Asset owner

Included from Basic tier

An asset owner is one subtree ownership declaration: which users or groups own everything under a node path. Approval policies consume the declarations through the impacted_asset_owners approver kind — a covered create resolves each frozen target to its deepest covering declaration and adds one all-of line per resolved owner. Served by the v2 ChangeGovernanceService: ListAssetOwners, GetAssetOwner, CreateAssetOwner, UpdateAssetOwner and DeleteAssetOwner; writes require the change-governance determination covering the declaration's path.

AssetOwner

AssetOwner is one subtree owner declaration on the policy fabric: the declaration covers its node and whole subtree on segment boundaries, the deepest covering declaration wins (inheritance), and the impacted_asset_owners resolution walks a change's frozen targets to these rows at create.

Field	Type	Meaning
created_at	timestamp	When the record was created.
created_by	string	Username of the creating identity.
id	string	The record's identity.
node_path	string	The subtree root the declaration covers, e.g. /projects/x/environments/prod/assets/db.
owners	ApprovalApprovers	The owner identities (users — stored and matched as principal ids, resolved at write from a principal id, a username one account holds, or <provider>:<username> — and groups; any listed identity approves for the owner — kinds are not resolvable here).
updated_at	timestamp	When the record was last updated.

Related pages

• opschain docs change-governance — impacted-asset-owner resolution in the funnel, including the loud refusal when a target has no covering declaration.
• opschain docs resources/approval — the checklist the resolved owner lines appear on.
• opschain docs resources/approval_policy — the policies that name the impacted_asset_owners kind.