Platform For AI:Appendix: Roles and permissions

Permission

Action (can be managed in the RAM console)

Check whether PAI, MaxCompute, DataWorks, and OSS are purchased or activated

Pai:ListProducts (This action is allowed unless you specify Deny)

List quotas (This permission will be discontinued)

Pai:ListQuotas (This action is allowed unless you specify Deny)

Query the pay-as-you-go prices of PAI-DSW, PAI-DLC, and PAI-EAS

Pai:GetPayAsYouGoPrice (This action is allowed unless you specify Deny)

Query information about modules including PAI-DSW, PAI-DLC, and PAI-EAS

Pai:DescribePricingModule (This action is allowed unless you specify Deny)

List RAM users

Pai:ListUsers (This action is allowed unless you specify Deny)

List user configurations of the Alibaba Cloud account

Pai:ListUserConfigs

Update user configurations of the Alibaba Cloud account

Pai:SetUserConfigs

Delete user configurations of the Alibaba Cloud account

Pai:DeleteUserConfig

Create PAI orders

Pai:CreateOrder

Permission

Action (can be managed in the RAM console)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Labeling Administrator

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create workspaces

PaiWorkspace:CreateWorkspace

✅

Delete workspaces

PaiWorkspace:DeleteWorkspace

✅

List workspaces

PaiWorkspace:ListWorkspaces

✅

Create the default workspace

PaiWorkspace:CreateDefaultWorkspace

✅

Update resource quotas

PaiWorkspace:UpdateQuota

✅

Update the default workspace

PaiWorkspace:UpdateDefaultWorkspace

✅

Obtain the default workspace

PaiWorkspace:GetDefaultWorkspace

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Labeling Administrator

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Obtain custom roles

PaiWorkspace:GetWorkspaceRole

PaiWorkspace:GetWorkspaceRole

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create custom roles

PaiWorkspace:AddWorkspaceRole

PaiWorkspace:AddWorkspaceRole

✅

Delete custom roles

PaiWorkspace:RemoveWorkspaceRole

PaiWorkspace:RemoveWorkspaceRole

✅

Update custom roles

PaiWorkspace:UpdateWorkspaceRole

PaiWorkspace:UpdateWorkspaceRole

✅

List custom roles

PaiWorkspace:ListWorkspaceRoles

PaiWorkspace:ListWorkspaceRoles

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View workspace basic information

PaiWorkspace:GetWorkspace

PaiWorkspace:GetWorkspace

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Modify workspace basic information

PaiWorkspace:UpdateWorkspace

PaiWorkspace:UpdateWorkspace

✅

Obtain workspace operation logs

PaiWorkspace:ListOperationLogs

PaiWorkspace:ListOperationLogs

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List RAM users that are not in a workspace

PaiWorkspace:ListWorkspaceUsers

PaiWorkspace:ListWorkspaceUsers

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List permissions in workspaces

PaiWorkspace:ListPermissions

PaiWorkspace:ListPermissions

Increase resource quotas for workspaces

PaiWorkspace:AddWorkspaceQuota

PaiWorkspace:AddWorkspaceQuota

✅

Remove resource quotas for workspaces

PaiWorkspace:RemoveWorkspaceQuota

PaiWorkspace:RemoveWorkspaceQuota

✅

Add members

PaiWorkspace:CreateMember

PaiWorkspace:CreateMember

✅

Delete members

PaiWorkspace:DeleteMembers

PaiWorkspace:DeleteMembers

✅

Add member roles

PaiWorkspace:AddMemberRole

PaiWorkspace:AddMemberRole

✅

Delete member roles

PaiWorkspace:RemoveMemberRole

PaiWorkspace:RemoveMemberRole

✅

View workspace members

PaiWorkspace:GetMember

PaiWorkspace:GetMember

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List workspace members

PaiWorkspace:ListMembers

PaiWorkspace:ListMembers

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List resource instances

PaiWorkspace:ListResources

PaiWorkspace:ListResources

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create resource instances

PaiWorkspace:CreateWorkspaceResource

PaiWorkspace:CreateWorkspaceResource

✅

Delete resource instances

PaiWorkspace:DeleteWorkspaceResource

PaiWorkspace:DeleteWorkspaceResource

✅

Update resource instance (set as default resource group)

PaiWorkspace:UpdateWorkspaceResource

PaiWorkspace:UpdateWorkspaceResource

✅

View resource instances

PaiWorkspace:GetResource

PaiWorkspace:GetResource

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View storage configurations

PaiWorkspace:ListConfigs

PaiWorkspace:ListConfigs

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create or update workspace storage configurations

PaiWorkspace:UpdateConfigs

PaiWorkspace:UpdateConfigs

✅

Obtain instance jobs

PaiWorkspace:GetInstanceJob

PaiWorkspace:GetInstanceJob

/instancejob/{instanceJobId}

✅

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete workspace storage configurations

PaiWorkspace:DeleteConfig

PaiWorkspace:DeleteConfig

✅

Permission

Action (can be managed in the PAI workspace)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Create jobs

