forked from docs/doc-exports
Reviewed-by: Pruthi, Vineet <vineet.pruthi@t-systems.com> Co-authored-by: chenxiaoxiong <chenxiaoxiong@huawei.com> Co-committed-by: chenxiaoxiong <chenxiaoxiong@huawei.com>
825 lines
63 KiB
HTML
825 lines
63 KiB
HTML
<a name="dataartsstudio_07_012"></a><a name="dataartsstudio_07_012"></a>
|
||
|
||
<h1 class="topictitle1">Permission Management</h1>
|
||
<div id="body0000002059932461"><p id="dataartsstudio_07_012__en-us_topic_0216589782_en-us_topic_0169924740_p638217206537">If you need to assign different permissions to employees in your enterprise to access your <span id="dataartsstudio_07_012__text17584229155314">DataArts Studio</span> resources, IAM is a good choice for fine-grained permissions management. IAM provides identity authentication, permissions management, and access control, helping you secure access to your resources.</p>
|
||
<p id="dataartsstudio_07_012__en-us_topic_0216589782_en-us_topic_0169924740_p43821520185316">With IAM, you can use your account to create IAM users for your employees, and assign permissions to the users to control their access to specific resource types. For example, if you want to allow some software developers in your enterprise to use <span id="dataartsstudio_07_012__text175974412538">DataArts Studio</span> resources but disallow them to delete workspaces or perform any high-risk operations, you can create IAM users for the software developers and grant them only the permissions required for using <span id="dataartsstudio_07_012__text10249115765312">DataArts Studio</span> resources.</p>
|
||
<div class="section" id="dataartsstudio_07_012__en-us_topic_0216589782_section62845561589"><h4 class="sectiontitle"><span id="dataartsstudio_07_012__text1178865015544">DataArts Studio</span> Permissions</h4><p id="dataartsstudio_07_012__en-us_topic_0216589782_p231611591484">New IAM users do not have any permissions assigned by default. You need to first add them to one or more groups and then attach policies or roles to these groups. After authorization, the users can perform specified operations.</p>
|
||
<p id="dataartsstudio_07_012__en-us_topic_0216589782_p263481221012"><span id="dataartsstudio_07_012__text1648720591545">DataArts Studio</span> is a project-level service deployed in specific physical regions. To assign permissions to a user group, specify the scope as region-specific projects and select projects for the permissions to take effect. If <strong id="dataartsstudio_07_012__b935911460119">All projects</strong> is selected, the permissions will take effect for the user group in all region-specific projects. When accessing <span id="dataartsstudio_07_012__text5352191557">DataArts Studio</span>, users need to switch to a region where they are authorized to use cloud services.</p>
|
||
<p id="dataartsstudio_07_012__en-us_topic_0216589782_p106061183111"><span id="dataartsstudio_07_012__text171842005514">DataArts Studio</span> <strong id="dataartsstudio_07_012__b17640739181219">supports only system role-based authorization and does not support policy-based authorization.</strong> To implement fine-grained permission control, <span id="dataartsstudio_07_012__text101871649103114">DataArts Studio</span> provides the capability of granting permissions to <strong id="dataartsstudio_07_012__b137315341312">system roles and workspace roles</strong>. Specific operation permissions are granted to workspace roles, and workspace roles with different permissions can be customized.</p>
|
||
<div class="note" id="dataartsstudio_07_012__note1169261652614"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><div class="p" id="dataartsstudio_07_012__p92992511260">IAM provides the following two authorization mechanisms: Note that <span id="dataartsstudio_07_012__text98649123311">DataArts Studio</span> supports only the IAM role-based authorization and does not support the IAM policy-based authorization.<ul id="dataartsstudio_07_012__ul16474158122614"><li id="dataartsstudio_07_012__en-us_topic_0216589782_li18737181101111"><strong id="dataartsstudio_07_012__b1448919334131">IAM Roles</strong>: IAM initially provides a coarse-grained authorization mechanism to define permissions based on users' job responsibilities. Only a limited number of service-level roles are available. However, traditional IAM roles are not an ideal choice for fine-grained authorization and secure access control.</li><li id="dataartsstudio_07_012__li144587474243"><strong id="dataartsstudio_07_012__b203801928144">IAM Policies</strong>: A type of fine-grained authorization mechanism that defines permissions required to perform operations on specific cloud resources under certain conditions. This type of authorization is more flexible and is ideal for least privilege access.</li></ul>
|
||
</div>
|
||
</div></div>
|
||
<div class="p" id="dataartsstudio_07_012__p2079831817378">As shown in <a href="#dataartsstudio_07_012__fig168744210348">Figure 1</a> and <a href="#dataartsstudio_07_012__en-us_topic_0216589782_table12328929121518">Table 1</a> and <a href="#dataartsstudio_07_012__en-us_topic_0216589782_table12328929121518">Table 1</a>, the system-defined roles supported by <span id="dataartsstudio_07_012__text1527461424418">DataArts Studio</span> include <span id="dataartsstudio_07_012__text1927418145446">DARTS</span> Administrator and <span id="dataartsstudio_07_012__text727491419448">DARTS</span> User. Workspace roles are based on the <span id="dataartsstudio_07_012__text14274141417446">DARTS</span> User. <a href="dataartsstudio_07_013.html">Permissions</a> lists the common operations supported by <span id="dataartsstudio_07_012__text32747143441">DataArts Studio</span> and the permissions granted to each role. You can select roles as required.<div class="fignone" id="dataartsstudio_07_012__fig168744210348"><a name="dataartsstudio_07_012__fig168744210348"></a><a name="fig168744210348"></a><span class="figcap"><b>Figure 1 </b>Permission system</span><br><span><img class="imgResize" id="dataartsstudio_07_012__en-us_topic_0000001492262982_image1913610193343" src="en-us_image_0000002390854012.png" title="Click to enlarge"></span></div>
|
||
|
||
<div class="tablenoborder"><a name="dataartsstudio_07_012__en-us_topic_0216589782_table12328929121518"></a><a name="en-us_topic_0216589782_table12328929121518"></a><table cellpadding="4" cellspacing="0" summary="" id="dataartsstudio_07_012__en-us_topic_0216589782_table12328929121518" frame="border" border="1" rules="all"><caption><b>Table 1 </b><span id="dataartsstudio_07_012__text1252421132213">DataArts Studio</span> system-defined roles</caption><thead align="left"><tr id="dataartsstudio_07_012__en-us_topic_0216589782_row6328132917158"><th align="left" class="cellrowborder" valign="top" width="19.71%" id="mcps1.3.3.6.11.2.4.1.1"><p id="dataartsstudio_07_012__en-us_topic_0216589782_p0328152961520">Role</p>
|
||
</th>
|
||
<th align="left" class="cellrowborder" valign="top" width="62.220000000000006%" id="mcps1.3.3.6.11.2.4.1.2"><p id="dataartsstudio_07_012__en-us_topic_0216589782_p3328132961513">Description</p>
|
||
</th>
|
||
<th align="left" class="cellrowborder" valign="top" width="18.070000000000004%" id="mcps1.3.3.6.11.2.4.1.3"><p id="dataartsstudio_07_012__en-us_topic_0216589782_p7328429111515">Type</p>
