Bindings Module
Overview
The Bindings Module is responsible for assigning Catalog IAM roles to principals.
A binding associates a role with a principal, such as a user or group, making the permissions defined by the role effective. Bindings represent the final step in the Catalog IAM authorization model, where authorization rules become active for specific principals.
Binding Management
This page displays all bindings configured within Catalog IAM.
From this interface, administrators can perform the following actions:
- View all existing bindings.
- Search, filter, and sort binding records.
- Switch between list and card views.
- Create a new binding using the Add Binding button.
- Review the assigned principal, principal type, creation date, update date, and current status.
-
Open the action menu (
...) to manage an existing binding.
Binding Information
Each binding record contains the following information:
| Field | Description |
|---|---|
| Principal Name | The name of the user or group associated with the binding. |
| Principal Type | Indicates whether the principal is a User or Group. |
| Create Date | The date and time when the binding was created. |
| Update Date | The date and time when the binding was last modified. |
| Status | Indicates whether the binding is currently Active or Inactive. |
Binding Assignments
A binding connects a role to a principal.
Principals may be individual users or groups. Once a role is assigned through a binding, all policies contained within that role become effective for the selected principal.
This separation of policies, roles, and bindings provides a flexible and centralized authorization model.
Key Considerations
- Bindings do not define permissions directly.
- Permissions are inherited from the assigned role.
- A binding may reference either a user or a group.
- Users inherit all permissions provided by the assigned role.
- Groups inherit all permissions provided by the assigned role for every member of the group.
- Disabling a binding immediately revokes the associated role assignment.
- Changes made to a binding take effect immediately.
Access Requirements
This page is available only to users with Administrator privileges.
Only administrators can view and manage Catalog IAM bindings. Non-administrator users cannot access this page.
Users without administrator privileges will receive the following authorization error:
Access Denied
You don't have access to this resource.