openapi: 3.2.0 info: title: Immuta Data Marketplace Asset API description: This is the API for the Immuta Data Marketplace based on the OpenAPI 3.0 specification. The API supports the discovery and management of data products as well as access to those products including both the request and approval process. version: '1.0' contact: name: Support url: https://support.immuta.com email: support@immuta.com termsOfService: https://www.immuta.com/terms-of-service license: name: Apache 2.0 url: https://www.apache.org/licenses/LICENSE-2.0.html servers: - url: https://{global-segment}.api.immutacloud.com/marketplace description: Marketplace API Endpoint variables: global-segment: default: na enum: - na - eu - ap description: Marketplace API global segment tags: - name: Asset description: APIs for managing assets paths: /api/asset/byMetadata: get: description: Search for assets by their metadata. operationId: getAssetByMetadata parameters: - description: Dot-delimited fully qualified name of the asset. required: true name: fullyQualifiedName in: query schema: type: string - description: Asset type to help narrow down the search if there are multiple assets with the same fullyQualifiedName. required: false name: assetType in: query schema: type: string - description: Hostname or IP address of the asset. required: false name: host in: query schema: type: string - description: Port to narrow connection matching. required: false name: port in: query schema: minimum: 1 maximum: 65535 type: integer - description: Technology of the asset. required: false name: technology in: query schema: type: string responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AssetDto' security: - bearer: [] summary: Get asset by metadata tags: - Asset /api/asset/{id}: get: description: Search assets by ID. operationId: getAssetById parameters: - name: id required: true in: path schema: type: string responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AssetDto' security: - bearer: [] summary: Get asset by ID tags: - Asset put: description: Update an existing asset by ID operationId: updateAsset parameters: - name: id required: true in: path schema: type: string requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/UpdateAssetDto' responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AssetDto' security: - bearer: [] summary: Update asset by ID tags: - Asset patch: description: Partially update an existing asset by ID. Only provided fields will be updated. Use null to clear request forms or review flows. operationId: patchAsset parameters: - name: id required: true in: path schema: type: string requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/PatchAssetDto' responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AssetDto' security: - bearer: [] summary: Partially update asset by ID tags: - Asset /api/asset/{id}/request-forms: get: description: Get the request forms assigned to the asset. operationId: getAssetRequestForms parameters: - name: id required: true in: path schema: type: string responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AssetRequestForms' security: - bearer: [] summary: Get request forms for an asset tags: - Asset /api/asset/{id}/review-flows: get: description: Get the review flows configured for the asset. operationId: getAssetReviewFlows parameters: - name: id required: true in: path schema: type: string responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/AssetReviewFlows' security: - bearer: [] summary: Get review flows for an asset tags: - Asset /api/asset/{id}/request: post: description: Create a new access or masking exception request for the specified asset. operationId: requestAsset parameters: - name: id required: true in: path schema: type: string requestBody: required: true content: application/json: schema: $ref: '#/components/schemas/CreateAssetRequestDto' responses: '201': description: '' content: application/json: schema: $ref: '#/components/schemas/HydratedAccessRequest' security: - bearer: [] summary: Request access or masking exception for an asset tags: - Asset /api/asset/{id}/request/{requestId}: delete: description: Updates the specified access request to revoked and revokes access to data source(s) associated with the asset. operationId: revokeAssetRequest parameters: - name: id required: true in: path schema: type: string - name: requestId required: true in: path schema: type: string responses: '204': description: '' security: - bearer: [] summary: Revoke access to an asset tags: - Asset /api/asset/{id}/recent-determinations: get: description: Returns 5 most recent data access requests with a terminal status as well as the approval records which contributed to that status. operationId: RecentAssetDeterminations parameters: - name: id required: true in: path schema: type: string - name: type required: false in: query schema: default: DATA_ACCESS type: string enum: - DATA_ACCESS - MASKING_EXCEPTION responses: '200': description: '' content: application/json: schema: $ref: '#/components/schemas/RecentDeterminations' security: - bearer: [] summary: Returns 5 most recent manual access determinations tags: - Asset components: schemas: AssetRequestForms: type: object properties: dataAccessForm: type: object properties: id: type: string format: uuid name: type: string fields: type: array items: discriminator: propertyName: type oneOf: - type: object properties: id: type: string format: uuid type: type: string enum: - DROPDOWN - CHECKBOXES label: type: string required: default: true type: boolean options: type: array items: type: object properties: value: type: string required: - value required: - id - type - label - options title: