Known issues for Cloudera AI on premises 1.5.5 SP3 CHF3
You might run into some known issues while using Cloudera AI on premises 1.5.5 SP3.
Cloudera AI on premises 1.5.5, 1.5.5 SP1 and 1.5.5 SP2 existing known issues are carried into Cloudera AI on premises 1.5.5 SP3.
- DSE-60234: Service Accounts are assigned incorrect roles when created using synchronized teams
-
In Cloudera AI on premises, when a synchronized group is used to create a team, the service accounts (SAs) associated with that team inherit the same permission level selected for the team, unless the permission is MLAdmin. If the team permission is set to Contributor role, the service accounts are also created with the Contributor role instead of the required Administrator or Operator role.
Because service accounts require the Administrator or Operator role to run workloads, users cannot use these service accounts for Run As operations.
Workaround
Create the team with either the Administrator or Operator role instead of Contributor.
