Enhanced Connection Permission Management

Scenario

Enhanced connections support user authorization by project. After authorization, users in the project have the permission to perform operations on the enhanced connection, including viewing the enhanced connection, binding a created resource pool to the enhanced connection, and creating custom routes. In this way, the enhanced connection can be used across projects. Grant and revoke permissions to and from a user for an enhanced connection.

Use Cases

Project B needs to access the data source of project A. The operations are as follows:

• For Project A:
  1. Log in to DLI using the account of project A.
  2. Create an enhanced datasource connection ds in DLI based on the VPC information of the corresponding data source.
  3. Grant project B the permission to access the enhanced datasource connection ds.

• For Project B:
  1. Log in to DLI using the account of project B.
  2. Bind the enhanced datasource connection ds to a queue.
  3. (Optional) Set host information and create a route.

After creating a VPC peering connection and route between the enhanced datasource connection of project A and the queue of project B, you can create a job in the queue of project B to access the data source of project A.

Procedure

1. Log in to the DLI management console.
2. In the left navigation pane, choose Datasource Connections.
3. On the Enhanced tab page displayed, locate the desired enhanced connection, click More in the Operation column, and select Manage Permission.
   • Granting permission
     1. In the Permissions dialog box displayed, select Grant Permission for Set Permission.
     2. Enter the project ID.
     3. Click OK to grant the resource pool operation permission to the project.
   • Revoking permission
     1. In the Permissions dialog box displayed, select Revoke Permission for Set Permission.
     2. Select a project ID.
     3. Click OK to revoke the resource pool operation permission from the specified project.