doc-exports/docs/dataartsstudio/umn/dataartsstudio_01_0117.html

<a name="dataartsstudio_01_0117"></a><a name="dataartsstudio_01_0117"></a>

<h1 class="topictitle1">Adding Workspace Members and Assigning Roles</h1>
<div id="body0000001987511689"><p id="dataartsstudio_01_0117__en-us_topic_0197006379_p20731141645811">For IAM users with <strong id="dataartsstudio_01_0117__b43671363715"><strong id="dataartsstudio_01_0117__b10367153183713"><span id="dataartsstudio_01_0117__text1436773103713">DARTS</span></strong> User</strong> account permissions, their permissions in a <span id="dataartsstudio_01_0117__text936773103714">DataArts Studio</span> workspace are determined by workspace roles. If you want to share a <span id="dataartsstudio_01_0117__text081134510374">DataArts Studio</span> instance with an IAM user with the <strong id="dataartsstudio_01_0117__b1781224513712"><strong id="dataartsstudio_01_0117__b13812104533710"><span id="dataartsstudio_01_0117__text198129457376">DARTS</span></strong> User</strong> account permissions, prepare an IAM user by referring to <a href="dataartsstudio_01_0004.html">Creating an IAM User and Assigning DataArts Studio Permissions</a>, add the user as a workspace member, and assign a role to the member.</p>
<div class="fignone" id="dataartsstudio_01_0117__fig168744210348"><span class="figcap"><b>Figure 1 </b>Permission system</span><br><span><img class="imgResize" id="dataartsstudio_01_0117__en-us_topic_0000001492262982_image1913610193343" src="en-us_image_0000002424508617.png" title="Click to enlarge"></span></div>
<p id="dataartsstudio_01_0117__p142198484228">A workspace role determines the permissions of a user in a workspace. Preset roles include admin, developer, deployer, operator, and viewer. You can also customize roles by referring to <a href="dataartsstudio_01_0107.html">(Optional) Defining a Workspace Role</a>. For the detailed descriptions of the permissions of each role, see "Permissions" in <em id="dataartsstudio_01_0117__i1175365020546">Service Overview</em>.</p>
<ul id="dataartsstudio_01_0117__ul20943153142910"><li id="dataartsstudio_01_0117__en-us_topic_0222691153_li20959105461511">Admin: This role has all operation permissions in a workspace. You are advised to assign the admin role to the project owner, development owner, and O&amp;M administrator.</li><li id="dataartsstudio_01_0117__en-us_topic_0222691153_li49596545157">Developer: This role has permissions to create and manage resources in a workspace. You are advised to assign this role to users who develop and process tasks.</li><li id="dataartsstudio_01_0117__en-us_topic_0222691153_li3959195411514">Operator: This role has the operation permissions of services such as O&amp;M and scheduling in a workspace, but cannot modify resources or configurations. You are advised to assign this role to users responsible for O&amp;M management and status monitoring.</li><li id="dataartsstudio_01_0117__en-us_topic_0222691153_li16959145419159">Viewer: This role can view data in a workspace but cannot perform any other operation. You are advised to assign this role to users who only need to view data in a workspace but do not need to perform operations.</li><li id="dataartsstudio_01_0117__en-us_topic_0222691153_li195955461519">Deployer: This role is unique to the enterprise mode and has permissions to release task packages in a workspace. In enterprise mode, when a developer submits a script or job version, the system generates a release task. After the developer confirms the release and the deployer approves the release request, the modified job is synchronized to the production environment.</li><li id="dataartsstudio_01_0117__en-us_topic_0222691153_li198901176168">Custom roles: If the preset roles cannot meet your requirements, you can create custom roles. You can configure permissions for such roles to meet the the principle of least privilege (PoLP).</li></ul>
<div class="section" id="dataartsstudio_01_0117__en-us_topic_0197006379_section2746419108"><h4 class="sectiontitle">Context</h4><p id="dataartsstudio_01_0117__p7515103854511">If an IAM user is granted the <strong id="dataartsstudio_01_0117__b739906153812"><strong id="dataartsstudio_01_0117__b4398167384"><span id="dataartsstudio_01_0117__text123982614381">DARTS</span></strong> User</strong> permissions, you also need to add the user as a workspace member and assign a role to the user. Otherwise, the IAM user cannot view existing <span id="dataartsstudio_01_0117__text4399106153810">DataArts Studio</span> workspaces.</p>
</div>
<div class="section" id="dataartsstudio_01_0117__section515418567557"><h4 class="sectiontitle">Notes and Constraints</h4><p id="dataartsstudio_01_0117__p14154156155517">Due to the limitations of the authentication cache mechanism, a change to the role of a workspace member does not take effect immediately. The change takes effect six minutes after the workspace member stops accessing the <span id="dataartsstudio_01_0117__text1092450175812">DataArts Studio</span> console.</p>
</div>
