DataWorks V2.0 provides workspaces in basic mode and standard mode. This topic describes these two modes, including their features and differences.

Basic mode

In basic mode, a DataWorks workspace is associated with only one MaxCompute project. A workspace in basic mode does not isolate the development environment from the production environment. In this workspace, you can only perform basic data development but cannot completely control the data development process and table permissions.
  • Advantages: Code of a node takes effect immediately after you commit the node, without the need to deploy the node.
  • Disadvantages: Developers can delete any table in the current workspace. This puts data at risk in the production environment.

Standard mode

In standard mode, a DataWorks workspace is associated with a MaxCompute project that serves as the development environment and a MaxCompute project that serves as the production environment. In this workspace, you can develop code in a standard manner.

A workspace in standard mode allows you to strictly control table permissions. Without authorization, developers are prohibited from managing tables in the production environment. This guarantees data security.
Note
  • You can only modify nodes in the development environment, but cannot modify them in the production environment. This mechanism guarantees the stability of code in the production environment.
  • By default, nodes are not scheduled in the development environment. This prevents auto triggered nodes in the development environment from occupying excessive resources. In this case, nodes in the production environment can have sufficient resources to run stably.
  • The production environment runs with a default tenant account. All tables generated in the production environment belong to the Alibaba Cloud account. To manage a table in the production environment, you must submit a request for required permissions.

To create a workspace in standard mode, select Standard Mode (Development and Production Environments) for Mode and enter the workspace name and description in the Create Workspace dialog box. Use the default values for other parameters.

Note
  • You are not allowed to use a personal account to visit MaxCompute projects in the production environment. Otherwise, data in the production environment may be at risk.
  • The Workspaces page displays workspaces in the production environment. By default, nodes run in the development environment.
  • The system roles of workspace members take effect only in the development environment. The system roles of Resource Access Management (RAM) users do not take effect in the production environment. You can use the Data Map service of DataWorks to apply for the specified system roles in the production environment.
  • By default, RAM users have no permissions to perform operations in the production environment. A RAM user must have the corresponding permissions to use services other than DataWorks in a workspace in the production environment, such as using DataHub to deliver data to MaxCompute tables. You can use a MaxCompute client to grant the required permissions to a RAM user, or use the Data Map service of DataWorks to apply for the required permissions as a RAM user.

Project permission relationship

If you log on to the DataWorks console from the official MaxCompute or DataWorks website, you can create a workspace (project) in either of the following modes:
  • Simple mode: In this mode, a DataWorks workspace is associated with a MaxCompute project. A number of roles are created in the MaxCompute project. For more information about the role permissions, see Role management.
  • Standard mode: In this mode, a DataWorks workspace is associated with a MaxCompute development project and a MaxCompute production project. A number of roles are created in each MaxCompute project. For more information about the role permissions, see Role management.

Users and permissions

In simple mode, a DataWorks workspace is associated with a MaxCompute project. You can specify whether other members of the DataWorks workspace have permissions on the MaxCompute project. Specifically, log on to the DataWorks console and choose Workspace Management > Compute Engines > MaxCompute visitor identity to set the permissions.

You can set MaxCompute visitor identity to Alibaba Cloud primary account or Task owner. The following figure shows the relationship between users and permissions.Relationship diagram
In standard mode, a DataWorks workspace is associated with a MaxCompute development project and a MaxCompute production project.
Note Members of a DataWorks workspace can be granted the roles assigned to this MaxCompute development project. However, they cannot be granted the roles assigned to this MaxCompute production project.
To run a MaxCompute job, you need to publish it in the production project, and then submit it to MaxCompute as the project owner.Standard mode