UDF Governance on CPD

Administrators need enhanced governance and role-based access control for User-Defined Functions, UDFs, in DataStage within watsonx.data integration on Cloud Pak for Data, CPD.

Currently, UDFs in DataStage can be created by any user on the platform and attached to any project. This creates a governance and control concern because UDF creation and project attachment are open capabilities. Organizations need the ability to restrict these actions so that only approved users or administrators can create UDFs and attach them to projects.

The requested enhancement is to provide a custom role or granular permission model in CPD that allows administrators to control UDF-related actions for DataStage in watsonx.data integration.

Specifically, administrators need the ability to limit:

• Who can create User-Defined Functions in DataStage.

• Who can attach UDFs to DataStage projects.

• Who can edit or delete existing UDFs.

• Who can view available UDFs.

• Which users, groups, or roles can manage UDFs.

• Which projects are allowed to use specific UDFs.

The most important requirement is to prevent UDF creation and project attachment from being available to all users by default. These capabilities should be controlled through a custom CPD role, platform permission, or DataStage-specific permission.

Ideally, the product should provide separate permissions for actions such as:

• Create UDF

• Edit UDF

• Delete UDF

• Attach UDF to project

• Remove UDF from project

• View UDF

• Manage UDF permissions

• Approve UDF for project use

Administrators should be able to assign these permissions to specific users or groups through CPD role management. This would allow organizations to define a dedicated role, such as DataStage UDF Administrator or DataStage UDF Manager, while preventing general users from creating or attaching UDFs without approval.

The enhancement should also provide administrative visibility into UDF usage, including:

• Which UDFs exist in the environment.

• Who created each UDF.

• Which projects each UDF is attached to.

• When each UDF was created, modified, attached, or removed.

• Which user performed each UDF-related action.

Audit logging for UDF creation, modification, deletion, and project attachment would also be valuable to support governance, operational oversight, and compliance requirements.

This enhancement would help organizations safely enable UDF functionality in DataStage while maintaining proper control over custom logic introduced into CPD projects. It would reduce the risk of unauthorized or unreviewed UDF usage, improve platform governance, and allow administrators to enforce clear separation between general DataStage users and users who are authorized to manage UDFs.