In Detailed Explanation of User Permissions, it is explained that different permissions can only be obtained through authorization by the permission owner. The DataAgent product supports applying for permissions via the Lark approval workflow, allowing users to independently request permissions from resource owners. Once the owner approves, the applicant will receive the corresponding permissions for the requested resource. This lowers the threshold for data usage and shortens the time required for data or IT personnel to authorize data access.

(1) Go to the Lark open platform, enter the bot backend where configuration messages need to be pushed, and click event subscription

(2) Click request address configuration, and fill in the configuration information: http://environment address (ip:port or domain name)/aeolus/api/v3/dispatcher/action

(3) Select add "approval instance status change" event, then enable the [access approval application] permission
(4) According to Permission approval integration with Lark the steps, add the following four permissions: [view, create, update, delete approval application information], [query approval list], [access approval application], [get user user ID].

(5) After completion, click application release -- version management and release, then click create version, and follow Publish the Lark application the steps to release.

(6) After completing all the above operations, return to the DataAgent platform, log in as an administrator, go to system management configuration, and click approval settings on the left to begin the following configuration
(7) Select process administrators

• Multiple process administrators can be selected, but only users who have completed Lark account binding on the platform can be chosen.
• The process administrator acts as a fallback. The configured Lark workflow will first send approval requests to the resource administrator of the resource, but if none of the resource administrators have bound their Lark account, the approval will be routed to the process administrator.

(8) After completing the above operations, select the enabled status to complete the Lark approval workflow setup.

3.1 Initiate permission approval #

When data permissions, project permissions, or similar permissions are not visible, click Apply for permission to initiate an approval process.

Caution: Currently, visual modeling and data connection do not support integration with the Lark approval workflow.

• No access to datasets, dataset folders, and so on.
• No access to project spaces.

3.2 Fill out the approval application #

• The approval process will proceed as illustrated below.
• When a user clicks to apply for permission without having access, the interface will redirect to the following page, where permission for the resource can be requested. Additional resource permissions can also be added to combine requests for permissions.
• After clicking Submit, the illustrated effect will appear. Click the [Approval] link in the upper right corner to quickly navigate to the workspace and view the approval workflow.

3.3 Approval process notifications #

• After submitting the application, both the applicant and the approver will receive a message notification.
  • Applicant
  • Approver
• After receiving the notification, the approver can choose to approve or reject the application.
  • Approve application
  • Reject application
• After the approver takes action, the applicant will also receive a notification indicating whether the application was approved or rejected.
  • If the approval is granted, the applicant can view the resource in DataAgent and use it within the scope of the granted permissions.
  • If the approval is not granted, the applicant will remain without permission for the resource as before.