DataWorks provides the User Group Management feature. You can use this feature to add multiple users with same permissions to a user group as needed with ease. When you configure a data de-identification rule, you can add the user group to the whitelist of this rule. This way, the data that is de-identified by using this rule can be displayed in its original form to the users in this user group. This topic describes how to create and manage a user group.

Create a user group

  1. Go to the Data Security Guard page.
    1. Log on to the DataWorks console.
    2. In the left-side navigation pane, click Workspaces.
    3. After you select the region in which your workspace resides, find the workspace and click Data Analytics in the Actions column.
    4. Click the More icon icon in the upper-left corner and choose All Products > Data governance > Data Security Guard.
    5. Click Try now to go to the Data Security Guard page.
  2. In the left-side navigation pane, choose Rule Change > User Group Management. The User Group Management page appears.
  3. Create a user group.
    1. Click Add User Group in the upper-right corner. In the AddAccount dialog box, set the User Group Name parameter and add users to the user group.
      You can use the following methods to add users to the user group: Add users
      • Method 1: Upload a text file. You can upload a text file that contains user account information to add them to the user group at a time. This method is applicable if you need to add a large number of users to the user group.
      • Method 2: Select existing accounts. You can select existing Alibaba Cloud accounts or RAM users to add them to the user group. This method is applicable if you need to add only a small number of users to the user group.
      Note The text file to be uploaded must be a UTF-8-encoded TXT file. Each piece of account information occupies one line. The text file can contain a maximum of 1,000 lines. In other words, a maximum of 1,000 user accounts can be added at a time.
    2. Click OK.

After the user group is created, you can configure a whitelist for a data de-identification rule by adding the user group to the whitelist. This way, the data that is de-identified by using the data de-identification rule is displayed in its original form to the users in this user group. For more information about how to configure a whitelist for a data de-identification rule, see Customize de-identification rules.

Manage user groups

On the User Group Management page, you can perform the following operations to manage existing user groups.User Group Management page
  • View the user groups.
    You can view the basic information of all existing user groups, such as the user group name, user group owner, and submission time. In addition, you can view the number of data de-identification rules that are associated with this user group and their names.
    Note
    • You can search for a user group by user group name or owner. Fuzzy match is supported. After you enter a keyword in a search field and press the Enter key, DataWorks displays all user groups whose names or owners contain the keyword.
    • You can sort user groups by the submission time in chronological or reverse chronological order. This helps you find a user group by submission time.
    • If a user group is associated with a data de-identification rule, click the View icon icon in the Affiliation Rule column of the user group to view the name of the associated data de-identification rule.
  • Manage a user group.
    • Copy a user group: To copy a user group, click the Copy icon icon in the Actions column of the user group. You can copy a user group to create a user group with the same settings.
    • Edit a user group: To edit the settings of an existing user group, click the Settings icon icon in the Actions column of the user group. Then, you can add user accounts to or remove user accounts from the user group with ease.
    • Delete a user group: To delete a user group, click the Delete icon icon in the Actions column of the user group.