Selection Form Field - type: object properties: id: type: string format: uuid type: type: string enum: - SHORT_ANSWER label: type: string required: default: true type: boolean required: - id - type - label title: Short Answer Form Field - type: object properties: id: type: string format: uuid type: type: string enum: - ACCESS_DURATION label: type: string enum: - How long do you need access to this data? required: type: boolean enum: - true required: - id - type - label - required title: Access Duration Form Field title: RequestFormFields policy: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - rules - defaultEvent dataUseAgreements: default: [] type: array items: type: object properties: id: type: string format: uuid name: type: string description: The name of data use agreement body: type: string description: The contents of data use agreement required: - id - name - body title: Request Form Data Use Agreements createdBy: type: object properties: globalUserId: type: string format: uuid description: Immuta global user ID name: type: string description: Display name required: - globalUserId - name description: The user who originally created the request form createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedBy: type: object properties: globalUserId: type: string format: uuid description: Immuta global user ID name: type: string description: Display name required: - globalUserId - name description: The user who last updated the request form updatedAt: oneOf: - type: string format: date-time - type: string format: date-time version: type: string format: cuid description: The current version of the request form inheritedFrom: type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 description: Asset name type: type: string enum: - DATA_OBJECT createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedAt: oneOf: - type: string format: date-time - type: string format: date-time dagTagId: oneOf: - type: number requestId: type: string format: cuid description: If requested, the ID of the access request for the asset status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id objectPath: type: array items: type: string technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery host: type: string port: type: integer minimum: 1 maximum: 65535 legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string required: - objectPath description: Data object asset metadata registered: default: true type: boolean description: Whether the asset has been registered stats: type: object properties: dataSourceCount: type: integer description: Count of data sources in the data object required: - dataSourceCount description: Data object asset statistics title: Data Object Asset Stats required: - id - name - type - metadata title: Data Object Asset requestType: type: string enum: - DATA_ACCESS - MASKING_EXCEPTION required: - id - name - fields - policy - createdBy - createdAt - updatedBy - updatedAt - version - requestType maskingExceptionForm: type: object properties: id: type: string format: uuid name: type: string fields: type: array items: discriminator: propertyName: type oneOf: - type: object properties: id: type: string format: uuid type: type: string enum: - DROPDOWN - CHECKBOXES label: type: string required: default: true type: boolean options: type: array items: type: object properties: value: type: string required: - value required: - id - type - label - options title: Selection Form Field - type: object properties: id: type: string format: uuid type: type: string enum: - SHORT_ANSWER label: type: string required: default: true type: boolean required: - id - type - label title: Short Answer Form Field - type: object properties: id: type: string format: uuid type: type: string enum: - ACCESS_DURATION label: type: string enum: - How long do you need access to this data? required: type: boolean enum: - true required: - id - type - label - required title: Access Duration Form Field title: RequestFormFields policy: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - rules - defaultEvent dataUseAgreements: default: [] type: array items: type: object properties: id: type: string format: uuid name: type: string description: The name of data use agreement body: type: string description: The contents of data use agreement required: - id - name - body title: Request Form Data Use Agreements createdBy: type: object properties: globalUserId: type: string format: uuid description: Immuta global user ID name: type: string description: Display name required: - globalUserId - name description: The user who originally created the request form createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedBy: type: object properties: globalUserId: type: string format: uuid description: Immuta global user ID name: type: string description: Display name required: - globalUserId - name description: The user who last updated the request form updatedAt: oneOf: - type: string format: date-time - type: string format: date-time version: type: string format: cuid description: The current version of the request form inheritedFrom: type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 description: Asset name type: type: string enum: - DATA_OBJECT createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedAt: oneOf: - type: string format: date-time - type: string format: date-time dagTagId: oneOf: - type: number requestId: type: string format: cuid description: If requested, the ID of the access request for the asset status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id objectPath: type: array items: type: string technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery host: type: string port: type: integer minimum: 1 maximum: 65535 legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string required: - objectPath description: Data object asset metadata registered: default: true type: boolean description: Whether the asset has been registered stats: type: object properties: dataSourceCount: type: integer description: Count of data sources in the data object required: - dataSourceCount description: Data object asset statistics title: Data Object Asset Stats required: - id - name - type - metadata title: Data Object Asset requestType: type: string enum: - DATA_ACCESS - MASKING_EXCEPTION required: - id - name - fields - policy - createdBy - createdAt - updatedBy - updatedAt - version - requestType required: - dataAccessForm AssetReviewFlows: type: object properties: dataAccessReviewFlow: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params inheritedFrom: discriminator: propertyName: type oneOf: - type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 description: Asset name type: type: string enum: - DATA_PRODUCT createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedAt: oneOf: - type: string format: date-time - type: string format: date-time dagTagId: oneOf: - type: number requestId: type: string format: cuid description: If requested, the ID of the access request for the data product status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING description: oneOf: - type: string description: Data product description example: All sales records from the current fiscal year description: Data product description domains: type: array items: type: string format: uuid minItems: 1 description: Array of domain IDs associated with the data product subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id suspended: default: false type: boolean description: Whether access to the data product's data sources is suspended example: false createdBy: type: string format: uuid description: Immuta global user ID of the user who created the data product expiration: oneOf: - type: string format: date-time stats: type: object properties: dataSourceCount: type: integer description: Count of data sources in a data product pendingRequestCount: type: integer description: Count of pending requests for a data product approvedRequestCount: type: integer description: Count of approved requests for a data product revokedRequestCount: type: integer description: Count of revoked requests for a data product canceledRequestCount: type: integer description: Count of canceled requests for a data product deniedRequestCount: type: integer description: Count of denied requests for a data product expiredRequestCount: type: integer description: Count of expired requests for a data product totalRequestCount: type: integer description: Count of total requests for a data product required: - dataSourceCount - pendingRequestCount - approvedRequestCount - revokedRequestCount - canceledRequestCount - deniedRequestCount - expiredRequestCount - totalRequestCount description: Data product statistics title: Data Product Stats dataAccessPolicy: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data product data access policy title: Data Product Data Access Policy maskingExceptionPolicy: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception policy for the data product title: Data Product Masking Exception Policy required: - id - name - type - createdAt - updatedAt - domains - createdBy - dataAccessPolicy - maskingExceptionPolicy title: Data Product Asset - type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 description: Asset name type: type: string enum: - DATA_OBJECT createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedAt: oneOf: - type: string format: date-time - type: string format: date-time dagTagId: oneOf: - type: number requestId: type: string format: cuid description: If requested, the ID of the access request for the asset status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id objectPath: type: array items: type: string technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery host: type: string port: type: integer minimum: 1 maximum: 65535 legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string required: - objectPath description: Data object asset metadata registered: default: true type: boolean description: Whether the asset has been registered stats: type: object properties: dataSourceCount: type: integer description: Count of data sources in the data object required: - dataSourceCount description: Data object asset statistics title: Data Object Asset Stats required: - id - name - type - metadata title: Data Object Asset title: Asset required: - rules - defaultEvent maskingExceptionReviewFlow: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params inheritedFrom: discriminator: propertyName: type oneOf: - type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 description: Asset name type: type: string enum: - DATA_PRODUCT createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedAt: oneOf: - type: string format: date-time - type: string format: date-time dagTagId: oneOf: - type: number requestId: type: string format: cuid description: If requested, the ID of the access request for the data product status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING description: oneOf: - type: string description: Data product description example: All sales records from the current fiscal year description: Data product description domains: type: array items: type: string format: uuid minItems: 1 description: Array of domain IDs associated with the data product subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id suspended: default: false type: boolean description: Whether access to the data product's data sources is suspended example: false createdBy: type: string format: uuid description: Immuta global user ID of the user who created the data product expiration: oneOf: - type: string format: date-time stats: type: object properties: dataSourceCount: type: integer description: Count of data sources in a data product pendingRequestCount: type: integer description: Count of pending requests for a data product approvedRequestCount: type: integer description: Count of approved requests for a data product revokedRequestCount: type: integer description: Count of revoked requests for a data product canceledRequestCount: type: integer description: Count of canceled requests for a data product deniedRequestCount: type: integer description: Count of denied requests for a data product expiredRequestCount: type: integer description: Count of expired requests for a data product totalRequestCount: type: integer description: Count of total requests for a data product required: - dataSourceCount - pendingRequestCount - approvedRequestCount - revokedRequestCount - canceledRequestCount - deniedRequestCount - expiredRequestCount - totalRequestCount description: Data product statistics title: Data Product Stats dataAccessPolicy: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data product data access policy title: Data Product Data Access Policy maskingExceptionPolicy: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception policy for the data product title: Data Product Masking Exception Policy required: - id - name - type - createdAt - updatedAt - domains - createdBy - dataAccessPolicy - maskingExceptionPolicy title: Data Product Asset - type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 description: Asset name type: type: string enum: - DATA_OBJECT createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedAt: oneOf: - type: string format: date-time - type: string format: date-time dagTagId: oneOf: - type: number requestId: type: string format: cuid description: If requested, the ID of the access request for the asset status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id objectPath: type: array items: type: string technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery host: type: string port: type: integer minimum: 1 maximum: 65535 legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string required: - objectPath description: Data object asset metadata registered: default: true type: boolean description: Whether the asset has been registered stats: type: object properties: dataSourceCount: type: integer description: Count of data sources in the data object required: - dataSourceCount description: Data object asset statistics title: Data Object Asset Stats required: - id - name - type - metadata title: Data Object Asset title: Asset required: - rules - defaultEvent required: - dataAccessReviewFlow CreateAssetRequestDto: discriminator: propertyName: requestType oneOf: - type: object properties: user: type: string format: uuid description: Immuta global user ID of the user for whom access is being requested form: description: The request form submission asset: type: object properties: type: type: string enum: - DATA_OBJECT metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string dataAccessRequestFormId: oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. maskingExceptionRequestFormId: oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. dataAccessReviewFlow: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data access policy. If not provided, the asset will inherit from a parent asset. maskingExceptionReviewFlow: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception policy. If not provided, the asset will inherit from a parent asset. required: - type - metadata additionalProperties: false description: The asset to request access or masking exception for. Only required for non-registered assets. requestType: type: string enum: - DATA_ACCESS required: - user - requestType - type: object properties: user: type: string format: uuid description: Immuta global user ID of the user for whom access is being requested form: description: The request form submission asset: type: object properties: type: type: string enum: - DATA_OBJECT metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string dataAccessRequestFormId: oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. maskingExceptionRequestFormId: oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. dataAccessReviewFlow: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data access policy. If not provided, the asset will inherit from a parent asset. maskingExceptionReviewFlow: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception policy. If not provided, the asset will inherit from a parent asset. required: - type - metadata additionalProperties: false description: The asset to request access or masking exception for. Only required for non-registered assets. requestType: type: string enum: - MASKING_EXCEPTION columns: type: array items: type: object properties: columnName: type: string description: The name of the column to request masking exception for sourceId: type: string description: The ID of the data source this column belongs to required: - columnName - sourceId description: Column in the data source to request masking exception for description: List of columns to request masking exception for required: - user - requestType - columns description: Payload for creating a request to an asset. HydratedAccessRequest: type: object properties: id: type: string format: cuid requestingUser: type: object