diff --git a/openmetadata-service/src/main/java/org/openmetadata/service/security/policyevaluator/PolicyEvaluator.java b/openmetadata-service/src/main/java/org/openmetadata/service/security/policyevaluator/PolicyEvaluator.java index ae45e5ae613..fe618cd08f0 100644 --- a/openmetadata-service/src/main/java/org/openmetadata/service/security/policyevaluator/PolicyEvaluator.java +++ b/openmetadata-service/src/main/java/org/openmetadata/service/security/policyevaluator/PolicyEvaluator.java @@ -84,7 +84,9 @@ public class PolicyEvaluator { @NonNull ResourceContextInterface resourceContext, OperationContext operationContext) { // If the Resource Does not belong to any Domain, then evaluate via other permissions - if (!nullOrEmpty(resourceContext.getDomain())) { + if (!nullOrEmpty(resourceContext.getDomain()) + && !subjectContext.isAdmin() + && !subjectContext.isBot()) { EntityReference domain = resourceContext.getDomain(); if (!subjectContext.hasDomain(domain)) { throw new AuthorizationException(