US 2026/0310818 A1 · SELF-SERVICE DATA PLATFORM WITH FINE-GRAINED ACCESS CONTROL

Abstract

Disclosed embodiments include a method performed by one or more computing devices. The method may include; (1) exchanging a first, third-party access token for a particular entity with a second access token that is associated with a particular computing platform; (2) using a data catalog associated with the computing platform to receive, from an external query engine, the second access token in association with a request to access a particular data asset on behalf of the particular entity; (3) validating the second access token; (4) in response to determining that one or more fine-grained access restrictions apply to the data asset, denying access to the data asset; and (5) in response determining that fine-grained access restrictions don't apply to the data asset, and that no other access restrictions apply to prevent access to the data asset by the entity, granting access to the data asset.

Claims20

Dependent claims

A method, executed by one or more computer processors, for controlling access to metadata within a data catalog associated with a computing platform, the method comprising:

receiving, from a first query engine that is external to the computing platform, a first access token associated with a particular entity;
exchanging the first access token for a second access token that includes one or more permissions that grant access to one or more components of the particular computing platform, the one or more components comprising the data catalog;
receiving the second access token from the first, external query engine;
in response to receiving the second access token, validating the second access token;
and
in response to validating the second access token, granting the particular entity access to metadata within the data catalog.

3 more elements

A computer system comprising:

a computer processor;
and
memory containing instructions that, when executed by the computer processor, cause the computer system to execute a plurality of steps including:
receiving, from a first query engine that is external to the computing platform, a first access token associated with a particular entity;
exchanging the first access token for a second access token that includes one or more permissions that grant access to one or more components of the particular computing platform, the one or more components comprising the data catalog;
receiving the second access token from the first, external query engine;
in response to receiving the second access token, validating the second access token;
and
in response to validating the second access token, granting the particular entity access to metadata within the data catalog.

6 more elements

Dependencies are inferred from the claim text.

Self-service data platform with fine-grained access control

Life of this patent

Self-service data platform with fine-grained access control

Life of this patent

Abstract

Claims20