How to grant permissions to an account/How to add roles for a RAM user - Platform For AI

iTAG uses three roles to control data labeling permissions: Administrator, Labeling team leader, and Labeling worker. Assign these roles to RAM users or external Alibaba Cloud accounts.

Role permissions

The following table lists the permissions for each role.

Role	Description	Permissions
Administrator	Project managers or stakeholders who create datasets and labeling jobs, assign tasks, review results, and manage the labeling workflow.	Log in to the administrator console. Log in to the labeling worker console. Manage personnel and assign tasks. Participate in all labeling stages.
Labeling team leader	Team leads who manage Labeling workers. They assign personnel to labeling jobs and perform labeling and review tasks.	Log in to the labeling worker console. Manage personnel and assign tasks. Participate in all labeling stages.
Labeling worker	Individuals who perform labeling and review tasks.	Log in to the labeling worker console. Participate in all labeling stages.

Assign roles

RAM user

Add the RAM user as a workspace member. For more information, see Manage workspaces > Configure member roles.

Select the workspace role based on the following table.

iTAG role	PAI workspace role
Administrator, Labeling team leader, or Labeling worker	Administrator or Labeling administrator
Labeling team leader or Labeling worker	Any role

In the left-side navigation pane, choose Data Preparation > iTAG. Click Personnel Management to open the Personnel Management tab under Management Center > Tenant Configuration.
Click Add Account and select Add Workspace Account.
In the Add Account dialog box, select the account and choose an Role. Click OK.

Available roles include labeling worker, labeling team leader, and administrator.

External account

Note

External accounts support only the Labeling team leader and Labeling worker roles.

In the left-side navigation pane, choose Preprocess Data > iTAG. Click Users to open the Personnel Management tab under Management Center > Tenants.
Click Add Account and select Add Contractor Account.
In the Add Contractor Account dialog box, specify a Alias and the user's UID. Select an Role and click OK.

To find an account's UID, see How to view an account UID.

For Role, you can select labeling worker or labeling team leader.

FAQ

Q: Why can't I find my RAM user in the account list?

The RAM user must be a member of the current PAI workspace. To add members, see Manage workspaces > Configure member roles.

Q: How do I add external users as Labeling workers?

See Assign roles > External account to assign the Labeling worker role to these users.

Q: Can Labeling workers download raw data?

No. iTAG does not provide a direct download feature for Labeling workers. Raw data access is controlled by the permission policies of the storage service, such as Object Storage Service (OSS). Configure OSS permissions to manage data access.