Approval policies for extensions

Limitations

• This feature is available only in DataWorks Enterprise Edition. For more information, see Upgrade the edition of DataWorks.

• Only Alibaba Cloud accounts and RAM users with the AliyunDataWorksFullAccess permission can select all workspaces as managed workspaces. This means that the defined approval policies take effect in all managed workspaces. For more information, see View RAM user permissions and Manage RAM user permissions.

• A Workspace Administrator can create policies only for their own workspace.

Access approval policies

1. Go to the DataStudio page.

   Log on to the DataWorks console. In the top navigation bar, select the desired region. In the left-side navigation pane, choose Data Development and O&M > Data Development. On the page that appears, select the desired workspace from the drop-down list and click Go to Data Development.

2. In the upper-left corner, click the icon and choose All Products >More > Approval Center.

3. In the left-side navigation pane, choose Processing Policy Management > Extensions.

Create an approval policy

1. In the upper-right corner, click Create Policy.

2. Configure basic information for the flow.

   Keep the following in mind when you configure the basic information:

   • Only an Alibaba Cloud account or a RAM user with the AliyunDataWorksFullAccess permission can select the global workspace.

   • A Workspace Administrator can only select the workspace to which they belong.

   • For global-level extensions, which are extensions that take effect in all workspaces when enabled, if a specific workspace has not configured a response policy for this extension, the operation is allowed by default and the process is not blocked. For example, if an extension for a pre-data-download event is enabled, data download operations in all workspaces are blocked until the extension returns a result. Only when the extension returns a warning status:

     • If the workspace where the download was initiated has a configured approval policy, the approval flow defined for that workspace is automatically triggered.

     • If the workspace does not have a configured approval policy, the download proceeds without requiring approval.

3. Configure approval nodes.

   In the Configure Processing Links section, you can define the approver and role for each approval node. Keep the following in mind when you configure the nodes:

   • Approval flow: Once configured, the approval flow proceeds sequentially through the defined nodes from top to bottom. The system notifies an approver at each node only after the approver at the preceding node grants approval.

   • Approvers: For each node, you can select a different type of approver. Supported types include: DataWorks workspace-level role, DataWorks workspace member, and Alibaba Cloud account.

4. Click Commit.

View associated extensions

In the Actions column for your policy, click Associate Extension. This takes you to the risk identification rules page, where you can view or assign your policy when you configure a risk response.

Related documents

• Risk identification rules.

• To retrieve the check result from an extension for an extension point event, see CallbackExtension.