Is it possible to override the global permission for the User role at dag level ? #51914
Unanswered
Sriram1404
asked this question in
Q&A
Replies: 0 comments
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Uh oh!
There was an error while loading. Please reload this page.
Uh oh!
There was an error while loading. Please reload this page.
-
Hi Community,
My use case is dag should be trigger only by the airflow admin role users but the issue is user role has edit access to all the dags. I cannot remove the can edit on DAGs from the User role. Tried adding the access_control attribute in DAG constructor like below,
with DAG(
dag_id='test_dag',
description='test dag',
schedule_interval=None,
catchup=False,
start_date=days_ago(1),
max_active_runs=1,
max_active_tasks=CONFIG_LIST.get("max_active_tasks", 16),
default_args=default_args,
tags=["restricted"],
access_control={
'Admin': {'can_read', 'can_edit', 'can_trigger'},
'User': {'can_read'}
}
) as dag
Still people in User role can do all the operation.
Please let me know how to restrict the User role permission at dag level? Only people in the Admin role allowed to do all operation in this dag, other user role only allowed to read.
Thanks in advance.
Beta Was this translation helpful? Give feedback.
All reactions