Skip to main content
Implemented

Workflow Credentials Issue with Transformation

  • December 27, 2024
  • 9 replies
  • 157 views

Hi,

On behalf of Celanese,

I’m working on creating Data Workflows for a project that run transformations requiring specific credentials.

The credentials set in the Workflow Trigger can call the transformations, but they do not (and should not) have the same level of permissions as the credentials defined for the transformations themselves.

The issue I’m facing is that transformations are being executed in “current user” mode instead of “client credentials” mode which makes the transformation throw a missing capability error. Unfortunately, there’s no option to specify this behavior when setting up a Workflow Task.

Is there a way to overcome this limitation?

9 replies

Mithila Jayalath
Seasoned Practitioner
Forum|alt.badge.img

@Leandro de Lima Almeida I’ll check on this with the engineering team and get back to you with an update.


Jørgen Lund
Seasoned Practitioner
  • Product Manager
  • 113 replies
  • January 6, 2025

Hi ​@Leandro de Lima Almeida, thanks for reaching out. 

Just to make sure I understand the challenge correctly:

You would like to use a set of credentials to trigger/start your workflow, but one or more Transformation tasks within the workflow should use a different set of credentials (which in this case would be the same set of credentials that are configured on the Transformation)?

Meaning if a Transformation has a set of client credentials configured, you’d like the workflow to execute the Transformation using this set?


Forum|alt.badge.img+2

Hi, ​@Jørgen Lund 

 

Exactly.
Similar to when a transformation is executed using the Python SDK inside a Cognite Function, the client credentials configured in the transformation are used to execute it.

The client credentials used by the transformations in our project have a broader set of capabilities assigned to them.


Jørgen Lund
Seasoned Practitioner
  • Product Manager
  • 113 replies
  • January 6, 2025

Thanks ​@Leandro de Lima Almeida, we’ll look into this and get back to you.


Mithila Jayalath
Seasoned Practitioner
Forum|alt.badge.img

@Jørgen Lund, ​@Leandro de Lima Almeida I’ll convert this to a product idea.


Forum|alt.badge.img

do we have an update?


Jørgen Lund
Seasoned Practitioner
  • Product Manager
  • 113 replies
  • January 10, 2025

Hi ​ ​@Leandro de Lima Almeida ​@ibrahim.alsyed - we’re making this a priority and starting implementation next week. 


Bert Verstraete
Practitioner

Hey ​@Leandro de Lima Almeida ​@ibrahim.alsyed .

This is now available through the workflows API and Cognite Python SDK (7.73.0). On a transformations task parameters, you can now set `useTransformationCredentials` (boolean, default false). 

  • -If set to `true`, the transformation will run using the client credentials configured on the transformation.
  • If set to `false`, the transformation will run using the client credentials used to trigger the workflow. Which was the previous behavior.

This feature will be available in the UI soon, the team is working on it now.


Forum|alt.badge.img+2

Thank you all for the support and the quick response.

I’ll make the change in the current workflows.


Reply


Cookie Policy

We use cookies to enhance and personalize your experience. If you accept you agree to our full cookie policy. Learn more about our cookies.

 
Cookie Settings