Hello folks! I wanted to create a policy to allow ...
# troubleshoot
g
Hello folks! I wanted to create a policy to allow some users to edit everything about one specific EntityType. Is that possible? I tried to use the resource part for it but it wasn't possible to do it for
MLMODEL
This was my query:
Copy code
mutation CreatePolicy($input: PolicyUpdateInput!) {
  createPolicy(input: $input)
}
This was my payload:
Copy code
{
  "input": {
    "type": "METADATA",
    "name": "MLP - Service Account",
    "state": "ACTIVE",
    "description": "Test",
    "privileges": [
      "EDIT_ENTITY_TAGS",
      "EDIT_ENTITY_GLOSSARY_TERMS",
      "EDIT_ENTITY_OWNERS",
      "EDIT_ENTITY_DOCS",
      "EDIT_ENTITY_DOC_LINKS",
      "EDIT_ENTITY_STATUS",
      "EDIT_DOMAINS_PRIVILEGE",
      "EDIT_DEPRECATION_PRIVILEGE",
      "EDIT_ENTITY",
      "EDIT_DATASET_COL_DESCRIPTION",
      "EDIT_DATASET_COL_TAGS",
      "EDIT_DATASET_COL_GLOSSARY_TERMS",
      "EDIT_ENTITY_ASSERTIONS",
      "EDIT_LINEAGE",
      "EDIT_ENTITY_EMBED",
      "EDIT_TAG_COLOR"
    ],
    "actors": {
      "users": [
        "urn:li:corpuser:mlp_user"
      ],
      "allUsers": false,
      "allGroups": false,
      "resourceOwners": false
    },
    "resources": {
      "type": "MLMODEL",
      "allResources": true
    }
  }
}
1
I don't know if for some reason it's not supported for MLModels since I can't select them if trying to create the policy from the UI
a
Hi @green-hamburger-3800, this may be a bug as it should be possible with https://datahubproject.io/docs/authorization/access-policies-guide/ CC: @echoing-airport-49548