This topic describes the permissions supported by global roles and project roles.
Global role permission descriptions
Super X
Level 1 permission: Feature | Global permission | Feature |
X-Analysis | View | View the X-Analysis page and use natural language to query data. |
X-Data Engineering | View | View X-Data Engineering. |
Smart application management-Smart application | Manage | Enable, disable, and edit assistants. |
Configure the large model used by the intelligent assistant. | ||
Smart application management-Intelligent analysis collection | Create | Create intelligent analysis collections and collection groups. |
Manage | Edit and delete intelligent analysis collections and collection groups. | |
Enterprise knowledge base | View | View knowledge bases with permissions and all knowledge within the knowledge bases. |
Manage | Create, edit, and delete knowledge bases. | |
Create, edit, and delete all knowledge within knowledge bases. |
Data development
Level 1 permission: Feature | Global permission | Feature |
R&D | ||
R&D | View | View the R&D module |
Modify the default cluster for the resource dashboard | Lets you modify the default cluster that is displayed on the O&M > Resource Scheduling dashboard. | |
Tags | ||
Asset marketplace | View | Asset marketplace-View |
Asset marketplace-View public marketplace asset list | ||
Asset marketplace-View details/group analysis (Operation permissions depend on visible assets. All assets in the public marketplace can be operated, and private marketplace assets can be operated if visible) | ||
Workplace | View | Workplace-View (After selection, operation permissions depend on the project role. If a member does not have this permission, the member will be able to view the workplace after being added to the tag project) |
Asset application-Tag offline service | View | Asset application-Tag offline service-View offline service task list |
Asset application-Tag offline service-View offline service task details | ||
Asset application-Tag offline service-Create offline service (Everyone can click, but an application with permissions is required for successful creation) | ||
Asset application-Group offline service | View | Asset application-Group offline service-View offline service task list (all tasks under applications with permissions) |
Asset application-Group offline service-View offline service task details | ||
Asset application-Group offline service-Create offline service (Everyone can click, but an application with permissions is required for successful creation) | ||
Asset application-Group paged query | View | Asset application-Group paged query-View offline service task list (all tasks under applications with permissions) |
Asset application-Group paged query-View offline service task details | ||
Asset application-Group paged query-Create offline service (Everyone can click, but an application with permissions is required for successful creation) | ||
Asset application-Individual profile service | View | Asset application-Individual profile service-View profile list (all tasks under applications with permissions) |
Asset application-Individual profile service-View | ||
Asset application-Individual profile service-Create profile (Everyone can click, but an application with permissions is required for successful creation) | ||
Asset application-Application management | View | Application management-Create application |
Event Hub-Attribute management | View | Event Hub-Attribute management-View attribute list |
Event Hub-Attribute management-View attribute details | ||
Manage | Event Hub-Attribute management-Create attribute | |
Event Hub-Attribute management-Edit attribute | ||
Event Hub-Attribute management-Delete attribute | ||
Event Hub-Events management | View | Event Hub-Events management-View attribute list |
Event Hub-Events management-View attribute details | ||
Manage | Event Hub-Events management-Create attribute | |
Event Hub-Events management-Edit attribute | ||
Event Hub-Events management-Delete attribute | ||
Event Hub-Category management | View | Event Hub-Category management-View category |
Manage | Event Hub-Category management-Create category | |
Event Hub-Category management-Edit category | ||
Event Hub-Category management-Delete category | ||
Asset governance management
Level 1 permission: Feature | Global permission | Feature |
Governance | ||
Asset inventory | View | Asset search |
View asset details | ||
Initiate data exploration | Data table-Initiate data exploration (automatic/manual) | |
Data table-View data exploration records and reports | ||
Data table-Data exploration record operations (view logs, terminate execution, etc.) | ||
Data standard | ||
Data standard/standard set | View | Access standard set list (joined) |
View batch operation record list | ||
Standard set-Access standard set list (joined) | ||
Manage data standards | Data standard-Create data standard | |
Data standard-Edit data standard | ||
Data standard-Clone data standard | ||
Data standard-Submit data standard for publishing | ||
Data standard-Unpublish data standard | ||
Data standard-Delete data standard | ||
Data standard-Edit associated standards | ||
Data standard-Edit associated documents | ||
Data standard-Batch import data standards (also requires standard template-batch import standard permission) | ||
Data standard-Batch export data standards (also requires standard template-batch export standard permission) | ||
Data standard-View batch operation record details (also requires standard template-view import records permission) | ||
Standard set-Create standard | ||
Manage standard set directory | Standard set directory-Create standard set directory | |
Standard set directory-Edit standard set directory | ||
Standard set directory-Delete standard set directory | ||
Manage standard sets | Standard set-View all standard sets | |
Standard set-Create standard set | ||
Standard set-Edit standard set | ||
Standard set-Batch export standards | ||
Standard set-Clone standard set | ||
Standard set-Delete standard set | ||
Mapping rule for unsuccessful bids | View | Standard mapping rules-View standard mapping rule list |
Standard mapping rules-View execution record list | ||
Standard mapping rules-Mapping rules-View | ||
Standard mapping rules-Mapping rules-View execution records (depends on visible standard mapping rules) | ||
Selection Mapping Rule - Execution Record - Details | ||
Manage | Standard mapping rules-Mapping rules-Create standard mapping rule | |
Standard mapping rules-Mapping rules-Edit standard mapping rule | ||