properties: id: type: number iamId: type: string description: ID of the IAM the user is associated with globalUserId: type: string format: uuid description: Immuta global user ID username: type: string description: Username/login name for the user name: type: string description: Display name email: type: - string - 'null' description: Email address authorizations: type: object additionalProperties: type: array items: type: string required: - id - iamId - globalUserId - username - name title: Immuta User user: type: object properties: id: type: number iamId: type: string description: ID of the IAM the user is associated with globalUserId: type: string format: uuid description: Immuta global user ID username: type: string description: Username/login name for the user name: type: string description: Display name email: type: - string - 'null' description: Email address authorizations: type: object additionalProperties: type: array items: type: string required: - id - iamId - globalUserId - username - name title: Immuta User formVersion: type: string form: description: The request form submission type: type: string enum: - DATA_ACCESS - MASKING_EXCEPTION example: DATA_ACCESS metadata: description: Metadata associated with the access request status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING expiration: type: string format: date-time description: When the temporary access will expire createdAt: type: string format: date-time updatedAt: type: string format: date-time dataProduct: type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 maxLength: 255 pattern: ^[\p{L}\p{M}\p{N})(\-_/\\\s]*$ description: Data product name description: oneOf: - type: string description: Data product description example: All sales records from the current fiscal year description: Data product description required: - id - name asset: type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid type: type: string enum: - DATA_OBJECT name: type: string minLength: 1 description: Asset name metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id objectPath: type: array items: type: string technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery host: type: string port: type: integer minimum: 1 maximum: 65535 legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string required: - objectPath description: Data object asset metadata required: - id - type - name - metadata required: - id - requestingUser - user - formVersion - type - status - createdAt - updatedAt title: Hydrated Access Request description: Access request with user and data product metadata UpdateAssetDto: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - DATA_PRODUCT name: type: string minLength: 1 description: Asset name description: oneOf: - type: string description: Data product description example: All sales records from the current fiscal year description: Data product description subjectMatterExperts: type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id dataAccessRequestFormId: oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. maskingExceptionRequestFormId: oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. dataAccessReviewFlow: default: rules: [] defaultEvent: type: review params: stages: - any: - type: PERMISSION permission: GOVERNANCE - type: DOMAIN PERMISSION permission: Manage Data Products type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data access review flow title: Data Access Review Flow maskingExceptionReviewFlow: default: rules: [] defaultEvent: type: review params: stages: - any: - type: PERMISSION permission: GOVERNANCE - type: DOMAIN PERMISSION permission: Manage Data Products type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception review flow title: Masking Exception Review Flow suspended: type: boolean required: - type - name - dataAccessRequestFormId - maskingExceptionRequestFormId additionalProperties: false - type: object properties: type: type: string enum: - DATA_OBJECT metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id objectPath: type: array items: type: string technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string required: - objectPath dataAccessRequestFormId: oneOf: - oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. description: Request form ID. If not provided, the asset will inherit from a parent asset. maskingExceptionRequestFormId: oneOf: - oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. description: Request form ID. If not provided, the asset will inherit from a parent asset. dataAccessReviewFlow: oneOf: - type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data access policy. If not provided, the asset will inherit from a parent asset. description: Data access policy. If not provided, the asset will inherit from a parent asset. maskingExceptionReviewFlow: oneOf: - type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception policy. If not provided, the asset will inherit from a parent asset. description: Masking exception policy. If not provided, the asset will inherit from a parent asset. required: - type - metadata title: Update Data Object Asset title: Update Asset AssetDto: discriminator: propertyName: type oneOf: - type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 description: Asset name type: type: string enum: - DATA_PRODUCT createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedAt: oneOf: - type: string format: date-time - type: string format: date-time dagTagId: oneOf: - type: number requestId: type: string format: cuid description: If requested, the ID of the access request for the data product status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING description: oneOf: - type: string description: Data product description example: All sales records from the current fiscal year description: Data product description domains: type: array items: type: string format: uuid minItems: 1 description: Array of domain IDs associated with the data product subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id suspended: default: false type: boolean description: Whether access to the data product's data sources is suspended example: false createdBy: type: string format: uuid description: Immuta global user ID of the user who created the data product expiration: oneOf: - type: string format: date-time stats: type: object properties: dataSourceCount: type: integer description: Count of data sources in a data product pendingRequestCount: type: integer description: Count of pending requests for a data product approvedRequestCount: type: integer description: Count of approved requests for a data product revokedRequestCount: type: integer description: Count of revoked requests for a data product canceledRequestCount: type: integer description: Count of canceled requests for a data product deniedRequestCount: type: integer description: Count of denied requests for a data product expiredRequestCount: type: integer description: Count of expired requests for a data product totalRequestCount: type: integer description: Count of total requests for a data product required: - dataSourceCount - pendingRequestCount - approvedRequestCount - revokedRequestCount - canceledRequestCount - deniedRequestCount - expiredRequestCount - totalRequestCount description: Data product statistics title: Data Product Stats dataAccessPolicy: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data product data access policy title: Data Product Data Access Policy maskingExceptionPolicy: type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception policy for the data product title: Data Product Masking Exception Policy required: - id - name - type - createdAt - updatedAt - domains - createdBy - dataAccessPolicy - maskingExceptionPolicy title: Data Product Asset - type: object properties: id: oneOf: - type: string format: cuid - type: string format: uuid name: type: string minLength: 1 description: Asset name type: type: string enum: - DATA_OBJECT createdAt: oneOf: - type: string format: date-time - type: string format: date-time updatedAt: oneOf: - type: string format: date-time - type: string format: date-time dagTagId: oneOf: - type: number requestId: type: string format: cuid description: If requested, the ID of the access request for the asset status: type: string enum: - APPROVED - CANCELED - DENIED - PENDING - NONE - PUBLISHER - REVOKED - EXPIRED example: PENDING metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id objectPath: type: array items: type: string technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery host: type: string port: type: integer minimum: 1 maximum: 65535 legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string required: - objectPath description: Data object asset metadata registered: default: true type: boolean description: Whether the asset has been registered stats: type: object properties: dataSourceCount: type: integer description: Count of data sources in the data object required: - dataSourceCount description: Data object asset statistics title: Data Object Asset Stats required: - id - name - type - metadata title: Data Object Asset title: Asset PatchAssetDto: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - DATA_PRODUCT name: type: string minLength: 1 description: Asset name description: oneOf: - type: string description: Data product description example: All sales records from the current fiscal year description: Data product description subjectMatterExperts: type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id dataAccessRequestFormId: oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. maskingExceptionRequestFormId: oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. dataAccessReviewFlow: default: rules: [] defaultEvent: type: review params: stages: - any: - type: PERMISSION permission: GOVERNANCE - type: DOMAIN PERMISSION permission: Manage Data Products type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data access review flow title: Data Access Review Flow maskingExceptionReviewFlow: default: rules: [] defaultEvent: type: review params: stages: - any: - type: PERMISSION permission: GOVERNANCE - type: DOMAIN PERMISSION permission: Manage Data Products type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception review flow title: Masking Exception Review Flow suspended: type: boolean dagTagId: type: number required: - type - type: object properties: type: type: string enum: - DATA_OBJECT metadata: type: object properties: subjectMatterExperts: default: [] type: array items: type: object properties: id: type: string format: uuid description: Immuta global user ID of the subject matter expert username: type: string name: type: string required: - id objectPath: type: array items: type: string technology: type: string enum: - Snowflake - PostgreSQL - Databricks - Glue - MySQL - Teradata - MariaDB - Oracle - SQLServer - Trino - Redshift - BigQuery legacyType: type: string dataSourceId: type: number description: oneOf: - type: string externalLink: oneOf: - type: string dataAccessRequestFormId: oneOf: - oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. description: Request form ID. If not provided, the asset will inherit from a parent asset. maskingExceptionRequestFormId: oneOf: - oneOf: - type: string format: cuid - type: string format: uuid description: Request form ID. If not provided, the asset