PaiTraining:CreateTrainingJob

✅

✅

✅

Modify jobs

PaiTraining:UpdateTrainingJob

✅

✅

✅

✅

View the details of jobs

PaiTraining:GetTrainingJob

✅

✅

✅

✅

View job statistics

✅

✅

✅

✅

✅

View the job list

PaiTraining:ListTrainingJobs

✅

✅

✅

✅

✅

Clone jobs

PaiTraining:CloneTrainingJob

✅

✅

✅

✅

Stop jobs

PaiTraining:StopTrainingJob

✅

✅

✅

✅

Delete jobs

PaiTraining:DeleteTrainingJob

✅

✅

✅

✅

Share jobs

PaiTraining:ShareTrainingJob

✅

✅

✅

✅

View definition of preset algorithms

✅

✅

✅

✅

✅

Permission

Action (can be managed in the PAI workspace)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create experiments

PaiExperiment:CreateExperiment

✅

✅

✅

✅

✅

✅

Obtain experiments

PaiExperiment:GetExperiment

✅

✅

✅

✅

✅

✅

Update experiments

PaiExperiment:UpdateExperiment

✅

✅

✅

✅

✅

✅

Delete experiments

PaiExperiment:DeleteExperiment

✅

✅

✅

✅

List all experiments in a workspace

PaiExperiment:ListAllExperiments

✅

List public and self-created experiments

PaiExperiment:ListExperiments

✅

✅

✅

✅

✅

✅

✅

Set experiment tags

PaiExperiment:SetExperimentLabel

✅

✅

✅

✅

✅

✅

Delete experiment tags

PaiExperiment:DeleteExperimentLabel

✅

✅

✅

✅

✅

✅

Create Trial

PaiExperiment:CreateTrial

✅

✅

✅

✅

✅

✅

Obtain Trial

PaiExperiment:GetTrial

✅

✅

✅

✅

✅

✅

Set Trial tags

PaiExperiment:SetTrialLabel

✅

✅

✅

✅

✅

✅

Permission

Workspace Administrator/Owner

Labeling Administrator

Private (created by me)

Private (created by others)

Public

Labeling job management, including job creation, user management, job distribution, and job execution.

✅

✅ Accessibility does not matter

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

MaxCompute Developer (DataWorks development and Designer related permissions)

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Obtain pipeline drafts

PaiDesigner:GetPipelineDraft

PaiDesigner:GetPipelineDraft

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Obtain pipeline draft meta

PaiDesigner:GetPipelineDraftMeta

PaiDesigner:GetPipelineDraftMeta

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

List public and self-created pipeline drafts

PaiDesigner:ListPipelineDrafts

PaiDesigner:ListPipelineDrafts

/pipelinedraft/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

List all pipeline drafts in a workspace

PaiDesigner:ListAllPipelineDrafts

PaiDesigner:ListAllPipelineDrafts

/pipelinedraft/*

✅

Create pipeline drafts

PaiDesigner:CreatePipelineDraft

PaiDesigner:CreatePipelineDraft

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

Delete pipeline drafts

PaiDesigner:DeletePipelineDraft

PaiDesigner:DeletePipelineDraft

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

Update pipeline draft meta

PaiDesigner:UpdatePipelineDraftMeta

PaiDesigner:UpdatePipelineDraftMeta

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

Update pipeline draft content

PaiDesigner:UpdatePipelineDraftContent

PaiDesigner:UpdatePipelineDraftContent

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

Copy pipeline drafts

PaiDesigner:CopyPipelineDraft

PaiDesigner:CopyPipelineDraft

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

View public and self-created pipeline draft statistics

PaiDesigner:GetPipelineDraftsStatistics

PaiDesigner:GetPipelineDraftsStatistics

/pipelinedraft/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

View all pipeline draft statistics in the workspace

PaiDesigner:GetAllPipelineDraftsStatistics

PaiDesigner:GetAllPipelineDraftsStatistics

/pipelinedraft/*

✅

View public and self-created pipeline draft user statistics

PaiDesigner:GetPipelineDraftsUsersStatistics

PaiDesigner:GetPipelineDraftsUsersStatistics

/pipelinedraft/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

View all pipeline draft user statistics in a workspace

PaiDesigner:GetAllPipelineDraftsUsersStatistics

PaiDesigner:GetAllPipelineDraftsUsersStatistics

/pipelinedraft/*

✅

Create pipeline drafts based on templates

PaiDesigner:CreateTemplatePipelineDraft

PaiDesigner:CreateTemplatePipelineDraft

/pipelinedraft/*

✅

✅

✅

✅

✅

✅

✅

✅

Publish pipeline drafts to a workspace

PaiDesigner:PublishPipelineDraft

PaiDesigner:PublishPipelineDraft

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

Obtain the latest pipeline draft from the current user

PaiDesigner:ListRecentPipelineDrafts

PaiDesigner:ListRecentPipelineDrafts

/pipelinedraft/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Stop all jobs in a pipeline draft

PaiDesigner:StopPipelineDraft

PaiDesigner:StopPipelineDraft

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

Obtain the status of pipeline drafts and child nodes.

