forked from docs/doc-exports
chenxiaoxiong
f9e2808b7c
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com> Co-authored-by: chenxiaoxiong <chenxiaoxiong@huawei.com> Co-committed-by: chenxiaoxiong <chenxiaoxiong@huawei.com>
24 lines
6.6 KiB
HTML
24 lines
6.6 KiB
HTML
<a name="dataartsstudio_01_0107"></a><a name="dataartsstudio_01_0107"></a>
|
|
|
|
<h1 class="topictitle1">(Optional) Defining a Workspace Role</h1>
|
|
<div id="body0000001953352292"><p id="dataartsstudio_01_0107__p142198484228">For IAM users with <strong id="dataartsstudio_01_0107__b778113410343"><span id="dataartsstudio_01_0107__text147800413344">DARTS</span> User</strong> account permissions, <span id="dataartsstudio_01_0107__text6781104113345">DataArts Studio</span> workspace roles determine their permissions in workspaces. Preset roles include admin, developer, deployer, operator, and viewer. For details about the permissions of each role, see "Permissions" in <em id="dataartsstudio_01_0107__i578114119343">Service Overview</em>.</p>
|
|
<p id="dataartsstudio_01_0107__en-us_topic_0197094926_p8060118">If the preset roles meet your needs, skip this section. Otherwise, create custom roles by following the instructions in this section.</p>
|
|
<div class="section" id="dataartsstudio_01_0107__en-us_topic_0197006379_section2746419108"><h4 class="sectiontitle">Context</h4><ul id="dataartsstudio_01_0107__ul0153103817585"><li id="dataartsstudio_01_0107__li5153153816584"><strong id="dataartsstudio_01_0107__b1238193243515"><span id="dataartsstudio_01_0107__text15381153220351">DARTS</span> </strong><strong id="dataartsstudio_01_0107__b73811032103514">Administrator</strong> or <strong id="dataartsstudio_01_0107__b12381203218354">Tenant Administrator</strong> can create custom roles in a workspace.</li></ul>
|
|
</div>
|
|
<div class="section" id="dataartsstudio_01_0107__section515418567557"><h4 class="sectiontitle">Notes and Constraints</h4><ul id="dataartsstudio_01_0107__ul1299414571215"><li id="dataartsstudio_01_0107__li19941545181220">Due to the constraints of the authentication cache mechanism, when the permissions of a custom role change, permissions of the members of the workspace that this role has been associated with will not be updated immediately. Instead, the updated permissions take effect six minutes after the workspace members with this role stop accessing the <span id="dataartsstudio_01_0107__text1092450175812">DataArts Studio</span> console.</li><li id="dataartsstudio_01_0107__li1013184715128">A custom role with the same permissions as the workspace admin cannot perform some operations that can only be performed by the admin.</li></ul>
|
|
</div>
|
|
<div class="section" id="dataartsstudio_01_0107__en-us_topic_0197006379_section36147489413"><h4 class="sectiontitle">Procedure</h4><ol id="dataartsstudio_01_0107__ol2084817414511"><li id="dataartsstudio_01_0107__li2848154165110"><span>Log in to the <span id="dataartsstudio_01_0107__en-us_topic_0000001953352280_text120224518450">DataArts Studio</span> console as user <strong id="dataartsstudio_01_0107__b6884135511295"><span id="dataartsstudio_01_0107__text2884655112918">DARTS</span></strong> <strong id="dataartsstudio_01_0107__b68849557292">Administrator</strong> or <strong id="dataartsstudio_01_0107__b138841555202920">Tenant Administrator</strong>. For details, see <a href="dataartsstudio_01_0001.html">Accessing the DataArts Studio Instance Console</a>.</span></li><li id="dataartsstudio_01_0107__li884819419512"><span>On the <strong id="dataartsstudio_01_0107__b17291437131415">Roles</strong> page, click <strong id="dataartsstudio_01_0107__b1611452171417">Create</strong>. In the displayed dialog box, set the following parameters:</span><p><ul id="dataartsstudio_01_0107__ul8297125121014"><li id="dataartsstudio_01_0107__li14297151191014"><strong id="dataartsstudio_01_0107__b17748846392118">Role Name</strong>: unique identifier of a custom role. You are advised to name the role to fit its application scenario and avoid any meaningless description.</li><li id="dataartsstudio_01_0107__li142313611114"><strong id="dataartsstudio_01_0107__b7388850222118">Role Description</strong>: description of the role, for example, the key permission differences between the role and preset roles</li><li id="dataartsstudio_01_0107__li3322042376"><strong id="dataartsstudio_01_0107__b044625101620">Role Type</strong>: Select a proper type based on where this role will be used. Role permissions differ in the simple and enterprise mode. For details about the enterprise mode, see <a href="dataartsstudio_01_5099.html">DataArts Studio Enterprise Mode Overview</a>.<ul id="dataartsstudio_01_0107__ul1061012317317"><li id="dataartsstudio_01_0107__li10926225310">If you want to use this role in a workspace in simple mode, select <strong id="dataartsstudio_01_0107__b3381257173016">DEV&PROD_CUSTOM</strong>.</li><li id="dataartsstudio_01_0107__li15908101510420">If you want to use this role in the development environment of a workspace in enterprise mode, select <strong id="dataartsstudio_01_0107__b143225312319">DEV_CUSTOM</strong>.</li><li id="dataartsstudio_01_0107__li32941328457">If you want to use this role in the production environment of a workspace in enterprise mode, select <strong id="dataartsstudio_01_0107__b1039981643210">PROD_CUSTOM</strong>.</li></ul>
|
|
</li><li id="dataartsstudio_01_0107__li1488801951112"><strong id="dataartsstudio_01_0107__b8975431153614">Reuse</strong>: Use this function if you only need to slightly adjust the permissions of the preset roles to meet your requirements. Otherwise, you can directly select permissions for the role.<div class="notice" id="dataartsstudio_01_0107__note1473012526519"><span class="noticetitle"><img src="public_sys-resources/notice_3.0-en-us.png"> </span><div class="noticebody"><p id="dataartsstudio_01_0107__p87317526512">When you create or edit a role, an error message indicating insufficient permissions may be displayed even if you have the <strong id="dataartsstudio_01_0107__b17453181367"><span id="dataartsstudio_01_0107__text15452788360">DARTS</span></strong> <strong id="dataartsstudio_01_0107__b9453188163618">Administrator</strong> or <strong id="dataartsstudio_01_0107__b74531885365">Tenant Administrator</strong> permissions. This may be caused by network constraints. You can change another network and try again.</p>
|
|
</div></div>
|
|
</li></ul>
|
|
<p id="dataartsstudio_01_0107__p1301193919306"></p>
|
|
</p></li><li id="dataartsstudio_01_0107__li84181833374"><span>After configuring the role name, type, and permissions, click <strong id="dataartsstudio_01_0107__b173783463466">OK</strong>.</span></li><li id="dataartsstudio_01_0107__li270011444208"><span>Assign the created custom role to the IAM user by following the instructions in <a href="dataartsstudio_01_0117.html">Adding Workspace Members and Assigning Roles</a>.</span></li></ol>
|
|
</div>
|
|
</div>
|
|
<div>
|
|
<div class="familylinks">
|
|
<div class="parentlink"><strong>Parent topic:</strong> <a href="dataartsstudio_01_0118.html">Authorizing Users to Use DataArts Studio</a></div>
|
|
</div>
|
|
</div>
|
|
|