|
||
</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody><tr id="dataartsstudio_07_012__en-us_topic_0216589782_row13328152971512"><td class="cellrowborder" valign="top" width="19.71%" headers="mcps1.3.3.6.11.2.4.1.1 "><p id="dataartsstudio_07_012__p1350405041515"><span id="dataartsstudio_07_012__text198122568588">DARTS</span> Administrator</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="62.220000000000006%" headers="mcps1.3.3.6.11.2.4.1.2 "><p id="dataartsstudio_07_012__p8314759111420">Instance administrator who has all management permissions on a <span id="dataartsstudio_07_012__text6937122151712">DataArts Studio</span> instance and its workspaces, permissions of dependent services, and service operation permissions in all workspaces.</p>
|
||
<div class="note" id="dataartsstudio_07_012__note181011015102013"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="dataartsstudio_07_012__p851853392318">Users assigned the <strong id="dataartsstudio_07_012__b11421615161515">Tenant Administrator</strong> role have all permissions for all services except IAM. In other words, users with the <strong id="dataartsstudio_07_012__b10867919141510">Tenant Administrator</strong> role can perform all operations in <span id="dataartsstudio_07_012__text18951023202417">DataArts Studio</span>.</p>
|
||
</div></div>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="18.070000000000004%" headers="mcps1.3.3.6.11.2.4.1.3 "><p id="dataartsstudio_07_012__en-us_topic_0216589782_p153288295153">System-defined role</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1241654410912"><td class="cellrowborder" valign="top" width="19.71%" headers="mcps1.3.3.6.11.2.4.1.1 "><p id="dataartsstudio_07_012__p1458681214469"><span id="dataartsstudio_07_012__text1662825745816">DARTS</span> User</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="62.220000000000006%" headers="mcps1.3.3.6.11.2.4.1.2 "><p id="dataartsstudio_07_012__p1445645011812">Common user who has permissions to view a <span id="dataartsstudio_07_012__text85611294170">DataArts Studio</span> instance and its workspaces, and the permissions of dependent services. After assigned a role, a common user has permissions of the role to perform service operations.</p>
|
||
<div class="p" id="dataartsstudio_07_012__p5417844895">Workspace roles include the preset admin, developer, deployer, operator, and viewer, and other custom roles. For details about the operation permissions of each role, see <a href="dataartsstudio_07_013.html">Permissions</a>.<ul id="dataartsstudio_07_012__ul487519101403"><li id="dataartsstudio_07_012__li20959105461511">Admin: This role has all operation permissions in a workspace. You are advised to assign the admin role to the project owner, development owner, and O&M administrator.</li><li id="dataartsstudio_07_012__li49596545157">Developer: This role has permissions to create and manage resources in a workspace. You are advised to assign this role to users who develop and process tasks.</li><li id="dataartsstudio_07_012__li3959195411514">Operator: This role has the operation permissions of services such as O&M and scheduling in a workspace, but cannot modify resources or configurations. You are advised to assign this role to users responsible for O&M management and status monitoring.</li><li id="dataartsstudio_07_012__li16959145419159">Viewer: This role can view data in a workspace but cannot perform any other operation. You are advised to assign this role to users who only need to view data in a workspace but do not need to perform operations.</li><li id="dataartsstudio_07_012__li195955461519">Deployer: This role is unique to the enterprise mode and has permissions to release task packages in a workspace. In enterprise mode, when a developer submits a script or job version, the system generates a release task. After the developer confirms the release and the deployer approves the release request, the modified job is synchronized to the production environment.</li><li id="dataartsstudio_07_012__li198901176168">Custom roles: If the preset roles cannot meet your requirements, you can create custom roles You can configure permissions for such roles to meet the the principle of least privilege (PoLP).</li></ul>
|
||
</div>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="18.070000000000004%" headers="mcps1.3.3.6.11.2.4.1.3 "><p id="dataartsstudio_07_012__p6417164418914">System-defined role</p>
|
||
</td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div class="section" id="dataartsstudio_07_012__section964018258581"><h4 class="sectiontitle">Roles or Policies for <span id="dataartsstudio_07_012__text10611736171713">DataArts Studio</span> Console</h4><p id="dataartsstudio_07_012__p17183143413303"><a href="#dataartsstudio_07_012__table144002293016">Table 2</a> lists the permissions for the services on which <span id="dataartsstudio_07_012__text13183143463011">DataArts Studio</span> modules depend. You are advised to configure the minimum <span id="dataartsstudio_07_012__text16183153433010">DataArts Studio</span>-level permissions of dependent services for developers. <a href="#dataartsstudio_07_012__table11634122416156">Table 3</a> lists the minimum permissions for developers on the services on which <span id="dataartsstudio_07_012__text1291021161716">DataArts Studio</span> depends.</p>
|
||
<div class="note" id="dataartsstudio_07_012__note91657426153"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dataartsstudio_07_012__p316544217158">The <span id="dataartsstudio_07_012__text574834394417">DARTS</span> Administrator and <span id="dataartsstudio_07_012__text167485436447">DARTS</span> User already have the administrator permissions of dependent services. If the <span id="dataartsstudio_07_012__text169638598444">DARTS</span> User role is assigned to a common user or user group, the common user or user group may have more permissions of dependent services than required. To prevent this risk, you can manually delete the permissions of dependent services from the user group after assigning the <span id="dataartsstudio_07_012__text19963185994418">DARTS</span> User role to the user group, and then assign the minimum permissions of dependent services to the user group.</p>
|
||
</div></div>
|
||
|
||
<div class="tablenoborder"><a name="dataartsstudio_07_012__table144002293016"></a><a name="table144002293016"></a><table cellpadding="4" cellspacing="0" summary="" id="dataartsstudio_07_012__table144002293016" frame="border" border="1" rules="all"><caption><b>Table 2 </b>Roles or policies for the services on which the <span id="dataartsstudio_07_012__text358725411178">DataArts Studio</span> console depends on</caption><thead align="left"><tr id="dataartsstudio_07_012__row4503822163018"><th align="left" class="cellrowborder" valign="top" width="15.18%" id="mcps1.3.4.4.2.5.1.1"><p id="dataartsstudio_07_012__p65031722113011">Console Function</p>
|
||
</th>
|
||
<th align="left" class="cellrowborder" valign="top" width="21.14%" id="mcps1.3.4.4.2.5.1.2"><p id="dataartsstudio_07_012__p13503142211303">Dependent Service</p>
|
||
</th>
|
||
<th align="left" class="cellrowborder" valign="top" width="28.310000000000002%" id="mcps1.3.4.4.2.5.1.3"><p id="dataartsstudio_07_012__p1650311222305">Role/Policy Required</p>
