Upgrade a workspace mode (from basic to standard)

更新时间:
复制 MD 格式

You can upgrade a workspace from basic mode to standard mode to isolate your development and production environments.

Before you begin

Before you begin, understand the following:

Limitations

  • Only an Alibaba Cloud account can be used to upgrade the workspace mode.

  • You cannot upgrade a workspace from basic mode to standard mode if the new version of Data Development is enabled for the workspace.

How the upgrade works

After the upgrade, the platform creates a development data source from the production data source of the original basic-mode workspace, isolating the development and production environments.

  • MaxCompute data sources: The upgrade strategy depends on whether a computing resource is attached to Data Development (DataStudio). 

    • If no computing resource is attached to Data Development

      • The platform copies the production data source to create a development data source and sets the Default Access Identity of the new data source to Executor.

      • If the Default Access Identity of the data source in the workspace in basic mode (the production data source) is Task Owner, its Default Access Identity is updated to Alibaba Cloud Account after the upgrade.

    • If a computing resource is attached to Data Development

      The platform copies the production data source to the development environment and automatically appends the _dev suffix to the development data source's MaxCompute project name. If the production project name already contains _dev, another _dev suffix is appended.

      For example, if the production MaxCompute project is named test_dev, the corresponding development project is named test_dev_dev after the upgrade.

  • Non-MaxCompute data sources: The platform copies the production data source to create a development data source. Both environments share the same underlying database.

Note

The following example focuses on upgrading a MaxCompute workspace from basic mode to standard mode.

模式升级

Category

Before upgrade

After upgrade

Data source

One

A development data source is added, allowing the development and production environments to use separate data sources.

Note
  • During the upgrade, the platform generates a development data source with the same configuration as the original basic-mode data source (now the production data source) to achieve environment isolation. You can view the configuration on the Data Source Management page after the upgrade.

  • After the upgrade:

    • The development and production data sources are fully isolated. Modifying the development data source configuration does not affect the production data source.

    • No development tables are automatically created in the development MaxCompute project. You need to create them based on your business requirements. For more information, see Create and use MaxCompute tables.

Procedure

To upgrade a workspace from basic mode to standard mode, use an Alibaba Cloud account and follow these steps.

Note

This operation is irreversible. Proceed with caution.

  1. Log on to the DataWorks console. In the target region, click More > Management Center in the left-side navigation pane. Select a workspace from the drop-down list and click Go to Management Center.

  2. On the Work space > Basic Settings tab, click Mode next to Upgrade to Standard Mode.

    Note

    You cannot upgrade a workspace from basic mode to standard mode if the new version of Data Development is enabled for the workspace.

  3. In the Upgrade to Standard Mode dialog box, select This upgrade is irreversible. Confirm that you want to upgrade this workspace. and click Start Upgrade.

Impact on MaxCompute

The following sections describe how the upgrade affects MaxCompute, including the upgrade process and an example. For more details, see Data access and permissions in MaxCompute for workspaces in different modes.

Upgrade process

After the upgrade, DataWorks adds members from the original workspace to the new MaxCompute development project with their original roles. However, their permissions on the production project are revoked. Only the project owner retains production project permissions.

  1. Creates a MaxCompute development project (project name format: projectname_dev) and a development data source.

  2. Adds members to the MaxCompute development project: DataWorks adds workspace members to the project at the compute engine layer by using the add user command.添加项目成员

  3. Revokes production project permissions from original members: In basic mode, RAM users have extensive permissions on the production environment. After the upgrade, these permissions are revoked, and RAM users can only operate on the _dev project.

Example scenario

For example, a company has a workspace named A in DataWorks. After an administrator clicks Upgrade to Standard Mode, a development project named A_dev is created.

  • The members, roles, and resources in workspace A are replicated to project A_dev.

  • Members A1 (developer role) and B1 (O&M role) from the original workspace A are also added to project A_dev, and their roles are retained.

  • Project A becomes the production project. The data permissions of users A1 and B1 on project A are revoked. By default, they no longer have SELECT or DROP permissions on tables, which protects production data.

  • The default MaxCompute project in DataStudio (Data Development) is A_dev. To query production data in DataStudio, use the ProjectName.TableName format. You can edit code only for the A_dev environment in Data Development. To update code in project A, submit the task from A_dev to the scheduling system and publish it to production. The publishing and review process ensures code correctness in the production environment.

Note

After the upgrade, you cannot directly access data in the original workspace. You must apply for role-based permissions. By default, tables queried in DataStudio are from the development environment. To access production tables, apply for the required permissions and use the ProjectName.TableName format.

After a workspace is upgraded to standard mode, production project permissions previously granted to RAM users are revoked. If your code contains the AccessKey of an account, permission-related errors may occur.

Behavior changes

The following table describes how RAM user behavior changes after upgrading from basic to standard mode, assuming a MaxCompute computing resource is attached and the workspace is operated by an Alibaba Cloud account.

Scenario

Basic mode workspace

Standard mode workspace

Operate on resources (table/resource/function)

Direct operations are successful.

Note

In basic mode, the Alibaba Cloud account's permissions are used to execute tasks. Even when a RAM user performs an operation, the RAM user effectively has the same permissions as the Alibaba Cloud account. Because these permissions are unrestricted, RAM users can directly operate on production data, making access control impossible.

  • Development environment resources: RAM users can directly operate on development resources from DataStudio by using commands.

  • Production environment resources: RAM users cannot directly operate on production resources from DataStudio.

    Note

    In standard mode, RAM users do not have production environment permissions by default. Permissions on production tables must be approved in Security Center.

Accessing environments and accounts

Basic mode has only a production environment. All commands operate directly on production data.

  • Data Development: Uses the Alibaba Cloud account to access production resources.

  • Production Operation Center: Uses the Alibaba Cloud account to access production resources.

  • Data Development: Uses the RAM user's account to access resources. By default, it accesses or writes to development resources.

  • Production Operation Center: Uses a specified account in the production environment to access or write to production resources.

Accessing resources in the corresponding environment

projectname.tablename/resource/function

  • Access development resources: projectname_dev.tablename/resource/function

    Note

    DataStudio accesses development resources by default. This means you can directly access tables, resources, or functions in SQL queries without specifying the project name.

  • Access production resources: projectname.tablename/resource/function

    Note

    The Production Operation Center accesses production resources by default. This means you can directly access tables, resources, or functions in SQL queries without specifying the project name.