

Y

Y

Y

Y

Operating release packages

Y

N

Y

Y

N

Creating data connections

Y

Y

N

N

N

Deleting data connections

Y

Y

N

N

N

Operating data links

Y

Y

N

Y

N

Querying data connections

Y

Y

N

Y

Y

Editing data connections

Y

Y

N

N

N

Canceling release

Y

Y

Y

Y

N

Creating data tables

Y

Y

N

N

N

Deleting data tables

Y

Y

N

N

N

Querying data tables

Y

Y

N

Y

Y

Editing data tables

Y

Y

N

N

N

Operating job instances

Y

Y

N

Y

N

Querying job instances

Y

Y

N

Y

Y

Creating resources

Y

Y

N

N

N

Deleting resources

Y

Y

N

N

N

Operating resources

Y

Y

N

Y

N

Querying resources

Y

Y

N

Y

Y

Editing resources

Y

Y

N

N

N

Editing environment variable mappings

N

N

N

N

N

Operating script editing locks

Y

Y

N

Y

N

Creating scripts

Y

Y

N

N

N

Deleting scripts

Y

Y

N

N

N

Operating scripts

Y

Y

N

Y

N

Querying scripts

Y

Y

N

Y

Y

Editing scripts

Y

Y

N

N

N

Adding job tags

Y

Y

N

Y

N

Deleting job tags

Y

Y

N

Y

N

Querying job tags

Y

Y

N

Y

Y

Creating jobs

Y

Y

N

N

N

Deleting jobs

Y

Y

N

N

N

Operating jobs

Y

Y

N

Y

N

Querying jobs

Y

Y

N

Y

Y

Editing jobs

Y

Y

N

Y

N

Querying details about job editing locks

Y

Y

N

Y

Y

Operating job editing locks

Y

Y

N

Y

N

DataArts Quality

Permission

Admin

Developer

Operator

Viewer

Data quality monitoring

Querying the dashboard

Y

Y

Y

Y

Operating instances

Y

Y

Y

N

Querying instances

Y

Y

Y

Y

Creating rule templates

Y

N

N

N

Deleting rule templates

Y

N

N

N

Operating rule templates

Y

N

N

N

Querying rule templates

Y

Y

Y

Y

Editing rule templates

Y

N

N

N

Querying the execution result

Y

Y

N

N

Creating rules

Y

Y

N

N

Deleting rules

Y

Y

N

N

Operating rules

Y

Y

Y

N

Querying rules

Y

Y

Y

Y

Editing rules

Y

Y

N

N

Editing quality scores

Y

N

N

N

Creating directories

Y

Y

N

N

Deleting directories

Y

Y

N

N

Querying directories

Y

Y

Y

Y

Editing directories

Y

Y

N

N

Business metric monitoring

Querying the dashboard

Y

Y

Y

Y

Operating instances

Y

Y

Y

N

Querying instances

Y

Y

Y

Y

Creating scenarios

Y

Y

N

N

Deleting scenarios

Y

Y

N

N

Operating scenarios

Y

Y

Y

N

Querying scenarios

Y

Y

Y

Y

Editing scenarios

Y

Y

N

N

Creating metrics

Y

Y

N

N

Deleting metrics

Y

Y

N

N

Querying metrics

Y

Y

Y

Y

Editing metrics

Y

Y

N

N

Creating rules

Y

Y

N

N

Deleting rules

Y

Y

N

N

Querying rules

Y

Y

Y

Y

Editing rules

Y

Y

N

N

Creating directories

Y

Y

N

N

Deleting directories

Y

Y

N

N

Querying directories

Y

Y

Y

Y

Editing directories

Y

Y

N

N

DataArts Catalog

Permission

Admin

Developer

Operator

Viewer

Querying data sources

Y

Y

Y

N

Operating task instances

Y

Y

Y

N

Querying task instances

Y

Y

Y

Y

Creating collection tasks

Y

Y

N

N

Deleting collection tasks

Y

Y

N

N

Operating collection tasks

Y

Y

Y

N

Querying collection tasks

Y

Y

Y

Y

Editing collection tasks

Y

Y

N

N

Editing approvals

Y

Y

N

N

Editing asset reports

Y

Y

N

N

Creating tags

Y

Y

N

N

Deleting tags

Y

Y

N

N

Querying tags

Y

Y

Y

Y

Editing tags

Y

Y

N

N

Creating assets

Y

Y

N

N

Deleting assets

Y

Y

N

N

