Simple Log Service:Write data to MaxCompute by using a default role

Modify the trust policy of the RAM role.

1. Log on to the RAM console.

2. In the left-side navigation pane, choose Identities > Roles.

3. On the Roles page, find the AliyunLogDefaultRole role and click the role name.

4. On the Trust Policy tab, click Edit Trust Policy.

5. Replace the content in the code editor with the following policy document and click Save trust policy document.

   {
     "Statement": [
       {
         "Action": "sts:AssumeRole",
         "Effect": "Allow",
         "Principal": {
           "Service": [
             "log.aliyuncs.com",
             "dataworks.aliyuncs.com"
           ]
         }
       }
     ],
     "Version": "1"
   }

Add the RAM role as a workspace member.

1. Log on to the DataWorks console.

2. In the upper-left corner of the page that appears, select a region.

3. In the left-side navigation pane, click Workspaces.

4. On the Workspaces page, find the workspace that you want to manage and click Manage in the Actions column.

5. On the Space members tab of the Work space page, click Add Members.

6. In the Add Members dialog box, select the current logon account and the AliyunLogDefaultRole role, and then add the logon account and the AliyunLogDefaultRole role as prompted.

   In the Batch Setting Roles section, select Development. For more information, see Grant permissions to a RAM user.

Grant the AliyunLogDefaultRole role the permissions to manage a MaxCompute table.

1. On the Work space page, choose Compute engine information > MaxCompute > Go to the MaxCompute Console.

2. On the MaxCompute project management page, click Role Permissions.

   If the following error is reported, perform the following operations in the role list: Find the admin role and click Manage Members in the Actions column. In the Manage Members dialog box, select the current logon account and add the logon account as prompted.

3. In the role list, find the role_project_admin role and click Manage Members in the Actions column.

4. In the Manage Members dialog box, select the current logon account and the AliyunLogDefaultRole role, and then add the logon account and the AliyunLogDefaultRole role as prompted.

5. In the role list, find the role_project_admin role and click Edit Role in the Actions column.

6. On the Table tab of the Edit Role dialog box, find the MaxCompute table that you want to manage and select Describe, Alter, and Update.

After you configure the settings, you can assign the AliyunLogDefaultRole role to a MaxCompute data shipping job of the new version to ship data to the specified MaxCompute table. When you create the data shipping job, select Default Role for Write Permissions on MaxCompute. For more information, see Create a data shipping job of the new version to ship data to MaxCompute.