To extract metadata and to configure other capabilities that a catalog source might include, you need account access and permissions on the source system. The permissions required might vary depending on the capability.
Permissions for metadata extraction
Ensure that you have the required permissions to perform metadata extraction.
Grant the following permissions:
Model package groups
•sagemaker:ListModelPackageGroups
Models
•sagemaker:ListModelPackages
External URLs
•sagemaker:DescribeDomain
•sagemaker:ListTags
Evaluation metrics and lineage
•sagemaker:DescribeModelPackage
•s3:GetObject
Endpoints and lineage to versions
•sagemaker:ListEndpoints
•sagemaker:DescribeEndpoint
•sagemaker:DescribeEndpointConfig
•sagemaker:ListInferenceComponents
•sagemaker:DescribeInferenceComponent
•sagemaker:DescribeModel
Lineage
•sagemaker:DescribeTrainingJob
•sagemaker:Search
•s3:ListBucket
•account:GetAccountInformation
•iam:ListAccountAliases
Note:
Required only if you don't have the account:GetAccountInformation permission.