Approval Workflow

Managing the approval of access requests.

Access agreements represent the edges in the data mesh graph. They are the basis for granting access or revoking access to the actual data in the data platform. On approval, the access is granted, and on deactivation, the access is revoked. Access can be requested by data consumers and needs to be approved or rejected by data owners.

The Entropy Data offers three ways to manage the approval of access requests:

No Approval Workflow

For uncritical data, no approval workflow is necessary. A data consumer simply gets the data they need, without the data owner having to approve manually.

The Entropy Data supports this via the auto approve feature. When an output port has this feature enabled, all requested access requests to this output port get automatically approved. Additionally, in the special case of sharing data within a team, the access request gets automatically approved as well, regardless whether the feature is enabled of the output port.

In any case, an access resource is always created, and the data consumer has to provide a reason why they want to use the data. This is necessary to create lineage between the data products.

Simple Approval Workflow

For confidential and restricted data, an approval workflow is necessary. A data consumer requests access to the data they need, and the data producer approves or rejects the request.

Entropy Data supports a simple approval workflow in the web UI. After an access request has been requested by the data consumer, the owner of the providing data product can approve or reject the request within the web UI of the Entropy Data.

External Approval Workflow

In many companies, there might already exist a complex approval workflow in a dedicated system.

The Entropy Data supports the integration of an external approval workflow via its REST API. The access would still be requested in the Entropy Data, but this would trigger an AccessRequestedEvent in /api/events which should start the approval workflow in the external approval system. The external approval system can add a link to where the current decision is being made back to the Entropy Data adding to the access resource by updating the REST resource (/api/access/$id). Once a decision has been reached in the external approval system, the access can be approved or rejected via the appropriate API calls (/api/access/$id/approve and /api/access/$id/reject) to the Entropy Data, including additional metadata about the decision.

Reach out to support if you need customized integration with your external approval system.