DataWorks:Configure a user group

Limits

This feature is available only in DataWorks Professional Edition and later.

Go to the Data Security Guard page

1. Go to the DataStudio page.

   Log on to the DataWorks console. In the top navigation bar, select the desired region. In the left-side navigation pane, choose Data Development and O&M > Data Development. On the page that appears, select the desired workspace from the drop-down list and click Go to Data Development.

2. Click the icon in the upper-left corner. Then, choose All Products > Data Governance > Data Security Guard. On the page that appears, click Try Now to go to the Data Security Guard page.

   Note

   • If your Alibaba Cloud account is granted the required permissions, you can directly access the homepage of Data Security Guard.

   • If your Alibaba Cloud account is not granted the required permissions, you are redirected to the authorization page of Data Security Guard. You can use the features of Data Security Guard only after your Alibaba Cloud account is granted the required permissions.

Create a user group

You can create a user group on the Data Security Guard page.

1. In the navigation pane on the left, choose Rule Configuration > User Group Management.

2. Create a user group.

   1. Click Create User Group. In the New User Group dialog box, configure User Group Name and add destination accounts to the user group.

   2. You can add destination accounts to the user group based on different account source types.

      Account source type	Method
      Text	Add accounts by clicking Upload File. You can upload a text file that contains account information to add multiple accounts at a time. This method is suitable for scenarios where you need to add many accounts. Note DataWorks supports only .txt text files in UTF-8 format. The information for each account must be on a separate line. The file can contain a maximum of 1,000 lines, which means you can upload up to 1,000 accounts.
      Select an existing account	This method lets you select existing Alibaba Cloud Account (including RAM users), RAM Role, or Role of MC (MaxCompute). This method is suitable for scenarios where you need to add a small number of accounts. Select an account type as needed. In the Account to Be Added area, select the destination accounts and click the icon to add the accounts to the Added Accounts area. Note For MaxCompute roles, you can add multiple roles from only a single MaxCompute project to a user group.

   3. Click OK to create the user group.

Use a user group

After you create a user group, you can add it to the whitelist of a data masking rule in Data Masking Management. Users in the group can then view the raw data that is masked by this rule. For more information, see Create a data masking rule.

Manage user groups

On the User Group Management page, you can manage the user groups that you have created.