Manage workspaces, member permissions, and API Keys.
A workspace is the basic unit of resource isolation. One Alibaba Cloud account can host multiple workspaces, each with its own Knowledge Bases, API Keys, and member permissions.
On the Settings & Billing → Workspaces tab in the console, click New Workspace and enter a name.
Use the dropdown in the top-right corner of the console to switch the current workspace. After switching, the Knowledge Base list and API Keys in the left navigation update accordingly.
On the Settings & Billing → Members & Permissions tab, click Add Member and enter the RAM username or UID.
API Keys are the credentials for calling the API, isolated per workspace.
On the Settings & Billing → API Key tab, click Create. The key is shown only once — store it safely.
The RAG Knowledge Base shares the Alibaba Cloud account and workspace system with Alibaba Cloud Model Studio:
Workspaces
| Concept | Description |
|---|---|
| Workspace | Resource isolation unit, formatted as llm-xxxxxxxxxxxx. |
| Default workspace | The account's default workspace, marked as "Default." |
| Limit | Up to 30 workspaces per account. |
Create a workspace
On the Settings & Billing → Workspaces tab in the console, click New Workspace and enter a name.
Switch workspaces
Use the dropdown in the top-right corner of the console to switch the current workspace. After switching, the Knowledge Base list and API Keys in the left navigation update accordingly.
Members and permissions
| Role | Permissions |
|---|---|
| Alibaba Cloud root account | Full access. |
| RAM sub-account | Must first be granted AliyunBailianDataFullAccess and added to the target workspace. |
Add a member
On the Settings & Billing → Members & Permissions tab, click Add Member and enter the RAM username or UID.
API Key management
API Keys are the credentials for calling the API, isolated per workspace.
Create an API Key
On the Settings & Billing → API Key tab, click Create. The key is shown only once — store it safely.
Security recommendations
| Recommendation | Description |
|---|---|
| Keep out of source control | Store in an environment variable (such as DASHSCOPE_API_KEY). |
| One key per application | Use a separate API Key for each application. |
| Rotate regularly | Replace API Keys periodically to limit exposure. |
Relationship with Alibaba Cloud Model Studio
The RAG Knowledge Base shares the Alibaba Cloud account and workspace system with Alibaba Cloud Model Studio:
| Dimension | Description |
|---|---|
| Account | Same Alibaba Cloud root account. |
| Workspace | Shared — visible on both platforms. |
| Knowledge Base | Shared — manageable from either side. |
| API Key | Shared — one set of DashScope keys. |