Updated on 2022-07-04 GMT+08:00

Service Authorization

After entering the DLI management console, you are advised to set agency permissions to ensure that DLI can be used properly.

If you need to adjust the agency permissions, modify them on the Service Authorization page.

Currently, the following agency permissions need to be set for DLI:

  • Tenant Administrator (global): Tenant Administrator permissions are required to access data from OBS to execute Flink jobs on DLI, for example, obtaining OBS/DWS data sources, log dump (including bucket authorization), checkpointing enabling, and job import and export.

    Due to cloud service cache differences, operations require about 60 minutes to take effect.

  • DIS Administrator permissions are required to use DIS data as the data source of DLI Flink jobs.

    Due to cloud service cache differences, operations require about 30 minutes to take effect.

  • To use CloudTable data as the data source of DLI Flink jobs, CloudTable Administrator permissions are required.

    Due to cloud service cache differences, operations require about 3 minutes to take effect.

  • VPC Administrator permissions are required to use the VPC, subnet, route, VPC peering connection, and port for DLI datasource connections.

    Due to cloud service cache differences, operations require about 3 minutes to take effect.

  • To receive notifications when a DLI job fails, SMN Administrator permissions are required.

    Due to cloud service cache differences, operations require about 3 minutes to take effect.

  • To use IEF to execute Flink Edge jobs in DLI, Tenant Administrator permissions are required. This permission is also required for running other services that require the Tenant Administrator permission.

    Due to cloud service cache differences, operations require about 3 minutes to take effect.

After you agree to the authorization, DLI will create an agency named dli_admin_agency on the page.

  • Only the tenant account or a subaccount of user group admin can authorize access.
  • Do not delete dli_admin_agency after it is created successfully.

On this page, select or deselect the preceding permissions as required and click Update. If the system displays a message indicating that the agency permissions are updated successfully, the modification is successful.