Appendix: List of default role permissions (workspace level)
DataWorks provides multiple built-in workspace-level roles, including Project Owner, Workspace Administrator, Data Analyst, Developer, O&M Engineer, Deployer, Visitor, Security Administrator, Model Designer, and Data Governance Administrator. This topic describes the permissions of each role.
All built-in workspace-level roles have read-only access to every workspace-level module by default. However, the management and operational permissions granted to each role differ as shown in the following table.
|
Role |
Description |
|
Project Owner |
The Workspace Owner has all permissions in the workspace and is typically an Alibaba Cloud account. For example, they can assign roles to RAM users as needed and remove members who are not the owner from the workspace. |
|
Workspace Administrator |
This role has permissions that are second only to the permissions of the Workspace Administrator role. The Workspace Administrator role can also be used to perform operations such as adding a user to a workspace as a member, removing a member from a workspace, or assigning a role to a member. |
|
Data Analyst |
This role has permissions only on DataAnalysis. |
|
Development |
This role has permissions to perform data development and maintenance operations on the DataStudio page of a workspace. Note
|
|
O&M |
This role has permissions to deploy tasks to the production environment on the Create Deploy Task page and perform O&M operations on all tasks in a workspace in Operation Center. |
|
Deployment |
In a multi-workspace setup, this role reviews task code and decides whether to submit it for O&M. |
|
Visitor |
This role has read-only permissions on workflows and code on the DataStudio page of a workspace. |
|
Security Administrator |
This role has permissions only on Data Security Guard. |
|
Model Designer |
This role has permissions to view models in Data Modeling and modify parameter configurations in Data Warehouse Planning, Data Standard, Dimensional Modeling, and Data Metric. This role does not have permissions to publish models. |
|
Data Governance Administrator |
This role has permissions to view and manage data governance content of the workspace to which this role belongs in Data Governance Center. Note
|
For detailed permissions of each workspace-level feature, see the following sections:
In addition, the built-in workspace-level roles have certain permission controls over MaxCompute engine data. For more information, see MaxCompute permission mappings for DataWorks roles.
You can also run commands to view data permissions on the MaxCompute side. For more information, see View security configurations. For example, run the Desc Role Role_project_dev; command to check whether the Development role in DataWorks has the Create Table permission on MaxCompute data sources.
For more information about the mappings between DataWorks built-in workspace-level roles and MaxCompute engine permissions, see Mappings between DataWorks roles and MaxCompute roles.
