bharos commented on issue #9903:
URL: https://github.com/apache/gravitino/issues/9903#issuecomment-3857369237

   I think we should add SERVICE_ADMIN to have permission for these operations:
   
   ```
   UserOperations.addUser
   UserOperations.removeUser
   GroupOperations.addGroup
   GroupOperations.removeGroup
   RoleOperations.createRole
   RoleOperations.deleteRole
   PermissionOperations.grantRolesToUser
   PermissionOperations.revokeRolesFromUser
   PermissionOperations.grantRolesToGroup
   PermissionOperations.revokeRolesFromGroup
   ```
   Otherwise, service admins cannot bootstrap the RBAC system or perform basic 
administrative operations across metalakes?


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]

Reply via email to