This is an automated email from the ASF dual-hosted git repository.
onikolas pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new bc6cc08d73a Add auth manager section in multi-team doc (#63208)
bc6cc08d73a is described below
commit bc6cc08d73a21f1d8065b5cf19e5f6b7d1aae967
Author: Vincent <[email protected]>
AuthorDate: Thu Mar 12 12:08:52 2026 -0400
Add auth manager section in multi-team doc (#63208)
---
airflow-core/docs/core-concepts/multi-team.rst | 21 +++++++++++++++++++++
1 file changed, 21 insertions(+)
diff --git a/airflow-core/docs/core-concepts/multi-team.rst
b/airflow-core/docs/core-concepts/multi-team.rst
index 0f8a7205673..6beccc249b1 100644
--- a/airflow-core/docs/core-concepts/multi-team.rst
+++ b/airflow-core/docs/core-concepts/multi-team.rst
@@ -91,6 +91,27 @@ Secrets Backends are supported on a case by case basis.
When a task requests a Variable or Connection, the secrets backend will return
a team-specific value, if any. The
backend will automatically resolve the correct value based on the requesting
task's team.
+Auth Manager
+""""""""""""
+
+In order to use multi-team mode, the auth manager must be compatible with it.
A compatible auth manager must
+implement two methods:
+
+- ``is_authorized_team``: Determines whether a user is authorized to perform a
given action on a team. It is
+ used primarily to check whether a user belongs to a team.
+- ``_get_teams``: Returns the set of teams defined in the auth manager.
+
+During initialization, Airflow validates that all teams defined in the auth
manager are also present in the
+Airflow metadata database. If any team is missing, Airflow will raise an error.
+
+If the auth manager you are using does not implement these methods, Airflow
will raise a
+``NotImplementedError`` at runtime.
+
+Example of auth managers compatible with multi-team:
+
+- :doc:`Simple auth manager </core-concepts/auth-manager/index>` (recommended
for development usage only)
+- :doc:`Keycloak auth manager
<apache-airflow-providers-keycloak:auth-manager/index>`
+
Enabling Multi-Team Mode
------------------------
