As we move the Simulator Integration Service from Beta to Production, we will be introducing a required set of new access control list (ACL) capabilities to enable proper access management and provide more granular control over user permissions for Simulator Integrations in Cognite Data Fusion.
New ACL Requirements
Starting December 2nd 2024, the following permissions will be required to access and interact with the Simulator Integration Service:
simulatorsAcl:READ
: Required to list and filter simulators, models + revisions, routines + revisions, integrations, and simulation runs.simulatorsAcl:WRITE
: Required to create simulators, models + revisions, and routines + revisions.simulatorsAcl:DELETE
: Required to delete simulators, models, and routines.simulatorsAcl:RUN
: Required to run simulation routines.simulatorsAcl:MANAGE
: Required to manage and update simulator resources from the connector side into simulator, model, run data, and integration resources.
Recommended Permissions
For Service Principals (Simulator Integrations/Connectors):
simulatorsAcl:MANAGE
For End Users:
simulatorsAcl:READ
simulatorsAcl:RUN
simulatorsAcl:WRITE
(optional - allows users to create resources)simulatorsAcl:DELETE
(optional - allows users to delete resources)
Action Required
Please review your current access configurations and prepare to update them according to these new requirements.