|
||
</th>
|
||
<th align="left" class="cellrowborder" valign="top" width="35.370000000000005%" id="mcps1.3.4.4.2.5.1.4"><p id="dataartsstudio_07_012__p5269595217">Function</p>
|
||
</th>
|
||
</tr>
|
||
</thead>
|
||
<tbody><tr id="dataartsstudio_07_012__row136076543518"><td class="cellrowborder" rowspan="6" valign="top" width="15.18%" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p56078523519">Management Center</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="21.14%" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p760711520356">BSS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="28.310000000000002%" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p1485148103720">bss:coupon:view</p>
|
||
<p id="dataartsstudio_07_012__p11485848163719">bss:renewal:update</p>
|
||
<p id="dataartsstudio_07_012__p54851048133719">bss:discount:view</p>
|
||
<p id="dataartsstudio_07_012__p14485204817377">bss:order:view</p>
|
||
<p id="dataartsstudio_07_012__p154853480371">bss:order:pay</p>
|
||
<p id="dataartsstudio_07_012__p124852048113712">bss:order:update</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="35.370000000000005%" headers="mcps1.3.4.4.2.5.1.4 "><p id="dataartsstudio_07_012__p560719515353">Create incremental packages or DataArts Studio instances.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row13503182214308"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p064014225219">KMS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p5641152292119">kms:cmk:get</p>
|
||
<p id="dataartsstudio_07_012__p064117223215">kms:cmk:list</p>
|
||
<p id="dataartsstudio_07_012__p76410225212">kms:cmk:create</p>
|
||
<p id="dataartsstudio_07_012__p13641142210216">kms:cmk:decrypt</p>
|
||
<p id="dataartsstudio_07_012__p56414223213">kms:cmk:encrypt</p>
|
||
<p id="dataartsstudio_07_012__p264172212218">kms:dek:create</p>
|
||
<p id="dataartsstudio_07_012__p14641622112117">kms:dek:encrypt</p>
|
||
<p id="dataartsstudio_07_012__p1264152222118">kms:dek:decrypt</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p26411922132113">Encrypt and decrypt data during data connection creation.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1773983517111"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p20641922142117">DWS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p11641222102117">dws:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p46411722152110">dws:cluster:getDetail</p>
|
||
<p id="dataartsstudio_07_012__p1964110223214">dws:openAPICluster:getDetail</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p664118228219">Create DWS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row156783419117"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1064172222113">MRS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p364132216216">mrs:cluster:get</p>
|
||
<p id="dataartsstudio_07_012__p2641822192116">mrs:cluster:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p146413222211">Create MRS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row821531243"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p464132219215">VPC</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p14641722122111">vpc:publicIps:get</p>
|
||
<p id="dataartsstudio_07_012__p10641142252119">vpc:publicIps:list</p>
|
||
<p id="dataartsstudio_07_012__p6641102202111">vpc:vpcs:get</p>
|
||
<p id="dataartsstudio_07_012__p11641422182118">vpc:subnets:get</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p5641022162117">Create MRS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row195897323118"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1564132219210">RDS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p19641122262115">rds:*:get</p>
|
||
<p id="dataartsstudio_07_012__p6641522122114">rds:*:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p13641162242118">Create RDS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row178841830117"><td class="cellrowborder" rowspan="12" valign="top" width="15.18%" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1588543012113">DataArts Migration</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="21.14%" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p1865517491213">VPC</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="28.310000000000002%" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p20655184922113">vpc:publicIps:get</p>
|
||
<p id="dataartsstudio_07_012__p7655749192116">vpc:publicIps:list</p>
|
||
<p id="dataartsstudio_07_012__p4655549142120">vpc:vpcs:get</p>
|
||
<p id="dataartsstudio_07_012__p12655184916219">vpc:vpcs:list</p>
|
||
<p id="dataartsstudio_07_012__p1465544911212">vpc:subnets:get</p>
|
||
<p id="dataartsstudio_07_012__p11655849132111">vpc:securityGroups:get</p>
|
||
<p id="dataartsstudio_07_012__p176551649162116">vpc:firewalls:list</p>
|
||
<p id="dataartsstudio_07_012__p1965574912214">vpc:routeTables:list</p>
|
||
<p id="dataartsstudio_07_012__p265512492212">vpc:subNetworkInterfaces:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="35.370000000000005%" headers="mcps1.3.4.4.2.5.1.4 "><p id="dataartsstudio_07_012__p4568191374311">Create CDM clusters or DataArts Studio instances.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row122191616201414"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p46551449102119">ECS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p665594912217">ecs:flavors:get</p>
|
||
<p id="dataartsstudio_07_012__p265564918211">ecs:cloudServerFlavors:get</p>
|
||
<p id="dataartsstudio_07_012__p86551449102116">ecs:availabilityZones:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p19547000226">Create CDM clusters or DataArts Studio instances.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row7755125091510"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1737070111619">CDM</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p475515502151">cdm:cluster:create</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p15755115017159">Create CDM clusters.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1078975713410"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p193361030102211">KMS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p2336153016228">kms:cmk:get</p>
|
||
<p id="dataartsstudio_07_012__p1433610309223">kms:cmk:list</p>
|
||
<p id="dataartsstudio_07_012__p13361930142216">kms:cmk:create</p>
|
||
<p id="dataartsstudio_07_012__p8336430162212">kms:cmk:decrypt</p>
|
||
<p id="dataartsstudio_07_012__p14336830132211">kms:cmk:encrypt</p>
|
||
<p id="dataartsstudio_07_012__p1133611309226">kms:dek:create</p>
|
||
<p id="dataartsstudio_07_012__p19336143062219">kms:dek:encrypt</p>
|
||
<p id="dataartsstudio_07_012__p133366305221">kms:dek:decrypt</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p6336183082214">Encrypt and decrypt data during data connection creation.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1921295611418"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p11336630192218">MRS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p73361430192212">mrs:cluster:get</p>
|
||
<p id="dataartsstudio_07_012__p633615306222">mrs:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p7336173092213">mrs:job:get</p>
|
||