Standard mapping rules-Mapping rules-Modify rule effectiveness status | ||
Standard mapping rules-Mapping rules-Temporary manual execution | ||
Standard mapping rules-Mapping rules-Delete standard mapping rule | ||
Standard mapping rules-Mapping rules-View execution logs | ||
Standard mapping rules-Execution records-View execution logs | ||
Mapping | View | Mapping-View global mapping relationships (valid mappings + invalid mappings) |
Mapping-View standard evaluation configuration | ||
Mapping-View standard evaluation records | ||
Mapping-View mapping details (valid mappings + invalid mappings) | ||
Mapping-View mapping details (valid mappings)-View mapping details | ||
Mapping-View mapping details (valid mappings)-View standard evaluation results | ||
Mapping (valid mappings, invalid mappings)-View batch import record list | ||
Mapping (valid mappings, invalid mappings)-Batch import | ||
Mapping (valid mappings, invalid mappings)-Batch export | ||
Manage | Mapping-Edit standard evaluation configuration | |
Mapping-Standard evaluation configuration-View standard evaluation records-Execution logs | ||
Mapping-View mapping details (valid mappings)-Configure quality monitoring-View configured data standard quality monitoring rules | ||
Mapping-View mapping details (valid mappings)-Configure quality monitoring-Add data standard quality monitoring rule | ||
Mapping-View mapping details (valid mappings)-Configure quality monitoring-Edit configured data standard quality monitoring rules | ||
Mapping-View mapping details (valid mappings)-Configure quality monitoring-Delete configured data standard quality monitoring rules | ||
Mapping-Valid mappings-Set as invalid mapping | ||
Mapping (valid mappings)-Configure quality monitoring | ||
Mapping-Valid mappings-Remove mapping relationship | ||
Mapping (valid mappings, invalid mappings)-View batch import record details | ||
Mapping-Cancel invalid mapping relationship | ||
Evaluation Details for Unsuccessful Bids | View | Standard evaluation details-View public standard evaluation details (standard perspective, asset object perspective) |
Standard evaluation details (standard perspective, asset object details)-View mapping details | ||
Unsuccessful Bid Execution | View | Standard execution records-View all execution records |
Standard execution records-View mapping details, view execution logs | ||
Lookup table | View | Lookup table-View lookup table list |
Lookup table-View lookup table details | ||
Lookup table-View batch import record list | ||
Lookup table-View batch export record list | ||
Lookup table-View lookup table references | ||
Lookup table-View lookup table directory | ||
Lookup table-Batch export | ||
Manage lookup table directory | Lookup table directory-Create lookup table directory | |
Lookup table directory-Edit lookup table directory | ||
Lookup table directory-Delete lookup table directory | ||
Manage lookup table | Lookup table-Create lookup table | |
Lookup table-Edit lookup table | ||
Lookup table-Batch import | ||
Lookup table-View batch import record details | ||
Lookup table-Download batch export files | ||
Lookup table-Delete lookup table | ||
Word root | View | Word root-View word root list |
Word root-View word root batch operation record list | ||
Word root-Batch export word roots | ||
Manage | Word root-Create word root | |
Word root-Batch import word roots | ||
Word root-Edit word root | ||
Word root-Delete word root | ||
Word root-View batch operation record details | ||
Standard document | View | Standard document-View standard document list |
Standard document-Online preview standard document (PDF only) | ||
Standard document-View associated standards | ||
Standard document directory-View standard document directory | ||
Manage standard document directory | Standard document directory-Create standard document directory | |
Standard document directory-Edit standard document directory | ||
Standard document directory-Delete standard document directory | ||
Manage standard document | Standard document-Upload standard document | |
Standard document-Edit standard document | ||
Standard document-Move standard document | ||
Standard document-Download standard document | ||
Standard document-Delete standard document | ||
Common standard attributes | View | Common standard attributes-View common standard attribute list |
Common standard attributes-System attributes-View details | ||
Manage | Common standard attributes-Custom attributes-Create attribute | |
Common standard attributes-Custom attributes-View details | ||
Common standard attributes-Custom attributes-Edit | ||
Common standard attributes-Custom attributes-Clone | ||
Common standard attributes-Custom attributes-Delete | ||
Standard template | View | Standard template-View standard template list |
Standard template-View standard template details | ||
Manage | Standard template-Create standard template | |
Standard template-Edit standard template | ||
Standard template-Delete standard template | ||
Identification feature | View | Identification feature-View identification feature list |
Identification feature-View identification feature details | ||
Manage | Identification feature-Feature scanning configuration Note This is a separate permission point from the security rule execution configuration. Having either one allows modification of feature scanning related configurations. | |
Identification feature-Create identification feature | ||
Identification feature-Edit identification feature | ||
Identification feature-Clone identification feature | ||
Identification feature-Delete identification feature | ||
Quality | ||
Quality Dashboard | View | Viewing the Quality Dashboard |
Verification records | View | Personal perspective-Current account |
Project perspective-Joined projects | ||
View verification details | ||
View verification details-View rule verification details | ||
View verification details-View execution logs | ||
View quality report | ||
Manage | View verification details-Download abnormal data | |
Pause | ||
Data quality rule | View | Personal perspective-Current account |
Project perspective-Joined projects | ||
View quality rule details | ||
View quality report | ||
View quality rule details-Rule configuration-View rule configuration list | ||
View quality rule details-Rule configuration-View | ||
View quality rule details-Schedule configuration-View schedule configuration list | ||
View quality rule details-Alert configuration-View alert configuration list | ||
View quality rule details-Exception archiving-View exception archiving list | ||
