Secure “Run As” Permissions for Visual Apps

csmith294

Dataiku currently switches “Run As” permissions to the end user when the App instance is created. To work around this, developers create app instances with their own credentials and grant access, often requiring full edit permissions for users to modify variables.

While this enables access to otherwise restricted data (the intended outcome), it also creates security risks—users can modify the app while it runs under the developer’s credentials.

The request is for a secure way to let apps run on developer or service account credentials without granting users edit access.