All Products
Search
Document Center

Platform For AI:Appendix: Roles and permissions

Last Updated:Oct 15, 2024

Platform for AI (PAI) provides the following roles: Workspace Administrator/Owner, Algorithm Developer, Algorithm O&M Engineer, Labeling Administrator, Visitor, and MaxCompute Developer.

You can manage the permissions in the RAM console or in a PAI workspace. The following tables shows the permissions of each role in all modules of PAI.

General permissions

Permission

Action (can be managed in the RAM console)

List whether PAI, MaxCompute, DataWorks, and OSS are purchased or activated

Pai:ListProducts (This action is allowed unless you specify Deny)

List quotas (This permission will be discontinued)

Pai:ListQuotas (This action is allowed unless you specify Deny)

Query the pay-as-you-go prices of PAI-DSW, PAI-DLC, and PAI-EAS

Pai:GetPayAsYouGoPrice (This action is allowed unless you specify Deny)

Queries information about modules including PAI-DSW, PAI-DLC, and PAI-EAS

Pai:DescribePricingModule ((This action is allowed unless you specify Deny)

List RAM users

Pai:ListUsers (This action is allowed unless you specify Deny)

List user configurations of the Alibaba Cloud account

Pai:ListUserConfigs

Update user configurations of the Alibaba Cloud account

Pai:SetUserConfigs

Delete user configurations of the Alibaba Cloud account

Pai:DeleteUserConfig

Create PAI orders

Pai:CreateOrder

Workspace management

Table 1. Workspace management: Off-workspace resources

Permission

Action (can be managed in the RAM console)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Labeling Administrator

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create workspaces

PaiWorkspace:CreateWorkspace

Delete workspaces

PaiWorkspace:DeleteWorkspace

List workspaces

PaiWorkspace:ListWorkspaces

Create the default workspace

PaiWorkspace:CreateDefaultWorkspace

Update resource quotas

PaiWorkspace:UpdateQuota

Update the default workspace

PaiWorkspace:UpdateDefaultWorkspace

Obtain the default workspace

PaiWorkspace:GetDefaultWorkspace

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Table 2. Workspace management: Workspace resources

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Labeling Administrator

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Obtain custom roles

PaiWorkspace:GetWorkspaceRole

PaiWorkspace:GetWorkspaceRole

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create custom roles

PaiWorkspace:AddWorkspaceRole

PaiWorkspace:AddWorkspaceRole

Delete custom roles

PaiWorkspace:RemoveWorkspaceRole

PaiWorkspace:RemoveWorkspaceRole

Update custom roles

PaiWorkspace:UpdateWorkspaceRole

PaiWorkspace:UpdateWorkspaceRole

List custom roles

PaiWorkspace:ListWorkspaceRoles

PaiWorkspace:ListWorkspaceRoles

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View workspace basic information

PaiWorkspace:GetWorkspace

PaiWorkspace:GetWorkspace

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Modify workspace basic information

PaiWorkspace:UpdateWorkspace

PaiWorkspace:UpdateWorkspace

Obtain workspace operation logs

PaiWorkspace:ListOperationLogs

PaiWorkspace:ListOperationLogs

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List RAM users that are not in a workspace

PaiWorkspace:ListWorkspaceUsers

PaiWorkspace:ListWorkspaceUsers

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List permissions in workspaces

PaiWorkspace:ListPermissions

PaiWorkspace:ListPermissions

Increase resource quotas for workspaces

PaiWorkspace:AddWorkspaceQuota

PaiWorkspace:AddWorkspaceQuota

Remove resource quotas for workspaces

PaiWorkspace:RemoveWorkspaceQuota

PaiWorkspace:RemoveWorkspaceQuota

Add members

PaiWorkspace:CreateMember

PaiWorkspace:CreateMember

Delete members

PaiWorkspace:DeleteMembers

PaiWorkspace:DeleteMembers

Add member roles

PaiWorkspace:AddMemberRole

PaiWorkspace:AddMemberRole

Delete member roles

PaiWorkspace:RemoveMemberRole

PaiWorkspace:RemoveMemberRole

View workspace members

PaiWorkspace:GetMember

PaiWorkspace:GetMember

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List workspace members

PaiWorkspace:ListMembers

PaiWorkspace:ListMembers

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List resource instances

PaiWorkspace:ListResources

PaiWorkspace:ListResources

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create resource instances

PaiWorkspace:CreateWorkspaceResource

PaiWorkspace:CreateWorkspaceResource

Delete resource instances

PaiWorkspace:DeleteWorkspaceResource

PaiWorkspace:DeleteWorkspaceResource

Update resource instance (set as default resource group)

PaiWorkspace:UpdateWorkspaceResource

PaiWorkspace:UpdateWorkspaceResource

View resource instances

PaiWorkspace:GetResource

PaiWorkspace:GetResource

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View storage configurations

PaiWorkspace:ListConfigs

PaiWorkspace:ListConfigs

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create or update workspace storage configurations

PaiWorkspace:UpdateConfigs

PaiWorkspace:UpdateConfigs

Obtain instance jobs

PaiWorkspace:GetInstanceJob

PaiWorkspace:GetInstanceJob

/instancejob/{instanceJobId}

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete workspace storage configurations

PaiWorkspace:DeleteConfig

PaiWorkspace:DeleteConfig

QuickStart

Table 1. QuickStart: TrainingService

Permission

Action (can be managed in the PAI workspace)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Create jobs

PaiTraining:CreateTrainingJob

Modify jobs

PaiTraining:UpdateTrainingJob

View the details of jobs

PaiTraining:GetTrainingJob

View job statistics

View the job list

PaiTraining:ListTrainingJobs

Clone jobs

PaiTraining:CloneTrainingJob

Stop jobs

PaiTraining:StopTrainingJob

Delete jobs

PaiTraining:DeleteTrainingJob

Share jobs

PaiTraining:ShareTrainingJob

View definition of preset algorithms

Table 2. QuickStart: Experiment management

Permission

Action (can be managed in the PAI workspace)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create experiments

PaiExperiment:CreateExperiment

Obtain experiments

PaiExperiment:GetExperiment

Update experiments

PaiExperiment:UpdateExperiment

Delete experiments

PaiExperiment:DeleteExperiment

List all experiments in a workspace

PaiExperiment:ListAllExperiments

List public and self-created experiments

PaiExperiment:ListExperiments

Set experiment tags

PaiExperiment:SetExperimentLabel

Delete experiment tags

PaiExperiment:DeleteExperimentLabel

Create Trial

PaiExperiment:CreateTrial

Obtain Trial

PaiExperiment:GetTrial

Set Trial tags

PaiExperiment:SetTrialLabel

iTAG

Permission

Workspace Administrator/Owner

Labeling Administrator

Private (created by me)

Private (created by others)

Public

Labeling job management, including job creation, user management, job distribution, and job execution.