View quality rule details-Quality report-View report | ||
View quality rule details-Quality report-View rule verification details | ||
View quality rule details-Quality report-View execution logs | ||
View quality rule details-Permission management-View list | ||
Manage | Add monitored object (all resources) | |
Add quality rule | ||
Run | ||
Quality owner management | ||
Edit quality score weight | ||
Delete | ||
Modify verification switch | ||
Batch operations (Run, quality owner management, enable, disable, edit quality score weight, delete, permission management) | ||
View quality rule details-Modify quality score weight | ||
View quality rule details-Create quality rule | ||
View quality rule details-Rule configuration-Clone | ||
View quality rule details-Rule configuration-Edit | ||
View quality rule details-Rule configuration-Test run | ||
View quality rule details-Rule configuration-Run | ||
View quality rule details-Rule configuration-Schedule configuration | ||
View quality rule details-Rule configuration-Quality score configuration | ||
View quality rule details-Rule configuration-Delete | ||
View quality rule details-Rule configuration-Modify effectiveness status | ||
View quality rule details-Schedule configuration-Edit/Clone/Delete | ||
View quality rule details-Alert configuration-Modify configuration | ||
View quality rule details-Exception archiving-Add exception archiving table | ||
View quality rule details-Exception archiving-Set as default/Delete | ||
View quality rule details-Permission management-Edit permissions | ||
Verification records-View verification details-Download abnormal data | ||
Verification records-Pause | ||
Governance workbench-Operations (view details, initiate rectification, ignore, cancel ignore, whitelist, notify owner, re-verify, view operation records) | ||
Rectification process-Operations | ||
Governance whitelist-Operations | ||
Knowledge base-Operations (view, create, edit, delete) | ||
Rule template | View | View rule template list |
Manage | Create rule template | |
View references | ||
Edit | ||
Add quality rule | ||
View template details | ||
Clone | ||
Change owner | ||
Delete | ||
Data Source Management | View | View list |
Manage | Set throttling | |
Issue list | View | Personal perspective-Current account |
Project perspective-Joined projects | ||
Manage | Operations (View details/initiate rectification/ignore/cancel ignore/whitelist/notify owner/re-verify/view operation records) | |
Rectification process | View | Personal perspective-Current account |
Manage | Operations (view details/ignore/cancel ignore/notify owner/re-verify/associate knowledge base) | |
Knowledge base | View | View knowledge base |
Manage | Operations (create, associate, edit, delete) | |
Governance whitelist | View | Personal perspective-Current account |
Manage | Operations (edit, delete) | |
Asset security | ||
Identification results | View | Identification results-View all identification results |
Identification results-View upload history | ||
Identification results-View identification details | ||
Manage | Identification results-Excel upload | |
Identification results-Manual addition | ||
Identification results-Lock/unlock data classification/change identification mode | ||
Detection rules | View | Detection rules-View all detection rules |
Detection rules-View classification scanning scope | ||
Detection rules-View details | ||
Manage | Detection rules-Create detection rule | |
Detection rules-Manual rule scanning | ||
Detection rules-Rule execution configuration | ||
Detection rules-Automatic inheritance configuration | ||
Detection rules-Enable/disable automatic detection | ||
Detection rules-Reset/edit/copy/change owner/delete/test | ||
Detection execution records | View | Detection execution records-View all execution records |
Manage | Detection execution records-Terminate | |
Detection execution records-View task detection details | ||
Data masking rule | View | Data masking rule-View all data masking rules (dynamic data masking rules/whitelist/static masking) |
Data masking rule-View masking algorithms/view masking whitelist | ||
Manage | Data masking rule-View/modify default masking policy | |
Data masking rule-Create/edit/change owner/delete dynamic masking rules/modify effectiveness status | ||
Data masking rule-Dynamic masking whitelist-Create/edit/clone/delete/modify effectiveness status | ||
Key management | View | Key management-View all key lists |
Key management-View references | ||
Register key | Key management-Register key | |
Manage | Key management-Permission management | |
Key management-Edit/change owner/delete | ||
Data category | View | Data category-View all data categories |
Data category-Identification feature-View all identification features | ||
Data category-Identification feature-View | ||
Data category-Model view | ||
Data category-Model view-View model details | ||
Data category-View effective field count | ||
Manage | Data category-Create/modify effectiveness status/edit/move to new directory/delete | |
Data category-Set masking | ||
Data category-Specify data classification level/enable/disable | ||
Data classification level | View | Data classification level-View all data classification levels |
Manage | Data classification level-Create/edit/delete | |
Identification feature | View | Identification feature - View feature column list |
Identification feature-View identification feature details | ||
Manage | Identification feature-Create identification feature | |
Identification feature-Edit identification feature | ||
Identification feature-Clone identification feature | ||
Identification feature-Delete identification feature | ||
Security algorithm | View | Masking algorithm-View all masking algorithms |
Manage | Masking algorithm-Test | |
Project security policy | View | Project security policy-View global project security policy |
View details | Project security policy-View details | |
Manage | Project security policy-Edit | |
Resource governance | ||
Resource analysis | View | View resource analysis |
Governance analysis | View | Governance analysis-View |
Governance effect | View | Governance effect page-View |
My governance | View | My governance-View |
Project governance | View | Project governance-View |
Governance item management | View | Governance item management-View |
Push management | View | Push management-View |
Task management | View | Task management-View |
Recycle bin list | View | Recycle bin list-View |
Metadata | ||
