Hello,
Some capabilities, such as dataModelInstancesAcl or dataModelsAcl, support the spaceIdScope scope. Currently, we can only specify the spaces to which we want to grant access.
To better support certain use cases, would it be possible to introduce support for exclusion rules or regex-based expressions within this scope?
Thanks
Hello
We intentionally chose not to support exclusions or regex within spaceIdScope, as these patterns can create a risk of unintended access. For example, if a data engineer creates a new space and writes sensitive data into it, a broad pattern match could accidentally grant users access to that space. To avoid this, we require admins to explicitly grant access to each space.
That said, we fully recognize that adding spaces individually can be time consuming and doesn’t scale well for large deployments. We are already exploring safer UX improvements to make this workflow more efficient. We will get back shortly.
Many thanks!
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Check the
documentation
Ask the
Community
Take a look
at
Academy
Cognite
Status
Page
Contact
Cognite Support