Data Management
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Delete tables created by yourself |
|
|
|
|
|
|
|
|
|
|
Set categories for tables created by yourself |
|
|
|
|
|
|
|
|
|
|
View tables collected by yourself |
|
|
|
|
|
|
|
|
|
|
Create a table |
|
|
|
|
|
|
|
|
|
|
Unhide tables created by yourself |
|
|
|
|
|
|
|
|
|
|
Modify the schema of tables created by yourself |
|
|
|
|
|
|
|
|
|
|
View tables created by yourself |
|
|
|
|
|
|
|
|
|
|
View permissions that you have applied for |
|
|
|
|
|
|
|
|
|
|
Hide tables created by yourself |
|
|
|
|
|
|
|
|
|
|
Set the lifecycle for tables created by yourself |
|
|
|
|
|
|
|
|
|
|
Apply for data permissions on tables not created by yourself |
|
|
|
|
|
|
|
|
|
|
Update tables in the development environment |
|
|
|
|
|
|
|
|
|
|
Delete tables in the development environment |
|
|
|
|
|
|
|
|
|
|
Data preview |
|
|
|
|
|
|
|
|
|
|
Add assignment parameters |
|
|
|
|
|
|
|
|
|
|
Publishing Management
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Create a deployment package |
|
|
|
|
|
|
|
|
|
|
View the deployment package list |
|
|
|
|
|
|
|
|
|
|
Revoke a deployment package |
|
|
|
|
|
|
|
|
|
|
Approve/Reject a deployment |
|
|
|
|
|
|
|
|
|
|
View deployment package content |
|
|
|
|
|
|
|
|
|
|
Cancel a deployment |
|
|
|
|
|
|
|
|
|
|
Button controls
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Button -- Stop |
|
|
|
|
|
|
|
|
|
|
Button -- Format |
|
|
|
|
|
|
|
|
|
|
Button -- Edit |
|
|
|
|
|
|
|
|
|
|
Button -- Run |
|
|
|
|
|
|
|
|
|
|
Button -- Zoom In |
|
|
|
|
|
|
|
|
|
|
Button -- Save |
|
|
|
|
|
|
|
|
|
|
Button -- Expand/Collapse |
|
|
|
|
|
|
|
|
|
|
Button -- Delete |
|
|
|
|
|
|
|
|
|
|
Code development
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Save and commit code |
|
|
|
|
|
|
|
|
|
|
View code content |
|
|
|
|
|
|
|
|
|
|
Create code |
|
|
|
|
|
|
|
|
|
|
Delete code |
|
|
|
|
|
|
|
|
|
|
View code list |
|
|
|
|
|
|
|
|
|
|
Run code |
|
|
|
|
|
|
|
|
|
|
Modify code |
|
|
|
|
|
|
|
|
|
|
Download files |
|
|
|
|
|
|
|
|
|
|
Upload files |
|
|
|
|
|
|
|
|
|
|
Function Development
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
View function details |
|
|
|
|
|
|
|
|
|
|
Create functions |
|
|
|
|
|
|
|
|
|
|
Query functions |
|
|
|
|
|
|
|
|
|
|
Delete functions |
|
|
|
|
|
|
|
|
|
|
Node Type Control
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Node -- PAI |
|
|
|
|
|
|
|
|
|
|
Node -- MR |
|
|
|
|
|
|
|
|
|
|
Node -- CDP |
|
|
|
|
|
|
|
|
|
|
Node -- SQL |
|
|
|
|
|
|
|
|
|
|
Node -- XLIB |
|
|
|
|
|
|
|
|
|
|
Node -- Shell |
|
|
|
|
|
|
|
|
|
|
Node -- Virtual node |
|
|
|
|
|
|
|
|
|
|
Node -- script_seahawks |
|
|
|
|
|
|
|
|
|
|
Node -- dtboost_analytic |
|
|
|
|
|
|
|
|
|
|
Node -- dtboost_recommand |
|
|
|
|
|
|
|
|
|
|
Node -- pyodps |
|
|
|
|
|
|
|
|
|
|
Node - ADBPG |
|
|
|
|
|
|
|
|
|
|
Node - ADBMYSQL |
|
|
|
|
|
|
|
|
|
|
Node -- Trigger node |
|
|
|
|
|
|
|
|
|
|
Database node permissions |
|
|
|
|
|
|
|
|
|
|
Resource Management
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