PaiDesigner:GetPipelineDraftStatus

PaiDesigner:GetPipelineDraftStatus

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Obtain meta of pipeline draft visualization

PaiDesigner:GetPipelineDraftVisualizationMeta

PaiDesigner:GetPipelineDraftVisualizationMeta

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Obtain data of pipeline draft visualization

PaiDesigner:QueryPipelineDraftVisualizationData

PaiDesigner:QueryPipelineDraftVisualizationData

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

List outputs of pipeline drafts

PaiDesigner:ListPipelineDraftNodeOutputs

PaiDesigner:ListPipelineDraftNodeOutputs

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Obtain outputs of pipeline drafts

PaiDesigner:GetPipelineDraftNodeOutput

PaiDesigner:GetPipelineDraftNodeOutput

/pipelinedraft/{pipeineDraftId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Create pipeline draft jobs

PaiDesigner:CreateJob

PaiDesigner:CreateJob

/pipelinedraft/{pipeineDraftId}/job/*

✅

✅

✅

✅

✅

✅

✅

✅

List pipeline draft jobs

PaiDesigner:ListJobs

PaiDesigner:ListJobs

/pipelinedraft/{pipeineDraftId}/job/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Obtain pipeline draft jobs

PaiDesigner:GetJob

PaiDesigner:GetJob

/pipelinedraft/{pipeineDraftId}/job/{jobId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Stop pipeline draft jobs

PaiDesigner:StopJob

PaiDesigner:StopJob

/pipelinedraft/{pipeineDraftId}/job/{jobId}

✅

✅

✅

✅

✅

✅

✅

✅

Create custom templates

PaiDesigner:CreateTemplate

PaiDesigner:CreateTemplate

/pipelinedrafttemplate/*

✅

✅

✅

✅

✅

✅

✅

✅

View templates

PaiDesigner:GetTemplate

PaiDesigner:GetTemplate

/pipelinedrafttemplate/{pipelineDraftTemplateId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

List public and self-created templates

PaiDesigner:ListTemplates

PaiDesigner:ListTemplates

/pipelinedrafttemplate/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

List all templates in a workspace

PaiDesigner:ListAllTemplates

PaiDesigner:ListAllTemplates

/pipelinedrafttemplate/*

✅

Delete templates

PaiDesigner:DeleteTemplate

PaiDesigner:DeleteTemplate

/pipelinedrafttemplate/{pipelineDraftTemplateId}

✅

✅

✅

✅

✅

✅

✅

✅

Update templates

PaiDesigner:UpdateTemplate

PaiDesigner:UpdateTemplate

/pipelinedrafttemplate/{pipelineDraftTemplateId}

✅

✅

✅

✅

✅

✅

✅

✅

Create template tags

PaiDesigner:CreateTemplateLabels

PaiDesigner:CreateTemplateLabels

/pipelinedrafttemplate/{pipelineDraftTemplateId}/label/*

✅

✅

✅

✅

✅

✅

✅

✅

Delete template tags

PaiDesigner:DeleteTemplateLabels

PaiDesigner:DeleteTemplateLabels

/pipelinedrafttemplate/{pipelineDraftTemplateId}/label/*

✅

✅

✅

✅

✅

✅

✅

✅

List template tags

PaiDesigner:ListTemplateLabels

PaiDesigner:ListTemplateLabels

/pipelinedrafttemplate/{pipelineDraftTemplateId}/label/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Create pipeline draft folders

PaiDesigner:CreatePipelineDraftFolder

PaiDesigner:CreatePipelineDraftFolder

/pipelinedraftfolder/*

✅

✅

✅

✅

✅

✅

✅

✅

List public and self-created subfolders or pipeline drafts in a pipeline draft folder

PaiDesigner:GetPipelineDraftFolderChildren

PaiDesigner:GetPipelineDraftFolderChildren

/pipelinedraftfolder/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

List all subfolders or pipeline drafts in a pipeline draft folder in a workspace

PaiDesigner:GetAllPipelineDraftFolderChildren

PaiDesigner:GetAllPipelineDraftFolderChildren

/pipelinedraftfolder/*

✅

Update pipeline drafts folders

PaiDesigner:UpdatePipelineDraftFolder

PaiDesigner:UpdatePipelineDraftFolder

/pipelinedraftfolder/{folderId}

✅

✅

✅

✅

✅

✅

✅

✅

Delete pipeline drafts folders

PaiDesigner:DeletePipelineDraftFolder

PaiDesigner:DeletePipelineDraftFolder

/pipelinedraftfolder/{folderId}

✅

✅

✅

✅

✅

✅

✅

✅

Transfer self-created pipelines

PaiDesigner:TransferPipelineDrafts

PaiDesigner:TransferPipelineDrafts

/pipelinedraft/*

✅

✅

✅

✅

✅

✅

✅

✅

Transfer all pipelines in a workspace

PaiDesigner:TransferAllPipelineDrafts

PaiDesigner:TransferAllPipelineDrafts

/pipelinedraft/*

✅

Obtain a instance job

PaiDesigner:GetInstanceJob

PaiDesigner:GetInstanceJob

/instancejob/{instanceJobId}

✅

✅

✅

✅

✅

✅

✅

✅

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

MaxCompute Developer (DataWorks development and Designer related permissions)

