This topic describes how to assign management roles to a RAM user by using the MaxCompute client or DataWorks.

Background information

The project owner only needs to assign the Super_Administrator or Admin role to a specific RAM user. Then, the RAM user has all permissions of this role.

Only a project owner can assign management roles to RAM users.

Assign roles by using the MaxCompute client

Example: User bob@aliyun.com is the owner of project Project_A, and Allen is a RAM user under bob@aliyun.com.

  1. Log on to the MaxCompute client and open Project_A.
    Run ./bin/odpscmd in a Linux operating system or ./bin/odpscmd.bat in a Windows operating system.
    use Project_A;
  2. Add a RAM user for Project_A.
    add user ram$bob@aliyun.com:Allen;
  3. Assign the Super_Administrator role to the RAM user.
    grant super_administrator TO ram$bob@aliyun.com:Allen;
  4. Assign the Admin role to the RAM user.
    grant admin TO ram$bob@aliyun.com:Allen;

Assign roles by using DataWorks

  1. Go to the Workspace Management page of the DataWorks console.
  2. Add a RAM user as a member of the workspace.
    1. In the left-side navigation pane, click User Management.
    2. On the Members page, click Add Member in the upper-right corner.
    3. In the Add Member dialog box, select the member that you want to add from the Available Accounts section. Then, click the rightwards arrow to add the member to the Added Accounts section.
    4. Select roles for the member and click OK.
  3. Assign the Super_Administrator or Admin role to the RAM user.
    1. In the left-side navigation pane, click Maxcompute Management.
    2. In the navigation tree, click Custom User Roles.
    3. Find the role that you want to assign to the user and click Members in the Actions column. In the dialog box that appears, select the member that you want to add from the Available Accounts section. Then, click the rightwards arrow to add the member to the Added Accounts section.
    4. Click OK.