will inherit from a parent asset. description: Request form ID. If not provided, the asset will inherit from a parent asset. dataAccessReviewFlow: oneOf: - type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Data access policy. If not provided, the asset will inherit from a parent asset. description: Data access policy. If not provided, the asset will inherit from a parent asset. maskingExceptionReviewFlow: oneOf: - type: object properties: version: type: string description: Policy schema version rules: type: array items: type: object properties: conditions: oneOf: - type: object properties: all: type: array items: {} required: - all additionalProperties: false - type: object properties: any: type: array items: {} required: - any additionalProperties: false - type: object properties: not: {} required: - not additionalProperties: false event: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - deny params: type: object properties: comment: type: string required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params - type: object properties: type: type: string enum: - dataProductPolicy required: - type required: - conditions - event defaultEvent: discriminator: propertyName: type oneOf: - type: object properties: type: type: string enum: - approve params: type: object properties: comment: type: string duration: type: number minimum: 1 durationUnit: type: string enum: - HOURS - DAYS - WEEKS - MONTHS - YEARS additionalProperties: false required: - type - params - type: object properties: type: type: string enum: - review params: type: object properties: stages: type: array items: oneOf: - type: object properties: all: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - all - type: object properties: any: type: array items: oneOf: - type: object properties: type: type: string enum: - USER description: Entity type id: type: string description: Entity ID displayName: type: string description: Entity display name required: - type - id - type: object properties: type: type: string enum: - GROUP description: Entity type id: type: number description: Entity ID iamId: type: string description: IAM ID name: type: string description: Entity display name required: - type - name - type: object properties: type: type: string enum: - PERMISSION permission: type: string enum: - GOVERNANCE - USER_ADMIN - AUDIT description: Global permission required: - type - permission - type: object properties: type: type: string enum: - DOMAIN PERMISSION permission: type: string enum: - Manage Policies - Audit Activity - Manage Data Products - Manage Identifiers description: Domain permission domainId: type: string description: Domain ID required: - type - permission - type: object properties: type: type: string enum: - ATTRIBUTE key: type: string description: Attribute key value: type: string description: Attribute value required: - type - key - value - type: object properties: type: type: string enum: - CATALOG PERMISSION required: - type minItems: 1 required: - any description: Array of stages for manual review required: - stages required: - type - params required: - rules - defaultEvent description: Masking exception policy. If not provided, the asset will inherit from a parent asset. description: Masking exception policy. If not provided, the asset will inherit from a parent asset. required: - type title: Patch Asset RecentDeterminations: type: object properties: determinations: type: array items: type: object properties: id: type: string format: cuid requestingUser: type: object properties: id: type: number iamId: type: string description: ID of the IAM the user is associated with globalUserId: type: string format: uuid description: Immuta global user ID username: type: string description: Username/login name for the user name: type: string description: Display name email: type: - string - 'null' description: Email address authorizations: type: object additionalProperties: type: array items: type: string required: - id - iamId - globalUserId - username - name title: Immuta User user: type: object properties: id: type: number iamId: type: string description: ID of the IAM the user is associated with globalUserId: type: string format: uuid description: Immuta global user ID username: type: string description: Username/login name for the user name: type: string description: Display name email: type: - string - 'null' description: Email address authorizations: type: object additionalProperties: type: array items: type: string required: - id - iamId - globalUserId - username - name title: Immuta User actionBy: type: - object - 'null' properties: id: type: number iamId: type: string description: ID of the IAM the user is associated with globalUserId: type: string format: uuid description: Immuta global user ID username: type: string description: Username/login name for the user name: type: string description: Display name email: type: - string - 'null' description: Email address authorizations: type: object additionalProperties: type: array items: type: string required: - id - iamId - globalUserId - username - name title: Immuta User reason: type: string status: type: string enum: - APPROVED - BLOCKED - CANCELED - DENIED - PENDING example: PENDING createdAt: type: string format: date-time updatedAt: type: string format: date-time expiration: type: string format: date-time required: - id - requestingUser - user - actionBy - status - createdAt - updatedAt required: - determinations title: Recent Data Product Manual Determinations securitySchemes: bearer: scheme: bearer bearerFormat: JWT type: http externalDocs: description: Find out more about Immuta url: https://documentation.immuta.com/SaaS/