ResourceSchema - DataWorks - Alibaba Cloud Documentation Center

ResourceSchema yang Didukung

Security Center menyediakan ResourceSchema bawaan untuk tipe resource umum, termasuk: MaxCompute, EMR_ON_ECS_HIVE, SEVERLESS_STARROCKS, HOLOGRES, DATAWORKS_ENTITY, DLF_V1, DLF_NEXT, dan LINDORM.

Konfigurasi metode otorisasi

Setiap ResourceSchema mencakup bidang authMethods yang mendefinisikan metode otorisasi yang didukung oleh tipe resource tersebut:

{
  "authMethods": [
    {
      "name": "default",
      "displayName": "Native Authorization",
      "isDefault": true
    }
  ]
}

Konvensi:

Secara default, semua ResourceSchema bawaan mencakup setidaknya metode otorisasi default.
Metode default merepresentasikan otorisasi native untuk tipe resource tersebut dan dipetakan oleh sistem ke PermissionGrantService tertentu berdasarkan defSchema.
Jika Anda tidak menentukan authMethod atau meneruskan nilai default, sistem secara otomatis menggunakan metode otorisasi native.

Pemetaan Metode Otorisasi dan Tipe Resource:

Tipe resource	Pemetaan default	Metode otorisasi lainnya	Deskripsi
SEVERLESS_STARROCKS	ranger	starrocksManager	Ini adalah satu-satunya tipe resource yang saat ini mendukung beberapa metode otorisasi. Otorisasi Ranger digunakan secara default, dan StarRocks Manager merupakan alternatifnya.
HOLOGRES	hologres	-	Hanya otorisasi native yang didukung.
DLF_V1	dlfV1	-	Hanya otorisasi DLF 1.0 yang didukung.
EMR_ON_ECS_HIVE	ranger	-	Hanya otorisasi Ranger yang didukung.
LINDORM	ranger	-	Hanya otorisasi Ranger yang didukung.
DATAWORKS_ENTITY	default	-	Hanya otorisasi default yang didukung.
MaxCompute	default	Otorisasi tidak didukung	MaxCompute memiliki sistem izin independen.
DLF_NEXT	default	Otorisasi tidak didukung	DLF 3.0 memiliki sistem izin independen.

MaxCompute

{
  "name": "MaxCompute",
  "displayName": "MaxCompute Resource",
  "version": "v1.0.0",
  "authPrincipal": [
    "RAM_USER",
    "RAM_ROLE"
  ],
  "authMethods": [],
  "resources": [
    {
      "level": 0,
      "name": "tenant",
      "type": "string",
      "label": "DATAWORKS_TENANT_ID",
      "parent": "",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 1,
      "name": "workspace",
      "type": "string",
      "label": "DATAWORKS_WORKSPACE_ID",
      "parent": "tenant",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [
        "workspaceId",
        "workspaceName",
        "ownerBaseId"
      ],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 2,
      "name": "project",
      "type": "string",
      "label": "PROJECT",
      "parent": "workspace",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 3,
      "name": "schema",
      "type": "string",
      "label": "SCHEMA",
      "parent": "project",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 4,
      "name": "table",
      "type": "string",
      "label": "TABLE",
      "parent": "schema",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": true,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select",
        "update",
        "download",
        "describe",
        "alter",
        "drop"
      ]
    },
    {
      "level": 4,
      "name": "resource",
      "type": "string",
      "label": "RESOURCE",
      "parent": "schema",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "read",
        "write",
        "delete",
        "all"
      ]
    },
    {
      "level": 4,
      "name": "udf",
      "type": "string",
      "label": "UDF",
      "parent": "schema",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "read",
        "write",
        "delete",
        "execute",
        "all"
      ]
    },
    {
      "level": 5,
      "name": "column",
      "type": "string",
      "label": "COLUMN",
      "parent": "table",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select",
        "update",
        "download"
      ]
    }
  ]
}

EMR on ECS Hive

{
  "name": "EMR_ON_ECS_HIVE",
  "displayName": "EMR on ECS Hive Resource",
  "version": "v1.0.0",
  "authPrincipal": [
    "RAM_USER"
  ],
  "authMethods": [],
  "resources": [
    {
      "level": 0,
      "name": "tenant",
      "type": "string",
      "label": "DATAWORKS_TENANT_ID",
      "parent": "",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 1,
      "name": "instance",
      "type": "string",
      "label": "INSTANCE_ID",
      "parent": "tenant",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [
        "workspaceId",
        "workspaceName",
        "ownerBaseId"
      ],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 2,
      "name": "database",
      "type": "string",
      "label": "DATABASE",
      "parent": "instance",
      "mandatory": true,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "create",
        "update",
        "alter",
        "select"
      ]
    },
    {
      "level": 3,
      "name": "table",
      "type": "string",
      "label": "TABLE",
      "parent": "database",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select",
        "drop",
        "update",
        "alter",
        "all"
      ]
    }
  ]
}