Metadata acquisition-Collection tasks and collection instances | Manage | View collection task list |
Create collection task | ||
Edit collection task | ||
Delete collection task | ||
View metadata inventory | ||
View metadata instance | ||
Set as effective/ineffective | ||
Manual execution/temporary manual execution | ||
Retry updating collection task | ||
View collection instance list | ||
Metadata change overview | ||
View operation logs | ||
View collection task | ||
Rerun collection instance | ||
Terminate collection instance | ||
Metadata management-Metadata inventory | View | View business system metadata list |
View business system metadata details | ||
General configuration-Data exploration | Exploration and analysis | Data exploration configuration |
General configuration-Source system | Manage | View business system list |
Create business system | ||
Edit business system | ||
Delete business system | ||
General configuration - Sampling configuration | View | View sampling configurations. |
Manage | Edit sampling configurations. | |
Other features | Metadata management | Register and delete external lineage using OpenGauss APIs. |
Assets | ||
Overview | View | View asset overview |
Directory | View | Asset search |
View | View asset details | |
Directory management-Directory planning | View | View all topics and directories |
Manage | Create asset topic and directory | |
Edit asset topic and directory | ||
Delete asset topic and directory | ||
Directory management-Listing management | View | View listing management and menu page |
Manage | Edit asset | |
Asset listing | ||
Asset delisting | ||
Asset not for listing | ||
Set maintenance permissions | ||
Standard | View | View standard assets |
Asset consumption | ||
My consumption-Available to me | View | View my available list |
| ||
Go to NoteBook analysis | ||
My consumption-My BI analysis | View | View my BI analysis list |
Edit dashboard/Edit downloads | ||
View dashboard/View downloads | ||
Consumption configuration-Consumption channel | Manage | Add/edit/delete consumption channel |
Asset analysis application
Level 1 permission: Feature | Global permission | Feature |
Analysis | ||
Notebook | View | View directory |
View Notebook | ||
Create directory | ||
Edit directory | ||
Delete directory | ||
Create Notebook | ||
Edit Notebook | ||
Save Notebook | ||
Delete Notebook | ||
Share Notebook | ||
Delete shared Notebook | ||
Run Notebook | ||
SQL query | View | View directory |
View SQL | ||
Create directory | ||
Edit directory | ||
Delete directory | ||
Create SQL | ||
Edit SQL | ||
Save SQL | ||
Delete SQL | ||
Share SQL | ||
Delete shared SQL | ||
Run SQL | ||
Manual table | View | View directory |
View manual table | ||
Create manual table | ||
Edit data-Manual table | ||
Edit table structure-Manual table | ||
Save-Manual table | ||
Publish-Manual table | ||
Download-Manual table | ||
Share-Manual table | ||
Delete share-Manual table | ||
Delete table-Manual table | ||
Change owner-Manual table | ||
Service | ||
Marketplace | View | API service-View API service list |
API service-View API documentation | ||
API service-Download API documentation | ||
API service-Request API | ||
Dataphin data source service-View Dataphin data source service list | ||
Dataphin data source service-View Dataphin data source documentation | ||
Dataphin data source service-Request Dataphin data source | ||
Call | View | Authorized API service-View authorized API list |
Authorized API service-Request API | ||
Authorized API service-Debug API | ||
Authorized API service-Return API permissions | ||
Authorized Dataphin data source-View authorized Dataphin data source list | ||
Authorized Dataphin data source-Request Dataphin data source | ||
Authorized Dataphin data source-Return Dataphin data source permissions | ||
Application management-View application list | ||
Application management-Create application | ||
Application management-Edit application | ||
Application management-Delete application | ||
Application management-Request application | ||
Application management-Show AppSecret | ||
Application management-Copy AppSecret | ||
Application management-Reset AppSecret | ||
Application management-Transfer application ownership | ||
Call example-View API call example | ||
Call example-Edit API call example | ||
Call example-Download SDK | ||
Call example-View Dataphin data source usage example | ||
Call example-Edit Dataphin data source usage example | ||
Call example-JDBC Jar package download | ||
Development | View | API-View my developed API list |
API-Create API | ||
API-Create API--Select service unit dropdown | ||
API-Create API--Select Dataphin logical table | ||
API-Create API--Select Dataphin logical table-Business module | ||
API-Create API--Select Dataphin logical table-Business module-Logical table | ||
API-Edit API | ||
API-View API details | ||
API-Test API | ||
API-Publish API | ||
API-Delete API | ||
API - Transfer API ownership | ||
Service unit-View service unit list | ||
Service unit-Create service unit | ||
Service unit-Create service unit--Service unit name | ||
Service unit-Create service unit--Select data source | ||
Service unit-Edit service unit | ||
Service unit-View service unit details | ||
Service unit-Publish service unit | ||
Service unit-Delete service unit | ||
Service unit-Transfer service unit ownership | ||
Metadata management-View metadata with permissions | ||
Metadata management-Create metadata | ||
Metadata management-Edit metadata | ||
Metadata management-Delete metadata | ||
Dataphin data source-View my developed Dataphin data sources | ||
Dataphin data source-Create Dataphin data source | ||
Dataphin data source-Edit Dataphin data source | ||
Dataphin data source-View Dataphin data source details | ||
Dataphin data source-Delete Dataphin data source | ||
Dataphin data source-Data source acceleration | ||
Dataphin data source-Transfer Dataphin data source ownership | ||
O&M | View | Service monitoring-API call statistics |
Service monitoring-API throttling | ||
Service monitoring-API alerts | ||
API O&M-API throttling configuration | ||
API O&M-API alert configuration | ||
Service invocation log query-API call log query-View API call logs | ||
Service invocation log query-Dataphin data source usage log query -View Dataphin data source service invocation logs | ||
Management | View | Project management-View project list |
Project management-Create project | ||
Project management-Edit project | ||
Project management-Delete project | ||
Project management-Member management | ||
Project management-View group management | ||
