This topic describes how to grant permissions to your Alibaba Cloud account or a Resource Access Management (RAM) user.

Background information

If your Alibaba Cloud account or a RAM user is not authorized, you cannot view workspaces on the Namespace List page after you log on to the console of fully managed Flink. Therefore, you must grant permissions to your Alibaba Cloud account or a RAM user. Error 403

Procedure

  1. Log on to the Realtime Compute for Apache Flink console.
  2. On the Fully Managed Flink tab, find the workspace where you want to perform the authorization operation, and click Console in the Actions column.
  3. In the left-side navigation pane, choose Administration > Members.
  4. Click Add Member.
  5. Specify Role and enter information in the Member field. Add a member
    • Role: The following table describes the features that can be used by different roles.
      Feature owner editor viewer
      Views jobs Y Y Y
      Starts and terminates a job Y Y N
      Modifies job configurations Y Y N
      Uploads a Java Archive (JAR) file Y Y N
      Writes SQL statements Y Y N
      Registers a user-defined function (UDF) Y Y N
      Registers metadata Y Y N
      Views a job template Y Y Y
      Adds, deletes, or modifies a job template Y Y N
      Manages members Y N N
    • Member: the user identifier (UID) or display name of a RAM user. To obtain the UID and display name of a RAM user, you can perform the following steps:
      1. Log on to the RAM console by using your Alibaba Cloud account.
      2. In the left-side navigation pane, choose Identities > Users.
      3. On the Users page, click the logon name of the RAM user to which you want to grant permissions in the User Logon Name/Display Name column.
      4. In the Basic Information section, view the UID and display name.
  6. Click OK.
    Notice Another Alibaba Cloud account or RAM user that has logged on to the console of fully managed Flink must log on to the console again after it is authorized. Otherwise, the Alibaba Cloud account or RAM user cannot view project information.