acl-dependencies

name	acl-dependencies
description	Generate ACL (Access Control List) dependencies graph

ACL Dependencies Skill

Generates a visual graph showing the relationships between users/groups and the tables they have access to, based on ACL (Access Control List) definitions in your YAML configurations.

Usage

starlake acl-dependencies [options]

Options

• --output <value>: Output file path (default: console output)
• --grantees <value>: Comma-separated list of users/groups to include (default: all)
• --reload: Reload YAML files from disk before computing
• --svg: Generate SVG image
• --png: Generate PNG image
• --json: Generate JSON output
• --tables <value>: Comma-separated list of tables to include (default: all)
• --all: Include all ACLs in the output
• --reportFormat <value>: Report output format: console, json, or html

Configuration Context

ACL dependencies are derived from acl and rls definitions in table/task YAML files:

# In table.sl.yml or task.sl.yml
table:
  acl:
    - role: "roles/bigquery.dataViewer"
      grants:
        - "user:[e-mail]"
        - "group:[e-mail]"
  rls:
    - name: "USA only"
      predicate: "country = 'USA'"
      grants:
        - "group:[e-mail]"

Examples

Generate Full ACL Graph as SVG

starlake acl-dependencies --svg --output acl.svg --all

Filter by Specific Users

starlake acl-dependencies --grantees "user:[e-mail],group:analytics_team" --svg --output acl.svg

Filter by Specific Tables

starlake acl-dependencies --tables starbake.orders,starbake.customers --svg --output acl.svg

Generate JSON Output

starlake acl-dependencies --json --output acl.json --all

Generate PNG Image

starlake acl-dependencies --png --output acl.png --all

Related Skills

• secure - Apply RLS/CLS security policies
• iam-policies - Apply IAM policies
• lineage - Task dependency lineage
• table-dependencies - Table relationship graph