<p id="dataartsstudio_07_012__p1233618303227">mrs:job:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p9336153052214">Create MRS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row265285410417"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p8336123082219">DWS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p11336173052218">dws:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p333683011228">dws:cluster:getDetail</p>
|
||
<p id="dataartsstudio_07_012__p133361930112214">dws:openAPICluster:getDetail</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p1333612304226">Create DWS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row153919533410"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p11336103011227">CDM</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p11336143062216">cdm:cluster:get</p>
|
||
<p id="dataartsstudio_07_012__p18336030112216">cdm:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p193361030112215">cdm:link:operate</p>
|
||
<p id="dataartsstudio_07_012__p9336103010229">cdm:job:operate</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p4337183015221">Perform operations on the CDM console.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row161173381761"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p2494613220">CES</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p4494611224">ces:*:get</p>
|
||
<p id="dataartsstudio_07_012__p1454615221">ces:*:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p44184622211">View monitoring data in Cloud Eye.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1252417411165"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p174174612211">CSS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p4414642213">css:*:get</p>
|
||
<p id="dataartsstudio_07_012__p16494615227">css:*:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p12414632217">Create CSS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row5212243861"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p15484611228">CloudTable</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p84446162212">cloudtable:*:get</p>
|
||
<p id="dataartsstudio_07_012__p124124632211">cloudtable:*:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p3415467223">Create CloudTable connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row380253914613"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1944464225">RDS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p13412466226">rds:*:get</p>
|
||
<p id="dataartsstudio_07_012__p441946142211">rds:*:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p141246102212">Create RDS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row117501351567"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p44174622216">Config</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p34174615227">rms:resources:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p34124622215">Create CDM clusters.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1426512141871"><td class="cellrowborder" rowspan="15" valign="top" width="15.18%" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p12655141174">DataArts Factory</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="21.14%" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p18590439122611">OBS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="28.310000000000002%" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p45901239132612">obs:object:GetObject</p>
|
||
<p id="dataartsstudio_07_012__p135904396264">obs:object:PutObject</p>
|
||
<p id="dataartsstudio_07_012__p2590639112611">obs:bucket:GetBucketLocation</p>
|
||
<p id="dataartsstudio_07_012__p0590133962612">obs:bucket:ListAllMyBuckets</p>
|
||
<p id="dataartsstudio_07_012__p19590113992612">obs:bucket:ListBucket</p>
|
||
<p id="dataartsstudio_07_012__p9590133952610">obs:bucket:CreateBucket</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="35.370000000000005%" headers="mcps1.3.4.4.2.5.1.4 "><p id="dataartsstudio_07_012__p6590133942618">Run scripts, run jobs, and back up jobs.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row158318167715"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p135904396263">SMN</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p1659033915261">smn:topic:publish</p>
|
||
<p id="dataartsstudio_07_012__p1659093912611">smn:topic:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p0590133902619">Send job notifications.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row631218190717"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1359023912269">KMS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p1159023919261">kms:cmk:get</p>
|
||
<p id="dataartsstudio_07_012__p159023911263">kms:cmk:list</p>
|
||
<p id="dataartsstudio_07_012__p4590739202615">kms:cmk:create</p>
|
||
<p id="dataartsstudio_07_012__p85901439192618">kms:cmk:decrypt</p>
|
||
<p id="dataartsstudio_07_012__p1359033952617">kms:cmk:encrypt</p>
|
||
<p id="dataartsstudio_07_012__p17590739182612">kms:dek:create</p>
|
||
<p id="dataartsstudio_07_012__p12590539112619">kms:dek:encrypt</p>
|
||
<p id="dataartsstudio_07_012__p19590103920266">kms:dek:decrypt</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p1590439152619">Encrypt and decrypt data during data connection creation.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row3669223717"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p115906398264">MRS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p4590133992614">mrs:cluster:get</p>
|
||
<p id="dataartsstudio_07_012__p9590203952619">mrs:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p16590173952616">mrs:job:submit</p>
|
||
<p id="dataartsstudio_07_012__p105901839182613">mrs:job:delete</p>
|
||
<p id="dataartsstudio_07_012__p7590103962619">mrs:job:stop</p>
|
||
<p id="dataartsstudio_07_012__p1159013912267">mrs:sql:execute</p>
|
||
<p id="dataartsstudio_07_012__p259020395266">mrs:sql:cancel</p>
|
||
<p id="dataartsstudio_07_012__p5590153917267">mrs:job:get</p>
|
||
<p id="dataartsstudio_07_012__p1359033932618">mrs:job:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p15590339142612">Run the following MRS job nodes:</p>
|
||
<p id="dataartsstudio_07_012__p859016396264">MRS Presto SQL, MRS Spark, MRS Spark Python, MRS Flink Job, and MRS MapReduce</p>
|
||
<p id="dataartsstudio_07_012__p1859033915267">MRS Spark SQL and MRS Hive SQL</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row491312241670"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p17735172114275">DLI</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p1073502116279">dli:queue:submitJob</p>
|
||
<p id="dataartsstudio_07_012__p6735162113271">dli:jobs:create</p>
|
||
<p id="dataartsstudio_07_012__p18735182110277">dli:jobs:update</p>
|
||
<p id="dataartsstudio_07_012__p673572110275">dli:jobs:get</p>
|
||
<p id="dataartsstudio_07_012__p18735162102711">dli:jobs:list</p>
|
||
<p id="dataartsstudio_07_012__p19735621122716">dli:jobs:listAll</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p1273562182715">Run the following DLI job nodes:</p>
|
||
<p id="dataartsstudio_07_012__p2735321192712">DLI SQL and DLI Spark</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1340782311716"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p13735202152716">OBS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p1573522116277">obs:object:GetObject</p>
