Moving to the new version of governance artifacts
Move to the new governance artifacts experience to profit from a broader range of options and capabilities. The new governance artifacts experience includes more types of governance artifacts, more relationships between artifacts and assets, and fine-grained control of user permissions to view and manage governance artifacts with categories.
When you move to the new experience, you create new governance artifacts with new capabilities to replace your existing governance artifacts, which are removed, such as, business terms, policies, and rules. After you move, you can't revert to the legacy user experience.
When your legacy governance artifacts are removed, all business term, data classes, and classification assignments on data assets become invalid. Profiles of data assets are updated with the new data classes. Consider reassigning terms and classification on assets in catalogs after the move to avoid having data assets with invalid term and classification assignments.
Any data masking that you configured with data protection rules is also cancelled. You must re-create your data protection rules. Any asset that was added in a masked form from a governed catalog into a project is no longer masked. To reestablish masking, remove formerly masked assets from the project, and then add them back to the project after the new governance artifacts and rules are in place.
Move to the new experience when you're ready to take advantage of the new capabilities and you made a plan to re-create your existing governance artifacts.
How to move to the new experience
You can move to the new experience by following the prompts or at any time. If you provision the Watson Knowledge Catalog service after the date the new experience is available in your service region, you have the new experience right away.
How to tell which experience that you have
You can tell which experience you have by looking at the navigation menu. Existing accounts that aren't moved yet have these entries in the navigation menu:
Data Dashboard Access to policy usage statistics
Policy Manager Entry point for creating and managing policies and rules
Business Glossary Entry point for creating and managing business terms
After you move, the navigation menu has these items:
The new navigation provides direct access to each individual type of governance artifact.
Moving when prompted
If you have an existing Watson Knowledge Catalog service, the first time you log in after April 2021, you see an option to move to the new experience. Read the information on the page carefully. Then, decide whether you want to move and click the appropriate button.
If you select to skip the move by clicking Cancel, the governance artifacts experience remains as before.
If you click Upgrade, you're asked to confirm your decision. After you do so, the process starts. This process can take a while. After the move is complete, you'll see a success message. Wait a few minutes, log out, and log in again before you can start working with the new options.
Moving at any time
You can move to the new experience at your convenience by going to a specific URL or by entering a command.
To move to the new experience, use one of these methods:
-
Method 1: Go to the URL that matches your region:
- Dallas (US South): https://dataplatform.cloud.ibm.com/governance/update/glossary
- London (United Kingdom): https://eu-gb.dataplatform.cloud.ibm.com/governance/update/glossary
- Frankfurt (Germany): https://eu-de.dataplatform.cloud.ibm.com/governance/update/glossary
- Tokyo (AP-North): https://jp-tok.dataplatform.cloud.ibm.com/governance/update/glossary
You'll see a message that the migration is underway.
-
Method 2: Run the command for your region:
- Dallas (US South):
curl -X POST "https://dataplatform.cloud.ibm.com/v3/glossary_terms/admin/migration/upgrade_tenant" -H "Authorization: Bearer $TOKEN" -k
- London (United Kingdom):
curl -X POST "https://eu-gb.dataplatform.cloud.ibm.com/v3/glossary_terms/admin/migration/upgrade_tenant" -H "Authorization: Bearer $TOKEN" -k
- Frankfurt (Germany):
curl -X POST "https://eu-de.dataplatform.cloud.ibm.com/v3/glossary_terms/admin/migration/upgrade_tenant" -H "Authorization: Bearer $TOKEN" -k
- Tokyo (AP-North):
curl -X POST "https://jp-tok.dataplatform.cloud.ibm.com/v3/glossary_terms/admin/migration/upgrade_tenant" -H "Authorization: Bearer $TOKEN" -k
For information about obtaining a bearer token, see Cloud IAM Authentication and Authorization for Platform Service.
The expected response code is 200 for a successful move.
- Dallas (US South):
Main differences
The following sections summarize the differences between the versions. Because both versions are supported in parallel, differences between the new and the legacy behavior are clearly indicated throughout the governance artifact documentation:
This information describes the legacy behavior for governance artifacts.
This information describes the new behavior for governance artifacts.
Access control
Legacy version Users must have the Admin role for the Watson Knowledge Catalog service to create policies, create business terms, and view the Data Dashboard. Otherwise, they can only view policies and business terms.
New version Several new IBM Cloud Pak for Data service permissions allow for fine-grained control of what users can view or manage. Existing permissions are mapped to the new set of permissions.
Governance artifacts
Some Watson Knowledge Catalog plans have limits on the number of governance artifacts of a specific type that you can create.
Governance artifact | Legacy behavior | New behavior |
---|---|---|
Categories | Categories are used to group policies and rules. | Categories are used to organize all your governance artifacts and the users who can view and manage those artifacts. |
Policies | You control access to data by creating policies and data protection rules in the Policy Manager tool. | You create policies to describe how to govern data in catalogs. You can include data protection rules and governance rules. |
Rules | Create data protection rules to identify the data to control and to determine how to control the data. | Create data protection rules to identify the data to control and to determine how to control the data. Data class groups are no longer supported. Select data classes one by one and join them with
OR. Data protection rules are active and enforced as soon as you create them, regardless of whether you add them to active policies. Create governance rules to provide a description of your governance criteria. |
Business terms | You create business terms in the Business Glossary tool with a small set of optional attributes. | When you create business terms, you can set up relationships with other governance artifacts. When a business term is in use, you can see the term’s related content. |
Classifications | Classifications are provided by Watson Knowledge Catalog. You can set a classification for data assets when you publish it to a catalog. | In addition to the predefined classifications, you can create and use your own classifications. Besides assigning a classification to a data asset when publishing it to a catalog, you can assign classifications to other governance artifacts. |
Data classes | Data classes are provided by Watson Knowledge Catalog and are assigned during profiling to categorize data according to the type of the data and how the data is used. | In addition to the predefined data classes, you can create and use your own data classes. Data classes can be organized in complex relationships. |
Reference data sets | - | Reference data sets define values for specific types of columns that can be used as data matching criteria for a data class or in data quality analysis. |
Parent topic: Governance artifacts (legacy)