To share data across projects, you can grant dataset permissions to users or production accounts in other projects. You can also request access to datasets you need. This topic describes how to grant and revoke dataset permissions in batches.
Prerequisites
To use the dataset permission feature, contact the Dataphin team to enable unstructured data.
Permissions
A super administrator, system administrator, or a user with a custom global role that includes the Permission Management-View permission can grant dataset permissions.
The dataset's project administrator and the dataset owner can grant permissions on that dataset.
Grant dataset permissions in batches
On the Dataphin homepage, from the top menu bar, choose Management Center > Permission Management.
In the left-side navigation pane, choose Permission Management > Dataset Permissions. On the Dataset Permission Management page, click the Manage Permissions tab, and then click Batch Grant.
In the Batch Grant dialog box, configure the parameters.
Parameter
Description
Project
If you select a project, you can only select datasets that belong to that project. If you do not select a project, you can select any dataset within the current tenant.
dataset
Select the datasets to grant permissions on. You can perform a fuzzy search by using keywords in the dataset names.
permission type
Select the permission type to grant. Only the Use permission is supported.
authorized account
Based on your business needs, you can grant dataset permissions to a personal account, a production account, and a user group simultaneously or individually.
Personal account: Used for data development in a development environment. Data developed with this account can be published to the production environment. You must set an expiration time for the permission.
Production account: Used to manage and run tasks submitted to the production environment. Select the production account to receive the permissions.
User group: Used to manage permissions for members of the group. You must specify the user group and set an expiration time for the permission.
authorization reason
Enter the reason for granting the permissions. This information helps approvers review the request. The reason must be 5 to 128 characters long.
Click OK to grant the dataset permissions.
Revoke dataset permissions in batches
On the Manage Permissions tab, click Batch Revocation.
In the Batch Revocation dialog box, configure the parameters.
Parameter
Description
authorized account
Select the account to revoke permissions from. You can select a personal account, a production account, or a user group.
project
Select the project to revoke permissions from.
dataset
Based on the selected account, choose the datasets to revoke permissions from.
revocation reason
Enter the revocation reason. The reason must be 5 to 128 characters long.
Click OK to revoke the dataset permissions.
Dataset permission management
On the Dataset Permission Management page, you can view dataset permission details and operation logs.
Permission details
This section displays the dataset name, its project, the dataset owner, and the number of permissions.
You can search for datasets by keywords in their names, or filter them by project or data owner.
You can perform the following operations on the filtered datasets.
Actions
Description
View dataset permission details
Click the dataset name or the
icon in the Operations column to view permission details for the dataset. For more information, see View dataset permission details.Grant
Grants permissions for a single dataset. You must configure the Account Type and authorization reason. For more information, see Grant dataset permissions in batches.
Revoke
Revokes permissions for a single dataset. You must configure the User to Revoke and revocation reason. For more information, see Revoke dataset permissions in batches.
Dataset permission details
Area | Description |
① Basic information area | Displays the name of the dataset, its project, and the dataset owner. |
② List area |
|
③ Batch operations area | Revoke: Revokes dataset permissions for multiple accounts in a batch. In the Batch Revoke Dataset Permissions for Account dialog box, enter a revocation reason of 5 to 128 characters, and click OK. |
Operation logs
You can search by keywords in dataset names or filter the log entries by operation type.
The list displays the operation logs for the filtered datasets, including the dataset name, Operation object, Operator, Operation time, permission type, Operation type, and Operation reason.