✅ Accessibility does not matter

Visualized Modeling (Designer)

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

MaxCompute Developer (DataWorks development and Designer related permissions)

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Obtain pipeline drafts

PaiDesigner:GetPipelineDraft

PaiDesigner:GetPipelineDraft

/pipelinedraft/{pipeineDraftId}

Obtain pipeline draft meta

PaiDesigner:GetPipelineDraftMeta

PaiDesigner:GetPipelineDraftMeta

/pipelinedraft/{pipeineDraftId}

List public and self-created pipeline drafts

PaiDesigner:ListPipelineDrafts

PaiDesigner:ListPipelineDrafts

/pipelinedraft/*

List all pipeline drafts in a workspace

PaiDesigner:ListAllPipelineDrafts

PaiDesigner:ListAllPipelineDrafts

/pipelinedraft/*

Create pipeline drafts

PaiDesigner:CreatePipelineDraft

PaiDesigner:CreatePipelineDraft

/pipelinedraft/{pipeineDraftId}

Delete pipeline drafts

PaiDesigner:DeletePipelineDraft

PaiDesigner:DeletePipelineDraft

/pipelinedraft/{pipeineDraftId}

Update pipeline draft meta

PaiDesigner:UpdatePipelineDraftMeta

PaiDesigner:UpdatePipelineDraftMeta

/pipelinedraft/{pipeineDraftId}

Update pipeline draft content

PaiDesigner:UpdatePipelineDraftContent

PaiDesigner:UpdatePipelineDraftContent

/pipelinedraft/{pipeineDraftId}

Copy pipeline drafts

PaiDesigner:CopyPipelineDraft

PaiDesigner:CopyPipelineDraft

/pipelinedraft/{pipeineDraftId}

View public and self-created pipeline draft statistics

PaiDesigner:GetPipelineDraftsStatistics

PaiDesigner:GetPipelineDraftsStatistics

/pipelinedraft/*

View all pipeline draft statistics in the workspace

PaiDesigner:GetAllPipelineDraftsStatistics

PaiDesigner:GetAllPipelineDraftsStatistics

/pipelinedraft/*

View public and self-created pipeline draft user statistics

PaiDesigner:GetPipelineDraftsUsersStatistics

PaiDesigner:GetPipelineDraftsUsersStatistics

/pipelinedraft/*

View all pipeline draft user statistics in a workspace

PaiDesigner:GetAllPipelineDraftsUsersStatistics

PaiDesigner:GetAllPipelineDraftsUsersStatistics

/pipelinedraft/*

Create pipeline drafts based on templates

PaiDesigner:CreateTemplatePipelineDraft

PaiDesigner:CreateTemplatePipelineDraft

/pipelinedraft/*

Publish pipeline drafts to a workspace

PaiDesigner:PublishPipelineDraft

PaiDesigner:PublishPipelineDraft

/pipelinedraft/{pipeineDraftId}

Obtain the latest pipeline draft from the current user

PaiDesigner:ListRecentPipelineDrafts

PaiDesigner:ListRecentPipelineDrafts

/pipelinedraft/*

Stop all jobs in a pipeline draft

PaiDesigner:StopPipelineDraft

PaiDesigner:StopPipelineDraft

/pipelinedraft/{pipeineDraftId}

Obtain the status of pipeline drafts and child nodes.

PaiDesigner:GetPipelineDraftStatus

PaiDesigner:GetPipelineDraftStatus

/pipelinedraft/{pipeineDraftId}

Obtain meta of pipeline draft visualization

PaiDesigner:GetPipelineDraftVisualizationMeta

PaiDesigner:GetPipelineDraftVisualizationMeta

/pipelinedraft/{pipeineDraftId}

Obtain data of pipeline draft visualization

PaiDesigner:QueryPipelineDraftVisualizationData

PaiDesigner:QueryPipelineDraftVisualizationData

/pipelinedraft/{pipeineDraftId}

List outputs of pipeline drafts

PaiDesigner:ListPipelineDraftNodeOutputs

PaiDesigner:ListPipelineDraftNodeOutputs

/pipelinedraft/{pipeineDraftId}

Obtain outputs of pipeline drafts

PaiDesigner:GetPipelineDraftNodeOutput

PaiDesigner:GetPipelineDraftNodeOutput

/pipelinedraft/{pipeineDraftId}

Create pipeline draft jobs

PaiDesigner:CreateJob

PaiDesigner:CreateJob

/pipelinedraft/{pipeineDraftId}/job/*

List pipeline draft jobs

PaiDesigner:ListJobs

PaiDesigner:ListJobs

/pipelinedraft/{pipeineDraftId}/job/*

Obtain pipeline draft jobs

PaiDesigner:GetJob

PaiDesigner:GetJob

/pipelinedraft/{pipeineDraftId}/job/{jobId}

Stop pipeline draft jobs

PaiDesigner:StopJob

PaiDesigner:StopJob

/pipelinedraft/{pipeineDraftId}/job/{jobId}

Create custom templates

PaiDesigner:CreateTemplate

PaiDesigner:CreateTemplate

/pipelinedrafttemplate/*

View templates

PaiDesigner:GetTemplate

PaiDesigner:GetTemplate

/pipelinedrafttemplate/{pipelineDraftTemplateId}

List public and self-created templates

PaiDesigner:ListTemplates

PaiDesigner:ListTemplates

/pipelinedrafttemplate/*

List all templates in a workspace

PaiDesigner:ListAllTemplates

PaiDesigner:ListAllTemplates

/pipelinedrafttemplate/*

Delete templates

PaiDesigner:DeleteTemplate

PaiDesigner:DeleteTemplate

/pipelinedrafttemplate/{pipelineDraftTemplateId}

Update templates

PaiDesigner:UpdateTemplate

PaiDesigner:UpdateTemplate

/pipelinedrafttemplate/{pipelineDraftTemplateId}

Create template tags

PaiDesigner:CreateTemplateLabels

PaiDesigner:CreateTemplateLabels

/pipelinedrafttemplate/{pipelineDraftTemplateId}/label/*

Delete template tags

PaiDesigner:DeleteTemplateLabels

PaiDesigner:DeleteTemplateLabels

/pipelinedrafttemplate/{pipelineDraftTemplateId}/label/*

List template tags

PaiDesigner:ListTemplateLabels

PaiDesigner:ListTemplateLabels

/pipelinedrafttemplate/{pipelineDraftTemplateId}/label/*

Create pipeline draft folders

PaiDesigner:CreatePipelineDraftFolder

PaiDesigner:CreatePipelineDraftFolder

/pipelinedraftfolder/*

List public and self-created sub folders or pipeline drafts in a pipeline draft folder

