Set up AI Governance

For a list of global permissions and resource permissions that are relevant for AI Governance, go to AI Governance-related permissions.

In this topic

Prerequisites

  • The latest Collibra user interface is enabled for your Collibra environment. AI Governance only works in conjunction with the latest Collibra user interface.
  • The Assessments Approval workflow must be enabled. This workflow is enabled by default; however, it is not new with AI Governance, nor is it specific to AI Governance, so we recommend that you check to see that it is still enabled.

1 Assign the AI Business User or Data Scientist global role to users

The following table provides some information about these two out-of-the-box global roles.

Global role Intention
AI Business User Intended for users who will create, update, and view AI use cases.
Data Scientist Intended for users who will create, update, and view AI models.

Important  While these two global roles are intended for different users, they are configured out-of-the-box with identical global permissions. They both allow you to register AI use cases, AI models, and AI agents; and both allow you to conduct assessments and participate in workflows.

  1. In Cogwheel iconSettings, click Roles and permissions.
  2. In the relevant row (either AI Business User or Data Scientist), double-click in the Members column.
  3. Click in the field, start typing and select the users and user groups that you want to assign.
  4. Click Update.

Tip If you want to grant a user the ability to access AI Governance in a read-only way, meaning without the ability to register AI use cases, AI models, or AI agents, and without the ability to participate in assessments, you can assign the user a custom global role that has only the Product Rights > AI Governance global permission.

2 Assign a Business Steward for the New Assessments domain

When you submit an assessment, you have to specify a domain for the Assessment Review asset that is created. AI Governance comes with a domain named New Assessments, for this purpose, but you are not obliged to use that domain.
 
Whichever domain you do specify, at least one user must be assigned the Business Steward resource role on that domain (or its community). The user submitting the assessment does not have to be the Business Steward.
  1. Open the AI Governance Assessments domain.
  2. In the tab bar, click Responsibilities.
  3. In the Responsibilities section, click Add.
  4. Enter the required information:
    • Role: Enter “Business Steward”.
    • People: Enter the users or user groups who will act as Business Stewards for the domain.
      Important At least one of the Business Stewards you specify must have a global role with the Workflow > Participate in Workflow global permission.
      Tip The out-of-the-box AI Business User and Data Scientist global roles come with this permission, so if at least one of the users you specify uses AI Governance, no further configuration is required.
  5. Click Add.

Note By default, all users can view all assets in all communities and domains. If, for specific communities or domains, you choose to restrict view permissions to specific users and user groups, be mindful of the possible ramifications. Users who are subject to view permission restrictions are unable to view the details of any assets in the restricted communities and domains. Even those who receive email notifications prompting them to review a specific asset cannot view the asset details.

3 Configure permissions for those who will participate in assessments

The out-of-the-box AI Business User and Data Scientist global roles come with the required permissions to start and submit assessments. Therefore, this information is only relevant if there is someone in your organization who will work with the assessments, but will not work with the AI Governance app.

To start or submit an assessment, you need:

  • A global role with the Product Rights > Assessments global permission.
  • A global role with the Assessments > Conduct Assessments global permission.

Tip  The Owner of the AI use case, as specified when registering a new AI use case, is prompted to conduct an assessment of the use case. It's likely that this user will be an AI Governance user. If not, ensure that they have a global role that has these assessments-related global permissions, for example Assessments Template Manager.

4 Optionally, enable Model Registry (in preview)

The Model Registry allows you to track, review, and manage all Al models and AI agents in your Collibra environment, for better transparency and compliance. You need to enable this feature in order to include the Model Registry and Agent Registry product pages in the UI.

Prerequisites

  • You have the ADMIN or SUPER role in Collibra Console.

Steps

  1. Open the DGC service settings for editing:
    1. Open Collibra Console.
      Collibra Console opens with the Infrastructure page.
    2. In the tab pane, expand an environment to show its services.
    3. In the tab pane, click the Collibra Platform service of that environment.
    4. Click Configuration.
    5. Click Edit configuration.
  2. In the AI Governance Configuration section, enter the required information:

    Setting

    Description

    Enable Model Registry (preview)

    • True: The Model Registry and Agent Registry pages are enabled and included among the AI Governance product pages.
    • False (default): The Model Registry and Agent Registry pages are disabled and are not included among the AI Governance product pages.
  3. Click Save all.

5 Optionally, edit the list of email notification recipients (for metadata changes)

This feature:

Prerequisites

  • You have the ADMIN or SUPER role in Collibra Console.

Steps

  1. Open the DGC service settings for editing:
    1. Open Collibra Console.
      Collibra Console opens with the Infrastructure page.
    2. In the tab pane, expand an environment to show its services.
    3. In the tab pane, click the Collibra Platform service of that environment.
    4. Click Configuration.
    5. Click Edit configuration.
  2. In the AI Governance Configuration section, enter the required information:
  3. Setting

    Description

    Roles that will receive notifications

    When a notification is triggered, an email is sent to all users or user groups assigned to one or more resource roles for the AI use case. The following table shows the default list of resource role recipients.

    To delete a recipient, click next to the relevant resource role.

    To add a recipient, enter the resource ID of the relevant resource role in the empty field at the bottom of the list.

    Resource role Resource ID
    Business User c0e00000-0010-0010-0000-000000000002
    Council Member 00000000-0000-0000-0000-000000005039
    Data Protection Officer c0e00000-0000-0000-0000-000000005068
    Data Steward c0e00000-0010-0010-0000-000000000000
    Owner 00000000-0000-0000-0000-000000005040
    Privacy Steward c0e00000-0010-0010-0000-000000000001
    Stakeholder 00000000-0000-0000-0000-000000005018

  4. Click Save all.

What's next?

You can now start registering AI use cases, AI models, and AI agents, and conducting assessments. Be sure to check out the following topics, for advice on: