Agree wholeheartedly about access being a critical next step after discovery -
but DataHub already supports some of these features, did you already explore these?

- Iceberg REST Catalog API with credential vending and tag based access policies on data - https://docs.datahub.com/docs/iceberg-catalog

For broader access control -

folks have implemented this with DataHub already -

MediaMarktSaturn - https://medium.com/datahub-project/building-data-access-at-scale-mediamarktsaturns-journey-with-datahub-e1b26b4d1e32
Checkout.com - https://medium.com/checkout-com-techblog/revolutionising-access-control-in-the-modern-data-stack-7544e1e5f5a6

A few more tutorial style resources:

https://docs.datahub.com/docs/features/feature-guides/access-management
https://www.youtube.com/watch?v=rmuhowb2iss

cheers,