View resource list |
|
|
|
|
|
|
|
|
|
|
Delete resources |
|
|
|
|
|
|
|
|
|
|
Create resources |
|
|
|
|
|
|
|
|
|
|
Upload JAR files |
|
|
|
|
|
|
|
|
|
|
Upload text files |
|
|
|
|
|
|
|
|
|
|
Upload archive files |
|
|
|
|
|
|
|
|
|
|
Workflow Development
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Run/stop workflows |
|
|
|
|
|
|
|
|
|
|
Save workflows |
|
|
|
|
|
|
|
|
|
|
View workflow contents |
|
|
|
|
|
|
|
|
|
|
Submit node code |
|
|
|
|
|
|
|
|
|
|
Modify workflows |
|
|
|
|
|
|
|
|
|
|
View the workflow list |
|
|
|
|
|
|
|
|
|
|
Modify the owner property |
|
|
|
|
|
|
|
|
|
|
Open node code |
|
|
|
|
|
|
|
|
|
|
Delete workflows |
|
|
|
|
|
|
|
|
|
|
Create workflows |
|
|
|
|
|
|
|
|
|
|
Create folders |
|
|
|
|
|
|
|
|
|
|
Delete folders |
|
|
|
|
|
|
|
|
|
|
Modify folders |
|
|
|
|
|
|
|
|
|
|
Project Management
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
View basic project properties |
|
|
|
|
|
|
|
|
|
|
Create baselines |
|
|
|
|
|
|
|
|
|
|
Delete baselines |
|
|
|
|
|
|
|
|
|
|
Edit baselines |
|
|
|
|
|
|
|
|
|
|
Search the baseline list |
|
|
|
|
|
|
|
|
|
|
View baselines |
|
|
|
|
|
|
|
|
|
|
Test connectivity |
|
|
|
|
|
|
|
|
|
|
Create a data source |
|
|
|
|
|
|
|
|
|
|
Delete a data source |
|
|
|
|
|
|
|
|
|
|
Edit a data source |
|
|
|
|
|
|
|
|
|
|
Search for data sources |
|
|
|
|
|
|
|
|
|
|
View project data source configurations |
|
|
|
|
|
|
|
|
|
|
Enable scheduling |
|
|
|
|
|
|
|
|
|
|
View task scheduling configurations |
|
|
|
|
|
|
|
|
|
|
Add a project member |
|
|
|
|
|
|
|
|
|
|
Edit project member roles |
|
|
|
|
|
|
|
|
|
|
View the project member list |
|
|
|
|
|
|
|
|
|
|
Remove a project member |
|
|
|
|
|
|
|
|
|
|
Search for project members |
|
|
|
|
|
|
|
|
|
|
Modify compute engine configurations |
|
|
|
|
|
|
|
|
|
|
View compute engine configurations |
|
|
|
|
|
|
|
|
|
|
Query the member list within a tenant |
|
|
|
|
|
|
|
|
|
|
Modify basic project properties |
|
|
|
|
|
|
|
|
|
|
Modify scheduling enablement settings |
|
|
|
|
|
|
|
|
|
|
Allow code editing |
|
|
|
|
|
|
|
|
|
|
Allow downloading SELECT results |
|
|
|
|
|
|
|
|
|
|
Get the project role list |
|
|
|
|
|
|
|
|
|
|
Add a project resource group |
|
|
|
|
|
|
|
|
|
|
Remove a project resource group |
|
|
|
|
|
|
|
|
|
|
Set the default project resource group |
|
|
|
|
|
|
|
|
|
|
Get the project resource group list |
|
|
|
|
|
|
|
|
|
|
Create a project resource group |
|
|
|
|
|
|
|
|
|
|
Delete a resource group |
|
|
|
|
|
|
|
|
|
|
Initialize a resource group |
|
|
|
|
|
|
|
|
|
|
Get the resource group node list |
|
|
|
|
|
|
|
|
|
|
Add a node to a resource group |
|
|
|
|
|
|
|
|
|
|
Delete a resource group node |
|
|
|
|
|
|
|
|
|
|
Update resource group node status and slots |
|
|
|
|
|
|
|
|
|
|
Get the list of projects bound to a resource group |
|
|
|
|
|
|
|
|
|
|
Batch bind a resource group to projects |
|
|
|
|
|
|
|
|
|
|
Get the MaxCompute role list |
|
|
|
|
|
|
|
|
|
|
Create a MaxCompute role |
|
|
|
|
|
|
|
|
|
|
Delete a MaxCompute role |
