topic Re: system schemas permission in Administration & Architecture

system schemas permission

seckinaktas — Thu, 21 Nov 2024 12:40:05 GMT

Hi,
I'm an account admin on Databricks and when I try to set select permission for system schemas

I take "PERMISSION_DENIED: User is not an owner of Schema 'system.compute'."

When I try to set permission for system catalog,

I take "Requires ownership of catalog ‘system’".

I tried to run the following query but I'm stuck here

GRANT USE SCHEMA ON SCHEMA system.compute TO `client_id`;

GRANT SELECT ON TABLE system.compute.clusters TO `client_id`;

GRANT USE SCHEMA ON SCHEMA system.billing TO `client_id`;

GRANT SELECT ON TABLE system.billing.list_prices TO `client_id`;

GRANT SELECT ON TABLE system.billing.usage TO `client_id`;

Thank you

Re: system schemas permission

Walter_C — Thu, 21 Nov 2024 13:23:42 GMT

As per documentation you need to be both Account Admin and Metastore Admin to be able to grant access to system tables:

Access to system tables is governed by Unity Catalog. No user has access to these system schemas by default. To grant access, a user that is both a metastore admin and an account admin must grant USE and SELECT permissions on the system schemas.

Re: system schemas permission

seckinaktas — Thu, 21 Nov 2024 13:51:23 GMT

Thank you so much