OpenMetadata icon indicating copy to clipboard operation
OpenMetadata copied to clipboard

feat: A possibility to add bot as user within the Team entity

Open mgorsk1 opened this issue 10 months ago • 0 comments

Is your feature request related to a problem? Please describe.

Currently creation of bots allows granting them one of available Roles. These roles, however, grant quite broad set of permissions to bots and cannot be scoped easily to single schema etc. There is no easy way to create a bot that could be used on behalf of OpenMetadata Team members.

Exemplary use case for this feature would be as such:

  • each schema in OpenMetadata is owned by different OpenMetadata Team
  • let's assume there is project x in the organization, this project has corresponding Team in OM and is assigned as owner of schema xdb in OpenMetadata
  • each member of project x can, using personal credentials or UI, edit metadata of xdb schema (default behaviour of RBAC in OM)
  • project x has set of metadata they want to update automatically + run profiling jobs automatically using OM SDK (for example - via scheduler airflow pipelines executed outside OpenMetadata Airflow instance)
  • there is project-x-bot which has same permissions as any other member of project x but is treated like NPA (non personal account)
  • members of projectx use project-x-bot account with it's JWT Token credentials to update metadata using OpenMetadata SDK. This bot can only edit entitites for which project x is an owner

Describe the solution you'd like

This feature request is about adding a possibility to treat bot as Team member and thus - such bot would have permission scoped to this Teams permissions.

Describe alternatives you've considered n/a

Additional context n/a

mgorsk1 avatar Apr 15 '24 08:04 mgorsk1