|
||
<p id="dataartsstudio_07_012__p1173542132714">obs:object:PutObject</p>
|
||
<p id="dataartsstudio_07_012__p97353217274">obs:object:DeleteObject</p>
|
||
<p id="dataartsstudio_07_012__p6735172119271">obs:bucket:GetBucketLocation</p>
|
||
<p id="dataartsstudio_07_012__p57351121112718">obs:bucket:ListAllMyBuckets</p>
|
||
<p id="dataartsstudio_07_012__p37357214272">obs:bucket:ListBucket</p>
|
||
<p id="dataartsstudio_07_012__p87351821112711">obs:bucket:ListBucketVersions</p>
|
||
<p id="dataartsstudio_07_012__p5735162120274">obs:bucket:CreateBucket</p>
|
||
<p id="dataartsstudio_07_012__p1873512216278">obs:bucket:DeleteBucket</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p3735102113279">Run the following OBS job nodes:</p>
|
||
<p id="dataartsstudio_07_012__p1773512182714">Create OBS, Delete OBS, and OBS Manager</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row5763102010711"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p6735122116272">DWS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p187352021132719">dws:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p17735122114273">dws:cluster:getDetail</p>
|
||
<p id="dataartsstudio_07_012__p073532142710">dws:openAPICluster:getDetail</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p19735112115274">Create DWS connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row176339172711"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p10541057112711">CDM</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p1654135717277">cdm:cluster:get</p>
|
||
<p id="dataartsstudio_07_012__p1541155792715">cdm:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p16541185772710">cdm:job:operate</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p195412573274">Run the Agent-related scripts and jobs required by data connections and run CDM jobs:</p>
|
||
<p id="dataartsstudio_07_012__p454145792715">RDS SQL, DWS SQL, Hive SQL, SPARK SQL, Shell, and Python</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row95843594720"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p6541657192712">CES</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p4541557112714">ces:metricData:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p7541105722712">Query the CPU usage of the DLI queue on the <strong id="dataartsstudio_07_012__b10496465002914">Overview</strong> page.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row4584195911712"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p58341346202813">GES</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p083484682810">ges:graph:access</p>
|
||
<p id="dataartsstudio_07_012__p20834546112813">ges:graph:operate</p>
|
||
<p id="dataartsstudio_07_012__p5834134612813">ges:graph:list</p>
|
||
<p id="dataartsstudio_07_012__p183434613281">ges:graph:getDetail</p>
|
||
<p id="dataartsstudio_07_012__p48341546102811">ges:metadata:create</p>
|
||
<p id="dataartsstudio_07_012__p58341946152816">ges:metadata:operate</p>
|
||
<p id="dataartsstudio_07_012__p13834114617284">ges:metadata:delete</p>
|
||
<p id="dataartsstudio_07_012__p1983494622817">ges:metadata:list</p>
|
||
<p id="dataartsstudio_07_012__p1834194682816">ges:metadata:getDetail</p>
|
||
<p id="dataartsstudio_07_012__p083414611282">ges:jobs:list</p>
|
||
<p id="dataartsstudio_07_012__p183464692813">ges:jobs:getDetail</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p13834184619280">Run the Import GES job node.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row2714826513"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p20834164602810">ECS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p2834114617285">ecs:servers:list</p>
|
||
<p id="dataartsstudio_07_012__p10834246142815">ecs:servers:get</p>
|
||
<p id="dataartsstudio_07_012__p3834446192819">ecs:servers:stop</p>
|
||
<p id="dataartsstudio_07_012__p3834114616283">ecs:servers:start</p>
|
||
<p id="dataartsstudio_07_012__p18834146102810">ecs:cloudServers:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p10834174616282">Run the Open/Close Resource job node and create host connections.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row113801211284"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p178341646152815">DLI</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p4834546142810">dli:queue:submitJob</p>
|
||
<p id="dataartsstudio_07_012__p108341146162810">dli:queue:cancelJob</p>
|
||
<p id="dataartsstudio_07_012__p58345462289">dli:group:useGroup</p>
|
||
<p id="dataartsstudio_07_012__p10834246162816">dli:group:getGroup</p>
|
||
<p id="dataartsstudio_07_012__p983424672816">dli:group:updateGroup</p>
|
||
<p id="dataartsstudio_07_012__p98348469289">dli:group:deleteGroup</p>
|
||
<p id="dataartsstudio_07_012__p13834184615286">dli:group:listAllGroup</p>
|
||
<p id="dataartsstudio_07_012__p88346463282">dli:database:createDatabase</p>
|
||
<p id="dataartsstudio_07_012__p18834174616281">dli:database:dropDatabase</p>
|
||
<p id="dataartsstudio_07_012__p28344464282">dli:database:displayDatabase</p>
|
||
<p id="dataartsstudio_07_012__p18834114662816">dli:database:displayAllDatabases</p>
|
||
<p id="dataartsstudio_07_012__p1834174617282">dli:database:explain</p>
|
||
<p id="dataartsstudio_07_012__p1683416462281">dli:database:createView</p>
|
||
<p id="dataartsstudio_07_012__p5834174652813">dli:database:createTable</p>
|
||
<p id="dataartsstudio_07_012__p10834846122810">dli:database:displayAllTables</p>
|
||
<p id="dataartsstudio_07_012__p9834746192816">dli:database:createFunction</p>
|
||
<p id="dataartsstudio_07_012__p883424619285">dli:database:describeFunction</p>
|
||
<p id="dataartsstudio_07_012__p88341846152815">dli:database:showFunctions</p>
|
||
<p id="dataartsstudio_07_012__p6834114616280">dli:database:dropFunction</p>
|
||
<p id="dataartsstudio_07_012__p1683414672819">dli:table:select</p>
|
||
<p id="dataartsstudio_07_012__p4834246182810">dli:table:update</p>
|
||
<p id="dataartsstudio_07_012__p14834114612813">dli:table:delete</p>
|
||
<p id="dataartsstudio_07_012__p1883415469289">dli:table:dropTable</p>
|
||
<p id="dataartsstudio_07_012__p138342046112819">dli:table:describeTable</p>
|
||
<p id="dataartsstudio_07_012__p88341463283">dli:table:showCreateTable</p>
|
||
<p id="dataartsstudio_07_012__p1083494617288">dli:table:showPartitions</p>
|
||
<p id="dataartsstudio_07_012__p7834946102811">dli:table:showSegments</p>
|
||
<p id="dataartsstudio_07_012__p9834194619287">dli:table:showTableProperties</p>
|
||
<p id="dataartsstudio_07_012__p683434610283">dli:table:insertOverwriteTable</p>
|
||
<p id="dataartsstudio_07_012__p48347461281">dli:table:insertIntoTable</p>
|
||
<p id="dataartsstudio_07_012__p2834104612819">dli:table:compaction</p>
|
||
<p id="dataartsstudio_07_012__p1883411467284">dli:table:truncateTable</p>
|
||
<p id="dataartsstudio_07_012__p16834104610289">dli:table:alterView</p>
|
||
<p id="dataartsstudio_07_012__p3834124662814">dli:table:alterTableRename</p>
|
||
<p id="dataartsstudio_07_012__p883484652819">dli:table:alterTableAddColumns</p>
|
||
<p id="dataartsstudio_07_012__p1883412467284">dli:table:alterTableDropColumns</p>
|
||
<p id="dataartsstudio_07_012__p1583434682811">dli:table:alterTableChangeColumn</p>
|
||
