Slack Export

Hi James! It’s not a blocker but if possible - can I ask you to grant me cloudasset.viewer role on the projects? It’s not required but will let me run some checks on the project resources

James Turner (jturner@shield-legal.com)

2025-06-18 12:51:30

Sure thing- Looking into adding you on there now-

deleted-U6Z58C197

2025-06-18 12:52:24

thank you very much

James Turner (jturner@shield-legal.com)

2025-06-18 12:57:56

Just approved for TIP- I'll get you on shield next. Let me know if you need anything else.

By the way, I appreciate the advice earlier. This is my first year as a true data engineer despite doing data science and analytics at my previous company. It's a lot to wrap the mind around, and getting solid advice from more senior engineers is always welcome!

image.png

deleted-U6Z58C197

2025-06-18 13:02:03

oh sure, designing the proper role-based access control can be pretty complicated and very much depends on the project domain, I’ll be glad to help with that

deleted-U6Z58C197

2025-06-18 13:04:28

if the permissions fit into a simple 2d matrix - that is great and the role management could be pretty simple. In some cases it gets more involved though, for instance when you have nested permissions that change over time and depend on the entity you attach the policy to

deleted-U6Z58C197

2025-06-18 13:06:34

Especially in multi-tenant systems where a person has role A in project1 and role B in project2 and all those roles are nested via group membership. And we need to pack those roles into a single JWT token with 3rd party SSO. And refresh the token roles when the group membership changes :)

👍 James Turner

James Turner (jturner@shield-legal.com)

2025-06-18 13:07:41

That makes sense. I was thinking of setting it up where each "data set" is a permission, and there are a lot of roles that may touch just one or multiple permissions- then an individual can be assigned multiple roles like in Bigquery.

The way you describe it makes sense, to start with the permissions, rather than the roles the company has

deleted-U6Z58C197

2025-06-18 13:08:30

yep-yep, I can tell a lot of scary stories when it was done wrong 🙂 but it is very important to design it properly at the early stages of the project

deleted-U6Z58C197

2025-07-07 13:34:09

Hi James! Can I also ask you to grant me roles/serviceusage.serviceUsageConsumer role on the GCP projects? Thank you!

James Turner (jturner@shield-legal.com)

2025-07-07 13:44:05

Hey there, let me see if I have access to do so

James Turner (jturner@shield-legal.com)

2025-07-07 13:45:42

Added

deleted-U6Z58C197

2025-07-07 13:46:50

thank you 👍

deleted-U6Z58C197

2025-07-11 09:45:33

Hi James! Can you help me understand how you run the integrations with lawfirms? I found the code for some cloud run functions on GitHub but couldn’t find these functions in GCP console

James Turner (jturner@shield-legal.com)

2025-07-11 11:28:38

Hey there' So it really depends on each lawfirm as they all have different systems. Our integrations team works hard to try and learn the system for each different client we work with to get their data over to them in a way that makes sense

James Turner (jturner@shield-legal.com)

2025-07-11 11:29:17

The real expert on that subject is going to be Dustin Surwill

deleted-U6Z58C197

2025-07-11 12:03:39

got it, thanks!