Operating assets

Y

Y

Y

N

Querying assets

Y

Y

Y

Y

Editing assets

Y

Y

N

N

Creating directories

Y

Y

N

N

Deleting directories

Y

Y

N

N

Querying directories

Y

Y

Y

Y

Editing directories

Y

Y

N

N

Creating classifications

Y

Y

N

N

Deleting classifications

Y

Y

N

N

Querying classifications

Y

Y

Y

Y

Editing classifications

Y

Y

N

N

Creating data permission rules

Y

N

N

N

Deleting data permission rules

Y

N

N

N

Querying data permission rules

Y

Y

Y

Y

Editing data permission rules

Y

N

N

N

DataArts DataService

Permission

Admin

Developer

Operator

Viewer

Creating throttling policies

Y

Y

N

N

Deleting throttling policies

Y

Y

N

N

Operating throttling policies

Y

Y

Y

N

Querying throttling policies

Y

Y

Y

Y

Editing throttling policies

Y

Y

N

N

Creating applications

Y

Y

N

N

Deleting applications

Y

Y

N

N

Operating applications

Y

Y

Y

N

Querying applications

Y

Y

Y

Y

Editing applications

Y

Y

N

N

Operating reviews

Y

Y

Y

N

Querying reviews

Y

Y

Y

Y

Creating API catalogs

Y

Y

Y

N

Deleting API catalogs

Y

Y

Y

N

Querying API catalogs

Y

Y

Y

Y

Editing API catalogs

Y

Y

Y

N

Operating clusters

Y

Y

N

N

Querying clusters

Y

Y

Y

Y

Adding reviewers

Y

N

N

N

Deleting reviewers

Y

N

N

N

Operating reviewers

Y

Y

Y

N

Querying reviewers

Y

Y

Y

N

Creating APIs

Y

Y

N

N

Deleting APIs

Y

Y

N

N

Operating APIs

Y

Y

Y

N

Querying APIs

Y

Y

Y

Y

Editing APIs

Y

Y

N

N

Querying data sources

Y

Y

N

N

Querying the dashboard

Y

Y

Y

Y

DataArts Security

Permission

Admin

Developer

Operator

Viewer

Creating data source tracing tasks

Y

Y

N

N

Deleting data source tracing tasks

Y

Y

N

N

Operating data source tracing tasks

Y

Y

N

N

Querying data source tracing tasks

Y

Y

Y

Y

Editing data source tracing tasks

Y

Y

N

N

Creating data classifications

Y

Y

Y

N

Deleting data classifications

Y

Y

Y

N

Querying data classifications

Y

Y

Y

Y

Editing data classifications

Y

Y

Y

N

Creating access permissions management tasks

Y

Y

N

N

Deleting access permissions management tasks

Y

Y

N

N

Querying access permissions management tasks

Y

Y

Y

Y

Editing access permissions management tasks

Y

Y

N

N

Creating dynamic policies

Y

N

N

N

Deleting dynamic policies

Y

N

N

N

Querying dynamic policies

Y

Y

Y

Y

Editing dynamic policies

Y

N

N

N

Creating security levels

Y

Y

N

N

Deleting security levels

Y

Y

N

N

Querying security levels

Y

Y

Y

Y

Editing security levels

Y

Y

N

N

Creating dynamic masking policies

Y

N

N

N

Deleting dynamic masking policies

Y

N

N

N

Querying dynamic masking policies

Y

Y

Y

Y

Editing dynamic masking policies

Y

N

N

N

Creating dynamic masking subscription policies

Y

N

N

N

Deleting dynamic masking subscription policies

Y

N

N

N

Querying dynamic masking subscription policies

Y

Y

Y

Y

Creating resource permission policies

Y

N

N

N

Deleting resource permission policies

Y

N

N

N

Querying resource permission policies

Y

Y

Y

Y

Editing resource permission policies

Y

N

N

N

Operating security task scheduling

Y

Y

Y

N

Creating permission applications

Y

Y

Y

N

Querying permission applications

