MaxCompute:FAQ about permissions

Commonly used scripts for a project owner to grant permissions

-- Method 1: Directly grant permissions to a user.
use project_xxx;  -- Allow the user to use the specified project. The name of a project in the development environment is suffixed with _dev.
grant CreateResource to user_xxx@aliyun.com;  -- Grant the CreateResource permission to the specified RAM user.

-- Method 2: Create a role and assign the role to a user.
use project_xxx;
create role worker; -- Create a role.
grant worker to user_xxx@aliyun.com; -- Assign the role to the specified RAM user.
grant CreateInstance, CreateResource, CreateFunction, CreateTable, List ON PROJECT project_xxx TO ROLE worker; -- Grant the required permissions on a specified project to the role.

-- Examples:
-- Grant volume-related permissions to the specified RAM user.
use project_xxx;
grant CreateVolume on project project_xxx to user user_xxx@aliyun.com;
grant Read on volume volume_xxx to user user_xxx@aliyun.com;
grant Write on volume volume_xxx to user user_xxx@aliyun.com;

-- Query the permissions that are granted to the specified RAM user.
use project_xxx;
show grants for user_xxx@aliyun.com;