Access to a table is denied by policies in Watson Query
Access to a table is denied, yet according to the data policies and authorizations access to the table is expected to be allowed.
Symptoms
You cannot access a table but according to the data policies and authorizations, you are authorized to access this table. This issue occurs only if IBM Knowledge Catalog policy enforcement is enabled in Watson Query. For more information, see Enabling policy enforcement.
Causes
To find the cause of this issue, follow these steps.- Find the corresponding data asset for the denied virtual object in a catalog in IBM Knowledge Catalog.
- Open the data asset in the catalog:
- If you get the following message
Asset is temporarily unavailable
, the asset is being profiled, which is the reason for the access denial. - If you are the asset owner in the catalog, check the Profile tab of the data asset and see that the profile has not yet been created, which is the reason for the access denial.
- If you get the following message
Resolving the problem
To resolve this issue, start asset profiling and wait for its completion. For more information, see Profiling data assets. After the profiling process completes, policy enforcement on the virtual object matches your defined policies and rules definitions.