Project management-Group management-Create service unit group | ||
Project management-Group management-Edit service unit group | ||
Project management-Group management-Delete service unit group | ||
Project management-Group management-Create application group | ||
Project management-Group management-Edit application group | ||
Project management-Group management-Delete application group | ||
Project management-Group management-Create data source group | ||
Project management-Group management-Edit data source group | ||
Project management-Group management-Delete data source group | ||
System configuration-View configuration | ||
System configuration-Modify configuration | ||
Network configuration-View network configuration | ||
Network configuration-Enable and disable public second-level domain (public cloud on-premises deployment environment) | ||
Network configuration-Enable and disable internal VPC domain (public cloud on-premises deployment environment) | ||
Network configuration-Bind independent domain (public cloud on-premises deployment environment) | ||
Network configuration-Enable and disable second-level domain (Apsara Stack deployment environment) | ||
Network configuration-Show and hide call IP address (private deployment environment) | ||
Network configuration-Bind independent domain (private deployment environment) | ||
Call example-View API call example | ||
Call example-Edit API call example | ||
Call example-Download SDK | ||
Call example-View Dataphin data source usage example | ||
Call example-Edit Dataphin data source usage example | ||
Call example-JDBC Jar package download | ||
More
Level 1 permission: Feature | Global permission | Feature |
Planning | ||
Data architecture | View | Data architecture-View global section list |
Data architecture-View section details | ||
Data architecture-View associated projects | ||
Data architecture-Data section-Business entity-View version information | ||
Create | Data architecture-Create data section | |
Data architecture-Create subject area | ||
Data architecture-Create business entity | ||
Data architecture-Data section-Subject area management-Create subject area | ||
Data architecture-Data section-Subject area management-Create subordinate subject area | ||
Data architecture-Data section-Subject area management-Create business entity | ||
Data architecture-Data section-Business entity-Create business entity | ||
Edit | Data architecture-Edit section | |
Data architecture-Data section-Subject area management-Edit subject area | ||
Data architecture-Data section-Business entity-Publish/unpublish | ||
Data architecture-Data section-Business entity-Create table | ||
Data architecture-Data section-Business entity-Edit | ||
Delete | Data architecture-Delete section | |
Data architecture-Data section-Subject area management-Delete subject area | ||
Data architecture-Data section-Business entity-Unpublish and delete | ||
Common business logic | View | Common business logic-Statistical period-View all statistical periods |
Common business logic-Global variable-View global variables | ||
Common business logic-Public calendar-View public calendar | ||
Common business logic-Global variable-Request permission | ||
Common business logic-Global variable-View dependencies | ||
Common business logic-Global variable-View historical versions | ||
Common business logic-Public calendar-View calendar references | ||
Common business logic-Public calendar-View calendar references-Reference tags-View references | ||
Common business logic-Public calendar-View calendar references-Reference tags-View tag details | ||
Common business logic-Public calendar-View calendar references-Reference date type-View details | ||
Common business logic-Public calendar-View calendar references-Reference calendar-View details | ||
Common business logic-Offline schedule template-View details | ||
Manage | Common business logic-Statistical period-Create statistical period | |
Common business logic-Statistical period-Edit | ||
Common business logic-Statistical period-Delete | ||
Common business logic-Global variable-View dependencies-View object | ||
Common business logic-Global variable-View historical versions-Version comparison | ||
Common business logic-Global variable-View historical versions-Version rollback | ||
Common business logic-Global variable-Create variable group | ||
Common business logic-Global variable-Create global variable | ||
Common business logic-Global variable-Edit/delete variable group | ||
Common business logic-Global variable-Edit/delete variable | ||
Common business logic-Public calendar-Create public calendar | ||
Common business logic-Public calendar-View calendar references-Reference tags-Edit tag | ||
Common business logic-Public calendar-View calendar references-Reference tags-Delete tag | ||
Common business logic-Public calendar-Create tag | ||
Common business logic-Public calendar-Edit/delete public calendar | ||
Common business logic-Offline schedule template-Create offline schedule template | ||
Common business logic-Offline schedule template-Edit/delete offline schedule template | ||
Attribute management | View quality, API, table, metric, dashboard attributes | Attribute management-View |
Attribute management-Quality, API, table, metric, dashboard-View details | ||
Manage quality, API, table, metric, dashboard attributes | Attribute management-Quality, API, table, metric, dashboard-Create attribute | |
Attribute management-Quality, API, table, metric, dashboard-Edit | ||
Attribute management-Quality, API, table, metric, dashboard-Clone | ||
Attribute management-Quality, API, table, metric, dashboard-Enable/disable | ||
Attribute management-Quality, API, table, metric, dashboard-Delete | ||
View tag attributes | Attribute management-View | |
Attribute management-Tag-View details | ||
Manage tag attributes | Attribute management-Tag-Create attribute | |
Attribute management-Tag-Edit | ||
Attribute management-Tag-Clone | ||
Attribute management-Tag-Delete | ||
Attribute management-Tag-Enable/disable | ||
Tag architecture | View | Tag architecture-View |
Manage | Tag architecture-Asset marketplace management-Add/edit/category settings/delete marketplace | |
Tag architecture-Entity management-Add/edit/delete entity | ||
Tag architecture-ID management-Add/edit/delete ID | ||
Project management | View | Project management-View joined and all projects |
Project management-View details of all projects (view details of configuration/information settings) | ||
Project management-Member management-View all members under each project | ||
