All Products
Search

This Product

    MaxCompute:Purchase and use exclusive resource groups for Data Transmission Service

    Document Center

    MaxCompute:Purchase and use exclusive resource groups for Data Transmission Service

    Last Updated:Mar 01, 2026

    Exclusive resource groups for Data Transmission Service provide your MaxCompute project with guaranteed data transfer capacity. Unlike the shared public resource group, an exclusive resource group locks purchased resources for your use only, delivering stable concurrency and low latency for large-scale data transfers.

    The following table compares the two resource group types:

    Resource group typeBillingSupported regionsCharacteristics
    Public data transmission service resource groupFreeAll MaxCompute regionsShared resources with no guaranteed availability. Maximum concurrency is limited and varies by region. Job submissions may fail during peak hours.
    Exclusive data transmission service resource groupSubscription. Billed by the number of purchased concurrency slots. For pricing details, see Exclusive data transmission service resource group pricing.China (Hangzhou), China (Beijing), China (Shanghai), China (Shenzhen), China (Hong Kong), Singapore, Indonesia (Jakarta), US (Virginia)Resources are fully locked for your exclusive use. Other tenants cannot access them.
    Important

    Exclusive resource groups use subscription billing. You are charged for the purchased concurrency slots regardless of actual usage. Evaluate your data transfer volume before purchasing.

    Prerequisites

    Before you begin, make sure that:

    • Your data transfer uses a VPC network. Public internet access is not supported.

    • Your data source and destination are in the same region. Cross-region data transmission is not supported.

    • You purchase the exclusive resource group in the same region where your data transmission task runs.

    For additional limits, see Limits on Data Transmission Service.

    Purchase an exclusive resource group

    1. Log on to the MaxCompute console and select a region in the top-left corner.

    2. In the navigation pane on the left, choose Manage Configurations > Quotas.

    3. On the Quotas page, click New Quota.

    4. On the Purchase page, set Specification Type to Tunnel.

    5. Configure the Tunnel Concurrency parameter based on your workload requirements.

    6. Complete the purchase.

    After the purchase, return to the Quotas page. A quota group with Quota Type set to Data Transmission Service appears. You can upgrade, downgrade, or renew this quota group. For more information, see Upgrade and downgrade.

    Enable the exclusive resource group for a project

    After purchasing an exclusive resource group, enable it for your project and grant the required permissions to accounts that need to use it.

    Step 1: Run the enablement command

    Access your MaxCompute project by using the MaxCompute client (odpscmd) or another connection tool, and then run the following command:

    setproject odps.tunnel.enable.quota.route.v2=true;
    Note

    Make sure that your MaxCompute software development kit (SDK) is version 0.45 or later.

    Step 2: Grant permissions to use quotas

    Create a role with quota permissions and assign it to all accounts that need to specify quotas at the job level.

    Create a role

    1. Log on to the MaxCompute console and select a region in the top-left corner.

    2. In the navigation pane on the left, choose Manage Configurations > Tenants.

    3. On the Roles tab, click Add Role.

    4. In the Add Role dialog box, enter a custom Role Name and set Policy Content to the following policy, and then click OK:

    {
    "Statement": [{
            "Action": [
                "odps:List",
                "odps:Usage"],
            "Effect": "Allow",
            "Resource": ["acs:odps:*:regions/*/quotas/*"]}],
    "Version": "1"
}

    Grant the role to an Alibaba Cloud account

    Run the following commands by using the MaxCompute client:

    -- Add an Alibaba Cloud account to the tenant and grant a role to the account.
ADD tenant USER <Aliyun$xxxx>;
GRANT tenant role <role_name> TO USER <Aliyun$xxxx>;

-- View the permissions of a role or user in the tenant.
SHOW grants FOR tenant role <role_name>;
SHOW grants FOR tenant USER <user_name>;
SHOW principals FOR tenant [role] <role_name>;

    Grant the role to a Resource Access Management (RAM) user

    1. On the Tenants page, click the Users tab.

    2. On the Users tab, click Add Member.

    3. In the Add Member dialog box, select or manually add the accounts for which you want to set roles. In the Batch Set Roles area, select the roles to assign to these accounts, click the arrow icon, and then click OK.

