On the MaxCompute Management page of a workspace, you can manage and configure MaxCompute projects for the workspace.

Go to the Workspace Management page. In the left-side navigation pane, click MaxCompute Management. The MaxCompute Management page appears.

The MaxCompute Management page consists of the Basic Settings and Custom User Roles tabs.

Basic Settings tab

On the Basic Settings tab, you can configure permission-related and security-related settings for the selected MaxCompute project.Basic Settings

MaxCompute Security Settings: The following table describes the parameters in this section. For more information, see Security configurations.

Parameter Description
Enable ACL-based authorization Specifies whether to use access control lists (ACLs) to grant permissions. If you turn on or off this switch, you run the set CheckPermissionUsingACL=true/false command in the MaxCompute project as the project owner. This switch is turned on by default.
Allow object creators to access objects Specifies whether to allow object creators to access objects. If you turn on or off this switch, you run the set ObjectCreatorHasAccessPermission=true/false command in the MaxCompute project as the project owner. This switch is turned on by default.
Allow object creators to grant object-related permissions Specifies whether to allow object creators to grant object-related permissions. If you turn on or off this switch, you run the set ObjectCreatorHasGrantPermission=true/false command in the MaxCompute project as the project owner. This switch is turned on by default.
Protect workspace data Specifies whether to protect workspace data. If you turn on or off this switch, you run the set ProjectProtection=true/false command in the MaxCompute project as the project owner. This switch is turned off by default.
Enable RAM service Specifies whether to allow RAM user accounts to access the MaxCompute project. This switch is turned on by default.
Enable policy-based authorization Specifies whether to use policies to grant permissions. If you turn on or off this switch, you run the set CheckPermissionUsingPolicy=true/false command in the MaxCompute project as the project owner. This switch is turned on by default.
Enable column-level access control Specifies whether to enable LabelSecurity in the MaxCompute project. By default, LabelSecurity is disabled. The project owner can enable it as required. If you turn on or off this switch, you run the Set LabelSecurity=true/false command in the MaxCompute project as the project owner.

Custom User Roles tab

On the Custom User Roles tab, you can assign member roles for the selected MaxCompute project.Custom User Roles
Item Description
Role Name The name of the role in the MaxCompute project.
Actions
  • View Details: Click it to view the list of members who are assigned the role and the permissions of the role on tables or the MaxCompute project.
  • Members: Click it to assign the role to or delete the role from members.
  • Authorizations: Click it to set and manage the permissions of the role on tables or the MaxCompute project. For more information, see Authorize users.
  • Delete: Click it to delete the role. You can delete only the roles created under the current account.
Create Role Click Create Role in the upper-right corner. In the Create Role dialog box, set Role Name. In the Available Accounts list, select one or more member accounts to add. Click > to move the selected accounts to the Added Accounts list. Then, click OK.
Note The permissions set for custom roles are integrated with the default permissions.