Revoking permissions for a folder

To revoke permissions for Iceberg REST Catalog, delete the relevant StacklandRestCatalogAccessBinding resource.

Deleting the assignment does not delete a user, user group, or service account. Permissions granted by other assignments remain in place.

Using the CLIUsing the CLI

1. Find the assignment in the list. Check the folder, assignee, and role:

   kubectl get stacklandrestcatalogaccessbinding -n <namespace>
   kubectl get stacklandrestcatalogaccessbinding <assignment_name> -n <namespace> -o yaml
   

2. Delete the permission assignment:

   kubectl delete stacklandrestcatalogaccessbinding <assignment_name> -n <namespace>
   

Using the management consoleUsing the management console

1. Open the project and select the catalog’s namespace.
2. In the left-hand menu, select REST Catalog → Catalogs.
3. Open the catalog and go to the Access tab.
4. Open the assignment in question. Check the assignee, purpose, and access tier.
5. Click Revoke access and confirm the action.

The assignment remains in the deleting state in the list until the revocation is complete. If the operation cannot complete, check the reason in the States tab of the assignment.