In the Moflow low-code development platform, member authorization is a key feature for managing team member permissions. On the Members page in your workspace settings, administrators can view and manage all member permissions, add new members, and assign them appropriate roles.
View the member list
On the Members page, you can view all members in the current workspace and their details, including the following:
Username
Alibaba Cloud ID
Email
Role
Date joined
Number of workspace seats
This information helps administrators understand each member's identity and permissions.
Add members
Users with the OWNER or ADMIN role can add new members to the workspace within your seat limit. The process is as follows:
If a user with the ADMIN role has not been granted the AliyunRAMFullAccess permission, a message appears when they try to add a member. The message states that the user lacks permissions to manage Resource Access Management (RAM) users. Contact the root account administrator to grant the required permission before you add the member.
Select a member: In the input box, select the member to add.
Select a role: Choose a role for the new member, such as DEV or ADMIN.
Confirm authorization: Before you confirm, a dialog box appears. It prompts you to grant the member the RAM AliyunMOBILCDPDEVFullAccess permission. If you assign the ADMIN role, the system prompts you to add RAM account management capabilities for the member.
Click "OK" to complete the addition.
Assign and modify roles
Users with the OWNER or ADMIN role can modify the roles of existing members in the member list. Follow these steps:
In the member list, find the member whose role you want to modify.
In the Role column, click the drop-down menu and select the new role.
Confirm the authorization. If you change a role from DEV to ADMIN, the system prompts you to add RAM account management capabilities for the member.
Confirm the role change. The system saves the change automatically.
Delete a member
To remove a member, follow these steps:
In the member list, find the member you want to delete.
At the end of the member's row, click the delete button.
Confirm the deletion. A confirmation dialog box appears. Confirm the action to remove the member.
Role permissions
Different roles have different permissions. The following sections describe the common roles and their permissions:
OWNER
The Moflow platform assigns the OWNER role to the person who activates the Moflow service. This role is typically held by an Alibaba Cloud root account. The OWNER has the highest level of permissions and can perform all operations, such as managing members, modifying settings, and publishing applications. Note that a workspace can have only one OWNER.
The attributes of the OWNER role are:
Uniqueness: Each workspace has only one OWNER.
Root account association: The OWNER role must be associated with an Alibaba Cloud root account.
Role assignment: The OWNER can assign roles to RAM users that belong to the root account.
ADMIN
The ADMIN role has administrative permissions. A user with this role can manage members who have the ADMIN or DEV role.
DEV
The DEV role has development permissions. A user with this role can create and edit items such as pages, components, and variables, but cannot manage other members. This role is typically assigned to developers.