Help Center/ DataArts Studio/ User Guide/ Authorizing Users to Use DataArts Studio/ Adding Workspace Members and Assigning Roles
Updated on 2024-08-30 GMT+08:00
View PDF

Adding Workspace Members and Assigning Roles

For IAM users with DAYU User account permissions, their permissions in a DataArts Studio workspace are determined by workspace roles. If you want to share a DataArts Studio instance with an IAM user with the DAYU User account permissions, prepare an IAM user by referring to Creating an IAM User and Assigning DataArts Studio Permissions, add the user as a workspace member, and assign a role to the member.

Figure 1 Permission system

A workspace role determines the permissions of a user in a workspace. Preset roles include admin, developer, deployer, operator, and viewer. For the detailed descriptions of the permissions of each role, see Permissions.

  • Admin: This role has all operation permissions in a workspace. You are advised to assign the admin role to the project owner, development owner, and O&M administrator.
  • Developer: This role has permissions to create and manage resources in a workspace. You are advised to assign this role to users who develop and process tasks.
  • Operator: This role has the operation permissions of services such as O&M and scheduling in a workspace, but cannot modify resources or configurations. You are advised to assign this role to users responsible for O&M management and status monitoring.
  • Viewer: This role can view data in a workspace but cannot perform any other operation. You are advised to assign this role to users who only need to view data in a workspace but do not need to perform operations.
  • Deployer: This role is unique to the enterprise mode and has permissions to release task packages in a workspace. In enterprise mode, when a developer submits a script or job version, the system generates a release task. After the developer confirms the release and the deployer approves the release request, the modified job is synchronized to the production environment.

Context

If an IAM user is granted the DAYU User permissions, you also need to add the user as a workspace member and assign a role to the user. Otherwise, the IAM user cannot view existing DataArts Studio workspaces.

Notes and Constraints

Due to the limitations of the authentication cache mechanism, a change to the role of a workspace member does not take effect immediately. The change takes effect six minutes after the workspace member stops accessing the DataArts Studio console.

Prerequisites

You are using either of the following accounts:
  • DAYU Administrator or Tenant Administrator
  • DAYU User, which is the administrator of the current workspace

Adding a Member and Assigning a Role

  1. Log in to the DataArts Studio console by following the instructions in Accessing the DataArts Studio Instance Console.
  2. On the Workspaces page, locate the target workspace and click Edit in the Operation column.

    Figure 2 Workspace Information dialog box

  3. Click Add next to Workspace Members. In the displayed Add Member dialog box, select User or Group for Account Type, select a user or group from the Member Account drop-down list, and select a role.

    Figure 3 Adding a member

  4. Click OK. You can view or modify the members and roles in the member list, or delete members from the workspace.

Related Operations

  • Removing a workspace member: In the Workspace Information dialog box, select the workspace members to remove, and click Remove. In the Remove Member dialog box, click Yes.

    The creator of a workspace cannot be removed.

    Figure 4 Removing a member