Skip to main content
Version: v3.0.0

Permission levels

Permissions determine the level of access that a user has to various components of the Feature Store. For example, depending on the level of permission granted, a user may be authorized to edit feature sets, while another user with limited view-only permission can only observe the feature set.

Levels of permission​

Feature Store has six levels of permission:

These roles apply both at the workspace level (governing the workspace and, as a prerequisite, access to the feature sets it contains) and at the feature set level (governing a single feature set). See Migrate from Projects for how workspaces replace the legacy Projects concept.

Additionally, Feature Store also has the concept of an admin account. An admin is any user with the admin role specified in their identity provider. Admin users can perform additional management tasks.

note

The name of the claim storing the roles and name of admin role is configurable during Feature Store deployment.

Owner​

You become the owner by creating a workspace. As the owner, you can delete the workspace, manage its access level, and assign roles to other users (currently only through the UI — see the note below). As a workspace owner, you can manage every feature set within the workspace.

note

As the owner, you have all the other permissions.

  • Editor
  • Sensitive consumer
  • Consumer
  • Viewer
  • Metadata viewer

Editor​

If you have the editor role on a workspace, you are authorized to update the workspace's metadata and register new feature sets within it. As a workspace editor, you can also manage the feature sets within the workspace.

note

As an editor, you also have the following permissions,

  • Sensitive consumer
  • Consumer
  • Viewer
  • Metadata viewer

Sensitive consumer​

If you have the sensitive consumer role on a workspace, you are authorized to list and obtain feature sets from the workspace, with sensitive consumer access to those feature sets.

note

As a sensitive consumer, you also have the following permissions:

  • Consumer
  • Viewer
  • Metadata viewer

Consumer​

If you have the consumer role on a workspace, you are authorized to list and obtain feature sets from the workspace. In other words, as a consumer of a workspace, you can retrieve data from its feature sets.

note

As a consumer, you also have the following permissions:

  • Viewer
  • Metadata viewer

Viewer​

If you have the viewer role on a workspace, you are authorized to see which feature sets are within the workspace. This behaviour is also influenced by the Workspace access levels.

note

As a viewer, you also have the following permission:

  • Metadata viewer

Metadata viewer​

If you have the metadata viewer role on a workspace, you are authorized to see which feature sets are within the workspace. This is metadata-only access — you cannot retrieve or preview data. Metadata viewer is the default level of access for public workspaces, granting the minimum access needed to discover and inspect feature sets without accessing underlying data.

Workspace access levels​

Access levels on a workspace control what users can additionally do and are reflected internally by permissions. See Workspace access levels for more information.

Feedback