Restricting Users from Modifying Tags on Specific Resources in a Platform

Original Slack Thread

Hello!
Is there a method to restrict a certain group of users from modifying tags on particular resources (such as tables or datasets) or within a specific platform?
For instance, I’d like to prevent some users from changing tags on all Clickhouse tables and views. How can I accomplish this?
Thank you!

Hey there! For this use case I’d recommend using our Policy system to allow owners of assets to edit them, and then I’d have a strategy around assigning ownership properly within one of these platforms as the means to give edit access,

The other options is to organize the assets using domains (you can use a transformer at ingestion time, or just maintain this via the UI / APIs) and then build a policy that grants edit access to all resources in a given domain to a user or group. Hope this helps!