Forum Discussion
Request access form should be customizable
Most customers have existing data access policies and access request forms. Customers should be able to adapt the request access form, so it reflects their existing form for data access.
Besides the point that the access request form should be customizable, the current form has some shortcomings that are not too sharp:
- When a data product is created, data product owners are asked to fill in a maximum access duration. On the request access form it is not possible for a requester to provide a requested duration as an input.
- Why is the "business justification" entry only one row?
- Why can we not turn the "Purpose" part off? Why are there three options that are always there? What if a data owner does not want to provide access for "assessing fit"? We expect the user to describe their intentions with the data in detail. We do not expect to data owner to think out all possible purposes beforehand.
I have seen As a data product owner, I can set up customizable workflows for data product
access and use Power Automate connector to connect with other applications. On the roadmap. Please make customizing the request access form part of this feature.
5 Replies
SitaDMicrosoft
Rik - Thank you for taking the time and sharing your detailed feedback.
A Unified Catalog Power Automate connector will be available in June to build your customizations externally in Power Automate.
Customizable request form for the reasons you have mentioned is on our roadmap. We will be publishing the roadmap for second half of the calendar yeah in the July timeframe.
Hi Sita,
If we are not able to ask the requester to provide the information that is required to handle the data access workflow on the access request form, the PowerAutomate workflow behind the form is rendered useless.
Please keep this in mind.
Best,
Rik
We also just noticed that:
- There is a 'terms of use' that can be added from the overview page of the data product
- There is are 'digital attestations' that can be added under 'manage policies'
- These digital attestations do not show up under 'terms of use' on the overview page of the data product
- Both types show up after a user clicks on 'request access' at the 'i have read and acknowledge the..'
This is confusing and I believe it's better to choose one place for terms of use.
Yes, you can actually do that,
Using Microsoft Power Automate to request or even assign access to shared folders is very easy but tricky, using automation to assign permissions without the proper planning may lead to unauthorized access or security risks.
Best,
Ahmed MasoudHi Ahmed,
I think it is not possible to edit the request access form. If this is possible, please show us how.
Applying a Power Automate flow seem to be possible on the data asset level, not on the data product level.
Agree that granting access using automation is tricky. Therefore, all we would ever do is send metadata of the request towards another system that is actually used for access management.
Best,
Rik
