Datastrato Enterprise UI
The Datastrato Enterprise UI is where administrators and data owners connect sources, browse and classify metadata, grant access, and run jobs. It talks to the same Gravitino server as the REST API and the engines, so a change made in the UI is visible to every client at once, and the UI enforces the same privileges: a user sees and changes only what their roles allow.
Sign in
The sign-in page offers Continue with single sign-on for users of your identity provider, and Sign in with a password for local users. The name and sign-on method of the current user show at the bottom of the navigation bar.
Layout
The navigation bar on the left holds three things above the sections:
- The metalake selector at the top. Everything below it works within the selected metalake.
- Search, which also opens with Cmd+K or Ctrl+K.
- The sections, described in Sections.
Each section opens on its own page, and most are split into tabs.
Most lists select rows with a checkbox, and the buttons above the list act on the selected rows. Buttons that start with + add something, such as + Catalog on Connect or + Role on Authorize, and open a panel on the right. Nothing is saved until the panel's final button, such as Create catalog or Add role, is clicked.
Sections
Explore
Explore browses the catalogs, schemas, and objects of the metalake as a tree. Each object shows its tags, policies, and grants, and you attach tags and policies to the rows you select. A catalog's page is also where you create schemas.
The tree on the left groups the metalake's catalogs by type: relational, messaging, fileset, and model. The list on the right shows each catalog with its provider and the tags and policies attached to it, and + Tags and + Policies act on the rows you select.
Govern
Govern is where you create and manage tags and policies, review who holds which privileges, and follow lineage. Its tabs are Overview, Tags, Policies, Privileges, and Lineage.
Overview counts the metalake's assets, the assets with no owner, the policies, and the assets no policy covers. Below the counts, the catalogs with the lowest coverage and each object type show what share is tagged, owned, and covered by a policy.
Automate
Automate registers job templates and runs jobs. Its tabs are Overview, Jobs, and Templates.
Overview counts running jobs, jobs failed and completed in the last 24 hours, and the registered templates, and lists the most recent runs.
Connect
Connect adds catalogs, tests their connections, and edits their connection settings, all on the Catalogs tab.
+ Catalog opens the panel shown. You name the catalog, pick its type and provider, and enter its connection settings, with further options under Advanced; Create catalog saves it.
Authorize
Authorize is where you create roles, grant privileges to them, and assign them to users and groups. Its tabs are Overview, Roles, Users, and Groups.
Overview counts users, groups, and roles. Access by catalog shows, for each catalog, how many principals and roles reach it and what share hold privileges on it, and Roles lists each role with its member count.
Monitor
Monitor charts request rates, p95 latency, heap use, and server errors for the Gravitino server and its Iceberg REST and Lance REST services.
Below the totals, Traffic gives each service's request rate, p95 latency, and slowest operation, so load on the Iceberg REST service shows apart from the server's own, and Top operations ranks the busiest operations.
Configure
Configure holds the server-wide settings. Its tabs are Metalakes, Identity provider, Directory, Events, Settings, and Client access: the metalakes, the identity provider and SCIM tokens, the user directory, event listeners, the server properties, and the endpoints and connector installs for clients.
The Metalakes tab lists each metalake with its status, catalog count, description, and owner,
and creates new ones with + Metalake. Settings is
read only: it shows the server properties set through the Helm chart, which are changed in
my-values.yaml; see Install.
Common tasks
| Task | Where | See |
|---|---|---|
| Connect a catalog | Connect → Catalogs → + Catalog | Catalogs and schemas |
| Create a schema | Explore → the catalog → + Schema | Catalogs and schemas |
| Create a tag | Govern → Tags → + Tag | Tags |
| Tag objects | Explore → select the rows → + Tags | Tags |
| Create a role and grant privileges | Authorize → Roles → + Role, then the role's Privileges tab | Roles |
| Give a user or group access | The role's Members tab → + Members | Roles |
| Create a policy | Govern → Policies → + Policy | Policies |
| Create a metalake | Configure → Metalakes → + Metalake | Metalake administration |
| Run a job | Automate → Jobs → Run job | Jobs |
| Add a job template | Automate → Templates → + Template | Templates |