Assign a built-in administrator role to a user - MaxCompute

Super_Administrator and Admin are built-in administrator roles in MaxCompute. To improve authorization efficiency, you can directly assign a built-in administrator role to a user. This way, the user is granted all permissions of this role. This topic describes how to assign a built-in administrator role to a user.

Background information

The following table describes the built-in administrator roles provided by MaxCompute.

Built-in role	Assigned by	How to assign
Project-level Super_Administrator role	Project owner	Assign a role by using the MaxCompute client Assign a role by using DataWorks
Project-level Admin role	Project owner

Assign a role by using the MaxCompute client

For example, the user whose Alibaba Cloud account is Bob@aliyun.com is the owner of the test_project_a project, and user Allen is a RAM user that belongs to Bob@aliyun.com. To assign the Super_Administrator role to the RAM user Allen, perform the following steps:

Enter the test_project_a project by using the Alibaba Cloud account Bob@aliyun.com.
```
USE test_project_a;
```
Add the RAM user Allen to the test_project_a project.
```
ADD USER RAM$Bob@aliyun.com:Allen;
```
Assign the Super_Administrator role to the RAM user Allen.
```
GRANT super_administrator TO RAM$Bob@aliyun.com:Allen;
```

Assign a role by using DataWorks

Go to the Workspace page of DataWorks. In the upper-left corner of the Workspace page, select the target workspace from the drop-down list.
Add the RAM user Allen as a workspace member.
1. In the left-side navigation pane, click Workspace Members and Roles to go to the Workspace Members tab.
2. Click Add Members in the upper-right corner.
3. In the Add Members dialog box, select Allen from the Available Accounts section and click the rightwards arrow to add the member to the Selected Accounts section.
4. Select roles for the member and click Confirm.
Assign the Super_Administrator or Admin role to the RAM user Allen.
Note
The following steps can be performed in the old-version console. If you use the new-version console, refer to Manage user permissions in the MaxCompute console for authorization.
1. In the left-side navigation pane, click MaxCompute Management.
2. In the navigation tree, click Custom User Roles.
3. Find the role that you want to assign to the user and click Manage Members in the Actions column. In the Manage Members dialog box, select Allen from the Available Accounts section and click the rightwards arrow to add the member to the Added Accounts section.
4. Click Confirm.