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create pipelines

Paiflow:CreatePipeline

Paiflow:CreatePipeline

/pipeline/*

✅

✅

✅

✅

✅

✅

✅

✅

Update pipelines

Paiflow:UpdatePipeline

Paiflow:UpdatePipeline

/pipeline/{pipelineId}

✅

✅

✅

✅

✅

✅

✅

✅

Obtain the description of pipelines input and output

Paiflow:GetPipelineSchema

Paiflow:GetPipelineSchema

/pipeline/{pipelineId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Obtain full definition of pipelines

Paiflow:GetPipeline

Paiflow:GetPipeline

/pipeline/{pipelineId}

✅

✅

✅

✅

✅

✅

✅

✅

Delete pipelines

Paiflow:DeletePipeline

Paiflow:DeletePipeline

/pipeline/{pipelineId}

✅

✅

✅

✅

✅

✅

✅

✅

List pipelines

Paiflow:ListPipelines

Paiflow:ListPipelines

/pipeline/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Create share tokens for pipeline jobs

Paiflow:CreatePipelineRunToken

Paiflow:CreatePipelineRunToken

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

Obtain pipeline job events

Paiflow:ListPipelineRunNodeEvents

Paiflow:ListPipelineRunNodeEvents

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Rerun failed nodes of pipeline jobs

Paiflow:RerunPipelineRun

Paiflow:RerunPipelineRun

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

Obtain status of pipeline nodes

Paiflow:ListPipelineRunNodeStatus

Paiflow:ListPipelineRunNodeStatus

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Create pipeline jobs

Paiflow:CreatePipelineRun

Paiflow:CreatePipelineRun

/pipelinerun/*

✅

✅

✅

✅

✅

✅

✅

✅

Obtain pipeline jobs

Paiflow:GetPipelineRun

Paiflow:GetPipelineRun

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Update pipeline jobs

Paiflow:UpdatePipelineRun

Paiflow:UpdatePipelineRun

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

Obtain node logs of pipeline jobs

Paiflow:ListPipelineRunNodeLogs

Paiflow:ListPipelineRunNodeLogs

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Obtain outputs of pipeline job nodes

Paiflow:ListPipelineRunNodeOutputs

Paiflow:ListPipelineRunNodeOutputs

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Start pipeline jobs

Paiflow:StartPipelineRun

Paiflow:StartPipelineRun

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

Obtain pipeline job node information

Paiflow:GetPipelineRunNode

Paiflow:GetPipelineRunNode

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Terminate pipeline job

Paiflow:TerminatePipelineRun

Paiflow:TerminatePipelineRun

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

Obtain public and self-created pipeline jobs, node information and outputs in batches

Paiflow:ListPipelineRunsStatus

Paiflow:ListPipelineRunsStatus

/pipelinerun/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

List public and self-created pipeline job sources

Paiflow:ListPipelineRunSources

Paiflow:ListPipelineRunSources

/pipelinerun/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Delete pipeline job

Paiflow:DeletePipelineRun

Paiflow:DeletePipelineRun

/pipelinerun/{pipelineRunId}

✅

✅

✅

✅

✅

✅

✅

✅

List public and self-created pipeline job

Paiflow:ListPipelineRuns

Paiflow:ListPipelineRuns

/pipelinerun/*

✅

✅

✅

✅

✅

✅

✅

✅

✅

✅

Obtain all pipeline jobs, node information and outputs in a workspace in batches

Paiflow:ListAllPipelineRunsStatus

Paiflow:ListAllPipelineRunsStatus

/pipelinerun/*

✅

List all pipeline job sources in a workspace

Paiflow:ListAllPipelineRunSources

Paiflow:ListAllPipelineRunSources

/pipelinerun/*

✅

List all pipeline jobs in a workspace

Paiflow:ListAllPipelineRuns

Paiflow:ListAllPipelineRuns

/pipelinerun/*

✅

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Create instances (pay-as-you-go)

PaiDSW:CreatePostPaidInstance

PaiDSW:CreatePostPaidInstance

dswinstance/*

✅

✅

✅

Create instances (use existing subscription resource groups)

PaiDSW:CreatePrePaidInstance

PaiDSW:CreatePrePaidInstance

dswinstance/*

✅

✅

✅

✅

✅

Start instances

PaiDSW:StartInstance

PaiDSW:StartInstance

dswinstance/{instanceId}

✅

✅

✅

✅

✅

Delete instances (pay-as-you-go)