Serverless StarRocks

{
  "name": "SEVERLESS_STARROCKS",
  "displayName": "Serverless StarRocks Resource",
  "version": "v1.0.0",
  "authPrincipal": [
    "RAM_USER",
    "RAM_ROLE"
  ],
  "authMethods": [
    {
      "name": "ranger",
      "displayName": "Ranger",
      "isDefault": true
    },
    {
      "name": "starrocksManager",
      "displayName": "StarRocks Manager",
      "isDefault": false
    }
  ],
  "resources": [
    {
      "level": 0,
      "name": "tenant",
      "type": "string",
      "label": "DATAWORKS_TENANT_ID",
      "parent": "",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 1,
      "name": "instance",
      "type": "string",
      "label": "INSTANCE_ID",
      "parent": "tenant",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 2,
      "name": "internalCatalog",
      "type": "string",
      "label": "INTERNAL_CATALOG",
      "parent": "instance",
      "mandatory": false,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "usage", "create database", "drop", "alter"]
        }
      ]
    },
    {
      "level": 2,
      "name": "hiveCatalog",
      "type": "string",
      "label": "EXTERNAL_HIVE_CATALOG",
      "parent": "instance",
      "mandatory": false,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "usage", "create database", "drop", "alter"]
        }
      ]
    },
    {
      "level": 3,
      "name": "database",
      "type": "string",
      "label": "DATABASE",
      "parent": "internalCatalog",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": true,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "create table",
        "drop",
        "alter",
        "create view",
        "create function",
        "create materialized view"
      ],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "alter", "drop", "create table", "create view", "create function", "create materialized view", "create pipe"]
        },
        {
          "authMethod": "ranger",
          "accessTypes": ["create table", "drop", "alter", "create view", "create function", "create materialized view"]
        }
      ]
    },
    {
      "level": 3,
      "name": "hiveDatabase",
      "type": "string",
      "label": "EXTERNAL_HIVE_DATABASE",
      "parent": "hiveCatalog",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": true,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "create",
        "update",
        "alter",
        "select"
      ],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "alter", "drop", "create table", "create view", "create function", "create materialized view", "create pipe"]
        },
        {
          "authMethod": "ranger",
          "accessTypes": ["create", "update", "alter", "select"]
        }
      ]
    },
    {
      "level": 4,
      "name": "table",
      "type": "string",
      "label": "TABLE",
      "parent": "database",
      "mandatory": false,
      "extendedInfo": {
        "constraints": {
          "enabled": true,
          "supportedTypes": ["rowFilter"],
          "maxConstraints": 1,
          "definitions": {
            "rowFilter": {
              "description": "A row filter, which is a SQL WHERE clause.",
              "type": "string",
              "required": false,
              "example": "ID > 3 AND Name = 'test'",
              "authMethods": ["ranger"],
              "restrictedAccessTypes": ["select"]
            }
          }
        }
      },
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "delete",
        "drop",
        "insert",
        "select",
        "alter",
        "export",
        "update"
      ],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "alter", "drop", "select", "insert", "update", "export", "delete"]
        },
        {
          "authMethod": "ranger",
          "accessTypes": ["delete", "drop", "insert", "select", "alter", "export", "update"]
        }
      ]
    },
    {
      "level": 4,
      "name": "view",
      "type": "string",
      "label": "VIEW",
      "parent": "database",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "select", "alter", "drop"]
        }
      ]
    },
    {
      "level": 4,
      "name": "materializedView",
      "type": "string",
      "label": "MATERIALIZED_VIEW",
      "parent": "database",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "select", "alter", "refresh", "drop"]
        }
      ]
    },
    {
      "level": 4,
      "name": "hiveTable",
      "type": "string",
      "label": "EXTERNAL_HIVE_TABLE",
      "parent": "hiveDatabase",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select"
      ],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "alter", "drop", "select", "insert", "update", "export", "delete"]
        },
        {
          "authMethod": "ranger",
          "accessTypes": ["select"]
        }
      ]
    },
    {
      "level": 4,
      "name": "hiveView",
      "type": "string",
      "label": "EXTERNAL_HIVE_VIEW",
      "parent": "hiveDatabase",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "select", "alter", "drop"]
        }
      ]
    },
    {
      "level": 4,
      "name": "hiveMaterializedView",
      "type": "string",
      "label": "EXTERNAL_HIVE_MATERIALIZED_VIEW",
      "parent": "hiveDatabase",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [],
      "authMethodAccessTypes": [
        {
          "authMethod": "starrocksManager",
          "accessTypes": ["all", "select", "alter", "refresh", "drop"]
        }
      ]
    }
  ]
}