<div class="section" id="dataartsstudio_01_0117__section207561725174520"><h4 class="sectiontitle">Prerequisites</h4><div class="p" id="dataartsstudio_01_0117__en-us_topic_0000001987511677_p20458203520129">You are using either of the following accounts:<ul id="dataartsstudio_01_0117__ul1193359181210"><li id="dataartsstudio_01_0117__li6196152219561"><strong id="dataartsstudio_01_0117__b4670141284715"><span id="dataartsstudio_01_0117__text1167012120477">DARTS</span> </strong><strong id="dataartsstudio_01_0117__b46701312114719">Administrator</strong> or <strong id="dataartsstudio_01_0117__b12670712114711">Tenant Administrator</strong></li><li id="dataartsstudio_01_0117__li20258191315126"><strong id="dataartsstudio_01_0117__b1922617476473"><span id="dataartsstudio_01_0117__text722694744714">DARTS</span> User</strong>, which is the administrator of the current workspace</li></ul>
</div>
</div>
<div class="section" id="dataartsstudio_01_0117__en-us_topic_0197006379_section36147489413"><h4 class="sectiontitle">Adding a Member and Assigning a Role</h4><ol id="dataartsstudio_01_0117__ol2716133163317"><li id="dataartsstudio_01_0117__li9596182371118"><span>Log in to the <span id="dataartsstudio_01_0117__en-us_topic_0000001987511677_en-us_topic_0000001127311125_text5574448155719">DataArts Studio</span> console by following the instructions in <a href="dataartsstudio_01_0001.html">Accessing the DataArts Studio Instance Console</a>.</span></li><li id="dataartsstudio_01_0117__li468984010110"><span>On the <strong id="dataartsstudio_01_0117__en-us_topic_0000001987511677_b5125155918378">Workspaces</strong> page, locate the target workspace and click <strong id="dataartsstudio_01_0117__en-us_topic_0000001987511677_b912595993714">Edit</strong> in the <strong id="dataartsstudio_01_0117__en-us_topic_0000001987511677_b41251859143711">Operation</strong> column.</span><p><div class="fignone" id="dataartsstudio_01_0117__en-us_topic_0000001987511677_en-us_topic_0197006379_fig844512372110"><span class="figcap"><b>Figure 2 </b>Workspace Information dialog box</span><br><span><img id="dataartsstudio_01_0117__en-us_topic_0000001987511677_image8222122611370" src="en-us_image_0000002234235668.png" title="Click to enlarge" class="imgResize"></span></div>
<p id="dataartsstudio_01_0117__en-us_topic_0000001987511677_p93919164437"></p>
<p id="dataartsstudio_01_0117__en-us_topic_0000001987511677_p121713332499"></p>
</p></li><li id="dataartsstudio_01_0117__li17716833163313"><span>Click <span class="uicontrol" id="dataartsstudio_01_0117__uicontrol41909034223337"><b>Add</b></span> next to <strong id="dataartsstudio_01_0117__b139103531523337">Workspace Members</strong>. In the displayed <strong id="dataartsstudio_01_0117__b153225765523337">Add Member</strong> dialog box, select <strong id="dataartsstudio_01_0117__b174667221123337">User</strong> or <strong id="dataartsstudio_01_0117__b65152589723337">Group</strong> for <strong id="dataartsstudio_01_0117__b18894103218214">Account Type</strong>, select a user or group from the <strong id="dataartsstudio_01_0117__b15165141615311">Member Account</strong> drop-down list, and select a role.</span><p><div class="fignone" id="dataartsstudio_01_0117__fig61134916424"><span class="figcap"><b>Figure 3 </b>Adding a member</span><br><span><img id="dataartsstudio_01_0117__image0481181610422" src="en-us_image_0000002269198449.png" title="Click to enlarge" class="imgResize"></span></div>
<p id="dataartsstudio_01_0117__p9664053195020"></p>
</p></li><li id="dataartsstudio_01_0117__li10716733203311"><span>Click <span class="uicontrol" id="dataartsstudio_01_0117__en-us_topic_0197006379_uicontrol524031616599"><b>OK</b></span>. You can view or modify the members and roles in the member list, or delete members from the workspace.</span></li></ol>
</div>
<div class="section" id="dataartsstudio_01_0117__en-us_topic_0000001629752664_section11218546133410"><h4 class="sectiontitle">Related Operations</h4><ul id="dataartsstudio_01_0117__en-us_topic_0000001629752664_ul4546171163518"><li id="dataartsstudio_01_0117__li4842153913402">Removing a workspace member: In the <strong id="dataartsstudio_01_0117__b1134512818416">Workspace Information</strong> dialog box, select the workspace members to remove, and click <strong id="dataartsstudio_01_0117__b82761559746">Remove</strong>. In the <strong id="dataartsstudio_01_0117__b210910050923337">Remove Member</strong> dialog box, click <strong id="dataartsstudio_01_0117__b34695187323337">Yes</strong>.<div class="note" id="dataartsstudio_01_0117__note102787176416"><img src="public_sys-resources/note_3.0-en-us.png"><span class="notetitle"> </span><div class="notebody"><p id="dataartsstudio_01_0117__p5278161764115">The creator of a workspace cannot be removed.</p>
</div></div>
<div class="fignone" id="dataartsstudio_01_0117__fig1421742410412"><span class="figcap"><b>Figure 4 </b>Removing a member</span><br><span><img id="dataartsstudio_01_0117__image1521714241417" src="en-us_image_0000002234239000.png" title="Click to enlarge" class="imgResize"></span></div>
<p id="dataartsstudio_01_0117__p62172249414"></p>
</li></ul>
</div>
</div>
<div>
<div class="familylinks">
<div class="parentlink"><strong>Parent topic:</strong> <a href="dataartsstudio_01_0118.html">Authorizing Users to Use DataArts Studio</a></div>
</div>
</div>


<script language="JavaScript">
<!--
initImageViewer('.imgResize');
var msg_imageMax = "view original image";
var msg_imageClose = "close";
//--></script>