PaiDSW:DeletePostPaidInstance

PaiDSW:DeletePostPaidInstance

dswinstance/{instanceId}

✅

✅

✅

Delete instances (use existing subscription resource groups)

PaiDSW:DeletePrePaidInstance

PaiDSW:DeletePrePaidInstance

dswinstance/{instanceId}

✅

✅

✅

✅

✅

View instances

PaiDSW:GetInstance

PaiDSW:GetInstance

dswinstance/{instanceId}

✅

✅

✅

✅

✅

✅

Update instances (pay-as-you-go)

PaiDSW:UpdatePostPaidInstance

PaiDSW:UpdatePostPaidInstance

dswinstance/{instanceId}

✅

✅

✅

Update instances (use existing subscription resource groups)

PaiDSW:UpdatePrePaidInstance

PaiDSW:UpdatePrePaidInstance

dswinstance/{instanceId}

✅

✅

✅

✅

✅

Stop instances

PaiDSW:StopInstance

PaiDSW:StopInstance

dswinstance/{instanceId}

✅

✅

✅

✅

✅

Access instances

PaiDSW:OpenInstance

PaiDSW:OpenInstance

dswinstance/{instanceId}

✅

✅

✅

✅

✅

✅

List public and self-created instances

PaiDSW:ListInstances

PaiDSW:ListInstances

dswinstance/*

✅

✅

✅

✅

✅

✅

List all instances in a workspace

PaiDSW:ListAllInstances

PaiDSW:ListAllInstances

dswinstance/*

✅

Check whether all instances in a workspace exists

PaiDSW:CheckInstanceExistence

PaiDSW:CheckInstanceExistence

dswinstance/*

✅

✅

✅

✅

✅

✅

✅

✅

Create shutdown policies of idle instances

PaiDSW:CreateIdleInstanceCuller

PaiDSW:CreateIdleInstanceCuller

dswinstance/{instanceId}

✅

✅

✅

✅

✅

Obtain shutdown policies of idle instances

PaiDSW:GetIdleInstanceCuller

PaiDSW:GetIdleInstanceCuller

dswinstance/{instanceId}

✅

✅

✅

✅

✅

✅

Delete shutdown policies of idle instances

PaiDSW:DeleteIdleInstanceCuller

PaiDSW:DeleteIdleInstanceCuller

dswinstance/{instanceId}

✅

✅

✅

✅

✅

Create scheduled stop tasks

PaiDSW:CreateInstanceShutdownTimer

PaiDSW:CreateInstanceShutdownTimer

dswinstance/{instanceId}

✅

✅

✅

✅

✅

Delete scheduled stop tasks

PaiDSW:DeleteInstanceShutdownTimer

PaiDSW:DeleteInstanceShutdownTimer

dswinstance/{instanceId}

✅

✅

✅

✅

✅

Obtain scheduled stop tasks

PaiDSW:GetInstanceShutdownTimer

PaiDSW:GetInstanceShutdownTimer

dswinstance/{instanceId}

✅

✅

✅

✅

✅

✅

Create instance snapshots

PaiDSW:CreateInstanceSnapshot

PaiDSW:CreateInstanceSnapshot

dswinstance/{instanceId}/snapshot/*

✅

✅

✅

✅

✅

✅

Delete instance snapshots

PaiDSW:DeleteInstanceSnapshot

PaiDSW:DeleteInstanceSnapshot

dswinstance/{instanceId}/snapshot/{snapshotId}

✅

✅

✅

✅

✅

✅

Obtain a specified instance snapshot

PaiDSW:GetInstanceSnapshot

PaiDSW:GetInstanceSnapshot

dswinstance/{instanceId}/snapshot/{snapshotId}

✅

✅

✅

✅

✅

✅

List instance snapshots

PaiDSW:ListInstanceSnapshot

PaiDSW:ListInstanceSnapshot

dswinstance/{instanceId}/snapshot/*

✅

✅

✅

✅

✅

✅

Create a share for a specified notebook

PaiDSW:CreateShare

PaiDSW:CreateShare

dswinstance/{instanceId}/share/*

✅

✅

✅

✅

✅

✅

List shared notebook files from a user

PaiDSW:ListShares

PaiDSW:ListShares

dswinstance/{instanceId}/share/*

✅

✅

✅

✅

✅

✅

List events of a specified instance

PaiDSW:GetInstanceEvents

PaiDSW:GetInstanceEvents

dswinstance/{instanceId}

✅

✅

✅

✅

✅

✅

Obtain monitoring metrics of a specified instance

PaiDSW:GetInstanceMetrics

PaiDSW:GetInstanceMetrics

dswinstance/{instanceId}

✅

✅

✅

✅

✅

✅

Obtain the lifecycle of a specified instance

PaiDSW:GetLifecycle

PaiDSW:GetLifecycle

dswinstance/{instanceId}

✅

✅

✅

✅

✅

✅

Obtain the authentication information of a specified instance (proxy ssh)

