This document is intended for data product owners who want to update, delete, and grant access to data products in Dataplex Universal Catalog.
For more information about the architecture and key concepts of data products, see About data products.
Before you begin
-
Enable the Dataplex, BigQuery APIs.
Roles required to enable APIs
To enable APIs, you need the Service Usage Admin IAM role (
roles/serviceusage.serviceUsageAdmin), which contains theserviceusage.services.enablepermission. Learn how to grant roles.
Required roles
To get the permissions that you need to manage data products, ask your administrator to grant you the following IAM roles on the project:
-
Full permissions to create, update, delete, and manage permissions for data products:
Dataplex Data Products Admin (
roles/dataplex.dataProductAdmin) -
Update and manage existing data products:
Dataplex Data Products Editor (
roles/dataplex.dataProductEditor) -
Add aspects such as
schema,overview, andcontacts: Dataplex Entry and EntryLink Owner (roles/dataplex.entryOwner) -
Search for and add assets:
Dataplex Catalog Viewer (
roles/dataplex.catalogViewer) -
Edit system aspect types such as documentation and contract aspect of refresh cadence:
Dataplex Catalog Editor (
roles/dataplex.catalogEditor)
For more information about granting roles, see Manage access to projects, folders, and organizations.
These predefined roles contain the permissions required to manage data products. To see the exact permissions that are required, expand the Required permissions section:
Required permissions
The following permissions are required to manage data products:
-
Edit the
overviewsystem aspect type:dataplex.entryGroups.useOverviewAspect -
Edit the
refresh cadencesystem aspect type:dataplex.entryGroups.useRefreshCadenceAspect
You might also be able to get these permissions with custom roles or other predefined roles.
Grant access to a data product
Data product owners must make their products discoverable and grant necessary roles, allowing consumers to search for, view, and request access to data products.
To grant data product consumers the permissions they need to interact with the data product, grant them the following IAM roles on the data product resource:
- Search for data products and access them in Dataplex Universal Catalog search:
Dataplex Data Product Consumer (
dataplex.dataProductsConsumer) - Read-only access to view data product definitions and metadata:
Dataplex Data Product Viewer (
dataplex.dataProductViewer) - Request access to data products: Dataplex Data Product Consumer
(
dataplex.dataProductsConsumer)
When a data product consumer requests access to a data product, the data product owner receives an email notification.
To grant access, follow these steps:
In the Google Cloud console, go to the Groups page.
Search for the group associated with the requested permission level and select it.
Click Add members.
Add the principal.
Click Save.
For more information, see Create and manage Google groups in the Google Cloud console.
Update a data product
You can update the basic details (for example, data product name, description, owner details), assets, access groups, permissions, contract, aspects, and additional documentation for an existing data product.
Update the basic details of a data product
In the Google Cloud console, go to the Dataplex Universal Catalog Data products page.
Click the data product that you want to update.
Click Edit data product.
Update the Data product name, Icon, Description, Owner contacts, and Labels as required.
Click Update data product.
Update assets of a data product
In the Google Cloud console, go to the Dataplex Universal Catalog Data products page.
Click the data product for which you want to update assets.
Click the Assets tab.
To add a new asset, follow these steps:
Click +Add.
Search for and select the assets that you want to add to your data product. The assets you select must reside in the same region as the data product.
If you have necessary permissions, you can view the metadata of assets by clicking the asset.
To refine the search results, use Filters.
After you select the assets, click Add.
To remove an asset from the data product, follow these steps:
For the asset that you want to remove, click > Remove.
To confirm the action, click Remove.
Update access groups and permissions
In the Google Cloud console, go to the Dataplex Universal Catalog Data products page.
Click the data product for which you want to update the access groups and permissions.
Click the Access groups & permissions tab.
To update an access group, follow these steps:
Click Edit.
Update the access group name, description, and identifier as required.
To add a new access group, click Add access group and follow these steps:
In the Access group name field, enter a name for the new access group. For example,
Analyst.In the Access group description field, enter a description for the access group.
In the Access group identifier field, enter the email address of a Google group that you want to assign to this access group. Data product consumers who request access to this access group can be added as members to the mapped Google group.
You can add a maximum of three access groups per data product.
Click Add.
To remove an access group, follow these steps:
For the access group that you want to remove, click > Remove.
To confirm the action, click Remove.
If no access groups are configured for the selected data product, you can add a new access group by clicking Add access group.
To update asset permissions, follow these steps:
For the asset you want to update permissions, click > Permissions.
Update the required access groups and IAM roles.
Click Configure.
Update the data product contract
In the Google Cloud console, go to the Dataplex Universal Catalog Data products page.
Click the data product for which you want to update the contract.
Click the Contract tab.
To update the existing contract, follow these steps:
Click .
Update the necessary fields.
Click Save.
If no contract is attached to the selected data product, you can add one by clicking Add contract.
Update aspects of a data product
In the Google Cloud console, go to the Dataplex Universal Catalog Data products page.
Click the data product for which you want to update the aspects.
Click the Aspects tab.
To update an aspect, follow these steps:
Click the aspect you want to update.
Click Edit.
Update the Aspect type, Country, and Region as required.
Click Save.
To add a new aspect for the data product, follow these steps:
Click + Add aspect.
In the Select aspect type field, search for and select an aspect type from the list. For example,
Geo context.In the Country field, select the country to which the asset belongs.
In the Region field, select the business region to which the asset belongs.
Click Save.
To delete an aspect, follow these steps:
Click the aspect you want to delete.
Click .
To confirm the action, click Confirm.
Update the data product documentation
In the Google Cloud console, go to the Dataplex Universal Catalog Data products page.
Click the data product for which you want to update the documentation.
Click the Overview tab.
Click Edit against Documentation.
Update user guide, sample queries, and other documentation as required.
Click Save.
Delete a data product
Before you delete a data product, you must remove all the assets from the data product. To do this, complete the following steps:
In the Google Cloud console, go to the Dataplex Universal Catalog Data products page.
Click the data product that you want to delete.
Click the Assets tab.
For every asset listed, click > Remove. Confirm the action by clicking Remove.
After you remove all the assets, delete the data product by clicking Delete.
In the confirmation dialog, enter
deleteand click Delete.
What's next
- Learn how to search for data products.
- Learn how to request access for data products.