OpenMetadata
OpenMetadata copied to clipboard
feat: A possibility to add bot as user within the Team entity
Is your feature request related to a problem? Please describe.
Currently creation of bots allows granting them one of available Roles. These roles, however, grant quite broad set of permissions to bots and cannot be scoped easily to single schema etc. There is no easy way to create a bot that could be used on behalf of OpenMetadata Team members.
Exemplary use case for this feature would be as such:
- each schema in OpenMetadata is owned by different OpenMetadata
Team - let's assume there is project
xin the organization, this project has correspondingTeamin OM and is assigned as owner of schemaxdbin OpenMetadata - each member of project
xcan, using personal credentials or UI, edit metadata ofxdbschema (default behaviour of RBAC in OM) - project
xhas set of metadata they want to update automatically + run profiling jobs automatically using OM SDK (for example - via scheduler airflow pipelines executed outside OpenMetadata Airflow instance) - there is
project-x-botwhich has same permissions as any other member of projectxbut is treated like NPA (non personal account) - members of project
xuseproject-x-botaccount with it's JWT Token credentials to update metadata using OpenMetadata SDK. This bot can only edit entitites for which projectxis an owner
Describe the solution you'd like
This feature request is about adding a possibility to treat bot as Team member and thus - such bot would have permission scoped to this Teams permissions.
Describe alternatives you've considered n/a
Additional context n/a