Manage knowledge graph permissions
A knowledge graph workspace administrator can grant and revoke permissions on graph data to personal accounts, production accounts, and user groups. This topic describes how to grant and revoke knowledge graph permissions.
Prerequisites
You must purchase the Unstructured Data-Enterprise Edition feature to manage knowledge graph permissions.
Batch grant knowledge graph permissions
-
In the top navigation bar of the Dataphin homepage, choose Management Center > Permission Management.
-
In the left-side navigation pane, choose Permission Management > Knowledge Graph. On the Knowledge Graph Permissions page, go to the Manage Permissions tab and click Batch Grant.
-
On the Batch Grant page, configure the parameters.
Parameter
Description
Knowledge graph workspace
Select the target knowledge graph workspace. You can only select workspaces that you administer. You can perform a fuzzy search by using keywords in the workspace name.
Account to grant
You can grant knowledge graph permissions to a personal account, production account, or user group.
-
Personal account: Grants permission to configure and submit tasks that write to the knowledge graph in the development environment. You must set a permission expiration time. Options include 30 days, 90 days, 180 days, Long-term, and Custom.
-
Production account: Grants permission to run tasks in the production environment. Select the production account to which you want to grant permissions. The permission is long-term.
-
User group: Grants permissions to all members of the user group. You must select a user group and set a permission expiration time. Options include 30 days, 90 days, 180 days, Long-term, and Custom.
Permission type
Specifies the permission to grant. Only the Modify graph data permission is supported.
Reason for authorization
The reason for the grant. This entry facilitates future audits. The reason must be between 5 and 128 characters in length.
-
-
Click OK to grant the permissions.
Batch revoke knowledge graph permissions
-
On the Manage Permissions tab, click Batch Revoke.
-
On the Batch Revoke page, configure the parameters.
Parameter
Description
Knowledge graph workspace
Select the knowledge graph workspace from which to revoke permissions. You can only select workspaces that you administer.
Account
Select the account from which to revoke permissions. You can select a personal account, production account, or user group.
Permission type
Currently, you can only revoke the Modify graph data permission.
Reason for revocation
Enter a reason for the revocation. The reason must be between 5 and 128 characters in length.
-
Click OK to revoke the permissions.
Permission details and records
On the knowledge graph permission management page, you can manage permission details and operation records only for workspaces you administer.
Permission details
-
This tab displays the name, object type, owner, and permission count for each knowledge graph workspace.
-
You can search for a workspace by name.
-
You can perform the following operations on the filtered knowledge graph workspaces.
Actions
Description
View permission details
View the authorization details for the current knowledge graph workspace.
-
Basic information: Displays the name of the knowledge graph workspace and the workspace administrator.
-
User permission list: Displays the authorized accounts, permission types, and permission expiration times for the knowledge graph workspace. You can search by account name, filter by authorized account, and revoke permissions for a specific account.
-
Revoke: Select the target account, and then click Revoke in the Actions column or click Revoke at the bottom of the list. In the Revoke dialog box, enter a reason for the revocation that is 5 to 128 characters in length, and then click OK.
Grant
Grant permissions to a specific knowledge graph workspace. The system automatically populates the current workspace. Specify the Account to grant and Reason for authorization to complete the process.
-
Operation records
-
You can search by keywords in the knowledge graph workspace name or filter by operation type.
-
This tab lists the filtered knowledge graph permission operation records, including the knowledge graph workspace name, operation object, operator, operation time, permission type, operation type, and reason for the operation.