Log in to Alibaba Cloud DTplus Console with the primary account.
Click DataWorks , and click Project List > Project Configuration of the corresponding project, as shown in the following figure:
In the left-side navigation pane, click Manage Project Members > Add a Member. If there is a sub-account that hasn’t been added to the organization, select the sub-account, as shown in the in the following figure:
The roles include: project administrator, deployer, developer, guest and O&M.
For detailed descriptions of permissions of the roles, refer to: Project Management Manual > Project Management > Manage Project Members.
Usually the developer and O&M roles are granted. If you want an account to create a data source, you must open the project’s administrator permissions for the account.
If there are no sub-accounts available, click Create. The browser will open a new tab to guide you to the Alibaba Cloud Resource Access Management (RAM) where you can create a new sub-account.
You can also click Manage Users in the Alibaba Cloud Resource Access Management (RAM). Click New User in the upper right corner, and the page will jump to the Alibaba Cloud RAM to create a sub-account.
After the sub-account is created, click Manage > Enable Console Logon and reset the password. Enter the logon password for this sub-account (The sub-account owner must be informed of this password).
After the sub-account creator completes the aforementioned operations, the sub-account will become a member of the organization. But the administrator still needs to add this user as a member of the project for the sub-account to start data development. You can refer to Section 1.3 to learn how to add a member.
The sub-account creator must provide the following information to the sub-account owner.
- The sub-account logon link to the RAM of the current primary account;
- The account name and password of the sub-account;
- The AK information of the sub-account (You can grant the sub-account permissions to create an AK on its own).
The creator can create the AK in place of the sub-account:
The sub-account can create the AK on its own:
By default, the sub-account is not allowed to manage its own AK. You can modify this configuration in “Sub-user Security Settings” in the RAM console.
The sub-account can enter the logon portal with the “RAM sub-account logon link” provided by the creator and the invited sub-account owner must log on here.
Sub-account can reset its own password.
Enter the Alibaba Cloud Console with the sub-account.
The sub-account can create its own AK.
After the aforementioned steps, the invited new users have been added to the project by the administrator and granted their corresponding roles. The invited users must also click Big Data (Dataplus) > DataWorks Kit in the left-side navigation pane, and click Enter Work Zone in the action bar of the project list to access the development kit, as shown below:
Click Here to jump to the personal information page. Click Modify AccessKey Information. After the sub-account fills in its AK information, click Modify AccessKey Information, and the DataWorks Kit will be ready for use.
The invited new users must also bind the AK information before entering the development kit to start data development normally.