Perbedaan Metode Otorisasi StarRocks:

Tingkat resource	ranger (default)	starrocksManager	Deskripsi
internalCatalog	❌ Tidak didukung	✅ Didukung	Ranger tidak memperlakukan ini sebagai node leaf.
database	✅ Didukung	✅ Didukung	Nilai accessType berbeda.
table	✅ Didukung	✅ Didukung	Ranger mendukung constraint rowFilter.
view	❌ Tidak didukung	✅ Didukung	Hanya StarRocks Manager yang mendukung ini.
materializedView	❌ Tidak didukung	✅ Didukung	Hanya StarRocks Manager yang mendukung ini.
hiveCatalog	❌ Tidak didukung	✅ Didukung	Ranger tidak memperlakukan ini sebagai node leaf.
hiveDatabase	✅ Didukung	✅ Didukung	Nilai accessType berbeda.
hiveTable	✅ Didukung (`select` saja)	✅ Didukung	Ranger hanya mendukung `select`.
hiveView	❌ Tidak didukung	✅ Didukung	Hanya StarRocks Manager yang mendukung ini.
hiveMaterializedView	❌ Tidak didukung	✅ Didukung	Hanya StarRocks Manager yang mendukung ini.

Constraint support:

Tingkat resource	Tipe constraint	Metode otorisasi yang didukung	Batasan tipe akses	Deskripsi
table	rowFilter	ranger	`select`	Row filter, yaitu klausa SQL WHERE. Saat `rowFilter` ditentukan, `accessType` dibatasi hanya untuk `select`.

Hologres

{
  "name": "HOLOGRES",
  "displayName": "Hologres Resource",
  "version": "v1.0.0",
  "authPrincipal": [
    "RAM_USER"
  ],
  "authMethods": [
    {
      "name": "hologres",
      "displayName": "Hologres",
      "isDefault": true
    }
  ],
  "resources": [
    {
      "level": 0,
      "name": "tenant",
      "type": "string",
      "label": "DATAWORKS_TENANT_ID",
      "parent": "",
      "mandatory": false,
      "extendedInfo": {},
      "enricherFields": [],
      "recursiveSupported": false,
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 1,
      "name": "instance",
      "type": "string",
      "label": "INSTANCE_ID",
      "parent": "tenant",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 2,
      "name": "database",
      "type": "string",
      "label": "DATABASE",
      "parent": "instance",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 3,
      "name": "schema",
      "type": "string",
      "label": "SCHEMA",
      "parent": "database",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 4,
      "name": "table",
      "type": "string",
      "label": "TABLE",
      "parent": "schema",
      "mandatory": true,
      "extendedInfo": {},
      "recursiveSupported": true,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select",
        "insert",
        "update",
        "delete",
        "truncate",
        "all"
      ]
    },
    {
      "level": 5,
      "name": "column",
      "type": "string",
      "label": "COLUMN",
      "parent": "table",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select",
        "insert",
        "update"
      ]
    }
  ]
}

Izin Tingkat Kolom Hologres:

Parameter	Deskripsi
`authMethods`	Mendukung metode otorisasi `hologres` (default), yang menggunakan pernyataan `GRANT` native Hologres untuk memberikan izin.
Sub-resource `column`	Sub-resource tingkat 5 dari sebuah tabel, yang menentukan nama kolom tunggal dengan menggunakan bidang `metaData.column`, dengan satu catatan aplikasi per kolom.
Tipe akses tingkat kolom	Hanya `select`, `insert`, dan `update` yang didukung.

DLF V1

{
  "name": "DLF_V1",
  "displayName": "DLF 1.0 Resource",
  "version": "v1.0.0",
  "authPrincipal": [
    "RAM_USER",
    "RAM_ROLE"
  ],
  "authMethods": [],
  "resources": [
    {
      "level": 0,
      "name": "tenant",
      "type": "string",
      "label": "DATAWORKS_TENANT_ID",
      "parent": "",
      "mandatory": false,
      "extendedInfo": {},
      "enricherFields": [],
      "recursiveSupported": false,
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 1,
      "name": "catalog",
      "type": "string",
      "label": "CATALOG",
      "parent": "tenant",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 2,
      "name": "database",
      "type": "string",
      "label": "DATABASE",
      "parent": "catalog",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "describe",
        "alter",
        "drop",
        "createTable",
        "createFunction",
        "list"
      ]
    },
    {
      "level": 3,
      "name": "table",
      "type": "string",
      "label": "TABLE",
      "parent": "database",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": true,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select",
        "update",
        "describe",
        "alter",
        "drop"
      ]
    },
    {
      "level": 4,
      "name": "column",
      "type": "string",
      "label": "COLUMN",
      "parent": "table",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select"
      ]
    }
  ]
}