Y

Y

Y

Y

Editing permission applications

Y

Y

Y

N

Creating user synchronization tasks

Y

Y

Y

N

Deleting user synchronization tasks

Y

Y

Y

N

Querying user synchronization tasks

Y

Y

Y

Y

Editing user synchronization tasks

Y

Y

Y

N

Creating data masking tasks

Y

Y

N

N

Deleting data masking tasks

Y

Y

N

N

Operating data masking tasks

Y

Y

N

N

Querying data masking tasks

Y

Y

Y

Y

Editing data masking tasks

Y

Y

N

N

Operating fine-grained permission control

Y

N

N

N

Querying fine-grained permission control

Y

Y

Y

Y

Editing fine-grained permission control

Y

N

N

N

Creating permission sets

Y

Y

Y

N

Deleting permission sets

Y

Y

Y

N

Querying permission sets

Y

Y

Y

Y

Editing permission sets

Y

Y

Y

N

Querying the dashboard

Y

Y

Y

Y

Creating cross-source permission synchronization policies

Y

N

N

N

Deleting cross-source permission synchronization policies

Y

N

N

N

Querying cross-source permission synchronization policies

Y

Y

Y

Y

Editing cross-source permission synchronization policies

Y

N

N

N

Querying member management tasks

Y

Y

Y

Y

Editing member management tasks

Y

Y

Y

N

Adding permission set members

Y

Y

Y

N

Deleting permission set members

Y

Y

Y

N

Querying permission set members

Y

Y

Y

Y

Querying agencies

Y

Y

Y

Y

Creating data masking policies

Y

Y

N

N

Deleting data masking policies

Y

Y

N

N

Operating data masking policies

Y

Y

Y

Y

Querying data masking policies

Y

Y

Y

Y

Editing data masking policies

Y

Y

N

N

Querying data access audit

Y

N

N

N

Creating rule groups

Y

Y

Y

N

Deleting rule groups

Y

Y

N

N

Operating rule groups

Y

Y

Y

N

Querying rule groups

Y

Y

Y

Y

Editing rule groups

Y

Y

Y

N

Querying logs of permission synchronization failures

Y

Y

Y

Y

Creating sensitive data discovery tasks

Y

Y

Y

N

Deleting sensitive data discovery tasks

Y

Y

N

N

Operating sensitive data discovery tasks

Y

Y

Y

N

Querying sensitive data discovery tasks

Y

Y

Y

Y

Editing sensitive data discovery tasks

Y

Y

N

N

Creating permission sets

Y

Y

Y

N

Deleting permission sets

Y

Y

Y

N

Querying permission sets

Y

Y

Y

Y

Editing permission sets

Y

Y

Y

N

Querying data sources

Y

Y

Y

Y

Querying catalog permission policies

Y

Y

Y

Y

Creating row-level access policies

Y

N

N

N

Deleting row-level access policies

Y

N

N

N

Querying row-level access policies

Y

Y

Y

Y

Editing row-level access policies

Y

N

N

N

Creating queue policies

Y

N

N

N

Deleting queue policies

Y

N

N

N

Querying queue policies

Y

Y

Y

Y

Editing queue policies

Y

N

N

N

Creating security diagnosis tasks

Y

N

N

N

Querying security diagnosis tasks

Y

Y

Y

Y

Querying resource permission configuration

Y

Y

N

N

Creating data watermarking tasks

Y

Y

N

N

Deleting data watermarking tasks

Y

Y

N

N

Operating data watermarking tasks

Y

Y

N

N

Querying data watermarking tasks

Y

Y

Y

Y

Editing data watermarking tasks

Y

Y

N

N

We use cookies to improve our site and your experience. By continuing to browse our site you accept our cookie policy. Find out more

Feedback

Feedback

Feedback

0/500

Selected Content

Submit selected content with the feedback