If you want to allow multiple Alibaba Cloud accounts or RAM users to use the same namespace in the console of fully managed Flink and perform operations such as draft development and deployment O&M, you must add the Alibaba Cloud accounts or RAM users as members of the namespace. This way, the Alibaba Cloud accounts or RAM users are authorized to perform operations related to drafts and deployments in the namespace. This topic describes how to add an Alibaba Cloud account or a RAM user as a member of a namespace in the console of fully managed Flink. This topic also describes the operations that can be performed by different roles in a namespace.
Precautions
If an account is not authorized to perform operations related to drafts and deployments in a namespace, the namespace list is empty after the account is used to log on to the console of fully managed Flink, and the account cannot be used to perform operations in a namespace such as draft development.
Operations supported by roles
Realtime Compute for Apache Flink allows you to add an Alibaba Cloud account, a RAM user, and an Alibaba Cloud account that is assigned a RAM role as a member of a namespace. You can assign the owner, editor, or viewer role to the member that you add. The following table describes the operations that can be performed by different roles.
Operation | owner | editor | viewer |
View deployments | Y | Y | Y |
Start and cancel a deployment | Y | Y | N |
Modify deployment configurations | Y | Y | N |
View resources | Y | Y | Y |
Upload resources | Y | Y | N |
Write SQL statements | Y | Y | N |
Create a user-defined function (UDF) | Y | Y | N |
Register metadata | Y | Y | N |
View a deployment template | Y | Y | Y |
Add, delete, and modify a deployment template | Y | N | N |
Manage members | Y | N | N |
Manage keys | Y | Y | N |
Procedure
Log on to the console of fully managed Flink by using the member that is assigned the owner role in a namespace.
In the top navigation bar, select the namespace from the drop-down list.
In the left-side navigation pane, click Security. On the Security page, click Add Member.
In the Add Member dialog box, configure the Role and Member Information parameters.
Role: For more information about the operations that can be performed by different roles, see Operations supported by roles.
Member Information: The RAM users of your Alibaba Cloud account in the current namespace are displayed after you click the Member Information field. You can select the required RAM user of your Alibaba Cloud account or enter the ID of another Alibaba Cloud account or the ID of the Alibaba Cloud account that is assigned a RAM role.
NoteYou can enter the ID of an account for a fuzzy match. For more information about how to obtain the ID of an account, see How do I query the ID of an account?
Click OK.
After a member is added, the member can log on to the console of fully managed Flink by using the URL of the namespace to perform operations.
NoteIf the member has logged on to the console of fully managed Flink, the member can refresh the page to access the desired namespace.