Create | Project management-Create project-General project/tag project | |
Edit | Project management-Member management-Edit members of each project | |
Delete | Project management-Delete project (all projects) | |
Compute engine | View | Compute engine-View compute engine list |
Compute engine-Connection test | ||
Create | Compute engine-Add compute engine | |
Edit | Compute engine-Edit/transfer ownership/delete | |
Delete | Compute engine-Delete | |
Hadoop cluster Databricks cluster Amazon EMR cluster SelectDB cluster Doris cluster AnalyticDB for PostgreSQL cluster | View | Compute engine-Manage cluster-View details of each cluster (view, view historical versions, historical version comparison) |
Manage | Compute engine-Manage cluster (create cluster, edit, clone, delete) | |
Acceleration source management | View | Acceleration source - View the list of acceleration sources. Acceleration source - Test a connection. |
Create | Acceleration source - Add an acceleration source. | |
Edit | Acceleration source - Edit | |
Delete | Acceleration source - Delete | |
Management Hub | ||
Member management | View | View |
Member management-View all member lists | ||
Global role management-View all global roles | ||
Global role management-View role details | ||
Project role management-View all project roles | ||
Project role management-View role details | ||
Project role management-View project references | ||
User group management-View user groups I've joined and all user groups | ||
User management-Groups I've joined-View user group details and permissions | ||
Member management-Member management | Manage tenant members | Member management-View contact information of all people |
Member management-Add member | ||
Member management-Automatically add members (SSO) | ||
Member management-View ownership transfer records | ||
Member management-Account system synchronization (SSO) | ||
Member management-Edit/enable-disable/transfer/add user group/delete | ||
Member management-Create account/batch create (self-built) | ||
Member management-Reset password (self-built) (Cannot reset super administrator account password) | ||
Member management-Project role management | Manage project roles | Project role management-Create, clone, edit, enable-disable, delete, replace |
Member management-User group | Manage user groups | User group management-Create and clone user groups |
User management-Manage members, edit, delete, enable-disable user groups | ||
Permission management | View | View permission management |
Permission management-Table management | Table permission management | Roles with this permission can grant authorization permissions for all tables when creating new roles. Only super administrators can select this option |
All table authorization | Permission management-Table permissions-Batch grant/revoke | |
Permission management-Permission audit | Permission management-Table permissions-Batch grant/revoke | Permission audit-Asset permission audit-View/export |
Permission audit-Asset operation audit-View/export | ||
Data Source Management | View | View data sources |
Data Source Management-Data sources-View all data sources/test | ||
Data Source Management-Custom source types-View all source types | ||
View connection information | Data Source Management - Data sources - View connection information. | |
Data Source Management-Data sources | Create | Data Source Management-Data sources-Create data source |
Edit | Data Source Management-Data sources-Edit data source | |
Data Source Management-Data sources-View connection information | ||
Data Source Management-Data sources-Edit/transfer ownership | ||
Data Source Management-Data sources-Manage tags/source systems | ||
Delete | Data Source Management-Data sources-Delete data source | |
Data Source Management-Data sources-Delete production and development data sources | ||
Data Source Management-Custom source types | Manage | Data Source Management-Custom source types-Add custom source type |
Data Source Management-Custom source types-Transfer/edit | ||
Data Source Management-Custom source types-Delete custom source type | ||
System settings | View | View system settings |
System settings-Compute settings-View/verify | ||
System settings-Resource settings-View resource settings list | ||
System settings-Resource settings-Session cluster-Jump to Flink UI/view start-stop logs | ||
System settings-Message channel-View all channel configurations | ||
System settings-Intelligent engine-View | ||
System settings-Cross-platform migration-View | ||
System settings-Approval template-View | ||
System settings-Tag global settings-View | ||
System settings-Analysis platform settings-View | ||
System settings-Development platform settings-View | ||
System settings-Login security settings-View | ||
System settings-Basic settings | Manage | System settings-Basic settings-Manage |
System settings-Compute settings | Manage | System settings-Compute settings-Edit |
System settings-Resource settings | Manage | System settings-Resource settings-Resource group configuration-Create, edit, enable-disable, delete custom resource groups |
System settings-Resource settings-Resource group configuration-Modify tenant default resource group | ||
System settings-Resource settings-Session cluster-Create, enable-disable, edit, delete | ||
System settings-Message channel | Manage | System settings-Message channel-Edit message channel |
System settings-Style configuration | Manage | System settings-Style configuration-Modify style configuration |
System settings-Intelligent engine | Manage | System settings-Intelligent engine-Edit |
System settings-Cross-platform migration | Manage | System settings-Cross-platform migration-Edit |
System settings-Approval template | Manage | System settings-Approval template-Add/edit/delete |
System settings- Python third-party packages | Manage | System settings- Python third-party packages-Install python module |
System settings-Tag platform settings | Manage | System settings-Tag platform settings-Edit |
System settings-Analysis platform settings | Manage | System settings-Analysis platform settings-Edit |
System settings-Development platform settings | Manage | System settings-Development platform settings-Edit |
System settings-Login security settings | Manage | System settings-Login security settings-Edit |
Specification settings | View | View specification settings |
Specification settings-Encoding specifications-View | ||
Specification settings-Security settings-View | ||
Specification settings-Data download-View | ||
