Skip to main content

Version 2.7.0+

These are the release notes for the v2.7.0 release of Witboost.

Please refer to the official documentation for a more in-depth overview of the released features.

Features​

System type scope in RBAC​

Enhancement to the RBAC (Role-Based Access Control) model: roles and permissions can now be scoped by system type. Administrators can grant access that applies specifically to certain system types (such as Data Product or AI Project), in addition to existing scopes like domain and system.

What’s new?

  • Roles can be scoped to system types, allowing users to access only entities of a particular type, regardless of domain.
  • Scopes can be combined for fine-grained access control (e.g., domain + system type).
  • The assignment interface now supports selecting system type scopes.

Example 1:
A user is assigned a role with:

  • Domain Scope: Finance
  • System Type Scope: Data Product

This user will only be able to access Data Product systems in the Finance domain, and not AI Projects or Data Products in other domains.

Example 2 (Cross-Domain):
A user is assigned a role with:

  • Domain Scope: N/A
  • System Type Scope: AI Project

This user will be able to access all AI Project systems across every domain (Finance, Sales, etc.), but will not have access to Data Products or other system types.

Check the documentation for additional information and examples.

Identities Picker​

It is now possible to configure the IdentitiesPicker to exclude some specific groups

Check the documentation for additional information and examples.

Service Accounts​

Service Accounts are now available in Witboost, enabling secure, automated integration with external systems and services.

Service accounts are technical user accounts designed for non-human, system-to-system interactions.

They allow external services to authenticate and interact with Witboost APIs securely, without relying on personal user credentials.

Key Features

  • Dedicated accounts for automation – ideal for CI/CD pipelines, integrations, and background jobs.

  • Fine-grained permissions – managed via existing RBAC roles and groups.

  • Access tokens with JWT exchange – generate a secure access token and exchange it for short-lived JWTs for API authentication.

  • Lifecycle management – revoke, regenerate, or expire tokens as needed.

  • Separation of duties – service accounts cannot be assigned as owners or developers of data products, preventing accidental misuse.

For full documentation, including setup instructions and API examples, see the Service Accounts guide.

Number of users included in the license​

The Witboost Info Panel now shows the number of users that are actively interacting with the Control Plane and the total number included in the license

Witboost MCP Server​

The Witboost MCP Server connects AI assistants (like ChatGPT, Claude, or GitHub Copilot) to Witboost platform. This integration allows you to use natural language to find, explore, and work with your organization's data products directly through AI conversations.

Check the documentation for additional information about the available features.

Enhanced Data Discovery Documentation & Lineage Relations​

The data discovery documentation has been updated to provide comprehensive information on visual discovery, the lineage graph, and search in the marketplace. It also now includes guidance on building lineage using both the readsFrom and logicallyReadsFrom relations.

In addition, the logicallyReadsFrom relation has been enhanced: it can now target consumable components directly, not just their parent entities. This allows for more precise documentation of planned or conceptual dependencies.

Together, these updates make it easier to explore data products, understand dependencies, and communicate both operational and design-level data flows, resulting in more granular and flexible lineage mapping.

Visual Discovery Grouping​

The Visual Discovery page now allows configuring and applying up to three custom criteria for grouping systems, together with the default Domain option.

Check the documentation for additional information and info about the available features.

Witboost CLI​

Witboost CLI reaches its first stable release. With this Command-Line inteface, you will be able to interact with the Witboost platform.

As of now, with this first release, you will be able to interact with the Witboost Computational Governance (WCG) in your Command Line tool or embed a Validation Gateway step in your CI/CDs.

You can find more information on how to download and install the CLI from here.

Witboost Infra CLI​

Witboost Infra CLI reaches its first stable release. With this Command-Line inteface, you will be able to interact with the Witboost installation.

With this first release, the CLI provides an easy-to-use interface to automate manual tasks, such as witboost upgrade, image mirroring and database prerequisites checks.

You can find more information on how to download and install the CLI from here.

Policy Results Additional Filters​

You can now search evaluations results by their Report ID. This is useful when using the Witboost CLI, where a Report ID is displayed by the Witboost CLI and you would like to check the result on the Witboost UI.

To search for evaluation results, navigate to Governance > Search Results section, on the Witboost sidebar.

Issues fixed and minor improvements​

  • Accessibility improvements
  • Hidden sections preset and migration of Practice Shaper when user not allowed to import entities
  • Owner filter fixed in template page
  • Added options to the Helm chart of the Provisioning Coordinator or CGP to support using a custom/private CA
  • Infrastructure Template and Use Case Template hidden when Previous Vs Current is selected as Resource Preprocessing
  • Descriptor focus fixed in edit&test page
  • Broken template card fixed
  • Test result expand icon fixed