After you create a MaxCompute project, you can grant permissions to other Resource Access Management (RAM) users so they can assist with development. Once granted, RAM users can operate tables, resources, functions, or jobs in the project. This topic describes how to authorize RAM users.
Prerequisites
You have created a MaxCompute project.
If you have not created a MaxCompute project, create one first. For more information, see Create a MaxCompute project.
You have created a RAM user.
For more information about creating a RAM user, see Prepare a RAM user.
Authorization method
DataWorks provides a complete permission control solution for data development and administration. The following example uses DataWorks in standard mode to explain how to grant permissions when the development environment and production environment are isolated.
Development environment:
Add members to your DataWorks workspace. After that, these members can develop MaxCompute jobs in DataWorks.
For more information about adding members in the DataWorks console, see Add workspace members.
After you add DataWorks members, see Permission mappings between MaxCompute and DataWorks for the MaxCompute permissions corresponding to each member role.
Production environment:
You can find tables in the production environment in Data Map and request permissions on those tables.
For more information about requesting table permissions, see Request table permissions.
What to do next
Prepare your MaxCompute project development environment and install the required tools. For more information about environment setup and security tools, see Choose a connection tool.