<p id="dataartsstudio_07_012__p20834946172813">dli:table:alterTableSetLocation</p>
|
||
<p id="dataartsstudio_07_012__p1483454682813">dli:table:alterTableAddPartition</p>
|
||
<p id="dataartsstudio_07_012__p1483411463283">dli:table:alterTableRenamePartition</p>
|
||
<p id="dataartsstudio_07_012__p1483464662817">dli:table:alterTableSetProperties</p>
|
||
<p id="dataartsstudio_07_012__p10834134618284">dli:table:alterTableRecoverPartition</p>
|
||
<p id="dataartsstudio_07_012__p9834114614287">dli:table:alterTableDropPartition</p>
|
||
<p id="dataartsstudio_07_012__p6834154618281">dli:column:select</p>
|
||
<p id="dataartsstudio_07_012__p11834124620282">dli:jobs:create</p>
|
||
<p id="dataartsstudio_07_012__p1383454612816">dli:jobs:delete</p>
|
||
<p id="dataartsstudio_07_012__p28341046182818">dli:jobs:start</p>
|
||
<p id="dataartsstudio_07_012__p483414461282">dli:jobs:stop</p>
|
||
<p id="dataartsstudio_07_012__p128341546102816">dli:jobs:update</p>
|
||
<p id="dataartsstudio_07_012__p128351046172818">dli:jobs:export</p>
|
||
<p id="dataartsstudio_07_012__p1983574613288">dli:jobs:get</p>
|
||
<p id="dataartsstudio_07_012__p118351146132817">dli:jobs:list</p>
|
||
<p id="dataartsstudio_07_012__p1583564672818">dli:jobs:listAll</p>
|
||
<p id="dataartsstudio_07_012__p12835946112811">dli:resource:useResource</p>
|
||
<p id="dataartsstudio_07_012__p1783554652818">dli:resource:updateResource</p>
|
||
<p id="dataartsstudio_07_012__p11835134610286">dli:resource:deleteResource</p>
|
||
<p id="dataartsstudio_07_012__p1883512460283">dli:resource:getResource</p>
|
||
<p id="dataartsstudio_07_012__p1983534622814">dli:resource:listAllResource</p>
|
||
<p id="dataartsstudio_07_012__p683514616289">dli:variable:update</p>
|
||
<p id="dataartsstudio_07_012__p158351346162813">dli:variable:delete</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p78351746122812">Run DLI jobs/scripts.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row16393120283"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1017615292919">IAM</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p9176162152910">iam:agencies:listAgencies</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p217619242912">Obtain job agencies.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row126721618112818"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p4379221112811">DIS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p10379132110286">DIS Operator</p>
|
||
<p id="dataartsstudio_07_012__p1737902114285">DIS User</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p13379192111280">Run the following DIS job nodes:</p>
|
||
<p id="dataartsstudio_07_012__p103792021112813">DIS Stream, DIS Dump, and DIS Client</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1527162022816"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p14379132112819">SWR</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p13379321172817">SWR Admin</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p53791721172811">The image read permission in SWR is required only when a custom image is selected for a <strong id="dataartsstudio_07_012__b10379821112819">DLI Spark</strong> node of a job in DataArts Factory.</p>
|
||
<p id="dataartsstudio_07_012__p1937918217287">You are advised to add the read permission of the image by referring to . You are not advised to directly assign the SWR Admin system role to users because this may result in excessive permissions.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row125848591274"><td class="cellrowborder" rowspan="6" valign="top" width="15.18%" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1557925913717">DataArts Catalog</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="21.14%" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p5958172110307">OBS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="28.310000000000002%" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p15958921173012">obs:object:GetObject</p>
|
||
<p id="dataartsstudio_07_012__p395832103019">obs:bucket:GetBucketStorage</p>
|
||
<p id="dataartsstudio_07_012__p12958132113015">obs:bucket:GetBucketLocation</p>
|
||
<p id="dataartsstudio_07_012__p1895862112306">obs:bucket:ListAllMyBuckets</p>
|
||
<p id="dataartsstudio_07_012__p1595822119302">obs:bucket:ListBucket</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="35.370000000000005%" headers="mcps1.3.4.4.2.5.1.4 "><p id="dataartsstudio_07_012__p1095812214304">Collect OBS metadata.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1555215016813"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p13958521183010">DIS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p095862173017">dis:streams:list</p>
|
||
<p id="dataartsstudio_07_012__p595862153018">dis:transferTasks:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p1095882103018">Collect DIS metadata.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row115521801087"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p295818214304">CSS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p139581721203010">css:cluster:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p4958202115309">Collect CSS metadata.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row2552130483"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p795842123014">GES</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p895882111303">ges:graph:list</p>
|
||
<p id="dataartsstudio_07_012__p49581421153010">ges:graph:getDetail</p>
|
||
<p id="dataartsstudio_07_012__p19581121133019">ges:metadata:list</p>
|
||
<p id="dataartsstudio_07_012__p15958172118302">ges:metadata:getDetail</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p169586212301">Collect GES metadata.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row185528020818"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p101829113018">DLI</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p12142915304">dli:database:displayDatabase</p>
|
||
<p id="dataartsstudio_07_012__p11122983018">dli:database:displayAllDatabases</p>
|
||
<p id="dataartsstudio_07_012__p316297305">dli:table:select</p>
|
||
<p id="dataartsstudio_07_012__p19162963019">dli:table:describeTable</p>
|
||
<p id="dataartsstudio_07_012__p1412293300">dli:table:showPartitions</p>
|
||
<p id="dataartsstudio_07_012__p5162912307">dli:table:showTableProperties</p>
|
||
<p id="dataartsstudio_07_012__p191429193010">dli:jobs:create</p>
|
||
<p id="dataartsstudio_07_012__p3122919309">dli:jobs:get</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p17182903011">Collect DLI metadata and analyze data in summary.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row19552105813"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p511029143010">CDM</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p61229143019">cdm:cluster:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p13117296309">Collect CSS metadata.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row105521801989"><td class="cellrowborder" rowspan="4" valign="top" width="15.18%" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p195478019812">DataArts Quality</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="21.14%" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p13105165173019">SMN</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="28.310000000000002%" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p181050511305">smn:topic:publish</p>
