DataWorks lets you group accounts with the same data access permissions into a user group. When you configure data masking, you can add this group to a whitelist so its members can view raw data instead of masked data. This topic describes how to create and manage user groups.
Limitations
This feature is available only in DataWorks Professional Edition and later.
Go to Data Security Guard
Go to the DataStudio page.
Log on to the DataWorks console. In the top navigation bar, select the desired region. In the left-side navigation pane, choose . On the page that appears, select the desired workspace from the drop-down list and click Go to Data Development.
Click the
icon in the upper-left corner. Then, choose . On the page that appears, click Try Now to go to the Data Security Guard page. NoteIf your Alibaba Cloud account is granted the required permissions, you can directly access the homepage of Data Security Guard.
If your Alibaba Cloud account is not granted the required permissions, you are redirected to the authorization page of Data Security Guard. You can use the features of Data Security Guard only after your Alibaba Cloud account is granted the required permissions.
Create a user group
Create a user group on the Data Security Guard page.
-
In the left-side navigation pane, choose to go to the User Group Management page.
-
Create a user group.
-
Click Create User Group. In the New User Group dialog box, specify the User Group Name and add accounts to the group.
-
You can add accounts to the user group based on the account source type.
Account source type
Method
Text
Click Upload File to add multiple accounts at once by uploading a text file. This method is useful for adding a large number of accounts.
NoteDataWorks only supports uploading UTF-8-formatted .txt text files in which each line contains the information for a single account, up to a maximum of 1,000 lines for 1,000 accounts.
Select existing accounts
Directly select an Alibaba Cloud account (including a main account and RAM users), a RAM role, or a MaxCompute role. This method is useful for adding a small number of accounts.
-
Select an account type.
-
In the Available Accounts area, select the target accounts and click the
icon to move them to the Selected Accounts area.
NoteA user group can contain MaxCompute roles from only a single MaxCompute project.
-
-
Click Confirm to create the user group.
-
Use a user group
After you create a user group, you can use the Data Masking Management feature to configure a whitelist for a data masking rule. Add the user group to the whitelist. Then, users in the group can view raw data instead of masked data. For more information about how to configure a whitelist for a data masking rule, see Create a data masking rule.
Manage user groups
On the User Group Management page, you can manage your user groups.
View user groups
You can view basic information for each user group, including its User Group Name, Commission Time time, and Associated Data Masking Whitelists.
-
Search for a user group: Search for a user group by its User Group Name or Head. Fuzzy search is supported.
-
Sort user groups: Sort user groups by Commission Time time in ascending or descending order.
-
View Associated Data Masking Whitelists: If a user group is part of a whitelist, click the
icon in the Associated Data Masking Whitelists column to view the names of the associated data masking rules.
More actions
-
Copy: To quickly create a user group with the same configuration, click the
icon in the Actions column of the target user group. -
Edit: To add or remove members, click the
icon in the Actions column of the target user group. -
Delete: If you no longer need a user group, click the
icon in the Actions column of the target user group to delete it.
icon in the Actions column of the target user group to delete it.