Realtime Compute for Apache Flink:Development console authorization

1. (Optional) Create a custom role

You can create a custom role with specific permissions as needed. If you want to use a default system role, you can skip this step.

1. Log on to the real-time computing development console as a member with the Owner role or with role management permissions.

2. At the top of the page, select the target project.

   

3. In the navigation pane on the left, click Security > Permission Management, and then click the Role Management tab.

4. Click Add Role and enter the required information.

   Parameter	Description
   Role Name	The name of the custom role. The name must start with a letter, can contain only digits, letters, and hyphens (-), and must be no more than 64 characters in length.
   Role Description	A description or additional information about the role. This helps administrators and other members understand the purpose and permission scope of the role. The description can be up to 256 characters in length.
   Role Permissions	To ensure permission integrity, some permission points have dependencies on other required permission points. The system automatically selects these dependencies for you. For details about permission dependencies, see Fine-grained permission list.

5. Click OK. You can then view, edit, and delete the custom role that you added.

   

   • View Permissions: View the permissions of the role.

   • View Members: View the members that are attached to the role.

   • Edit Permissions: Members with role editing permissions can add or remove permissions as needed.

   • Delete Custom Role: Before you delete a role, consider the security risks. You must remove all members from the role or assign them different roles. After the role has no attached members, a member with role deletion permissions can delete the role.

2. Attach a role to a member

Attach a role to a member to ensure that the member has the necessary permissions.

1. Log on to the real-time computing development console as a member with permissions to create members, such as a member with the Owner role.

2. At the top of the page, select the target project.

   

3. In the navigation pane on the left, click Security > Permission Management, and then click the Member Management tab.

4. Click Add Member, add a member, and select a Role for the member.

   

   Configuration item	Details
   Select RAM account	Displays the Resource Access Management (RAM) users and RAM roles that are created under the Alibaba Cloud account for the project. You can select multiple users and roles for authorization.
   Add account manually	Manually enter other Alibaba Cloud account IDs, RAM user IDs, or RAM role IDs for authorization. The following list describes how to view the IDs: Alibaba Cloud account ID: Click the profile picture in the upper-right corner of the console. In the Account Center, navigate to the Security Settings page to view your Account ID. RAM user ID (UID): For more information, see View the information about a RAM user. RAM role ID: For more information, see View the information about a RAM role.
   Role	You can select a system role or a custom role. Before you select a target role, you can go to the Role Management tab and click View Permissions in the Actions column of the target role to view its permissions.

5. Click OK.

3. Log on and use the console after authorization

After the authorization is complete, the newly added member can log on to the real-time computing development console and use its features.

• If the member is already logged on: After the permissions are granted, the member must refresh the page to access the target project.

• If the member is not logged on: After the permissions are granted, the member can access the target project using the project URL.