DataWorks:Transfer entities

Limits

You can use only the tenant security administrator role or tenant administrator role to configure entity transfer settings on the Entity transfer page. For more information about permission management for tenants, see Manage permissions on global-level services.

Entity transfer logic

If you configure a custom transfer rule and enable the rule, the entities that you want to transfer are preferentially transferred to the entity receiver that you specify in the rule. If the entity receiver that you specify in the rule does not exist or is removed from the workspace, the system performs the transfer based on the default transfer rule.

• Trigger condition for automatic transfer: If a RAM user is removed from a workspace or is deleted, the automatic transfer mechanism is triggered. If no entity receiver is specified for the workspace, the transfer is performed based on the default transfer rule after the RAM user is removed or deleted. By default, the entities that belong to the RAM user are transferred to another RAM user to which the workspace administrator role is assigned in the workspace. If no RAM users in the workspace are assigned the workspace administrator role, the entities are transferred to the Alibaba Cloud account to which the RAM user belongs. If you configure a custom transfer rule for the workspace and specify an entity receiver that is a member of the workspace in the rule, the transfer is performed based on the rule that you configure.

• Trigger condition for manual transfer: If a RAM user is not deleted and remains a member of the workspace, you can go to the Entity transfer page to perform a manual transfer. If no custom transfer rule is configured for the workspace, the transfer is performed based on the default transfer rule after the RAM user is removed from the workspace or is deleted. If you configure a custom transfer rule for the workspace and specify an entity receiver that is a member of the workspace in the rule, the transfer is performed based on the rule that you configure. For more information about custom workspace-level transfer rules, see the Configure an entity transfer rule section of this topic.

Go to the Entity transfer page

1. Log on to the DataWorks console. In the top navigation bar, select the desired region. In the left-side navigation pane, choose Data Development and Governance > Security Center. On the page that appears, click Go to Security Center.

2. In the left-side navigation pane of the Security Center page, choose Security policy > Entity transfer to go to the Entity transfer page.

View the entities that can be transferred

Configure an entity transfer rule

1. In the Transfer rule configuration section, search for the desired workspace.

   

2. Configure an entity receiver.

   1. In the Transfer rule configuration section, customize a transfer rule. Transfer rules are classified into the default transfer rule and custom transfer rules. Find the workspace that you want to manage and click Revised in the Transfer entity receiver column. In the Select Transfer Entity Recipient dialog box, select an entity receiver from the Please Select A Space Member drop-down list and click OK. When the transfer condition is triggered, the system performs the transfer based on the custom transfer rule that you configure. If the rule is disabled for the workspace, or the entity receiver that you specify does not exist or is removed from the workspace, the system performs the transfer based on the default transfer rule.

      

      • Default transfer rule: The default transfer rule is enabled by default and cannot be disabled. The default transfer rule takes effect if no entity receiver is specified for the workspace whose entities you want to transfer or the entity receiver specified for the workspace is invalid.

        Note

        If the entity receiver is removed from the workspace before the transfer, the entity receiver is considered invalid.

      • Custom workspace-level transfer rule: Custom workspace-level transfer rules are disabled by default. If you need to specify an entity receiver, you can select a member in a workspace as the entity receiver. You can also enable or disable a custom transfer rule based on your business requirements. If you enable a custom transfer rule, the rule takes effect when entities are transferred.

        Note

        If you enable a custom transfer rule, the entities that you want to transfer are preferentially transferred to the entity receiver that you specify in the rule. If the entity receiver that you specify in the rule does not exist or is removed from the workspace, the system performs the transfer based on the default transfer rule.

   2. Turn on or off the switch in the Operation column that corresponds to the workspace to enable or disable the custom transfer rule.

      • If you turn on the switch, the entities that you want to transfer are transferred to the entity receiver that you specify.

        Note

        If the entity receiver that you specify does not exist or is removed from the workspace, the entities are transferred to the entity receiver specified in the default transfer rule.

      • If you turn off the switch, the entities that you want to transfer are transferred to the entity receiver specified in the default transfer rule.

Perform a transfer

1. If a RAM user is not deleted and remains a member of the workspace, go to the Transfer configuration tab of the Entity transfer page and click Immediate execution of referral to transfer the entities that belong to the RAM user.

   

2. In the Immediate execution of referral dialog box, select the original owner of the entities from the drop-down list and click Confirm referral. If the entity receiver that you specify is a member of the workspace, the entities are transferred to the entity receiver. Otherwise, the entities are transferred to the entity receiver specified in the default transfer rule.

   

View transfer logs