Dataplex IAM 权限

借助 Dataplex 权限,用户可以对 Dataplex 服务、资源和操作执行特定操作。例如,dataplex.lake.create 权限允许用户在项目中创建 Dataplex 数据湖。您不能直接授予用户权限,但可以为他们授予角色(角色本身会具有一项或多项权限)。

本文档重点介绍与 Dataplex 相关的 IAM 权限。

准备工作

阅读 IAM 文档。

Dataplex 权限

下表列出了调用 Dataplex API 方法所需的权限。

IAM 设置和获取政策权限

API 方法 IAM 权限
GetIamPolicy dataplex.lakes.getIamPolicy
SetIamPolicy dataplex.lakes.setIamPolicy

数据湖、可用区和资产权限

API 方法 IAM 权限
CreateLake dataplex.lakes.create
UpdateLake dataplex.lakes.update
DeleteLake dataplex.lakes.delete
ListLakes dataplex.lakes.list
GetLake dataplex.lakes.get
ListLakeActions dataplex.lakeActions.list
CreateZone dataplex.zones.create
UpdateZone dataplex.zones.update
DeleteZone dataplex.zones.delete
ListZones dataplex.zones.list
GetZone dataplex.zones.get
ListZoneActions dataplex.zoneActions.list
CreateAsset dataplex.assets.create
UpdateAsset dataplex.assets.update
DeleteAsset dataplex.assets.delete
ListAssets dataplex.assets.list
GetAsset dataplex.assets.get
ListAssetActions dataplex.assetActions.list

任务权限

API 方法 IAM 权限
CreateTask dataplex.tasks.create
UpdateTask dataplex.tasks.update
DeleteTask dataplex.tasks.delete
ListTasks dataplex.tasks.list
GetTask dataplex.tasks.get
ListJobs dataplex.tasks.get
GetJob dataplex.tasks.get
CancelJob dataplex.tasks.cancel

环境权限

API 方法 IAM 权限
CreateEnvironment dataplex.environments.create
UpdateEnvironment dataplex.environments.update
DeleteEnvironment dataplex.environments.delete
ListEnvironments dataplex.environments.list
GetEnvironment dataplex.environments.get
CreateContent dataplex.content.create
UpdateContent dataplex.content.update
DeleteContent dataplex.content.delete
ListContent dataplex.content.list
GetContent dataplex.content.get
ListSessions dataplex.environments.get

元数据权限

API 方法 IAM 权限
CreateEntity dataplex.entities.create
UpdateEntity dataplex.entities.update
DeleteEntity dataplex.entities.delete
GetEntity dataplex.entities.get
ListEntities dataplex.entities.list
CreatePartition dataplex.partitions.create
UpdatePartition dataplex.partitions.update
DeletePartition dataplex.partitions.delete
GetPartition dataplex.partitions.get
ListPartitions dataplex.partitions.list

DataScan 权限

API 方法 IAM 权限
CreateDataScan dataplex.datascans.create
UpdateDataScan dataplex.datascans.update
DeleteDataScan dataplex.datascans.delete
ListDataScans dataplex.datascans.list
GetDataScan(基本视图) dataplex.datascans.get
GetDataScan(完整视图) dataplex.datascans.getData
ListDataScanJobs dataplex.datascans.get
GetDataScanJob(基本视图) dataplex.datascans.get
GetDataScanJob(完整视图) dataplex.datascans.getData
RunDataScan dataplex.datascans.run

后续步骤