Identity authentication and access control

Identity management

In an Alibaba Cloud public cloud environment, Dataphin uses Resource Access Management (RAM) for user management and authentication.

Password management

When identity authentication is handled by Alibaba Cloud or a customer's authentication system, Dataphin stores only account information and does not record user passwords.

Role management

Administrators use global roles and project roles to manage permissions for members in Dataphin.

• Global roles

  • Global roles manage operation permissions for global features in Dataphin or the highest permissions for a specific submodule, such as managing compute settings, adding members, and managing security policies.

  • The supported global roles include super administrator, system administrator, security administrator, quality administrator, and data source administrator.

• Project roles

  • Project roles manage the view and operation permissions for members, data, and tasks within a project.

  • The supported project roles include project administrator, developer, O&M, analyst, and visitor. These roles have different permission levels. You can grant project roles as needed to better protect data security within the project.

  • Project roles can also be customized. You can create custom roles based on your company's management policies and requirements to manage users within a project.