PaiDesigner:GetPipelineDraftFolderChildren

PaiDesigner:GetPipelineDraftFolderChildren

/pipelinedraftfolder/*

List all sub folders or pipeline drafts in a pipeline draft folder in a workspace

PaiDesigner:GetAllPipelineDraftFolderChildren

PaiDesigner:GetAllPipelineDraftFolderChildren

/pipelinedraftfolder/*

Update pipeline drafts folders

PaiDesigner:UpdatePipelineDraftFolder

PaiDesigner:UpdatePipelineDraftFolder

/pipelinedraftfolder/{folderId}

Delete pipeline drafts folders

PaiDesigner:DeletePipelineDraftFolder

PaiDesigner:DeletePipelineDraftFolder

/pipelinedraftfolder/{folderId}

Transfer self-created pipelines

PaiDesigner:TransferPipelineDrafts

PaiDesigner:TransferPipelineDrafts

/pipelinedraft/*

Transfer all pipelines in a workspace

PaiDesigner:TransferAllPipelineDrafts

PaiDesigner:TransferAllPipelineDrafts

/pipelinedraft/*

Obtain a instance job

PaiDesigner:GetInstanceJob

PaiDesigner:GetInstanceJob

/instancejob/{instanceJobId}

PAIFlow

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

MaxCompute Developer (DataWorks development and Designer related permissions)

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create pipelines

Paiflow:CreatePipeline

Paiflow:CreatePipeline

/pipeline/*

Update pipelines

Paiflow:UpdatePipeline

Paiflow:UpdatePipeline

/pipeline/{pipelineId}

Obtain the description of pipelines input and output

Paiflow:GetPipelineSchema

Paiflow:GetPipelineSchema

/pipeline/{pipelineId}

Obtain full definition of pipelines

Paiflow:GetPipeline

Paiflow:GetPipeline

/pipeline/{pipelineId}

Delete pipelines

Paiflow:DeletePipeline

Paiflow:DeletePipeline

/pipeline/{pipelineId}

List pipelines

Paiflow:ListPipelines

Paiflow:ListPipelines

/pipeline/*

Create share tokens for pipeline jobs

Paiflow:CreatePipelineRunToken

Paiflow:CreatePipelineRunToken

/pipelinerun/{pipelineRunId}

Obtain pipeline job events

Paiflow:ListPipelineRunNodeEvents

Paiflow:ListPipelineRunNodeEvents

/pipelinerun/{pipelineRunId}

Rerun failed nodes of pipeline jobs

Paiflow:RerunPipelineRun

Paiflow:RerunPipelineRun

/pipelinerun/{pipelineRunId}

Obtain status of pipeline nodes

Paiflow:ListPipelineRunNodeStatus

Paiflow:ListPipelineRunNodeStatus

/pipelinerun/{pipelineRunId}

Create pipeline jobs

Paiflow:CreatePipelineRun

Paiflow:CreatePipelineRun

/pipelinerun/*

Obtain pipeline jobs

Paiflow:GetPipelineRun

Paiflow:GetPipelineRun

/pipelinerun/{pipelineRunId}

Update pipeline jobs

Paiflow:UpdatePipelineRun

Paiflow:UpdatePipelineRun

/pipelinerun/{pipelineRunId}

Obtain node logs of pipeline jobs

Paiflow:ListPipelineRunNodeLogs

Paiflow:ListPipelineRunNodeLogs

/pipelinerun/{pipelineRunId}

Obtain outputs of pipeline job nodes

Paiflow:ListPipelineRunNodeOutputs

Paiflow:ListPipelineRunNodeOutputs

/pipelinerun/{pipelineRunId}

Start pipeline jobs

Paiflow:StartPipelineRun

Paiflow:StartPipelineRun

/pipelinerun/{pipelineRunId}

Obtain pipeline job node information

Paiflow:GetPipelineRunNode

Paiflow:GetPipelineRunNode

/pipelinerun/{pipelineRunId}

Terminate pipeline job

Paiflow:TerminatePipelineRun

Paiflow:TerminatePipelineRun

/pipelinerun/{pipelineRunId}

Obtain public and self-created pipeline jobs, node information and outputs in batches

Paiflow:ListPipelineRunsStatus

Paiflow:ListPipelineRunsStatus

/pipelinerun/*

List public and self-created pipeline job sources

Paiflow:ListPipelineRunSources

Paiflow:ListPipelineRunSources

/pipelinerun/*

Delete pipeline job

Paiflow:DeletePipelineRun

Paiflow:DeletePipelineRun

/pipelinerun/{pipelineRunId}

List public and self-created pipeline job

Paiflow:ListPipelineRuns

Paiflow:ListPipelineRuns

/pipelinerun/*

Obtain all pipeline jobs, node information and outputs in a workspace in batches

Paiflow:ListAllPipelineRunsStatus

Paiflow:ListAllPipelineRunsStatus

/pipelinerun/*

List all pipeline job sources in a workspace

Paiflow:ListAllPipelineRunSources

Paiflow:ListAllPipelineRunSources

/pipelinerun/*

List all pipeline jobs in a workspace

Paiflow:ListAllPipelineRuns

Paiflow:ListAllPipelineRuns

/pipelinerun/*

Data Science Workshop (DSW)

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Create instances (pay-as-you-go)

PaiDSW:CreatePostPaidInstance

PaiDSW:CreatePostPaidInstance

dswinstance/*

Create instances (use existing subscription resource groups)

PaiDSW:CreatePrePaidInstance

PaiDSW:CreatePrePaidInstance

dswinstance/*

Start instances

PaiDSW:StartInstance

PaiDSW:StartInstance

dswinstance/{instanceId}

Delete instances (pay-as-you-go)

PaiDSW:DeletePostPaidInstance

PaiDSW:DeletePostPaidInstance

dswinstance/{instanceId}

Delete instances (use existing subscription resource groups)

