OpenMetadata
OpenMetadata copied to clipboard
feat: A possibility to add bot as user within the Team entity
Is your feature request related to a problem? Please describe.
Currently creation of bots allows granting them one of available Roles. These roles, however, grant quite broad set of permissions to bots and cannot be scoped easily to single schema etc. There is no easy way to create a bot that could be used on behalf of OpenMetadata Team
members.
Exemplary use case for this feature would be as such:
- each schema in OpenMetadata is owned by different OpenMetadata
Team
- let's assume there is project
x
in the organization, this project has correspondingTeam
in OM and is assigned as owner of schemaxdb
in OpenMetadata - each member of project
x
can, using personal credentials or UI, edit metadata ofxdb
schema (default behaviour of RBAC in OM) - project
x
has set of metadata they want to update automatically + run profiling jobs automatically using OM SDK (for example - via scheduler airflow pipelines executed outside OpenMetadata Airflow instance) - there is
project-x-bot
which has same permissions as any other member of projectx
but is treated like NPA (non personal account) - members of project
x
useproject-x-bot
account with it's JWT Token credentials to update metadata using OpenMetadata SDK. This bot can only edit entitites for which projectx
is an owner
Describe the solution you'd like
This feature request is about adding a possibility to treat bot as Team member and thus - such bot would have permission scoped to this Teams permissions.
Describe alternatives you've considered n/a
Additional context n/a