|
|
|
|
|
|
|
|
|
|
Get MaxCompute role members |
|
|
|
|
|
|
|
|
|
|
Modify MaxCompute role members |
|
|
|
|
|
|
|
|
|
|
Obtain role permissions (including projects and tables) |
|
|
|
|
|
|
|
|
|
|
Revoke project/table permissions |
|
|
|
|
|
|
|
|
|
|
Add project/table permissions |
|
|
|
|
|
|
|
|
|
|
Obtain ODPS security control policies |
|
|
|
|
|
|
|
|
|
|
Modify ACL-based authorization |
|
|
|
|
|
|
|
|
|
|
Modify allow object creators to access objects |
|
|
|
|
|
|
|
|
|
|
Modify allow object creators to authorize objects |
|
|
|
|
|
|
|
|
|
|
Modify workspace data protection |
|
|
|
|
|
|
|
|
|
|
Modify RAM user service |
|
|
|
|
|
|
|
|
|
|
Update project publish target |
|
|
|
|
|
|
|
|
|
|
Refresh RAM users |
|
|
|
|
|
|
|
|
|
|
Obtain ODPS user list |
|
|
|
|
|
|
|
|
|
|
Share data sources |
|
|
|
|
|
|
|
|
|
|
Migrate database tables |
|
|
|
|
|
|
|
|
|
|
Import and export IDE designs |
|
|
|
|
|
|
|
|
|
|
Configure resource groups for sync tasks |
|
|
|
|
|
|
|
|
|
|
Activate PAI GPU for the workspace |
|
|
|
|
|
|
|
|
|
|
Access ODPS security configurations in project management |
|
|
|
|
|
|
|
|
|
|
Permission to create Data Integration real-time nodes |
|
|
|
|
|
|
|
|
|
|
Delete workspace |
|
|
|
|
|
|
|
|
|
|
Workflow OM
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Definition - View workflow |
|
|
|
|
|
|
|
|
|
|
Definition - Edit - Go to IDE |
|
|
|
|
|
|
|
|
|
|
Instance - View workflow |
|
|
|
|
|
|
|
|
|
|
View upstream and downstream of flow definition DAG |
|
|
|
|
|
|
|
|
|
|
View flow list |
|
|
|
|
|
|
|
|
|
|
Definition - View workflow operation logs |
|
|
|
|
|
|
|
|
|
|
Definition - Smoke test |
|
|
|
|
|
|
|
|
|
|
Definition - Backfill data |
|
|
|
|
|
|
|
|
|
|
Definition - Change owner |
|
|
|
|
|
|
|
|
|
|
View flow details |
|
|
|
|
|
|
|
|
|
|
View upstream and downstream of flow instance DAG |
|
|
|
|
|
|
|
|
|
|
Instance - Suspend |
|
|
|
|
|
|
|
|
|
|
Instance - Resume |
|
|
|
|
|
|
|
|
|
|
Instance - Kill task |
|
|
|
|
|
|
|
|
|
|
Instance - Batch kill tasks |
|
|
|
|
|
|
|
|
|
|
Instance - List |
|
|
|
|
|
|
|
|
|
|
View execution logs |
|
|
|
|
|
|
|
|
|
|
Instance - Rerun |
|
|
|
|
|
|
|
|
|
|
Instance - Batch rerun |
|
|
|
|
|
|
|
|
|
|
Instance - Query |
|
|
|
|
|
|
|
|
|
|
Instance - Mark as successful |
|
|
|
|
|
|
|
|
|
|
Rerun downstream instances |
|
|
|
|
|
|
|
|
|
|
Check whether first login |
|
|
|
|
|
|
|
|
|
|
Manual node DAG |
|
|
|
|
|
|
|
|
|
|
Freeze and suspend nodes |
|
|
|
|
|
|
|
|
|
|
Unfreeze and resume nodes |
|
|
|
|
|
|
|
|
|
|
Node lineage |
|
|
|
|
|
|
|
|
|
|
Node details |
|
|
|
|
|
|
|
|
|
|
Node operation logs |
|
|
|
|
|
|
|
|
|
|
Modify node baseline |
|
|
|
|
|
|
|
|
|
|
Instance - Continue run |
|
|
|
|
|
|
|
|
|
|
Instance - Remove dependency |
|
|
|
|
|
|
|
|
|
|
Instance lineage |
|
|
|
|
|
|
|
|
|
|
Instance details |
|
|
|
|
|
|
|
|
|
|
Instance run history |
|
|
|
|
|
|
|
|
|
|
Instance baseline impact |
|
|
|
|
|
|
|
|
|
|
Decommission node |
|
|
|
|
|
|
|
|
|
|
Force refresh downstream |
|
|
|