PaiDSW:DeletePrePaidInstance

PaiDSW:DeletePrePaidInstance

dswinstance/{instanceId}

View instances

PaiDSW:GetInstance

PaiDSW:GetInstance

dswinstance/{instanceId}

Update instances (pay-as-you-go)

PaiDSW:UpdatePostPaidInstance

PaiDSW:UpdatePostPaidInstance

dswinstance/{instanceId}

Update instances (use existing subscription resource groups)

PaiDSW:UpdatePrePaidInstance

PaiDSW:UpdatePrePaidInstance

dswinstance/{instanceId}

Stop instances

PaiDSW:StopInstance

PaiDSW:StopInstance

dswinstance/{instanceId}

Access instances

PaiDSW:OpenInstance

PaiDSW:OpenInstance

dswinstance/{instanceId}

List public and self-created instances

PaiDSW:ListInstances

PaiDSW:ListInstances

dswinstance/*

List all instances in a workspace

PaiDSW:ListAllInstances

PaiDSW:ListAllInstances

dswinstance/*

Check whether all instances in a workspace exists

PaiDSW:CheckInstanceExistence

PaiDSW:CheckInstanceExistence

dswinstance/*

Create shutdown policies of idle instances

PaiDSW:CreateIdleInstanceCuller

PaiDSW:CreateIdleInstanceCuller

dswinstance/{instanceId}

Obtain shutdown policies of idle instances

PaiDSW:GetIdleInstanceCuller

PaiDSW:GetIdleInstanceCuller

dswinstance/{instanceId}

Delete shutdown policies of idle instances

PaiDSW:DeleteIdleInstanceCuller

PaiDSW:DeleteIdleInstanceCuller

dswinstance/{instanceId}

Create scheduled stop tasks

PaiDSW:CreateInstanceShutdownTimer

PaiDSW:CreateInstanceShutdownTimer

dswinstance/{instanceId}

Delete scheduled stop tasks

PaiDSW:DeleteInstanceShutdownTimer

PaiDSW:DeleteInstanceShutdownTimer

dswinstance/{instanceId}

Obtain scheduled stop tasks

PaiDSW:GetInstanceShutdownTimer

PaiDSW:GetInstanceShutdownTimer

dswinstance/{instanceId}

Create instance snapshots

PaiDSW:CreateInstanceSnapshot

PaiDSW:CreateInstanceSnapshot

dswinstance/{instanceId}/snapshot/*

Delete instance snapshots

PaiDSW:DeleteInstanceSnapshot

PaiDSW:DeleteInstanceSnapshot

dswinstance/{instanceId}/snapshot/{snapshotId}

Obtain a specified instance snapshot

PaiDSW:GetInstanceSnapshot

PaiDSW:GetInstanceSnapshot

dswinstance/{instanceId}/snapshot/{snapshotId}

List instance snapshots

PaiDSW:ListInstanceSnapshot

PaiDSW:ListInstanceSnapshot

dswinstance/{instanceId}/snapshot/*

Create a share for a specified notebook

PaiDSW:CreateShare

PaiDSW:CreateShare

dswinstance/{instanceId}/share/*

List shared notebook files from a user

PaiDSW:ListShares

PaiDSW:ListShares

dswinstance/{instanceId}/share/*

List events of a specified instance

PaiDSW:GetInstanceEvents

PaiDSW:GetInstanceEvents

dswinstance/{instanceId}

Obtain monitoring metrics of a specified instance

PaiDSW:GetInstanceMetrics

PaiDSW:GetInstanceMetrics

dswinstance/{instanceId}

Obtains the lifecycle of a specified instance

PaiDSW:GetLifecycle

PaiDSW:GetLifecycle

dswinstance/{instanceId}

Obtain the authentication information of a specified instance (proxy ssh)

PaiDSW:GetToken

PaiDSW:GetToken

dswinstance/{instanceId}

Obtain statistics of public and self-created DSW instances

PaiDSW:ListInstanceStatistics

PaiDSW:ListInstanceStatistics

dswinstance/*

Obtain statistics of all DSW instances in a workspace

PaiDSW:ListAllInstanceStatistics

PaiDSW:ListAllInstanceStatistics

dswinstance/*

Create temporary files

PaiDSW:CreateTempFile (This action is allowed unless you specify Deny)

tempfile/*

Delete temporary files

PaiDSW:DeleteTempFile (This action is allowed unless you specify Deny)

tempfile/{tempfileId}

Obtain temporary files

PaiDSW:GetTempFile (This action is allowed unless you specify Deny)

tempfile/{tempfileId}

Update temporary files

PaiDSW:UpdateTempFile (This action is allowed unless you specify Deny)

tempfile/{tempfileId}

List temporary files

PaiDSW:ListTempFiles (This action is allowed unless you specify Deny)

tempfile/*

Create temporary file tasks

PaiDSW:CreateTempFileTask (This action is allowed unless you specify Deny)

tempfiletask/*

Delete temporary file tasks

PaiDSW:DeleteTempFileTask (This action is allowed unless you specify Deny)

tempfiletask/{tempfileTaskId}

Update temporary files task

PaiDSW:UpdateTempFileTask (This action is allowed unless you specify Deny)

tempfiletask/{tempfileTaskId}

Obtain user configurations

PaiDSW:GetUserConfig (This action is allowed unless you specify Deny)

userconfig/*

List available ECS specifications

PaiDSW:ListEcsSpecs (This action is allowed unless you specify Deny)

ecsspec/*

List available ECS specifications based on specification types

PaiDSW:ListEcsSpecsByInstanceTypes (This action is allowed unless you specify Deny)

ecsspec/*

Update instance tags

PaiDSW:UpdateInstanceLabels

PaiDSW:UpdateInstanceLabels

dswinstance/{instanceId}/labels

Delete instance tags

PaiDSW:DeleteInstanceLabels

PaiDSW:DeleteInstanceLabels

dswinstance/{instanceId}/labels

Deep Learning Containers (DLC)

