dbt-labs / dbt-labs/dbt-adapters

[ADAP-545] [Feature] Add support for Authrorized Datasets and dataset-level grants

Open
#594 4 comments 2 reactions 0 assignees View on GitHub
feature:grants pkg:dbt-bigquery type:enhancement
Dominant language
Python
Stars
233
Forks
362
Avg merge
3d 22h
Merged PRs (30d)
9

Description

### Is this your first time submitting a feature request?

- [X] I have read the [expectations for open source contributors](https://docs.getdbt.com/docs/contributing/oss-expectations)
- [X] I have searched the existing issues, and I could not find an existing issue for this feature
- [X] I am requesting a straightforward extension of existing dbt-bigquery functionality, rather than a Big Idea better suited to a discussion

### Describe the feature

The ability to configure [Authorized Datasets](https://cloud.google.com/bigquery/docs/authorized-datasets) in dbt-project.yml, similarly to Authorized Views. For example, a `+grant_access_to:` where `+schema:` is also present at the same level could authorize the whole dataset rather than all individual views.

The same goes for direct grants.

### Describe alternatives you've considered

dbt currently achieves the same result although, in our opinion, a less user-friendly way. Giving permissions to every separate model becomes hell when it's time to revoke any of them.

### Who will this benefit?

Every single BQ admin who's in any way concerned by security. It also indirectly solves dbt-labs/dbt-bigquery#126.

### Are you interested in contributing this feature?

_No response_

### Anything else?

_No response_

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.