|
|
|
|
|
|
|
Force rerun instance |
|
|
|
|
|
|
|
|
|
|
Modify instance priority |
|
|
|
|
|
|
|
|
|
|
Node OM
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Definition - Modify baseline |
|
|
|
|
|
|
|
|
|
|
Definition - Batch modify baselines |
|
|
|
|
|
|
|
|
|
|
Definition - View node code |
|
|
|
|
|
|
|
|
|
|
Definition - Batch modify owners |
|
|
|
|
|
|
|
|
|
|
Definition - Modify resource group |
|
|
|
|
|
|
|
|
|
|
Definition - Batch modify resource groups |
|
|
|
|
|
|
|
|
|
|
Definition - Smoke testing |
|
|
|
|
|
|
|
|
|
|
Definition - Backfill data |
|
|
|
|
|
|
|
|
|
|
Instance - Delete dependency |
|
|
|
|
|
|
|
|
|
|
Instance - Suspend |
|
|
|
|
|
|
|
|
|
|
Instance - Resume |
|
|
|
|
|
|
|
|
|
|
Refresh instance properties |
|
|
|
|
|
|
|
|
|
|
Instance - Terminate node instance |
|
|
|
|
|
|
|
|
|
|
Instance - Batch terminate tasks |
|
|
|
|
|
|
|
|
|
|
Instance - Modify priority |
|
|
|
|
|
|
|
|
|
|
Instance - Refresh dependencies |
|
|
|
|
|
|
|
|
|
|
Instance - Rerun node instance |
|
|
|
|
|
|
|
|
|
|
Instance - Mark node instance as successful |
|
|
|
|
|
|
|
|
|
|
Task instance diagnostics |
|
|
|
|
|
|
|
|
|
|
Wait time diagnostics |
|
|
|
|
|
|
|
|
|
|
Resource group basic information |
|
|
|
|
|
|
|
|
|
|
Resource group running information (running/waiting) |
|
|
|
|
|
|
|
|
|
|
Resource group slot usage trend |
|
|
|
|
|
|
|
|
|
|
Task list occupying the resource group |
|
|
|
|
|
|
|
|
|
|
Display diagnostic information |
|
|
|
|
|
|
|
|
|
|
odps_instance list |
|
|
|
|
|
|
|
|
|
|
Instance - Support DQC rerun |
|
|
|
|
|
|
|
|
|
|
HTTP-triggered node - Trigger instance |
|
|
|
|
|
|
|
|
|
|
Dashboard
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
View baseline breach count |
|
|
|
|
|
|
|
|
|
|
Exclude a record from the dashboard |
|
|
|
|
|
|
|
|
|
|
View error ranking in the past month |
|
|
|
|
|
|
|
|
|
|
View task scheduling quantity trend |
|
|
|
|
|
|
|
|
|
|
View task completion status |
|
|
|
|
|
|
|
|
|
|
View task running status |
|
|
|
|
|
|
|
|
|
|
View task execution duration ranking |
|
|
|
|
|
|
|
|
|
|
View task type distribution |
|
|
|
|
|
|
|
|
|
|
Dashboard key focus |
|
|
|
|
|
|
|
|
|
|
Baselines
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
View Mosad baseline metrics |
|
|
|
|
|
|
|
|
|
|
View Mosad baseline list |
|
|
|
|
|
|
|
|
|
|
Alert Monitoring
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
View notification list |
|
|
|
|
|
|
|
|
|
|
Disable alert |
|
|
|
|
|
|
|
|
|
|
Batch disable alerts |
|
|
|
|
|
|
|
|
|
|
Phone call toggle |
|
|
|
|
|
|
|
|
|
|
Add custom reminder |
|
|
|
|
|
|
|
|
|
|
Delete custom reminder |
|
|
|
|
|
|
|
|
|
|
Edit custom reminder |
|
|
|
|
|
|
|
|
|
|
View custom reminder |
|
|
|
|
|
|
|
|
|
|
View all events list |
|
|
|
|
|
|
|
|
|
|
View event details |
|
|
|
|
|
|
|
|
|
|
View personal events list |
|
|
|
|
|
|
|
|
|
|
Data Integration
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Data Integration - Edit node |
|
|
|
|
|
|
|
|
|
|
Data Integration - View node |
|
|
|
|
|
|
|
|
