FinSpaceData / Client / create_permission_group

create_permission_group#

FinSpaceData.Client.create_permission_group(**kwargs)#

Creates a group of permissions for various actions that a user can perform in FinSpace.

Danger

This operation is deprecated and may not function as expected. This operation should not be used going forward and is only kept for the purpose of backwards compatiblity.

See also: AWS API Documentation

Request Syntax

response = client.create_permission_group(
    name='string',
    description='string',
    applicationPermissions=[
        'CreateDataset'|'ManageClusters'|'ManageUsersAndGroups'|'ManageAttributeSets'|'ViewAuditData'|'AccessNotebooks'|'GetTemporaryCredentials',
    ],
    clientToken='string'
)
Parameters:

  • name (string) –

    [REQUIRED]

    The name of the permission group.

  • description (string) – A brief description for the permission group.

  • applicationPermissions (list) –

    [REQUIRED]

    The option to indicate FinSpace application permissions that are granted to a specific group.

    Warning

    When assigning application permissions, be aware that the permission ManageUsersAndGroups allows users to grant themselves or others access to any functionality in their FinSpace environment’s application. It should only be granted to trusted users.

    • CreateDataset – Group members can create new datasets.

    • ManageClusters – Group members can manage Apache Spark clusters from FinSpace notebooks.

    • ManageUsersAndGroups – Group members can manage users and permission groups. This is a privileged permission that allows users to grant themselves or others access to any functionality in the application. It should only be granted to trusted users.

    • ManageAttributeSets – Group members can manage attribute sets.

    • ViewAuditData – Group members can view audit data.

    • AccessNotebooks – Group members will have access to FinSpace notebooks.

    • GetTemporaryCredentials – Group members can get temporary API credentials.

    • (string) –

  • clientToken (string) –

    A token that ensures idempotency. This token expires in 10 minutes.

    This field is autopopulated if not provided.

Return type:

dict

Returns:

Response Syntax

{
    'permissionGroupId': 'string'
}

Response Structure

  • (dict) –

    • permissionGroupId (string) –

      The unique identifier for the permission group.

Exceptions