Help Center/ DataArts Lake Formation/ User Guide/ Data Permission Management/ Performing Role-based Authorization
Updated on 2024-02-02 GMT+08:00
View PDF
Share

Performing Role-based Authorization

If a role has some permissions on resources (such as databases), users or user groups with this role also have the corresponding resource operation permissions.

If the service interconnected with the LakeFormation instance requires role authorization, the agency for interconnecting with LakeFormation must contain the permissions of the role.

For example, if the query permission of a role is required after LakeFormation is interconnected with an MRS cluster, select lakeformation:role:describe when creating a LakeFormation agency.

Creating a Role and Binding a User with It

  1. Log in to the LakeFormation console.
  2. In the upper left corner, click and choose Analytics > LakeFormation to access the LakeFormation console.
  3. Select the target LakeFormation instance from the drop-down list box on the left and choose Data Permission > Role.
  4. Click Create, set Role Name and Description, and click OK.
  5. On the Roles page, click Add in the Operation column, select the target role and user, and click OK.

    • You can also choose Data Permissions > Users in the navigation pane, locate the row that contains the user to be bound with the role, click Add in the Operation column, select the target role, and click OK.
    • After the role is authorized, the users bound with the role have its permissions.

Granting Permissions to the Created Role

Grant permissions to the created role. For details, see Granting permissions.