Help Center/ DataArts Lake Formation/ FAQs/ Permissions Management/ What Should I Do If a Table Cannot Be Created After I Switch to an IAM Identity Center User?
Updated on 2025-07-25 GMT+08:00
View PDF
Share

What Should I Do If a Table Cannot Be Created After I Switch to an IAM Identity Center User?

Symptom

A user created in IAM Identity Center was configured with the v3 system policy LakeFormation FullAccess. When the user created metadata (such as a catalog, database, table, or function), an error message was displayed, indicating that field 'owner' must match the regular expression '[a-zA-Z0-9_]+'.

Procedure

The IAM Identity Center user is similar to the agency user. In LakeFormation, the owner name of metadata such as tables must comply with the regular expression '[a-zA-Z0-9_]+'. After you switch to the IAM Identity Center user, the username is changed to <domain_name/agency_name>. When you create metadata, the current username is used as the owner name by default, metadata fails to be created. To resolve this issue, you are advised to call APIs to create metadata and explicitly specify a different user as the owner after switching to the IAM Identity Center user.

Parent topic: Permissions Management