All Products
Search

This Product

    E-MapReduce:Manage permissions

    Document Center

    E-MapReduce:Manage permissions

    Last Updated:Jun 16, 2026

    When you use E-MapReduce (EMR), properly managing member permissions helps prevent security risks such as data leakage and misoperations.

    Permission management system

    Item

    Description

    Principals

    EMR supports the following principals:

    • Users: includes Alibaba Cloud accounts and RAM users. You can add, delete, and query users. For more information, see Overview of RAM users.

    • Roles: includes built-in roles and custom roles. You can add, delete, and query custom roles. For more information, see RAM role overview.

    Objects

    EMR supports fine-grained permission management on objects such as Elastic Compute Service (ECS) instances, virtual private clouds (VPCs), Object Storage Service (OSS) buckets, and Data Lake Formation (DLF) metadata.

    User group authorization

    To grant the same permissions to multiple users, assign a role to the users as a group. For more information, see Grant permissions to a RAM user group.

    User authorization

    You can grant permissions to users by using one of the following methods:

    • Direct authorization: grants permissions to individual users.

    • Role-based authorization: grants the same permissions to multiple users at once.

    References