|
|
Data Integration - Delete node |
|
|
|
|
|
|
|
|
|
|
Project sync resource management menu |
|
|
|
|
|
|
|
|
|
|
Project sync resource group list |
|
|
|
|
|
|
|
|
|
|
Project sync resource group creation |
|
|
|
|
|
|
|
|
|
|
Project sync resource group managed machine list |
|
|
|
|
|
|
|
|
|
|
Project sync resource group add machine |
|
|
|
|
|
|
|
|
|
|
Project sync resource group delete machine |
|
|
|
|
|
|
|
|
|
|
Project sync resource group modify machine |
|
|
|
|
|
|
|
|
|
|
Project sync resource group obtain resource group AK |
|
|
|
|
|
|
|
|
|
|
Project sync resource group deletion |
|
|
|
|
|
|
|
|
|
|
Project resource consumption monitoring |
|
|
|
|
|
|
|
|
|
|
Operation center task modify resource group |
|
|
|
|
|
|
|
|
|
|
Sync task list menu |
|
|
|
|
|
|
|
|
|
|
Convert task to script |
|
|
|
|
|
|
|
|
|
|
Obtain project member list |
|
|
|
|
|
|
|
|
|
|
Create code API |
|
|
|
|
|
|
|
|
|
|
Save/update code API |
|
|
|
|
|
|
|
|
|
|
Get code by fileId API |
|
|
|
|
|
|
|
|
|
|
Get Data Integration node list |
|
|
|
|
|
|
|
|
|
|
Search tables API |
|
|
|
|
|
|
|
|
|
|
Search fields API |
|
|
|
|
|
|
|
|
|
|
Query data source list API |
|
|
|
|
|
|
|
|
|
|
Create data source API |
|
|
|
|
|
|
|
|
|
|
Query data source details API |
|
|
|
|
|
|
|
|
|
|
Update data source API |
|
|
|
|
|
|
|
|
|
|
Delete data source API |
|
|
|
|
|
|
|
|
|
|
Test connectivity |
|
|
|
|
|
|
|
|
|
|
Data preview |
|
|
|
|
|
|
|
|
|
|
Check whether OTS Stream is enabled |
|
|
|
|
|
|
|
|
|
|
Enable OTS |
|
|
|
|
|
|
|
|
|
|
Query ODPS table creation statement |
|
|
|
|
|
|
|
|
|
|
Create an ODPS table |
|
|
|
|
|
|
|
|
|
|
Query ODPS table creation status |
|
|
|
|
|
|
|
|
|
|
Data Integration data source sharing permission |
|
|
|
|
|
|
|
|
|
|
Intelligent Data Modeling
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
Data Metrics -- Edit |
|
|
|
|
|
|
|
|
|
|
Data Metrics -- View |
|
|
|
|
|
|
|
|
|
|
Data Metrics -- Publish |
|
|
|
|
|
|
|
|
|
|
Dimensional Modeling -- View |
|
|
|
|
|
|
|
|
|
|
Dimensional Modeling -- Edit |
|
|
|
|
|
|
|
|
|
|
Dimensional Modeling -- Publish |
|
|
|
|
|
|
|
|
|
|
Data Standards -- View |
|
|
|
|
|
|
|
|
|
|
Data Standards -- Edit |
|
|
|
|
|
|
|
|
|
|
Data Standards -- Publish |
|
|
|
|
|
|
|
|
|
|
Data Warehouse Planning -- View |
|
|
|
|
|
|
|
|
|
|
Data Warehouse Planning -- Edit |
|
|
|
|
|
|
|
|
|
|
Dimensional Modeling -- Publish to development environment |
|
|
|
|
|
|
|
|
|
|
Data analysis
Permission | Project Owner | Workspace Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer | Data Governance Administrator |
View Data Analysis pages |
|
|
|
|
|
|
|
|
|
|
Use Data Analysis |
|
|
|
|
|
|
|
|
|
|
Custom Role does not have Data Analyst role permissions by default. If a custom role needs to use data analysis features, contact the Workspace Administrator to grant the Data Analyst role permissions. For more information about authorization, see Manage workspace-level roles and members. For more information about custom roles, see Create a custom role.