PaiDSW:GetToken

PaiDSW:GetToken

dswinstance/{instanceId}

✅

✅

✅

✅

✅

✅

Obtain statistics of public and self-created DSW instances

PaiDSW:ListInstanceStatistics

PaiDSW:ListInstanceStatistics

dswinstance/*

✅

✅

✅

✅

✅

✅

Obtain statistics of all DSW instances in a workspace

PaiDSW:ListAllInstanceStatistics

PaiDSW:ListAllInstanceStatistics

dswinstance/*

✅

Create temporary files

PaiDSW:CreateTempFile (This action is allowed unless you specify Deny)

tempfile/*

Delete temporary files

PaiDSW:DeleteTempFile (This action is allowed unless you specify Deny)

tempfile/{tempfileId}

Obtain temporary files

PaiDSW:GetTempFile (This action is allowed unless you specify Deny)

tempfile/{tempfileId}

Update temporary files

PaiDSW:UpdateTempFile (This action is allowed unless you specify Deny)

tempfile/{tempfileId}

List temporary files

PaiDSW:ListTempFiles (This action is allowed unless you specify Deny)

tempfile/*

Create temporary file tasks

PaiDSW:CreateTempFileTask (This action is allowed unless you specify Deny)

tempfiletask/*

Delete temporary file tasks

PaiDSW:DeleteTempFileTask (This action is allowed unless you specify Deny)

tempfiletask/{tempfileTaskId}

Update temporary files task

PaiDSW:UpdateTempFileTask (This action is allowed unless you specify Deny)

tempfiletask/{tempfileTaskId}

Obtain user configurations

PaiDSW:GetUserConfig (This action is allowed unless you specify Deny)

userconfig/*

List available ECS specifications

PaiDSW:ListEcsSpecs (This action is allowed unless you specify Deny)

ecsspec/*

List available ECS specifications based on specification types

PaiDSW:ListEcsSpecsByInstanceTypes (This action is allowed unless you specify Deny)