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Create jobs

PaiDLC:CreateJob

PaiDLC:CreateJob

dlcjob/*

View job details

PaiDLC:GetJob

PaiDLC:GetJob

dlcjob/jobid

View job statistics in batches

PaiDLC:BatchGetJobsStatistics

PaiDLC:BatchGetJobsStatistics

dlcjob/*

View job statistics

PaiDLC:GetJobsStatistics

PaiDLC:GetJobsStatistics

dlcjob/*

List self-created jobs

PaiDLC:ListJobs

PaiDLC:ListJobs

dlcjob/*

Clone jobs

PaiDLC:CloneJob

PaiDLC:CloneJob

dlcjob/jobid

Stop jobs

PaiDLC:StopJob

PaiDLC:StopJob

dlcjob/jobid

Share jobs

PaiDLC:ShareJob

PaiDLC:ShareJob

dlcjob/jobid

Modify job priority

PaiDLC:UpdateJob

PaiDLC:UpdateJob

dlcjob/jobid

Delete jobs

PaiDLC:DeleteJob

PaiDLC:DeleteJob

dlcjob/jobid

Generate command line script for jobs

PaiDLC:GenerateJobScript

PaiDLC:GenerateJobScript

dlcjob/jobid

Check whether job token is valid

PaiDLC:CheckWebTerminalToken

PaiDLC:CheckWebTerminalToken

dlcjob/jobid

View job retry information

PaiDLC:ListJobRetries

PaiDLC:ListJobRetries

dlcjob/jobid

Obtain specified job sanity check result

PaiDLC:GetJobSanityCheckResult

PaiDLC:GetJobSanityCheckResult

dlcjob/jobid

Obtain multiple job sanity check results

PaiDLC:ListJobSanityCheckResults

PaiDLC:ListJobSanityCheckResults

dlcjob/jobid

Obtain job metrics

PaiDLC:GetMetrics

PaiDLC:GetMetrics

dlcjob/jobid

Download large log file of a job

PaiDLC:DownloadLargeLogs

PaiDLC:DownloadLargeLogs

dlcjob/jobid

Query the latest job-level aggregated logs

PaiDLC:GetLatestJobLogs

PaiDLC:GetLatestJobLogs

dlcjob/jobid

Query job-level aggregated logs

PaiDLC:GetJobPagedLogs

PaiDLC:GetJobPagedLogs

dlcjob/jobid

Query the number of logs of a job

PaiDLC:GetLogsCount

PaiDLC:GetLogsCount

dlcjob/jobid

Query all aggregated events of a job

PaiDLC:GetJobEvents

PaiDLC:GetJobEvents

dlcjob/jobid

Query the latest job-level aggregated event

PaiDLC:GetLatestJobEvents

PaiDLC:GetLatestJobEvents

dlcjob/jobid

Query all aggregated events of a job

PaiDLC:GetJobPagedEvents

PaiDLC:GetJobPagedEvents

dlcjob/jobid

Obtain the token of a job

PaiDLC:GetToken

PaiDLC:GetToken

dlcjob/jobid

Obtain all pods of a job

PaiDLC:ListJobPods

PaiDLC:ListJobPods

dlcjob/jobid/pod/*

Obtain a temporary token for accessing a job pod

PaiDLC:GetWebTerminal

PaiDLC:GetWebTerminal

dlcjob/jobid/pod/podid

Obtain the logs of a pod of a job

PaiDLC:GetPodLogs

PaiDLC:GetPodLogs

dlcjob/jobid/pod/podid

Obtain the latest pod logs of a job

PaiDLC:GetLatestPodLogs

PaiDLC:GetLatestPodLogs

dlcjob/jobid/pod/podid

Obtain the paged logs of a job pod

PaiDLC:GetPodPagedLogs

PaiDLC:GetPodPagedLogs

dlcjob/jobid/pod/podid

View the context of logs of a job pod

PaiDLC:GetPodContextLogs

PaiDLC:GetPodContextLogs

dlcjob/jobid/pod/podid

Obtain the event information of a job pod

PaiDLC:GetPodEvents

PaiDLC:GetPodEvents

dlcjob/jobid/pod/podid

Query the latest pod-level aggregated logs of a job

PaiDLC:GetLatestPodEvents

PaiDLC:GetLatestPodEvents

dlcjob/jobid/pod/podid

Query the event information of a job pod

PaiDLC:GetPodPagedEvents

PaiDLC:GetPodPagedEvents

dlcjob/jobid/pod/podid

View the context of an event in a job pod

PaiDLC:GetPodContextEvents

PaiDLC:GetPodContextEvents

dlcjob/jobid/pod/podid

Create TensorBoard instances

PaiDLC:CreateTensorboard

PaiDLC:CreateTensorboard

tensorboard/*

View TensorBoard instances

PaiDLC:GetTensorboard

PaiDLC:GetTensorboard

tensorboard/tbid

List self-created Tensorboard instances

PaiDLC:ListTensorboards

PaiDLC:ListTensorboards

tensorboard/*

Start TensorBoard instances

PaiDLC:StartTensorboard

PaiDLC:StartTensorboard

tensorboard/tbid

Stop TensorBoard instance

PaiDLC:StopTensorboard

PaiDLC:StopTensorboard

tensorboard/tbid

Update TensorBoard instance

PaiDLC:UpdateTensorboard

PaiDLC:UpdateTensorboard

tensorboard/tbid

Delete TensorBoard instances

PaiDLC:DeleteTensorboard

PaiDLC:DeleteTensorboard

tensorboard/tbid

Obtain TensorBoard share link

PaiDLC:GetTensorboardSharedUrl

PaiDLC:GetTensorboardSharedUrl

tensorboard/tbid

AutoML

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create hyperparameter optimization (HPO) experiments

PAIAutoML:CreateHpoExperiment

PAIAutoML:CreateHpoExperiment

 

 

 

 

 

 

 

 

 

Restart failed trials in HPO experiments

PAIAutoML:RestartHpoTrials

PAIAutoML:RestartHpoTrials

 

 

 

 

 

 

 

 

 

Stop HPO experiments

PAIAutoML:StopHpoExperiment

PAIAutoML:StopHpoExperiment

 

 

 

 

 

 

Stop trials in HPO experiments

PAIAutoML:StopHpoTrials

PAIAutoML:StopHpoTrials

 

 

 

 

 

 

Update HPO experiments

PAIAutoML:UpdateHpoExperiment

PAIAutoML:UpdateHpoExperiment

 

 

 

 

 

 

 

 

 

Delete HPO experiments

PAIAutoML:DeleteHpoExperiment

PAIAutoML:DeleteHpoExperiment

 

 

 

 

 

 

 

 

 

View HPO experiment information

PAIAutoML:GetHpoExperiment

PAIAutoML:GetHpoExperiment

 

 

View information about a single trial

PAIAutoML:GetHpoTrial

PAIAutoML:GetHpoTrial

 

 

View the log of a single HPO experiment

PAIAutoML:ListHpoExperimentLogs

PAIAutoML:ListHpoExperimentLogs

 

 

