DataWorks:Manage permissions on Hologres

Prerequisites

Before you begin, ensure that you have:

• A Hologres instance. For more information, see Purchase a Hologres instance.

• A Hologres data source added. For more information, see Hologres data source.

• Hologres metadata collected. For more information, see Metadata collection.

• The permission model of the target database set to the standard PostgreSQL authorization model. For more information, see Switch between permission models.

Open Security Center

Log on to the DataWorks console. In the top navigation bar, select a region. In the left-side navigation pane, choose Data Governance > Security Center, then click Go to Security Center.

Configure an authorized identity

Who can do this: Only Alibaba Cloud accounts or RAM users with the AdministratorAccess policy attached.

An authorized identity is the account that DataWorks uses to access a Hologres instance on your behalf.

1. On the Permission Application tab, set Data Source Type to Hologres in the Application Content section. If no authorized identity is configured for the instance, a warning message appears. Click OK to dismiss it.

   

2. Click Configure Authorization Identity below Authorized Identity.

3. In the Hologres instance authorization identity configuration dialog box, specify an authorized identity for each Hologres instance, then click OK.

   

To use a RAM user as the authorized identity, the RAM user must have both the AliyunHologresReadOnlyAccess policy attached and the SuperUser role assigned within the Hologres instance.

Request permissions on Hologres tables

Who can do this: Any user who needs access to Hologres tables, or an administrator acting on behalf of another user.

Supported table-level permissions:

Table-level permissions on Hologres are permanent. You cannot set an expiration time.

1. Go to the Permission Application tab.

2. Select the tables on which you want to request permissions:

   1. Set Data Source Type to Hologres, then configure the Hologres Instance and Database parameters.

   2. In the Tables to Be Added section, search for or select the tables you need.

   3. In the form to the right, select the permissions to request for each table.

      • To apply a permission to all selected tables at once, select it in the first row.

      • To remove a permission request for a specific table, deselect it for that table.

3. In the Application information section, configure the following parameters:

   Parameter	Description
   User	The account for which you are requesting permissions. Select Current login account to request permissions for your own account, or Apply on Behalf of Others to request permissions for a different account. If you select Apply on Behalf of Others, also specify the Other Identity parameter.
   Reason for Application	The business reason for the permission request.

4. Click Apply for permission to submit the request.

After submission, view the processing status and request details on the Permission Application Records tab.

Approve or reject permission requests

If a single permission request covers tables owned by different users, the system automatically splits the request into separate approval tasks — one per table owner.

1. On the Permission Application Processing tab, set Data Source Type to Hologres. Use the filter conditions to find requests assigned to your account.

2. Find a request and click Approval in the Operation column to open the Approval details dialog box, where you can review the request details and processing history.

3. Process the request:

   • Single request: Enter your comments and click Agree or Rejection.

   • Multiple requests: Select all requests to process, click Batch Consent or Batch rejection, then enter your comments.

View permission request history