ecsspec/*

Update instance tags

PaiDSW:UpdateInstanceLabels

PaiDSW:UpdateInstanceLabels

dswinstance/{instanceId}/labels

✅

✅

✅

✅

✅

Delete instance tags

PaiDSW:DeleteInstanceLabels

PaiDSW:DeleteInstanceLabels

dswinstance/{instanceId}/labels

✅

✅

✅

✅

✅

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Create jobs

PaiDLC:CreateJob

PaiDLC:CreateJob

dlcjob/*

✅

✅

✅

View job details

PaiDLC:GetJob

PaiDLC:GetJob

dlcjob/jobid

✅

✅

✅

✅

View job statistics in batches

PaiDLC:BatchGetJobsStatistics

PaiDLC:BatchGetJobsStatistics

dlcjob/*

✅

✅

✅

✅

View job statistics

PaiDLC:GetJobsStatistics

PaiDLC:GetJobsStatistics

dlcjob/*

✅

✅

✅

✅

List self-created jobs

PaiDLC:ListJobs

PaiDLC:ListJobs

dlcjob/*

✅

✅

✅

✅

✅

Clone jobs

PaiDLC:CloneJob

PaiDLC:CloneJob

dlcjob/jobid

✅

✅

✅

✅

Stop jobs

PaiDLC:StopJob

PaiDLC:StopJob

dlcjob/jobid

✅

✅

✅

✅

Share jobs

PaiDLC:ShareJob

PaiDLC:ShareJob

dlcjob/jobid

✅

✅

✅

✅

Modify job priority

PaiDLC:UpdateJob

PaiDLC:UpdateJob

dlcjob/jobid

✅

✅

✅

✅

Delete jobs

PaiDLC:DeleteJob

PaiDLC:DeleteJob

dlcjob/jobid

✅

✅

✅

✅

Generate command line script for jobs

PaiDLC:GenerateJobScript

PaiDLC:GenerateJobScript

dlcjob/jobid

✅

✅

✅

✅

Check whether job token is valid

PaiDLC:CheckWebTerminalToken

PaiDLC:CheckWebTerminalToken

dlcjob/jobid

✅

✅

✅

✅

View job retry information

PaiDLC:ListJobRetries

PaiDLC:ListJobRetries

dlcjob/jobid

✅

✅

✅

✅

Obtain specified job sanity check result

PaiDLC:GetJobSanityCheckResult

PaiDLC:GetJobSanityCheckResult

dlcjob/jobid

✅

✅

✅

✅

Obtain multiple job sanity check results

PaiDLC:ListJobSanityCheckResults

PaiDLC:ListJobSanityCheckResults

dlcjob/jobid

✅

✅

✅

✅

Obtain job metrics

PaiDLC:GetMetrics

PaiDLC:GetMetrics

dlcjob/jobid

✅

✅

✅

✅

Download large log file of a job

PaiDLC:DownloadLargeLogs

PaiDLC:DownloadLargeLogs

dlcjob/jobid

✅

✅

✅

✅

Query the latest job-level aggregated logs

PaiDLC:GetLatestJobLogs

PaiDLC:GetLatestJobLogs

dlcjob/jobid

✅

✅

✅

✅

Query job-level aggregated logs

PaiDLC:GetJobPagedLogs

PaiDLC:GetJobPagedLogs

dlcjob/jobid

✅

✅

✅

✅

Query the number of logs of a job

PaiDLC:GetLogsCount

PaiDLC:GetLogsCount

dlcjob/jobid

✅

✅

✅

✅

Query all aggregated events of a job

PaiDLC:GetJobEvents

PaiDLC:GetJobEvents

dlcjob/jobid

✅

✅

✅

✅

Query the latest job-level aggregated event

PaiDLC:GetLatestJobEvents

PaiDLC:GetLatestJobEvents

dlcjob/jobid

✅

✅

✅

✅

Query all aggregated events of a job

PaiDLC:GetJobPagedEvents

PaiDLC:GetJobPagedEvents

dlcjob/jobid

✅

✅

✅

✅

Obtain the token of a job

PaiDLC:GetToken

PaiDLC:GetToken

dlcjob/jobid

✅

✅

✅

✅

Obtain all pods of a job

PaiDLC:ListJobPods

PaiDLC:ListJobPods

dlcjob/jobid/pod/*

✅

✅

✅

✅

Obtain a temporary token for accessing a job pod

PaiDLC:GetWebTerminal

PaiDLC:GetWebTerminal

dlcjob/jobid/pod/podid

✅

✅

✅

✅

Obtain the logs of a pod of a job

PaiDLC:GetPodLogs

PaiDLC:GetPodLogs

dlcjob/jobid/pod/podid

✅

✅

✅

✅

Obtain the latest pod logs of a job

PaiDLC:GetLatestPodLogs

PaiDLC:GetLatestPodLogs

dlcjob/jobid/pod/podid

✅

✅

✅

✅

Obtain the paged logs of a job pod

PaiDLC:GetPodPagedLogs

PaiDLC:GetPodPagedLogs

dlcjob/jobid/pod/podid

✅

✅

✅

✅

View the context of logs of a job pod

PaiDLC:GetPodContextLogs

PaiDLC:GetPodContextLogs

dlcjob/jobid/pod/podid

✅

✅

✅

✅

Obtain the event information of a job pod

PaiDLC:GetPodEvents

PaiDLC:GetPodEvents

dlcjob/jobid/pod/podid

✅

✅

✅

✅

Query the latest pod-level aggregated logs of a job

PaiDLC:GetLatestPodEvents

PaiDLC:GetLatestPodEvents

dlcjob/jobid/pod/podid

✅

✅

✅

✅

Query the event information of a job pod

PaiDLC:GetPodPagedEvents

PaiDLC:GetPodPagedEvents

dlcjob/jobid/pod/podid

✅

✅

✅

✅

View the context of an event in a job pod

PaiDLC:GetPodContextEvents

PaiDLC:GetPodContextEvents

dlcjob/jobid/pod/podid

✅

✅

✅

✅

Create TensorBoard instances

PaiDLC:CreateTensorboard

PaiDLC:CreateTensorboard

tensorboard/*

✅

✅

✅

View TensorBoard instances

PaiDLC:GetTensorboard

PaiDLC:GetTensorboard

tensorboard/tbid

✅

✅

✅

✅

List self-created Tensorboard instances

PaiDLC:ListTensorboards

PaiDLC:ListTensorboards

tensorboard/*

✅

✅

✅

✅

✅

Start TensorBoard instances

PaiDLC:StartTensorboard

PaiDLC:StartTensorboard

tensorboard/tbid

✅

✅

✅

✅

Stop TensorBoard instance

PaiDLC:StopTensorboard

PaiDLC:StopTensorboard

tensorboard/tbid

✅

✅

✅

✅

Update TensorBoard instance

PaiDLC:UpdateTensorboard

PaiDLC:UpdateTensorboard

tensorboard/tbid

✅

✅

✅

✅

Delete TensorBoard instances

PaiDLC:DeleteTensorboard

PaiDLC:DeleteTensorboard

tensorboard/tbid

✅

✅

✅

✅

Obtain TensorBoard share link

PaiDLC:GetTensorboardSharedUrl

PaiDLC:GetTensorboardSharedUrl

tensorboard/tbid

✅

✅

✅

✅

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create hyperparameter optimization (HPO) experiments