Specification settings-Data permissions-View | ||
Specification settings-Change policy-View | ||
Specification settings-Change rules-View | ||
Specification settings-Encoding specifications | Manage | Specification settings-Encoding specifications-Edit |
Specification settings-Security settings | Manage | Specification settings-Security settings-Edit |
Specification settings-Data download | Manage | Specification settings-Data download-Edit |
Specification settings-Data permissions | Manage | Specification settings-Data permissions-Edit |
Specification settings-Change policy | Manage | Specification settings-Change policy-Edit |
Specification settings-Change rules | Manage | Specification settings-Change rules-Edit |
Specification settings-Filename specifications | Manage | Specification settings-Filename specifications-Edit |
Cross-tenant publishing | View | View cross-tenant publishing |
Cross-tenant publishing-View publishing settings | ||
Enable cross-tenant publishing mode | Maintenance upgrade-Cross-tenant publishing
| |
My | ||
Notification center | Manage notification settings | Notification settings-View&edit |
Alert center | View | Alert center-View |
Alert center-Alert events-View all alert events | ||
Alert center-Push records-View all push records | ||
Alert center-Alert events-Process | ||
Alert center-Push records-View alert content | ||
Alert center-Message templates-View | ||
Alert center-Shift schedule-View shift schedule | ||
Alert center-Shift schedule-View shift schedule details | ||
Manage | Alert center-Alert events-Do not disturb | |
Alert center-Message templates-Edit | ||
Alert center-Create/edit/delete shift schedule | ||
Project role permission descriptions
Level 1 permission: Feature | Level 2 permission: Permission point | Feature |
Project management | ||
Member management | Edit | Project members-Add/delete/modify roles |
Configure project information | View | Project information settings-View |
Edit | Project information settings-Edit | |
Call JDBC Driver | Call JDBC Driver | Execute SQL through JDBC Driver using the project |
Project quality management | Quality rule management | Can select objects under specified projects to create monitored objects, create and manage monitoring rules, verification records, and issue list management |
Planning | ||
Business entity | Edit | Business entity creation, editing, deletion, unpublishing |
Data Integration | ||
Data Integration | Access directory | Real-time integration directory-View, search, filter |
Pipeline task directory-View, search, filter | ||
View details | Real-time integration-View (canvas, operators, properties, history) | |
Pipeline task-View (canvas, operators, properties, history) | ||
Edit | Real-time integration directory-Create | |
Real-time integration directory-Edit/rename/delete (folders) | ||
Real-time database synchronization task-Create | ||
Real-time database synchronization task-Move | ||
Real-time database synchronization task-Unpublish | ||
Real-time database synchronization task-Edit (data source, synchronization settings, target table configuration, DDL processing strategy) | ||
Real-time database synchronization task-Properties (change owner) | ||
Real-time database synchronization task-Resource configuration | ||
Real-time database synchronization task-Lock | ||
Real-time database synchronization task-Save | ||
Real-time database synchronization task-Unpublish and delete | ||
Pipeline task directory-Create (folder) | ||
Pipeline task directory-Edit/rename/delete (folder) | ||
Pipeline task directory-Upload | ||
Pipeline task directory-Delete | ||
Pipeline task-Create | ||
Pipeline task-Edit (add, edit, delete components, etc.) | ||
Pipeline task-Clone | ||
Pipeline task-Save | ||
Pipeline task-Delete | ||
Pipeline task-Unpublish and delete | ||
Pipeline task-Properties (schedule configuration, channel configuration, quality monitoring) | ||
Pipeline task-Lock | ||
Pipeline task-Refresh | ||
Pipeline task-Move | ||
Execute | Real-time database synchronization task-Submit | |
Pipeline task-Run | ||
Pipeline task-Preview | ||
Pipeline task-Submit | ||
Data development | ||
Data standardization and modeling | Access directory | Logical dimension table/logical fact table/atomic metric/business filter/metric/logical aggregate table directory-View |
Logical dimension table/logical fact table/atomic metric/business filter/metric/logical aggregate table directory-Filter/search | ||
View details | Logical dimension table-View (view model view/list view/table properties/historical information/version details/version comparison) | |
Logical fact table-View (view model view/list view/table properties/historical information/version details/version comparison) | ||
Atomic metric-View (view model view/list view/table properties/historical information/version details/version comparison) | ||
Business filter-View (view model view/list view/table properties/historical information/version details/version comparison) | ||
Derived metric-View (view model view/list view/table properties/historical information/version details/version comparison) | ||
Logical aggregate table-View (view model view/list view/table properties/historical information/version details/version comparison) | ||
Edit | Logical dimension table/logical fact table/atomic metric/business filter/metric/logical aggregate table-Create class | |
Logical dimension table/logical fact table/atomic metric/business filter/metric/logical aggregate table-Edit (edit button, canvas area operations, materialization configuration, lock, property editing, version rollback) | ||
Logical dimension table/logical fact table/atomic metric/business filter/metric/logical aggregate table-Save | ||
Logical dimension table/logical fact table/atomic metric/business filter/metric/logical aggregate table-Delete | ||
Logical aggregate table-Metric management/create registered metrics | ||
Atomic metric/business filter-Clone | ||
Data architecture-Create logical table (backend needs to filter by projects with permissions) | ||
Execute | Logical dimension table/logical fact table/atomic metric/business filter/metric/logical aggregate table-Smoke testing, submit, unpublish, unpublish and delete | |
Data processing | Access directory | Code task directory-View/filter/search |
Resource/function directory-View/filter/search | ||
Code template-View/filter/search | ||
Table management-View/filter/search | ||
Sync task-View/filter/search | ||
View details | Code task-View content/properties (view only)/historical information (no rollback)/refresh/logs | |
