Right on dags based on DagBundles

[datasc24]

Hello !
It could be very nice if we can attribute roles on dag bundles and all dags coming from it inherits its the permissions related to the role.

[aniruddhaadak80]

Hey @datasc24,

Inheriting RBAC roles or permissions natively via DagBundles would be a huge organizational win for multi-tenant Airflow. Right now, most people handle this by programmatically attaching access_control dicts dynamically during the DAG parsing loop based on the bundle's file path.

Let me know if you make any progress or if you need another fresh set of eyes on it!

[shivaam]

Hey @datasc24,

Inheriting RBAC roles or permissions natively via DagBundles would be a huge organizational win for multi-tenant Airflow. Right now, most people handle this by programmatically attaching access_control dicts dynamically during the DAG parsing loop based on the bundle's file path.

Let me know if you make any progress or if you need another fresh set of eyes on it!

Curious is multi-tenant the same thing as multi-team feature being developed?

[potiuk]

there are no plans for multi-tenant feature in Airflow. We implement multi-team that allows for "some" isolation between teams in the same installation - but neither Airflow Scheduler nor api-server nor any other component is going to be suitable for "tenant" sepearation (of course it depends what you consider as multi-tenant - but if you want to host multiple indepdent, not connected accounts in single Airflow installation, it makes completely no sense, it's much better to manage multiple Airflow installations in this case.