I am looking for clarity in the YAML requirements for limiting the visibility of Datasets in Cognite to specific roles.
Like other datasetScope’d objects I’ve added datasetScope to my group definitions but deployments are failing, indicating the following error which itself is not very descriptive to indicate what the offending issue is:
raise CogniteAPIError( │
│ cognite.client.exceptions.CogniteAPIError: Unknown field name: │
│ `datasetScope` at items.capabilities[13].datasetsAcl.scope.? | code: 400 | │
│ X-Request-ID: 26ec6765-06b8-9f77-9d95-ab49409fd950
In our group definition we’re trying to limit datasets as follows, and it’s failing:

Adding to difficulty troubleshooting is the pre-build and dry-run deployments of our toolkit CI/CD ran successfully, and it wasn’t until the actual deployment that things broke.