|
||
<p id="dataartsstudio_07_012__p71051751113014">smn:topic:list</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="35.370000000000005%" headers="mcps1.3.4.4.2.5.1.4 "><p id="dataartsstudio_07_012__p1510545163018">Configure job notifications.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row2551110389"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p610575115302">OBS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p17105851143010">obs:object:GetObject</p>
|
||
<p id="dataartsstudio_07_012__p81051517307">obs:object:PutObject</p>
|
||
<p id="dataartsstudio_07_012__p1510555118306">obs:bucket:GetBucketLocation</p>
|
||
<p id="dataartsstudio_07_012__p181052051153015">obs:bucket:ListAllMyBuckets</p>
|
||
<p id="dataartsstudio_07_012__p710517519303">obs:bucket:ListBucket</p>
|
||
<p id="dataartsstudio_07_012__p19105851183010">obs:bucket:CreateBucket</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p151051351193010">Export quality reports.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row34408115813"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p171051251113015">MRS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p110575112305">mrs:job:submit</p>
|
||
<p id="dataartsstudio_07_012__p81061151133012">mrs:sql:execute</p>
|
||
<p id="dataartsstudio_07_012__p12106155115307">mrs:sql:cancel</p>
|
||
<p id="dataartsstudio_07_012__p131061551193017">mrs:job:get</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p4106851183012">Run MRS quality jobs.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row1844014113810"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1210625111309">DLI</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p61061251163017">dli:queue:submitJob</p>
|
||
<p id="dataartsstudio_07_012__p171069519302">dli:jobs:get</p>
|
||
<p id="dataartsstudio_07_012__p121065515308">dli:jobs:listAll</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p11106195115304">Run DLI quality jobs.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row84401312820"><td class="cellrowborder" rowspan="5" valign="top" width="15.18%" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p134370118815">DataArts Security</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="21.14%" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p1515735183119">DLI</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="28.310000000000002%" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p11578515316">dli:queue:submitJob</p>
|
||
<p id="dataartsstudio_07_012__p61575515315">dli:queue:cancelJob</p>
|
||
<p id="dataartsstudio_07_012__p01571855315">dli:database:displayDatabase</p>
|
||
<p id="dataartsstudio_07_012__p1115717553110">dli:database:displayAllDatabases</p>
|
||
<p id="dataartsstudio_07_012__p1415719553111">dli:database:displayAllTables</p>
|
||
<p id="dataartsstudio_07_012__p111578543117">dli:table:describeTable</p>
|
||
<p id="dataartsstudio_07_012__p1515717517319">dli:jobs:create</p>
|
||
<p id="dataartsstudio_07_012__p4157125163114">dli:jobs:stop</p>
|
||
<p id="dataartsstudio_07_012__p17157151319">dli:jobs:get</p>
|
||
<p id="dataartsstudio_07_012__p1515720513112">dli:resource:deleteResource</p>
|
||
<p id="dataartsstudio_07_012__p1515720515311">dli:resource:getResource</p>
|
||
<p id="dataartsstudio_07_012__p61577523116">dli:resource:listAllResource</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="35.370000000000005%" headers="mcps1.3.4.4.2.5.1.4 "><p id="dataartsstudio_07_012__p1915755103112">Manage DLI permissions.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row844010116812"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p215785193118">DWS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p181571852313">dws:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p715715553118">dws:cluster:getDetail</p>
|
||
<p id="dataartsstudio_07_012__p1215815173116">dws:openAPICluster:getDetail</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p121589514313">Manage DWS permissions.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row19440111088"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p1215817553117">MRS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p141584516317">mrs:cluster:list</p>
|
||
<p id="dataartsstudio_07_012__p3158958315">mrs:job:submit</p>
|
||
<p id="dataartsstudio_07_012__p515814510312">mrs:job:stop</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p151581757313">Manage MRS permissions.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row154401913819"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p91581952314">KMS</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p17158458319">kms:cmk:list</p>
|
||
<p id="dataartsstudio_07_012__p61586510317">kms:cmk:encrypt</p>
|
||
<p id="dataartsstudio_07_012__p1515819513318">kms:cmk:decrypt</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p15158145123112">Encrypt and decrypt data using KMS.</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row04397118810"><td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.1 "><p id="dataartsstudio_07_012__p61580513314">CDM</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.2 "><p id="dataartsstudio_07_012__p1515818563119">Any CDM permission, for example, cdm:cluster:get</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" headers="mcps1.3.4.4.2.5.1.3 "><p id="dataartsstudio_07_012__p21588516316">Manage DWS and MRS permissions.</p>
|
||
</td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</div>
|
||
|
||
<div class="tablenoborder"><a name="dataartsstudio_07_012__table11634122416156"></a><a name="table11634122416156"></a><table cellpadding="4" cellspacing="0" summary="" id="dataartsstudio_07_012__table11634122416156" frame="border" border="1" rules="all"><caption><b>Table 3 </b>Minimum permissions for developers on the services on which <span id="dataartsstudio_07_012__text13385920582914">DataArts Studio</span> depends</caption><tbody><tr id="dataartsstudio_07_012__row163472418157"><th class="firstcol" valign="top" width="9.079619152752864%" id="mcps1.3.4.5.2.5.1.1"><p id="dataartsstudio_07_012__p8173201710211">Permission Type</p>
|
||
</th>
|
||
<td class="cellrowborder" valign="top" width="15.399475645094524%" headers="mcps1.3.4.5.2.5.1.1 "><p id="dataartsstudio_07_012__p075594193819">Role/Policy-based permissions–system role</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="37.17400303573893%" headers="mcps1.3.4.5.2.5.1.1 "><p id="dataartsstudio_07_012__p12297194212345">Role/Policy-based permissions–custom policy</p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="38.34690216641369%" headers="mcps1.3.4.5.2.5.1.1 "><p id="dataartsstudio_07_012__p167561818273">Role/Policy-based permissions–custom policy</p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row172621038826"><th class="firstcol" valign="top" width="9.079619152752864%" id="mcps1.3.4.5.2.5.2.1"><p id="dataartsstudio_07_012__p62628381728">Mandatory</p>
|
||
</th>
|
||