Query HPO experiments

PAIAutoML:ListHpoExperiments

PAIAutoML:ListHpoExperiments

 

 

View the log of a single trial in an HPO experiment

PAIAutoML:ListHpoTrialLogs

PAIAutoML:ListHpoTrialLogs

 

 

View the trial information of HPO experiments

PAIAutoML:ListHpoTrials

PAIAutoML:ListHpoTrials

 

 

View the log file name of a single trial

PAIAutoML:ListHpoTrialLogNames

PAIAutoML:ListHpoTrialLogNames

 

 

View the command information of a single trial

PAIAutoML:ListHpoTrialCommands

PAIAutoML:ListHpoTrialCommands

 

 

Application Development (LangStudio)

Permission

Action (can be managed in the PAI workspace)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Public (created by me)

Private (created by others)

Public

Create application flow template

PaiLangStudio:CreateFlowTemplate

Update application flow template

PaiLangStudio:UpdateFlowTemplate

Delete application flow template

PaiLangStudio:DeleteFlowTemplate

View application flow template

PaiLangStudio:GetFlowTemplate

List application flow templates

PaiLangStudio:ListFlowTemplates

Create application flow

PaiLangStudio:CreateFlow

View application flow

PaiLangStudio:GetFlow

Update application flow

PaiLangStudio:UpdateFlow

Delete application flow

PaiLangStudio:DeleteFlow

List application flows

PaiLangStudio:ListFlows

Deploy application flow

PaiLangStudio:DeployFlow

Create connection

PaiLangStudio:CreateConnection

View connection

PaiLangStudio:GetConnection

Update connection

PaiLangStudio:UpdateConnection

Delete connection

PaiLangStudio:DeleteConnection

List connections

PaiLangStudio:ListConnections

Create runtime

PaiLangStudio:CreateRuntime

View runtime

PaiLangStudio:GetRuntime

List runtime

PaiLangStudio:ListRuntimes

Reload runtime

PaiLangStudio:ReloadRuntime

Update runtime

PaiLangStudio:UpdateRuntime

Delete runtime

PaiLangStudio:DeleteRuntime

View the meta information of tool

PaiLangStudio:GetToolMeta

List tools supported by the run container

PaiLangStudio:GetPackageTools

View default meta information of tool

PaiLangStudio:GetBuiltinTools

Create an application flow run

PaiLangStudio:CreateFlowRun

View application flow run

PaiLangStudio:GetFlowRun

List application flow runs

PaiLangStudio:ListFlowRuns

Cancel application flow run

PaiLangStudio:CancelFlowRun

Delete application flow run

PaiLangStudio:DeleteFlowRun

Elastic Algorithm Service (EAS)

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Create services

eas:CreateService

eas:CreateService

✅ Accessibility does not matter

✅ Accessibility does not matter

Enable auto scaling for services

eas:CreateServiceAutoScaler

eas:CreateServiceAutoScaler

✅ Accessibility does not matter

✅ Accessibility does not matter

Enables scheduled scaling for services

eas:CreateServiceCronScaler

eas:CreateServiceCronScaler

✅ Accessibility does not matter

✅ Accessibility does not matter

Enable traffic mirroring for services

eas:CreateServiceMirror

eas:CreateServiceMirror

✅ Accessibility does not matter

✅ Accessibility does not matter

Create application services

eas:CreateAppService

eas:CreateAppService

✅ Accessibility does not matter

✅ Accessibility does not matter

Clone services

eas:CloneService

eas:CloneService

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete services

eas:DeleteService

eas:DeleteService

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete service tags

eas:DeleteServiceLabel

eas:DeleteServiceLabel

✅ Accessibility does not matter

✅ Accessibility does not matter

Disable auto scaling for services

eas:DeleteServiceAutoScaler

eas:DeleteServiceAutoScaler

✅ Accessibility does not matter

✅ Accessibility does not matter

Disable scheduled scaling for services

eas:DeleteServiceCronScaler

eas:DeleteServiceCronScaler

✅ Accessibility does not matter

✅ Accessibility does not matter

Restart service instances

eas:DeleteServiceInstances

eas:DeleteServiceInstances

✅ Accessibility does not matter

✅ Accessibility does not matter

Disable traffic mirroring for services

eas:DeleteServiceMirror

eas:DeleteServiceMirror

✅ Accessibility does not matter

✅ Accessibility does not matter

Update services

eas:UpdateService

eas:UpdateService

✅ Accessibility does not matter

✅ Accessibility does not matter

Update service tags

eas:UpdateServiceLabel

eas:UpdateServiceLabel

✅ Accessibility does not matter

✅ Accessibility does not matter

Start services

eas:StartService

eas:StartService

✅ Accessibility does not matter

✅ Accessibility does not matter

Stop services

eas:StopService

eas:StopService

✅ Accessibility does not matter

✅ Accessibility does not matter

Restart services

eas:RestartService

eas:RestartService

✅ Accessibility does not matter

✅ Accessibility does not matter

Update auto scaling configurations for services

eas:UpdateServiceAutoScaler

eas:UpdateServiceAutoScaler

✅ Accessibility does not matter

✅ Accessibility does not matter

Update scheduled scaling configurations for services

eas:UpdateServiceCronScaler

eas:UpdateServiceCronScaler

✅ Accessibility does not matter

✅ Accessibility does not matter

Develop services

eas:DevelopService

eas:DevelopService

✅ Accessibility does not matter

✅ Accessibility does not matter

Check and publish containers

eas:CommitService

eas:CommitService

✅ Accessibility does not matter

✅ Accessibility does not matter

Update traffic mirroring configurations for services

eas:UpdateServiceMirror

eas:UpdateServiceMirror

✅ Accessibility does not matter

✅ Accessibility does not matter

Switch service versions

eas:UpdateServiceVersion

eas:UpdateServiceVersion

✅ Accessibility does not matter

✅ Accessibility does not matter

Update the service security lock

eas:UpdateServiceSafetyLock

eas:UpdateServiceSafetyLock

✅ Accessibility does not matter

✅ Accessibility does not matter

Update the attributes of service instances

eas:UpdateServiceInstance

eas:UpdateServiceInstance

✅ Accessibility does not matter

✅ Accessibility does not matter

Update application services

eas:UpdateAppService

eas:UpdateAppService

✅ Accessibility does not matter

✅ Accessibility does not matter

Adjust the ratio of service blue-green traffic

eas:ReleaseService

eas:ReleaseService

✅ Accessibility does not matter

✅ Accessibility does not matter

Query service details

eas:DescribeService

eas:DescribeService

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View auto scaling configurations for services

