Hi, I made the customized policy which restricts managing metadata ingestion. The problem is that this policy seemed not to be applied . As the second figure shows, the user who is permitted to manage metadata ingestion can't find the 'ingestion' tab. Is this bug? If not, I don't know why It didn't work.

hey there! so two things I would double check: 1. that

UI_INGESTION_ENABLED

is set to true in your env variables 2. give that same user the permission to also "Manage Secrets" - we require this secrets management as well in order to create and apply secrets to be used in your ingestion recipes

Thanks @bulky-soccer-26729, the second one solves the problem!

nice glad to hear it!