All Products
Search
Document Center

Platform For AI:Use workspaces to manage permissions

Last Updated:Apr 01, 2026

As AI development teams grow, managing who can access which computing resources, models, and jobs across multiple tools becomes a coordination problem. A workspace in PAI centralizes resource access, member permissions, and AI asset management under a single organizational unit—so teams can collaborate across development stages without fragmented permission setups.

What workspaces provide

Workspaces offer the following capabilities:

  • Computing resource management: Manage all AI development computing resources from a single platform.

  • Permission management: Control what each team member can do at a fine-grained level.

  • AI asset management: Save and reuse models and algorithms across training runs and team members.

  • Event monitoring and alerting: Set up alert rules to track Deep Learning Containers (DLC) jobs, Machine Learning Designer pipeline jobs, or model version approval status.

  • Resource scheduling: Allocate resource quotas, cap job runtimes, and assign job priorities by component and role to distribute resources efficiently.

Roles

PAI provides predefined roles that map to common responsibilities in AI development teams. Assign roles based on what each member needs to do in the workspace.

RoleDescription
Resource administratorMust be assigned to an Alibaba Cloud account or authorized RAM user. Adds or deletes workspaces, and creates Data Science Workshop (DSW) instances.
Workspace administrator/ownerManages members and public assets in the workspace.
Algorithm developerManages training jobs and public assets.
Algorithm O&M engineerManages all training jobs in the workspace, including viewing DLC jobs created by other members.
Labeling administratorCreates and updates labeling datasets.
VisitorViews workspace information: members, resource groups, and pipelines.
MaxCompute developerUses MaxCompute to execute jobs submitted in the workspace.

For the full permissions matrix for each role, see Roles and permissions.

Next steps