eas:DescribeServiceAutoScaler

eas:DescribeServiceAutoScaler

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View scheduled scaling configurations for services

eas:DescribeServiceCronScaler

eas:DescribeServiceCronScaler

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View diagnostic details of services

eas:DescribeServiceDiagnosis

eas:DescribeServiceDiagnosis

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View diagnostic details of service instances

eas:DescribeServiceInstanceDiagnosis

eas:DescribeServiceInstanceDiagnosis

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View service logs

eas:DescribeServiceLog

eas:DescribeServiceLog

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Query service events

eas:DescribeServiceEvent

eas:DescribeServiceEvent

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View traffic mirroring configurations for services

eas:DescribeServiceMirror

eas:DescribeServiceMirror

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View service group details

eas:DescribeGroup

eas:DescribeGroup

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Query historical prices of preemptible instances

eas:DescribeSpotDiscountHistory

eas:DescribeSpotDiscountHistory

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List service instances

eas:ListServiceInstances

eas:ListServiceInstances

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View the historical versions of services

eas:ListServiceVersions

eas:ListServiceVersions

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View the container list of services

eas:ListServiceContainers

eas:ListServiceContainers

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List services

eas:ListServices

eas:ListServices

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List service groups

eas:ListGroups

eas:ListGroups

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create resource groups

eas:CreateResource

eas:CreateResource

✅ Accessibility does not matter

✅ Accessibility does not matter

Create resource group instances

eas:CreateResourceInstances

eas:CreateResourceInstances

✅ Accessibility does not matter

✅ Accessibility does not matter

Enable log delivery for resource groups

eas:CreateResourceLog

eas:CreateResourceLog

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete resource groups

eas:DeleteResource

eas:DeleteResource

✅ Accessibility does not matter

✅ Accessibility does not matter

Disable VPC direct connection for resource groups

eas:DeleteResourceDLink

eas:DeleteResourceDLink

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete instances from a resource group

eas:DeleteResourceInstances

eas:DeleteResourceInstances

✅ Accessibility does not matter

✅ Accessibility does not matter

Disable log delivery for resource groups

eas:DeleteResourceLog

eas:DeleteResourceLog

✅ Accessibility does not matter

✅ Accessibility does not matter

Update resource group information

eas:UpdateResource

eas:UpdateResource

✅ Accessibility does not matter

✅ Accessibility does not matter

Update the VPC direct connection configuration of a resource group

eas:UpdateResourceDLink

eas:UpdateResourceDLink

✅ Accessibility does not matter

✅ Accessibility does not matter

Update resource group instance

eas:UpdateResourceInstance

eas:UpdateResourceInstance

✅ Accessibility does not matter

✅ Accessibility does not matter

View resource group details

eas:DescribeResource

eas:DescribeResource

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View VPC direct connection information of a resource group

eas:DescribeResourceDLink

eas:DescribeResourceDLink

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View the log delivery information of a resource group

eas:DescribeResourceLog

eas:DescribeResourceLog

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List instances in a resource group

eas:ListResourceInstances

eas:ListResourceInstances

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List working instances in a resource group

eas:ListResourceInstanceWorker

eas:ListResourceInstanceWorker

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List resource groups

eas:ListResources

eas:ListResources

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List services in a resource group

eas:ListResourceServices

eas:ListResourceServices

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create stress testing tasks

eas:CreateBenchmarkTask

eas:CreateBenchmarkTask

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete stress testing tasks

eas:DeleteBenchmarkTask

eas:DeleteBenchmarkTask

✅ Accessibility does not matter

✅ Accessibility does not matter

View the details of a stress testing task

eas:DescribeBenchmarkTask

eas:DescribeBenchmarkTask

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View the report of a stress testing task

eas:DescribeBenchmarkTaskReport

eas:DescribeBenchmarkTaskReport

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

List stress testing tasks

eas:ListBenchmarkTask

eas:ListBenchmarkTask

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Start stress testing tasks

eas:StartBenchmarkTask

eas:StartBenchmarkTask

✅ Accessibility does not matter

✅ Accessibility does not matter

Stop stress testing tasks

eas:StopBenchmarkTask

eas:StopBenchmarkTask

✅ Accessibility does not matter

✅ Accessibility does not matter

Update stress testing tasks

eas:UpdateBenchmarkTask

eas:UpdateBenchmarkTask

✅ Accessibility does not matter

✅ Accessibility does not matter

Create private gateways

eas:CreateGateway

eas:CreateGateway

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View the details of a private gateway

eas:DescribeGateway

eas:DescribeGateway

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Updates private gateways

eas:UpdateGateway

eas:UpdateGateway

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create an internal endpoint of a private gateway

eas:CreateGatewayIntranetLinkedVpc

eas:CreateGatewayIntranetLinkedVpc

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

View internal endpoints of a private gateway

eas:ListGatewayIntranetLinkedVpc

eas:ListGatewayIntranetLinkedVpc

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete an internal endpoint of a private gateway

eas:DeleteGatewayIntranetLinkedVpc

eas:DeleteGatewayIntranetLinkedVpc

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete a private gateway

eas:DeleteGateway

eas:DeleteGateway

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

ArtLab

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create AI4D services

PaiArtLab:CreateService

PaiArtLab:CreateAI4DService

ai4dServices/*

List AI4D services.