Resource/function-View content/properties/historical information/logs/download | ||
Code template-Template information/version information/reference information | ||
Table management-View content/properties/history (no rollback) | ||
Sync task-View content/properties (view only)/historical information (no rollback) | ||
Edit | Code task directory-Create | |
Code task directory-Edit | ||
Code task directory-Delete | ||
Code task-Create | ||
Code task-Edit (edit, clone, rename, code area changes, save, format, lock, property editing, version rollback) | ||
Code task-Delete | ||
Code task-Move | ||
Resource/function directory-Create | ||
Resource/function directory-Edit | ||
Resource/function directory-Delete | ||
Resource/function-Create | ||
Resource/function-Edit | ||
Resource/function-Rollback | ||
Resource/function-Delete | ||
Resource/function-Move | ||
Code template-Create | ||
Code template-Edit (edit, clone, rename, code area changes, save, lock) | ||
Code template-Delete | ||
Table management-Create | ||
Table management-Edit (edit, rename, move, save, lock, version rollback) | ||
Table management-Delete | ||
Table management-Special editing for mirror tables (batch association, automatic association) | ||
Sync task-Create | ||
Sync task-Edit (edit, rename, move, task modification, save, lock) | ||
Sync task-Delete | ||
Execute | Code task-Execute/submit/precompile/unpublish/unpublish and delete | |
Resource/function-Submit | ||
Code template-Debug/submit/unpublish and delete | ||
Table management-Submit/unpublish/unpublish and delete | ||
Sync task-Submit/unpublish/unpublish and delete | ||
Ad hoc query | Access directory | Ad hoc query directory-View |
View details | Ad hoc query-View content/assistant/historical information/logs | |
Edit | Ad hoc query directory-Create | |
Ad hoc query directory-Edit (rename, move) | ||
Ad hoc query directory-Delete | ||
Ad hoc query-Create | ||
Ad hoc query-Edit (edit, rename, code area changes, save, format, lock) | ||
Ad hoc query-Delete | ||
Ad hoc query-Refresh | ||
Ad hoc query-Move | ||
Execute Note Computation task execution and ad hoc query execution are the same permission point. The interface display and OpenAPI differ: without permission, execution cannot be performed on the interface; through OpenAPI, execution can be performed with any execution permission. | Ad hoc query code-Execute | |
Ad hoc query code-Precompile | ||
Global search | Global search | Global search-Search resources |
Global search-Code search | ||
Recycle bin | Delete | Recycle bin-Permanently delete |
Restore | Recycle bin-Restore | |
Project asset permissions | ||
Physical table | Create | Physical table-Create |
Query table data | Project's physical tables, physical views-Query | |
Modify table data | Project's physical tables-Modify table data | |
Modify table structure | Project's physical tables-Modify table structure | |
Delete table | Project's physical tables-Delete | |
Logical table | Query table data | Query permissions for logical tables within the project (metrics in the project's aggregate tables), logical views |
Real-time source table | Query table data | Real-time source table-Query table data |
Modify table data | Real-time source table-Modify table data | |
Mirror table | Query table data | Mirror table-Query table data |
Publishing and O&M | ||
Publishing module | View details | Objects to be published list-Page view/version records |
Publishing list-Page view/publishing details/failure logs | ||
Publish (prod only) | Objects to be published list-Publish | |
Publishing list-Republish | ||
Remove | Objects to be published list-Remove | |
O&M | Access directory | Exception statistics, dashboard |
Recurring task/one-time task/real-time task-View task list | ||
Recurring task/one-time task/real-time task-Search/filter | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-View task list | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-Search/filter | ||
View basic information | Recurring task/one-time task/real-time task-View DAG graph/view node details/view operation logs | |
Recurring task/one-time task/real-time task-View instances (task instances + data backfill instances) | ||
Recurring task/one-time task/real-time task-Edit development node/view production node | ||
Recurring task-Logical table task specific-Fields and batch operations (operation permissions same as external)/view production chain/view consumption chain | ||
Recurring task/one-time task/real-time task-Expand parent node/expand child node | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-View DAG graph/view node details/view operation logs | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-Edit development node/view production node | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-Expand parent node/expand child node | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-View task | ||
Recurring instance-Logical table task specific-Fields and batch operations (internal operation permissions same as external)/view production chain/view consumption chain | ||
View details (including code) | Recurring task/one-time task/real-time task-View node code | |
Recurring task-Logical table task specific-View materialization code | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-View node code/view operation logs/view operation diagnostics | ||
Recurring instance-Logical table task specific-View materialization code | ||
O&M operations | Recurring task/one-time task/real-time task-Data backfill | |
Recurring task/one-time task/real-time task-Change owner | ||
Recurring task/one-time task/real-time task-Pause/resume | ||
Recurring task/one-time task/real-time task-Configure monitoring alerts | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-Rerun/rerun downstream/set as successful to continue scheduling/terminate/force rerun | ||
Recurring instance/one-time instance/real-time instance/data backfill instance-Remove upstream dependency/pause/resume | ||
Resource configuration | Recurring task/one-time task/real-time task-Modify priority | |
Recurring task/one-time task/real-time task-Modify resource queue | ||
Real-time task-Modify configuration | ||
Task monitoring configuration | Access directory | Offline monitoring/real-time monitoring-View list directory |
Offline monitoring/real-time monitoring-Filter | ||
Create | Offline monitoring/real-time monitoring-Create monitoring | |
Edit | Edit monitoring configuration, enable/disable monitoring configuration | |
Modify recipients | ||
Delete monitoring configuration | ||