Set up AI Governance
For a list of global permissions and resource permissions that are relevant for AI Governance, go to AI Governance-related permissions.
In this topic
Prerequisites
- The latest Collibra user interface is enabled for your Collibra environment. AI Governance only works in conjunction with the latest Collibra user interface.
- The Assessments Approval workflow must be enabled. This workflow is enabled by default; however, it is not new with AI Governance, nor is it specific to AI Governance, so we recommend that you check to see that it is still enabled.
1 Assign the AI Business User or Data Scientist global role to users
The following table provides some information about these two out-of-the-box global roles.
Global role | Intention |
---|---|
AI Business User | Intended for users who will create, update, and view AI use cases. |
Data Scientist | Intended for users who will create, update, and view AI models. |
Important While these two global roles are intended for different users, they are configured out-of-the-box with identical global permissions. They both allow you to register AI use cases, AI models, and AI agents; and both allow you to conduct assessments and participate in workflows.
- In
Settings, click Roles and permissions.
- In the relevant row (either AI Business User or Data Scientist), double-click
in the Members column.
- Click in the field, start typing and select the users and user groups that you want to assign.
- Click Update.
Tip If you want to grant a user the ability to access AI Governance in a read-only way, meaning without the ability to register AI use cases, AI models, or AI agents, and without the ability to participate in assessments, you can assign the user a custom global role that has only the Product Rights > AI Governance global permission.
2 Assign a Business Steward for the New Assessments domain
- Open the AI Governance Assessments domain.
- In the tab bar, click
Responsibilities.
- In the Responsibilities section, click Add.
- Enter the required information:
- Role: Enter “Business Steward”.
- People: Enter the users or user groups who will act as Business Stewards for the domain.Important At least one of the Business Stewards you specify must have a global role with the Workflow > Participate in Workflow global permission.Tip The out-of-the-box AI Business User and Data Scientist global roles come with this permission, so if at least one of the users you specify uses AI Governance, no further configuration is required.
- Click Add.
Note By default, all users can view all assets in all communities and domains. If, for specific communities or domains, you choose to restrict view permissions to specific users and user groups, be mindful of the possible ramifications. Users who are subject to view permission restrictions are unable to view the details of any assets in the restricted communities and domains. Even those who receive email notifications prompting them to review a specific asset cannot view the asset details.
3 Configure permissions for those who will participate in assessments
The out-of-the-box AI Business User and Data Scientist global roles come with the required permissions to start and submit assessments. Therefore, this information is only relevant if there is someone in your organization who will work with the assessments, but will not work with the AI Governance app.
To start or submit an assessment, you need:
- A global role with the Product Rights > Assessments global permission.
- A global role with the Assessments > Conduct Assessments global permission.
Tip The Owner of the AI use case, as specified when registering a new AI use case, is prompted to conduct an assessment of the use case. It's likely that this user will be an AI Governance user. If not, ensure that they have a global role that has these assessments-related global permissions, for example Assessments Template Manager.
4 Optionally, enable Model Registry (in preview)
The Model Registry allows you to track, review, and manage all Al models and AI agents in your Collibra environment, for better transparency and compliance. You need to enable this feature in order to include the Model Registry and Agent Registry product pages in the UI.
Prerequisites
- You have the ADMIN or SUPER role in Collibra Console.
Steps
- Open the DGC service settings for editing:
- Open Collibra Console.
Collibra Console opens with the Infrastructure page. - In the tab pane, expand an environment to show its services.
- In the tab pane, click the Collibra Platform service of that environment.
- Click Configuration.
- Click Edit configuration.
- Open Collibra Console.
- In the AI Governance Configuration section, enter the required information:
Setting
Description
Enable Model Registry (preview)
True: The Model Registry and Agent Registry pages are enabled and included among the AI Governance product pages.
False (default): The Model Registry and Agent Registry pages are disabled and are not included among the AI Governance product pages.
- Click Save all.
5 Optionally, edit the list of email notification recipients (for metadata changes)
This feature:
-
Automatically shows the policies that govern, and data categories that categorize, assets related to your AI use cases and the AI models they use.
For complete information, go to Identifying indirectly related policies and data categories. - Monitors and notifies you of changes to governed and categorized assets that are related to your AI Use Case and AI Model assets.
For complete information, go to Email notifications for metadata changes.
Prerequisites
- You have the ADMIN or SUPER role in Collibra Console.
Steps
- Open the DGC service settings for editing:
- Open Collibra Console.
Collibra Console opens with the Infrastructure page. - In the tab pane, expand an environment to show its services.
- In the tab pane, click the Collibra Platform service of that environment.
- Click Configuration.
- Click Edit configuration.
- Open Collibra Console.
- In the AI Governance Configuration section, enter the required information:
- Click Save all.
Setting |
Description |
||||||||||||||||
---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
Roles that will receive notifications |
When a notification is triggered, an email is sent to all users or user groups assigned to one or more resource roles for the AI use case. The following table shows the default list of resource role recipients. To delete a recipient, click To add a recipient, enter the resource ID of the relevant resource role in the empty field at the bottom of the list.
|
What's next?
You can now start registering AI use cases, AI models, and AI agents, and conducting assessments. Be sure to check out the following topics, for advice on: