Description of System Built-in Role Permissions
After creating a Singdata Lakehouse account, multiple system preset roles will be provided. Different preset roles have different operational permissions on various functional pages within the product. The specific permission list is as follows:
List of Preset Role Permissions
| Role/Menu | Home | Workspace | Development | Task Operations | Monitoring & Alerts | Data Directory | Data Quality | Data Sharing | Cluster | Job History | Security | Approval | Workspace | Data Source | Private Network Connection |
|---|
| instanse_admin | ✅ | | | | ✅ | ✅ | ✅ | ✅ | | | ✅ | ✅ | ✅ | | ✅ |
| instance_user | ✅ | | | | | | | | | | | | | | |
| instance_datasource_admin (formerly datasource_admin) | ✅ | | | | | | | | | | | | | ✅ | |
| instance_datamap_admin (formerly datacatalog_admin) | ✅ | | | | | ✅ | | | | | ✅ | | | | |
| instance_datamap_user (formerly datacatalog_user) | ✅ | | | | | ✅ | | | | | ✅ | | | | |
| instance_sre | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | | | | | | | |
| instance_sensitivedata_viewer | ✅ | | | | | | | | | | | | | | |
| system_admin (to be deprecated) | ✅ | | | | | | | | | | | | | | |
| workspace_admin | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | |
| workspace_analyst | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | ✅ | ✅ | | ✅ | ✅ | ✅ | |
| workspace_dev | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | ✅ | ✅ | | ✅ | ✅ | ✅ | |
| workspace_sre | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | | ✅ | ✅ | | ✅ | ✅ | ✅ | |
| workspace_user (to be deprecated) | ✅ | | | | | | | | | | | | | | |
Development and Operations
| Category | Function Operation | instance_sre | workspace_admin | workspace_analyst | workspace_dev | workspace_sre |
|---|
| Operations Center | Operations (Series) | ✅ | ✅ | | | ✅ |
| Go to Edit | | ✅ | | ✅ | | |
| Development_Task Group | Create Task Group | | ✅ | ✅ | ✅ | |
| Submit Task Group | | ✅ | ✅ | ✅ | |
| Modify Task Group | | ✅ | ✅ | ✅ | |
| Delete Task Group | | ✅ | ✅ | ✅ | |
| Create Task Group Parameters | | ✅ | ✅ | ✅ | |
| Add Task Node to Task Group | | ✅ | ✅ | ✅ | |
| Remove from Task Group | | ✅ | ✅ | ✅ | |
| View Task Group | ✅ | ✅ | ✅ | ✅ | ✅ |
| View Task Group Content | ✅ | ✅ | ✅ | ✅ | ✅ |
| Development_Folder | Create Folder | | ✅ | ✅ | ✅ | |
| Delete Folder | | ✅ | ✅ | ✅ | |
| Modify Folder | | ✅ | ✅ | ✅ | |
| View Folder Info | ✅ | ✅ | ✅ | ✅ | ✅ |
| Development_Task Node | Create Script | | ✅ | ✅ | ✅ | |
| Delete Script | | ✅ | ✅ | ✅ | |
| Modify Script | | ✅ | ✅ | ✅ | |
| Save Script | | ✅ | ✅ | ✅ | |
| View Script Content | ✅ | ✅ | ✅ | ✅ | ✅ |
| Run Script | | ✅ | ✅ | ✅ | |
| View Result Info | | ✅ | ✅ | ✅ | |
| Download Data Result | | ✅ | ✅ | ✅ | |
| Copy Data Result | | ✅ | ✅ | ✅ | |
| Configure Scheduling Info | | ✅ | | ✅ | |
| Submit Task | | ✅ | | ✅ | |
Data Integration
| Function Operation | instance_sre | datasource_admin | workspace_admin | workspace_analyst | workspace_dev | workspace_sre |
|---|
| Create Source Data Source | | ✅ | ✅ | | ✅ | |
| Preview Source Data Source | ✅ | | ✅ | ✅ | ✅ | ✅ |
| Create Target Data Source | | ✅ | ✅ | | ✅ | |
| Preview Target Data Source | ✅ | | ✅ | ✅ | ✅ | ✅ |
| | | | | | |
| | | | | | |
Data Assets
| Function Operation | instance_datamap_admin | instance_datamap_user | workspace_admin | workspace_analyst | workspace_dev |
|---|
| Data Assets Homepage | No permission restrictions, all roles can click | | | | |
| Data Management | No permission restrictions, all roles can click; content is presented according to data permissions | | | | |
| Data Management/Details Page | ✅ | ✅ | ✅ | ✅ | ✅ |
| Asset Overview | ✅ | | | | |
| Data Search | ✅ | ✅ | | | |
| | | | | |
Cluster
| Function Operation | workspace_admin | workspace_analyst | workspace_dev | workspace_sre | workspace_user (offline) |
|---|
| View vc | ✅ | ✅ | ✅ | ✅ | |
| Use vc | ✅ | ✅ | ✅ | | |
| Create | ✅ | | | | |
| Edit | ✅ | | | | |
| Start/Stop | ✅ | | | | |
| Delete | ✅ | | | | |
| Set as Default | ✅ | | | | |
Data Source
| Function Operation | instance_datasource_admin | instanse_admin | instanse_user | instance_datamap_admin | instance_datamap_user | instance_sre | instance_sensitivedata_viewer | workspace_admin | workspace_dev | workspace_sre | workspace_user |
|---|
| View | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Create | ✅ | | | | | | | ✅ | ✅ | | |
| Edit | ✅ | | | | | | | ✅ | ✅ | | |
| Test Connectivity | ✅ | | | | | | | ✅ | ✅ | | |
| Delete | ✅ | | | | | | | ✅ | ✅ | | |
Data Quality
| Function Operation | instanse_admin | instance_sre | workspace_admin | workspace_dev | workspace_sre | workspace_user (to be deprecated) |
|---|
| Overview | ✅ | ✅ | ✅ | ✅ | ✅ | |
| Create New Rule | | | ✅ | ✅ | | |
| Test Run | ✅ | ✅ | ✅ | ✅ | ✅ | ✅ |
| Delete | ✅ | | ✅ | ✅ | | |
| Edit | | | ✅ | ✅ | | |
| Mark Validation Result as Failed | ✅ | ✅ | ✅ | ✅ | ✅ | |
| Revalidate Result | ✅ | ✅ | ✅ | ✅ | ✅ | |
QA Questions
Question 1: Why can some workspace_dev create, modify, delete, and start/stop clusters under the same tenant, while others cannot?
Answer: The preset role feature permission restrictions listed in this document will take effect in the new version (Release 2025.03.05). If a user's role configurations were set prior to this version, permissions will continue to follow the legacy version's logic. For detailed usage-related inquiries, please contact our technical support team for assistance.
