Administrators can define an approval workflow at the DataWorks workspace level for publishing each DataService Studio API.
Limits
DataService Studio approval policies are supported in DataWorks Enterprise Edition.
Create an approval policy
-
Log on to the DataWorks console. In the target region, click in the left-side navigation pane. Select a workspace from the drop-down list and click Go to Data Development.
-
Click the
icon in the upper-left corner and choose to open the Approval Center page. -
On the Approval Center page, choose in the left-side navigation pane to open the DataService Studio approval policy management page.
On the DataService Studio approval policy management page, you can view the list of existing policies and edit or delete them.
-
Click Create Policy in the upper-right corner. On the Create Approval Policy page, configure the policy settings.
Enter basic information
Enter a Policy Name and Purpose based on the business scenario this policy covers.
Select the scope
Define the data scope to which the approval policy applies based on your use case. After the policy is created, permission requests for data within this scope must follow the approval process defined by the policy.
From the Select Workspace drop-down list, select the workspace to manage. An Alibaba Cloud account or a RAM user granted the AliyunDataWorksFullAccess policy can select any workspace. A workspace administrator can select only a workspace to which they belong.
Configure notification methods
DataWorks supports text message, email, DingTalk chatbot, and webhook notification methods. After you configure the notification methods, approvers will be notified through the selected channels when a permission request is submitted.
This step only defines the notification methods. The actual approvers are assigned in the next step (Configure the approval chain).
-
To ensure approvers can receive text message and email notifications, you must add them as DataWorks alert contacts. For details, see View and configure alert contacts.
-
To ensure approvers can receive DingTalk notifications, go to the DingTalk chatbot management settings, set Security Settings to Custom Keywords, add the keyword DataWorks, and do not select any other security settings.
If you do not add the DataWorks keyword or select other security settings, approvers will not receive DingTalk notifications.
Configure the approval chain
In the Configure Processing Links section, define the approver and role for each approval node. Note the following:
-
Approval flow: After configuration, the approval flow progresses sequentially from top to bottom. The next approver is notified only after the current approver grants approval.
-
Approver types: Each node supports different approver types. MaxCompute approver types include: DataWorks Workspace Role, DataWorks Workspace Member, Table Owner, Alibaba Cloud Account, and MaxCompute Role. Hologres approver types include: Table Owner, Alibaba Cloud Account, and RAM User.
Note-
When an approval task is pending, DataWorks notifies all approvers using the notification methods configured in the previous step. To ensure approvers can receive text message and email notifications, you must add them as DataWorks alert contacts. For details, see View and configure alert contacts.
-
When multiple users share the same approver role on a node, all of them receive the notification. Approval from any one of them is sufficient to advance the request to the next node.
-