DLF Next

{
  "name": "DLF_NEXT",
  "displayName": "DLF Next Resource",
  "version": "v1.0.0",
  "authPrincipal": [
    "RAM_USER",
    "RAM_ROLE",
    "DLF_ROLE"
  ],
  "authMethods": [],
  "resources": [
    {
      "level": 0,
      "name": "tenant",
      "type": "string",
      "label": "DATAWORKS_TENANT_ID",
      "parent": "",
      "mandatory": false,
      "extendedInfo": {},
      "enricherFields": [],
      "recursiveSupported": false,
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 1,
      "name": "catalog",
      "type": "string",
      "label": "CATALOG",
      "parent": "tenant",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 2,
      "name": "database",
      "type": "string",
      "label": "DATABASE",
      "parent": "catalog",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "describe",
        "list",
        "alter",
        "drop",
        "createTable",
        "createFunction",
        "createView",
        "grant",
        "all"
      ]
    },
    {
      "level": 3,
      "name": "table",
      "type": "string",
      "label": "TABLE",
      "parent": "database",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": true,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select",
        "update",
        "alter",
        "drop",
        "grant",
        "all"
      ]
    },
    {
      "level": 4,
      "name": "column",
      "type": "string",
      "label": "COLUMN",
      "parent": "table",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "select"
      ]
    }
  ]
}

DATAWORKS_ENTITY

{
  "name": "DATAWORKS_ENTITY",
  "displayName": "DataWorks Entity",
  "version": "v1.0.0",
  "authPrincipal": [
    "RAM_USER",
    "RAM_ROLE",
    "DATAWORKS_WORKSPACE_ROLE",
    "DATAWORKS_WORKSPACE_MEMBER"
  ],
  "authMethods": [],
  "resources": [
    {
      "level": 0,
      "name": "tenant",
      "type": "string",
      "label": "DATAWORKS_TENANT_ID",
      "parent": "",
      "mandatory": false,
      "extendedInfo": {},
      "enricherFields": [],
      "recursiveSupported": false,
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },{
      "level": 1,
      "name": "tenantRole",
      "type": "string",
      "label": "DATAWORKS_TENANT_ROLE_CODE",
      "parent": "tenant",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [
        "roleName"
      ],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "joinIn"
      ],
      "authPrincipalRestrictions": [
        "RAM_USER",
        "RAM_ROLE"
      ]
    },
    {
      "level": 1,
      "name": "workspace",
      "type": "string",
      "label": "DATAWORKS_WORKSPACE_ID",
      "parent": "tenant",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [
        "workspaceId",
        "workspaceName",
        "ownerBaseId"
      ],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 2,
      "name": "workspaceRole",
      "type": "string",
      "label": "DATAWORKS_WORKSPACE_ROLE_CODE",
      "parent": "workspace",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "joinIn"
      ],
      "authPrincipalRestrictions": [
        "RAM_USER",
        "RAM_ROLE"
      ]
    }
  ]
}

Lindorm

{
  "name": "LINDORM",
  "displayName": "Lindorm",
  "version": "v1.0.0",
  "authPrincipal": [
    "RAM_USER"
  ],
  "authMethods": [],
  "resources": [
    {
      "level": 0,
      "name": "tenant",
      "type": "string",
      "label": "DATAWORKS_TENANT_ID",
      "parent": "",
      "mandatory": false,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": []
    },
    {
      "level": 1,
      "name": "instance",
      "type": "string",
      "label": "INSTANCE_ID",
      "parent": "tenant",
      "mandatory": true,
      "extendedInfo": {},
      "enricherFields": [
        "instanceName"
      ],
      "isValidLeaf": false,
      "accessTypeRestrictions": [
        "write",
        "read",
        "admin",
        "trash",
        "system",
        "all"
      ]
    },
    {
      "level": 2,
      "name": "database",
      "type": "string",
      "label": "DATABASE",
      "parent": "instance",
      "mandatory": true,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": false,
      "accessTypeRestrictions": [
        "write",
        "read",
        "admin",
        "trash",
        "system",
        "all"
      ]
    },
    {
      "level": 3,
      "name": "table",
      "type": "string",
      "label": "TABLE",
      "parent": "database",
      "mandatory": true,
      "extendedInfo": {},
      "recursiveSupported": false,
      "enricherFields": [],
      "isValidLeaf": true,
      "accessTypeRestrictions": [
        "write",
        "read",
        "admin",
        "trash",
        "all"
      ]
    }
  ]
}