Hi Getting this error when a user ( who has been assigned necessary Metadata policies ) is trying to add Tags

java.util.concurrent.CompletionException: com.linkedin.datahub.graphql.exception.AuthorizationException: Unauthorized to perform this action. Please contact your DataHub administrator.
	at java.util.concurrent.CompletableFuture.encodeThrowable(CompletableFuture.java:273)
	at java.util.concurrent.CompletableFuture.completeThrowable(CompletableFuture.java:280)
	at java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1606)
	at java.lang.Thread.run(Thread.java:748)
Caused by: com.linkedin.datahub.graphql.exception.AuthorizationException: Unauthorized to perform this action. Please contact your DataHub administrator.
	at com.linkedin.datahub.graphql.types.tag.TagType.update(TagType.java:140)
	at com.linkedin.datahub.graphql.types.tag.TagType.update(TagType.java:46)
	at com.linkedin.datahub.graphql.resolvers.mutate.MutableTypeResolver.lambda$get$0(MutableTypeResolver.java:35)
	at java.util.concurrent.CompletableFuture$AsyncSupply.run(CompletableFuture.java:1604)
	... 1 common frames omitted
19:20:52.101 [Thread-11216] ERROR c.d.m.graphql.GraphQLController - Errors while executing graphQL query: "mutation updateTag($input: TagUpdate!) {\n updateTag(input: $input) {\n  urn\n  name\n  description\n  ownership {\n   ...ownershipFields\n   __typename\n  }\n  __typename\n }\n}\n\nfragment ownershipFields on Ownership {\n owners {\n  owner {\n   ... on CorpUser {\n    urn\n    type\n    username\n    info {\n     active\n     displayName\n     title\n     email\n     firstName\n     lastName\n     fullName\n     __typename\n    }\n    editableInfo {\n     pictureLink\n     __typename\n    }\n    __typename\n   }\n   ... on CorpGroup {\n    urn\n    type\n    name\n    info {\n     email\n     admins {\n      urn\n      username\n      info {\n       active\n       displayName\n       title\n       email\n       firstName\n       lastName\n       fullName\n       __typename\n      }\n      editableInfo {\n       pictureLink\n       teams\n       skills\n       __typename\n      }\n      __typename\n     }\n     members {\n      urn\n      username\n      info {\n       active\n       displayName\n       title\n       email\n       firstName\n       lastName\n       fullName\n       __typename\n      }\n      editableInfo {\n       pictureLink\n       teams\n       skills\n       __typename\n      }\n      __typename\n     }\n     groups\n     __typename\n    }\n    __typename\n   }\n   __typename\n  }\n  type\n  __typename\n }\n lastModified {\n  time\n  __typename\n }\n __typename\n}\n", result: {errors=[{message=Unauthorized to perform this action. Please contact your DataHub administrator., locations=[{line=2, column=3}], path=[updateTag], extensions={code=403, classification=DataFetchingException}}], data={updateTag=null}}, errors: [DataHubGraphQLError{path=[updateTag], code=UNAUTHORIZED, locations=[SourceLocation{line=2, column=3}]}]

how are you trying to add the tags? via api directly or the UI? Can you share the policy that is assigned to the user?

@green-football-43791 Trying to add via the UI.

Ahh

Oh

does that make sense?

That makes sense, but unfortunately even after making the change. The specific user is not able to add tags

can you show me your new policy?

hmm- can you try editiing?

Ah, there is another option All privileges

that would mean you could edit all editable parts of a datset

🤦🏻‍♀️

i would select

Sure will update here.

@handsome-football-66174 did that work?

@green-football-43791 - That worked ! I should have looked into the details of what the policies mean. Thank you for your support.

Great to hear you were able to get through this!