Data governance
Permission | Project Owner | Workspace Administrator | Data Governance Administrator | Data Analyst | Developer | O&M Engineer | Deployer | Visitor | Security Administrator | Model Designer |
Governance Assessment - Tenant view |
|
|
|
|
|
|
|
|
|
|
Governance Assessment - Workspace view |
|
|
|
|
|
|
|
|
|
|
Governance Assessment - Personal view - View all members in the workspace |
|
|
|
|
|
|
|
|
|
|
Governance Assessment - Leaderboard - Workspace - View current workspace |
|
|
|
|
|
|
|
|
|
|
Governance Assessment - Leaderboard - Personal ranking - View all members in the workspace |
|
|
|
|
|
|
|
|
|
|
Governance Workbench - Governance issue - Workspace view |
|
|
|
|
|
|
|
|
|
|
Governance Workbench - Governance issue - Personal view |
|
|
|
|
|
|
|
|
|
|
Workspace view - Table - Change table owner |
|
|
|
|
|
|
|
|
|
|
Personal view - Table - Change table owner |
|
|
|
|
|
|
|
|
|
|
Workspace view - Table - Change lifecycle |
|
|
|
|
|
|
|
|
|
|
Personal view - Table - Change lifecycle |
|
|
|
|
|
|
|
|
|
|
Workspace view - Table - Create decommission plan |
|
|
|
|
|
|
|
|
|
|
Workspace view - Table - Execute decommission plan |
|
|
|
|
|
|
|
|
|
|
Personal view - Table - Create decommission plan |
|
|
|
|
|
|
|
|
|
|
Personal view - Table - Execute decommission plan |
|
|
|
|
|
|
|
|
|
|
Workspace view - Task - Change task owner |
|
|
|
|
|
|
|
|
|
|
Personal view - Task - Change task owner |
|
|
|
|
|
|
|
|
|
|
Workspace view - Task - Create decommission plan |
|
|
|
|
|
|
|
|
|
|
Personal view - Task - Create decommission plan |
|
|
|
|
|
|
|
|
|
|
Workspace task - Task - Modify missing dependency |
|
|
|
|
|
|
|
|
|
|
Workspace view - Governance issue - Add to whitelist |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Check item event - All metric data in workspace |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Whitelist - Whitelist in workspace |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Whitelist - Disable whitelist in workspace |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Graceful decommission - Create decommission plan |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Graceful decommission - View decommission plan - Query current project list |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Graceful decommission - View decommission plan details |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Graceful decommission - Decommission plan operations |
|
|
|
|
|
|
|
|
|
|
Workspace - Materialized view - Recommend by workspace |
|
|
|
|
|
|
|
|
|
|
Workspace - Materialized view - Create materialized view |
|
|
|
|
|
|
|
|
|
|
Workspace - Materialized view - View materialized view recommendation list |
|
|
|
|
|
|
|
|
|
|
Workspace - Materialized view - View materialized view list |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Task/Table 360 - View 360 information in workspace |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Task/Table 360 - View 360 information in workspace |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Data export - View - Personal dimension definition |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Data export - Create |
|
|
|
|
|
|
|
|
|
|
Governance workbench - Data export - Create - Personal view |
|
|
|
|
|
|
|
|
|
|
Usage analysis - All workspaces |
|
|
|
|
|
|
|
|
|
|
Usage analysis - Single workspace |
|
|
|
|
|
|
|
|
|
|
Knowledge base |
|
|
|
|
|
|
|
|
|
|
Configuration management - Solution template |
|
|
|
|
|
|
|
|
|
|
Configuration management - Check item - View configuration |
|
|
|
|
|
|
|
|
|
|
Configuration management - Check item - Global toggle operation |
|
|
|
|
|
|
|
|
|
|
Configuration management - Check item - Operation |
|
|
|
|
|
|
|
|
|
|
Configuration management - Governance item - View |
|
|
|
|
|
|
|
|
|
|
Configuration management - Governance item - Exclusion rule |
|
|
|
|
|
|
|
|
|
|
Configuration management - Notification settings - View in workspace |
|
|
|
|
|
|
|
|
|
|
Configuration management - Notification settings - Add at tenant level |
|
|
|
|
|
|
|
|
|
|
Configuration management - Notification settings - Add at current workspace level |
|
|
|
|
|
|
|
|
|
|
Configuration management - Notification settings - Personal |
|
|
|
|
|
|
|
|
|
|