This topic describes the FAQ about Security Center.

What permissions can I request in Security Center?

In Security Center, you can request permissions on tables in DataWorks workspaces in the development environment and production environment.

What is the relationship between Data Management and Security Center?

Security Center is a service that upgrades and replaces the permission and security features in Data Management. You can click My Permissions in the left-side navigation pane of the Security Center page to view the permissions requested or granted by using the odpscmd grant command in Data Management.

If you want to request other permissions and handle permission requests on the graphical user interface (GUI), go to Security Center and perform operations as required. The Data Management service no longer supports permission requesting or approval.

Why cannot I select fields when I request permissions?

If LabelSecurity is enabled for a workspace, you can request permissions on fields in this workspace. If LabelSecurity is disabled for a workspace, you can request permissions only on tables in this workspace.

Who will handle my request?

Your request will be handled by a workspace administrator or a table owner. After either of them approves or rejects your request, the request is closed.

Why do I find two requests on the My Requests tab after I submit only one request?

The tables in your request belong to two owners. In this case, Security Center automatically splits your request into two by table owner.

I request permissions on a field for one month only. Why does the validity period of the permissions become permanent after my request is approved?

The security level of this field is zero or not higher than the security level of your account.

Why do I have permissions on some tables and fields on which I have not requested any permissions?

The possible reasons are as follows:
  • An administrator has granted the permissions to you by running commands in the DataWorks console.
  • After your request is approved in Security Center, Security Center also grants you the permissions on fields whose security level is zero or not higher than the security level of your account, even though you have not requested the permissions.

Why does a request disappear from the Pending My Approval tab before I handle it?

Another workspace administrator or table owner has approved the request before you handle it. The approved request is closed and no longer appears on the Pending My Approval tab.

What can I do if the message "An error occurred in the MaxCompute project" appears when I specify the workspace and environment?

Send the error message and error code to the workspace administrator for troubleshooting.

Why do I fail to revoke permissions on a field?

You can only revoke permissions on the fields whose security level is higher than the security level of your account.

Why do I fail to request permissions by using my Alibaba Cloud account?

By default, an Alibaba Cloud account has all permissions. Therefore, you do not need to request permissions for your Alibaba Cloud account. Entry points to unnecessary operations such as permission requesting are hidden for an Alibaba Cloud account. This does not affect the use of the account.

In Security Center, can I view the permission requesting and approval records of Data Management?

Security Center and Data Management have not synchronized permission requesting or approval records yet. You need to go to Data Management to view the permission requesting and approval records of Data Management.

Can I revoke permissions based on the requesting records in Security Center?

Currently, Security Center is not the only service that provides authorization. To facilitate permission revocation, the Authorizations page in Security Center provides an access control list (ACL) of all users, regardless of the authorization channel. You can revoke any granted permissions without using the requesting records.

A permission request submitted in Data Management has not been approved yet. Do I need to submit it again in Security Center?

Security Center and Data Management have not synchronized permission requesting and approval records yet. You need to submit the permission request again in Security Center.

How do I specify the LabelSecurity parameter for fields?

You need to go to Data Map to set the LabelSecurity parameter for fields.