Manage AI Data Catalog Access

Use governance controls with Oracle AI Data Catalog to manage access to catalog objects.

Configure Governance and Access Control

An authorized AI Data Catalog administrator can use governance controls in Data Studio to manage groups, roles, privileges, object ownership, and access to catalog objects.

Connect to an AI Data Catalog and select Governance to configure the following:

• Principals

  Search for users, groups, clients, and other principal types. Open a principal to review its identity details and assigned roles.

• Groups

  Search and review groups. Create and delete AI Data Catalog-managed groups. Identity-provider groups are read-only.

  Open a group to review its details, add or remove members, review object privileges, and assign or revoke roles.

• Roles

  Create and delete reusable roles. Assign object-scoped privileges to a role and assign or revoke the role for users, groups, or clients.

  Open a role to review its details, granted privileges, and assigned principals.

• Privileges

  View the read-only privilege dictionary. Search for a privilege and filter by object type. You cannot create, edit, or delete system-defined privileges.

Manage Object Access and Ownership

From a catalog object's details, use the following options:

• Grants: Review direct grants and use Grant access or Revoke to manage access.

• Owner: Review the current owner and transfer ownership when permitted.

• Ownership History: Review ownership transfers.

• Check My Access: Test your own access to a selected table or view. Results show whether access is allowed or denied and, when available, whether access comes directly or through a group.

Select the object scope that matches your requirement. For example, grant access at the table level when access to a single table is narrower than access to the entire schema.

For more information, see Oracle AI Data Catalog.