PaiArtLab:ListServices

PaiArtLab:ListAI4DServices

ai4dServices/*

AI Asset Management

Table 1. AI Assets Management: Datasets

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Labeling Administrator

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create datasets

PaiDataset:CreateDataset

PaiDataset:CreateDataset

dataset/*

Obtain datasets

PaiDataset:GetDataset

PaiDataset:GetDataset

dataset/{datasetId}

Update datasets

PaiDataset:UpdateDataset

PaiDataset:UpdateDataset

dataset/{datasetId}

Delete datasets

PaiDataset:DeleteDataset

PaiDataset:DeleteDataset

dataset/{datasetId}

List all datasets in a workspace

PaiDataset:ListAllDatasets

PaiDataset:ListAllDatasets

dataset/*

List public and self-created datasets

PaiDataset:ListDatasets

PaiDataset:ListDatasets

dataset/*

Publish datasets to all members of a workspace

PaiDataset:PublishDataset

PaiDataset:PublishDataset

dataset/{datasetId}

Change dataset owner

PaiDataset:ChangeDatasetOwner

PaiDataset:ChangeDatasetOwner

dataset/{datasetId}

Create dataset tags

PaiDataset:CreateDatasetLabels

PaiDataset:CreateDatasetLabels

dataset/{datasetId}

Delete dataset tags

PaiDataset:DeleteDatasetLabels

PaiDataset:DeleteDatasetLabels

dataset/{datasetId}

Table 2. AI Asset Management: Source Code Repositories

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create code

PaiCodeSource:CreateCodeSource

PaiCodeSource:CreateCodeSource

View code

PaiCodeSource:GetCodeSource

PaiCodeSource:GetCodeSource

Delete code

PaiCodeSource:DeleteCodeSource

PaiCodeSource:DeleteCodeSource

List public and self-created code

PaiCodeSource:ListCodeSources

PaiCodeSource:ListCodeSources

List all code in a workspace

PaiCodeSource:ListAllCodeSources

PaiCodeSource:ListAllCodeSources

Publish code to all members of a workspace

PaiCodeSource:PublishCodeSource

PaiCodeSource:PublishCodeSource

Table 3. AI Assets Management: Images

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create images

PaiImage:AddImage

PaiImage:AddImage

image/*

Obtain images

PaiImage:GetImage

PaiImage:GetImage

image/{imageId}

Obtain official image

PaiImage:GetImage (This action is allowed unless you specify Deny)

provider/pai/image/{imageId}

Delete an image

PaiImage:RemoveImage

PaiImage:RemoveImage

image/{imageId}

Obtain public and self-created images

PaiImage:ListImages

PaiImage:ListImages

image/*

Obtain all images in a workspace

PaiImage:ListAllImages

PaiImage:ListAllImages

image/*

List official images

PaiImage:Listlmages (This action is allowed unless you specify Deny)

provider/pai/image/{imageId}

List statistics of public and self-created images

PaiImage:GetImagesStatistics

PaiImage:GetImagesStatistics

image/*

Obtain statistics of all images in the workspace

PaiImage:GetAllImagesStatistics

PaiImage:GetAllImagesStatistics

image/*

Obtain statistics of official images

PaiImage:GetImagesStatistics (This action is allowed unless you specify Deny)

provider/pai/image/{imageId}

List image tags

PaiImage:ListImageLabels

PaiImage:ListImageLabels

imagelabel/*

Delete image tags

PaiImage:RemoveImageLabels

PaiImage:RemoveImageLabels

image/{imageId}/imagelabel/{imageLabelKey}

List image tag keys

PaiImage:ListImageLabelKeys (This action is allowed unless you specify Deny)

imagelabel/*

Update image tags in batches

PaiImage:UpdateImageLabels

PaiImage:UpdateImageLabels

image/{imageId}/imagelabel/*

Add image tags

PaiImage:AddImageLabels

PaiImage:AddImageLabels

image/{imageId}/imagelabel/*

Publish images to all members of a workspace

PaiImage:PublishImage

PaiImage:PublishImage

image/{imageId}

Table 4. AI Assets Management: Models

Permission

Action (can be managed in the PAI workspace)

Action (can be managed in the RAM console)

Resource

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create models

PaiModel:CreateModel

PaiModel:CreateModel

model/*

Obtain models

PaiModel:GetModel

PaiModel:GetModel

model/{modelId}

Update models

PaiModel:UpdateModel

PaiModel:UpdateModel

model/{modelId}

Delete models

PaiModel:DeleteModel

PaiModel:DeleteModel

model/{modelId}

List public and self-created models

PaiModel:ListModels

PaiModel:ListModels

model/*

List all models in a workspace

PaiModel:ListAllModels

PaiModel:ListAllModels

model/*

Create model versions

PaiModel:CreateModelVersion

PaiModel:CreateModelVersion

model/{modelId}/modelVersion/*

Obtain model versions

PaiModel:GetModelVersion

PaiModel:GetModelVersion

model/{modelId}/modelVersion/{versionName}

Update model versions

PaiModel:UpdateModelVersion

PaiModel:UpdateModelVersion

model/{modelId}/modelVersion/{versionName}

Delete model versions

PaiModel:DeleteModelVersion

PaiModel:DeleteModelVersion

model/{modelId}/modelVersion/{versionName}

List model versions

PaiModel:ListModelVersions

PaiModel:ListModelVersions

model/{modelId}/modelVersion/*

Update model tags

PaiModel:CreateModelLabels

PaiModel:CreateModelLabels

model/{modelId}

Delete model tags

PaiModel:DeleteModelLabels

PaiModel:DeleteModelLabels

model/{modelId}

Update model version tags

PaiModel:CreateModelVersionLabels

PaiModel:CreateModelVersionLabels

model/{modelId}/modelVersion/{versionName}

Delete model version tags

PaiModel:DeleteModelVersionLabels

PaiModel:DeleteModelVersionLabels

model/{modelId}/modelVersion/{versionName}

Publish models to all members in a workspace

PaiModel:PublishModel

PaiModel:PublishModel

model/{modelId}

Table 5. AI Assets Management: Custom Components

Permission

Action (can be managed in the PAI workspace)

Workspace Administrator/Owner

Algorithm Developer

Algorithm O&M Engineer

Visitor

Private (created by me)

Private (created by others)

Public (created by me)

Public (created by others)

Private (created by me)

Private (created by others)

Public

Private (created by me)

Private (created by others)

Public

Create components

PAIComponentManagement:CreateComponent

✅ Accessibility does not matter

✅ Accessibility does not matter

Obtain components

PAIComponentManagement:GetComponent

✅ Accessibility does not matter

✅ Accessibility does not matter

Update components

PAIComponentManagement:UpdateComponent

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete components

PAIComponentManagement:DeleteComponent

✅ Accessibility does not matter

✅ Accessibility does not matter

List all components in a workspace

PAIComponentManagement:ListComponents

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter

Create component versions

PAIComponentManagement:CreateComponentVersion

✅ Accessibility does not matter

✅ Accessibility does not matter

Obtain component versions

PAIComponentManagement:GetComponentVersion

✅ Accessibility does not matter

✅ Accessibility does not matter

Update component versions

PAIComponentManagement:UpdateComponentVersion

✅ Accessibility does not matter

✅ Accessibility does not matter

Delete component versions

PAIComponentManagement:DeleteComponentVersion

✅ Accessibility does not matter

✅ Accessibility does not matter

Obtain all component versions in a workspace

PAIComponentManagement:ListComponentVersions

✅ Accessibility does not matter

✅ Accessibility does not matter

✅ Accessibility does not matter