Manage workspaces, member permissions, and API keys
A workspace is the fundamental unit for resource isolation. Multiple workspaces can be created under a single Alibaba Cloud account, with each workspace maintaining its own independent knowledge base, API key, and member permissions.
Use the dropdown menu in the top-right corner of the console to switch the current workspace. After switching, the left-side knowledge base list, API keys, and other resources will update accordingly.
On the Settings → Members and Permissions page, click Add User, then enter the RAM username or UID to add the user to the current workspace. The member list displays the display name, login name, RAM ID, and user type.
Permissions for individual members can be configured separately via Permission Management, or multiple members can be selected and their permissions updated collectively using Batch Edit Permissions.
On the Settings → API Keys page, click Create API Key. The key is displayed only once upon generation—be sure to save it securely. The API key list shows the ID, key value, description, associated account, and creation time.
Store API keys in environment variables (e.g., DASHSCOPE_API_KEY).
Split by application
Assign a unique API key to each application.
Rotate regularly
Periodically replace API keys to reduce exposure risk.
Reset immediately upon leakage
If leaked, reset the key immediately on the API Key page.
API keys grant account-level permissions. Leakage may lead to unauthorized resource usage and unexpected charges. Never share API keys publicly or commit them to code repositories.