    Step 3: Specify the quota group in the SDK

    In your Java code, set the quota name for the Tunnel session:

    // Use the resource group named XXX for Data Transmission Service.
final TableTunnel tunnel = new TableTunnel(odps);
tunnel.getConfig().setQuotaName("xxx");
TableTunnel.UploadSession up = tunnel.createUploadSession(projectName, tableName);

// Get the resource group that the session actually uses.
up.getQuotaName();

    To find the QuotaName value:

    1. In the navigation pane on the left, choose Manage Configurations > Quotas.

    2. On the Quotas page, locate your exclusive resource group and copy the QuotaName. For example: ot_42854300324****_169821756****_p#ot_42854300324****_169821756****.

    View resource group metrics

    On the Quotas page, find the target quota and click Configure Resources in the Actions column. The following metrics are available:

    MetricDescription
    Request ParallelismCurve graph of slot usage. Shows current usage and quota limit. Unit: Slot.
    ThroughputCurve graph of throughput. Unit is displayed on the vertical axis, such as B/min or MB/min.
    Table-level Request ParallelismCurve graph of concurrency for a specific table using Tunnel Batch. Unit: Slot. Set Usage Type (for example, Tunnel Batch upload) and Table Name (for example, testtable) as filter conditions.
    Table-level IP ThroughputCurve graph of throughput from each source IP for a specific table using Tunnel Batch. Set Usage Type and Table Name as filter conditions.
    Total Requests and Error RequestsTotal number of requests and the number of failed requests. Total requests = all successful and failed requests. Failed requests = all requests with a 4xx or 5xx status code. For more information about the status codes, see Data Transmission Service overview.
    Total ThroughputSummary of data volume by usage type within the specified time range. A pie chart shows the proportion of each usage type.
    Slot Average Transfer RateAverage transfer rate per slot for Tunnel Batch upload requests. Set Usage Type (for example, Tunnel Batch upload) as a filter condition.

    Resource group configuration

    Important

    The feature for configuring resource groups in the MaxCompute console is scheduled to be discontinued on September 30, 2024 (UTC+8). To prevent your resource group configurations from becoming invalid after this date, restore the default configurations. Set the Data Transmission Service resource group to default. Then, reconfigure the resource group by following the instructions in Enable the exclusive resource group for a project.

    1. Log on to the MaxCompute console and select a region in the top-left corner.

    2. In the navigation pane on the left, choose Manage Configurations > Projects.

    3. On the Projects page, find the target project and click Manage in the Actions column.

    The Basic Properties section displays the Data Transmission Service configuration. The following table describes the parameters:

    ParameterDescription
    Default Tunnel QuotaThe default Data Transmission Service resource group for read and write operations when no specific quota is designated. The value is usually Default, which indicates the public Data Transmission Service resource group. This parameter cannot be changed in the console.
    Default Tunnel QuotaAuthorizes all users and roles to use the configured exclusive resource group for data read and write tasks. When configured, you can specify the exclusive resource group quota in the SDK without manual authorization. A project can be configured with only one exclusive resource group.
    Overlay Tunnel QuotaAllows combined use of an exclusive resource group and the Default resource group. After configuration, the maximum concurrency for the project equals the sum of the public resource group capacity and the exclusive resource group capacity. This feature is available only in some regions. Availability is subject to what is displayed on the console.

    When using the Overlay Tunnel Quota feature, note the following:

    • A project can be associated with only one exclusive resource group. Multiple projects can share the same exclusive resource group.

    • When using the overlay feature, specify Default for the quota group.

    • To use the open storage API operations, specify an exclusive resource group. The QuotaName format is ot_42854300324****_169821756****_p#ot_42854300324****_169821756***.

    1. In the Basic Properties section, click Edit to modify the configurations.