Skip to main content
Gathering Interest

A team concept is missing in CDF

Related products:Authentication and Access Management
A
Seasoned

A team concept is missing in CDF

We are working with data in our organization aligned with the data mesh principles:
- Data as a product
- Domain-oriented ownership of data
- Self-service data platform
- Decentralized data governance

Currently the setup for access management in CDF does not support this functionality. A team should be able to create, edit and delete datasets, and data associated with their datasets (e.g., assets, events, sequences). 

With the current solution an admin with group:write and dataset:write access needs to create a dataset and create new groups for service accounts/user accounts and add capabilities to read/write resource types within the dataset. 

We are thus not able to provide a solution which is self-serviced to teams within our organization where they freely control their data and access to it.

Geir Engdahl
Practitioner
  • Geir Engdahl
  • Chief Technology Officer
  • January 26, 2023

Hi Anders,

I agree with this need, and the clumsiness of the current dataset:read&write access scope. As you say, a team should be able to create their own data set without having privileges that would give them write access to all other datasets. A fix for this is to introduce a dataset:create scope, and which would allow users to create new datasets where they become the owner and gain read&write access to that particular dataset automatically. However, it does not solve the team challenge, where you would need to be able to add team members to a group with the same rights. Having group:write essentially gives full access to everything, so we cannot rely on that. I will loop in the appropriate product managers so they are aware of the problem.

A
R
2 people like this
  • A
    Anders Willersrud
  • R
    rsiddha
Anita Hæhre
Seasoned Practitioner
Forum|alt.badge.img+1
  • Anita Hæhre
  • Head of Academy and Community
  • January 26, 2023
New→Gathering Interest
Anita Hæhre


Terms & ConditionsCookie Settings

Cookie Policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie Settings