Manage workspaces, member permissions, and API keys
A workspace is the fundamental unit for resource isolation. Multiple workspaces can be created under a single Alibaba Cloud account, with each workspace maintaining its own independent knowledge base, API key, and member permissions.
Navigate to the console’s Settings → Workspaces page and click Create Workspace, then enter a name.
Use the dropdown menu in the top-right corner of the console to switch the current workspace. After switching, the left-side knowledge base list, API keys, and other resources will update accordingly.
On the Settings → Members and Permissions page, click Add User, then enter the RAM username or UID to add the user to the current workspace. The member list displays the display name, login name, RAM ID, and user type.
Permissions for individual members can be configured separately via Permission Management, or multiple members can be selected and their permissions updated collectively using Batch Edit Permissions.
An API key serves as the credential for calling APIs and is isolated per workspace.
On the Settings → API Keys page, click Create API Key. The key is displayed only once upon generation—be sure to save it securely. The API key list shows the ID, key value, description, associated account, and creation time.
Knowledge Studio shares the Alibaba Cloud account and workspace infrastructure with the Bailian platform:
Workspaces
| Concept | Description |
|---|---|
| Workspace | A resource isolation unit. The main account workspace ID format is llm-xxxxxxxxxxxx, while regular workspace IDs are ws_xxxxxxxxxxxxxxxx. |
| Main Account Workspace | The default workspace associated with the account, marked as Default. |
| Workspace Limit | Up to 30 workspaces per Alibaba Cloud account. |
Creating a Workspace
Navigate to the console’s Settings → Workspaces page and click Create Workspace, then enter a name.
Switching Workspaces
Use the dropdown menu in the top-right corner of the console to switch the current workspace. After switching, the left-side knowledge base list, API keys, and other resources will update accordingly.
Members and Permissions
| Role | Permissions |
|---|---|
| Alibaba Cloud Main Account | Full access to all operations. |
| RAM Sub-account / RAM Role | Must first be granted the AliyunBailianDataFullAccess permission policy and added to the target workspace. |
Adding Members
On the Settings → Members and Permissions page, click Add User, then enter the RAM username or UID to add the user to the current workspace. The member list displays the display name, login name, RAM ID, and user type.
Permission Management
Permissions for individual members can be configured separately via Permission Management, or multiple members can be selected and their permissions updated collectively using Batch Edit Permissions.
API Key Management
An API key serves as the credential for calling APIs and is isolated per workspace.
Creating an API Key
On the Settings → API Keys page, click Create API Key. The key is displayed only once upon generation—be sure to save it securely. The API key list shows the ID, key value, description, associated account, and creation time.
Security Recommendations
| Recommendation | Description |
|---|---|
| Avoid committing to code repositories | Store API keys in environment variables (e.g., DASHSCOPE_API_KEY). |
| Split by application | Assign a unique API key to each application. |
| Rotate regularly | Periodically replace API keys to reduce exposure risk. |
| Reset immediately upon leakage | If leaked, reset the key immediately on the API Key page. |
Relationship with the Bailian Platform
Knowledge Studio shares the Alibaba Cloud account and workspace infrastructure with the Bailian platform:
| Dimension | Description |
|---|---|
| Account | Single sign-on across both platforms using the same Alibaba Cloud main account. |
| Workspace | Shared and visible in both platforms. |
| Knowledge Base | Shared and manageable from either platform. |
| API Key | Shared DashScope API key set across both platforms. |