<td class="cellrowborder" valign="top" width="15.399475645094524%" headers="mcps1.3.4.5.2.5.2.1 "><p id="dataartsstudio_07_012__p826311383214"><strong id="dataartsstudio_07_012__b1388611331043">Mandatory</strong></p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="37.17400303573893%" headers="mcps1.3.4.5.2.5.2.1 "><p id="dataartsstudio_07_012__p122631738424"><strong id="dataartsstudio_07_012__b1591703512417">Mandatory</strong></p>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="38.34690216641369%" headers="mcps1.3.4.5.2.5.2.1 "><p id="dataartsstudio_07_012__p92631438321"><strong id="dataartsstudio_07_012__b1597183720418">Mandatory</strong></p>
|
||
</td>
|
||
</tr>
|
||
<tr id="dataartsstudio_07_012__row12634172421517"><th class="firstcol" valign="top" width="9.079619152752864%" id="mcps1.3.4.5.2.5.3.1"><p id="dataartsstudio_07_012__p111738176210">Permission</p>
|
||
</th>
|
||
<td class="cellrowborder" valign="top" width="15.399475645094524%" headers="mcps1.3.4.5.2.5.3.1 "><ul id="dataartsstudio_07_012__ul26539363910"><li id="dataartsstudio_07_012__li8601773396">DIS Operator</li><li id="dataartsstudio_07_012__li112662016133116">DIS User</li><li id="dataartsstudio_07_012__li136547343912">(Optional and not recommended) SWR Admin<div class="note" id="dataartsstudio_07_012__note1788835115820"><span class="notetitle"> NOTE: </span><div class="notebody"><p id="dataartsstudio_07_012__p07885357585">The image read permission in SWR is required only when a custom image is selected for a <strong id="dataartsstudio_07_012__b72378231">DLI Spark</strong> node of a job in DataArts Factory.</p>
|
||
<p id="dataartsstudio_07_012__p1771132816312">You are advised to add the read permission of the image by referring to . You are not advised to directly assign the SWR Admin system role to users because this may result in excessive permissions.</p>
|
||
</div></div>
|
||
</li></ul>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="37.17400303573893%" headers="mcps1.3.4.5.2.5.3.1 "><div class="p" id="dataartsstudio_07_012__p96345245156"><strong id="dataartsstudio_07_012__b905524472914">DataArtsStudio</strong><strong id="dataartsstudio_07_012__b19832204032914">_PermissionsOfDependentServices_global</strong>: custom policy for a global dependent cloud service<pre class="screen" id="dataartsstudio_07_012__screen19634924161518">{
|
||
"Version": "1.1",
|
||
"Statement": [
|
||
{
|
||
"Effect": "Allow",
|
||
"Action": [
|
||
"obs:object:GetObject",
|
||
"obs:object:PutObject",
|
||
"obs:object:DeleteObject",
|
||
"obs:bucket:GetBucketStorage",
|
||
"obs:bucket:GetBucketLocation",
|
||
"obs:bucket:ListAllMyBuckets",
|
||
"obs:bucket:ListBucket",
|
||
"obs:bucket:ListBucketVersions",
|
||
"obs:bucket:CreateBucket",
|
||
"obs:bucket:DeleteBucket",
|
||
"rms:resources:list",
|
||
"iam:agencies:listAgencies"
|
||
]
|
||
}
|
||
]
|
||
}</pre>
|
||
</div>
|
||
</td>
|
||
<td class="cellrowborder" valign="top" width="38.34690216641369%" headers="mcps1.3.4.5.2.5.3.1 "><div class="p" id="dataartsstudio_07_012__p5635102420154"><strong id="dataartsstudio_07_012__b64191553201610">DataArtsStudio_PermissionsOfDependentServices_region</strong>: custom policy for a regional dependent cloud service<pre class="screen" id="dataartsstudio_07_012__screen196355249153">{
|
||
"Version": "1.1",
|
||
"Statement": [
|
||
{
|
||
"Effect": "Allow",
|
||
"Action": [
|
||
"cdm:cluster:get",
|
||
"cdm:cluster:list",
|
||
"cdm:cluster:create",
|
||
"cdm:link:operate",
|
||
"cdm:job:operate",
|
||
"ces:*:get",
|
||
"ces:*:list",
|
||
"cloudtable:*:get",
|
||
"cloudtable:*:list",
|
||
"css:*:get",
|
||
"css:*:list",
|
||
"dis:streams:list",
|
||
"dis:transferTasks:list",
|
||
"dli:queue:submitJob",
|
||
"dli:queue:cancelJob",
|
||
"dli:table:insertOverwriteTable",
|
||
"dli:table:insertIntoTable",
|
||
"dli:table:alterView",
|
||
"dli:table:alterTableRename",
|
||
"dli:table:compaction",
|
||
"dli:table:truncateTable",
|
||
"dli:table:alterTableDropColumns",
|
||
"dli:table:alterTableSetProperties",
|
||
"dli:table:alterTableChangeColumn",
|
||
"dli:table:showSegments",
|
||
"dli:table:alterTableRecoverPartition",
|
||
"dli:table:dropTable",
|
||
"dli:table:update",
|
||
"dli:table:alterTableDropPartition",
|
||
"dli:table:alterTableAddPartition",
|
||
"dli:table:alterTableAddColumns",
|
||
"dli:table:alterTableRenamePartition",
|
||
"dli:table:delete",
|
||
"dli:table:alterTableSetLocation",
|
||
"dli:table:describeTable",
|
||
"dli:table:showPartitions",
|
||
"dli:table:showCreateTable",
|
||
"dli:table:showTableProperties",
|
||
"dli:table:select",
|
||
"dli:resource:updateResource",
|
||
"dli:resource:useResource",
|
||
"dli:resource:getResource",
|
||
"dli:resource:listAllResource",
|
||
"dli:resource:deleteResource",
|
||
"dli:database:explain",
|
||
"dli:database:createDatabase",
|
||
"dli:database:dropFunction",
|
||
"dli:database:createFunction",
|
||
"dli:database:displayAllDatabases",
|
||
"dli:database:displayAllTables",
|
||
"dli:database:displayDatabase",
|
||
"dli:database:describeFunction",
|
||
"dli:database:createView",
|
||
"dli:database:createTable",
|
||
"dli:database:showFunctions",
|
||
"dli:database:dropDatabase",
|
||
"dli:group:useGroup",
|
||
"dli:group:updateGroup",
|
||
"dli:group:listAllGroup",
|
||
"dli:group:getGroup",
|
||
"dli:group:deleteGroup",
|
||
"dli:column:select",
|
||
"dli:jobs:start",
|
||
"dli:jobs:export",
|
||
"dli:jobs:update",
|
||
"dli:jobs:list",
|
||
"dli:jobs:listAll",
|
||
"dli:jobs:get",
|
||
"dli:jobs:delete",
|
||
"dli:jobs:create",
|
||
"dli:jobs:stop",
|
||
"dli:variable:update",
|
||
"dli:variable:delete",
|
||
"dws:cluster:list",
|
||
"dws:cluster:getDetail",
|
||
"dws:openAPICluster:getDetail",
|
||
"ecs:servers:get",
|
||
"ecs:servers:list",
|
||
"ecs:servers:stop",
|
||
"ecs:servers:start",
|
||
"ecs:flavors:get",
|
||
"ecs:cloudServerFlavors:get",
|
||
"ecs:cloudServers:list",
|
||
"ecs:availabilityZones:list",
|
||
"ges:graph:access",
|
||
"ges:metadata:create",
|
||
"ges:jobs:list",
|
||
"ges:graph:operate",
|
||
"ges:jobs:getDetail",
|
||
"ges:graph:getDetail",
|
||
"ges:graph:list",
|
||
"ges:metadata:list",
|
||
"ges:metadata:getDetail",
|
||
"ges:metadata:delete",
|
||
"ges:metadata:operate",
|
||
"kms:cmk:get",
|
||
"kms:cmk:list",
|
||
"kms:cmk:create",
|
||
"kms:cmk:decrypt",
|
||
"kms:cmk:encrypt",
|
||
"kms:dek:create",
|
||
"kms:dek:encrypt",
|
||
"kms:dek:decrypt",
|
||
"mrs:cluster:get",
|
||
"mrs:cluster:list",
|
||
"mrs:job:get",
|
||
"mrs:job:list",
|
||
"mrs:job:submit",
|
||
"mrs:job:stop",
|
||
"mrs:job:delete",
|
||
"mrs:sql:execute",
|
||
"mrs:sql:cancel",
|
||
"rds:*:get",
|
||
"rds:*:list",
|
||
"smn:topic:publish",
|
||
"smn:topic:list",
|
||
"vpc:publicIps:list",
|
||
"vpc:publicIps:get",
|
||
"vpc:vpcs:get",
|
||
"vpc:vpcs:list",
|
||
"vpc:subnets:get",
|
||
"vpc:securityGroups:get",
|
||
"vpc:firewalls:list",
|
||
"vpc:routeTables:list",
|
||
"vpc:subNetworkInterfaces:list"
|
||
]
|
||
}
|
||
]
|
||
}</pre>
|
||
</div>
|
||
</td>
|
||
</tr>
|
||
</tbody>
|
||
</table>
|
||
</div>
|
||
</div>
|
||
</div>
|
||
<div>
|
||
<div class="familylinks">
|
||
<div class="parentlink"><strong>Parent topic:</strong> <a href="dataartsstudio_12_0001.html">Service Overview</a></div>
|
||
</div>
|
||
</div>
|
||
|
||
|
||
<script language="JavaScript">
|
||
<!--
|
||
initImageViewer('.imgResize');
|
||
var msg_imageMax = "view original image";
|
||
var msg_imageClose = "close";
|
||
//--></script> |