PAIAutoML:CreateHpoExperiment

PAIAutoML:CreateHpoExperiment

✅

✅

Restart failed trials in HPO experiments

PAIAutoML:RestartHpoTrials

PAIAutoML:RestartHpoTrials

✅

✅

Stop HPO experiments

PAIAutoML:StopHpoExperiment

PAIAutoML:StopHpoExperiment

✅

✅

✅

✅

✅

Stop trials in HPO experiments

PAIAutoML:StopHpoTrials

PAIAutoML:StopHpoTrials

✅

✅

✅

✅

✅

Update HPO experiments

PAIAutoML:UpdateHpoExperiment

PAIAutoML:UpdateHpoExperiment

✅

✅

Delete HPO experiments

PAIAutoML:DeleteHpoExperiment

PAIAutoML:DeleteHpoExperiment

✅

✅

View HPO experiment information

PAIAutoML:GetHpoExperiment

PAIAutoML:GetHpoExperiment

✅

✅

✅

✅

✅

✅

✅

✅

✅

View information about a single trial

PAIAutoML:GetHpoTrial

PAIAutoML:GetHpoTrial

✅

✅

✅

✅

✅

✅

✅

✅

✅

View the log of a single HPO experiment

PAIAutoML:ListHpoExperimentLogs

PAIAutoML:ListHpoExperimentLogs

✅

✅

✅

✅

✅

✅

✅

✅

✅

Query HPO experiments

PAIAutoML:ListHpoExperiments

PAIAutoML:ListHpoExperiments

✅

✅

✅

✅

✅

✅

✅

✅

✅

View the log of a single trial in an HPO experiment

PAIAutoML:ListHpoTrialLogs

PAIAutoML:ListHpoTrialLogs

✅

✅

✅

✅

✅

✅

✅

✅

✅

View the trial information of HPO experiments

PAIAutoML:ListHpoTrials

PAIAutoML:ListHpoTrials

✅

✅

✅

✅

✅

✅

✅

✅

✅

View the log file name of a single trial

PAIAutoML:ListHpoTrialLogNames

PAIAutoML:ListHpoTrialLogNames

✅

✅

✅

✅

✅

✅

✅

✅

✅

View the command information of a single trial

PAIAutoML:ListHpoTrialCommands

PAIAutoML:ListHpoTrialCommands

✅

✅

✅

✅

✅

✅

✅

✅

✅

Permission description

Permission field (managed through PAI Workspace Management)

Workspace owner/Workspace administrator

Algorithm Development

Algorithm O&M engineer

Private (created by self)

Private (created by others)

Public (created by self)

Public (created by others)

Private (created by self)

Private (created by others)

Public

Create application flow template

PaiLangStudio:CreateFlowTemplate

✅

✅

✅

✅

✅

✅

Update application flow template

PaiLangStudio:UpdateFlowTemplate

✅

✅

✅

✅

✅

✅

Delete application flow template

PaiLangStudio:DeleteFlowTemplate

✅

✅

✅

✅

✅

✅

View application flow template

PaiLangStudio:GetFlowTemplate

✅

✅

✅

✅

✅

✅

List application flow templates

PaiLangStudio:ListFlowTemplates

✅

✅

✅

✅

✅

✅

Create application flow

PaiLangStudio:CreateFlow

✅

✅

✅

✅

✅

✅

View application flow

PaiLangStudio:GetFlow

✅

✅

✅

✅

✅

✅

Update application flow

PaiLangStudio:UpdateFlow

✅

✅

✅

✅

✅

✅

Delete application flow

PaiLangStudio:DeleteFlow

✅

✅

✅

✅

✅

✅

List application flows

PaiLangStudio:ListFlows

✅

✅

✅

✅

✅

✅

Deploy application flow

PaiLangStudio:DeployFlow

✅

✅

✅

Create connection

PaiLangStudio:CreateConnection

✅

✅

✅

✅

✅

✅

View connection

PaiLangStudio:GetConnection

✅

✅

✅

✅

✅

✅

Update connection

PaiLangStudio:UpdateConnection

✅

✅

✅

✅

✅

✅

Delete connection

PaiLangStudio:DeleteConnection

✅

✅

✅

✅

✅

✅

List connections

PaiLangStudio:ListConnections

✅

✅

✅

✅

✅

✅

Create runtime environment

PaiLangStudio:CreateRuntime

✅

✅

✅

View runtime environment details

PaiLangStudio:GetRuntime

✅

✅

✅

✅

✅

✅

List runtime environments

PaiLangStudio:ListRuntimes

✅

✅

✅

✅

✅

✅

Reinstall dependencies for runtime environment

PaiLangStudio:ReloadRuntime

✅

✅

✅

✅

✅

✅

Update runtime environment

PaiLangStudio:UpdateRuntime

✅

✅

✅

Delete runtime environment

PaiLangStudio:DeleteRuntime

✅

✅

✅

View tool metadata

PaiLangStudio:GetToolMeta

✅

✅

✅

✅

✅

✅

List tools supported by the runtime container

PaiLangStudio:GetPackageTools

✅

✅

✅

✅

✅

✅

Get default tool metadata

PaiLangStudio:GetBuiltinTools

✅

✅

✅

✅

✅

✅

Create an application flow run

PaiLangStudio:CreateFlowRun

✅

✅

✅

✅

✅

✅

View application flow run details

PaiLangStudio:GetFlowRun

✅

✅

✅

✅

✅

✅

List application flow run records

PaiLangStudio:ListFlowRuns

✅

✅

✅

✅

✅

✅