topic Re: How can I give users permissions to see the objects metadata without access to data in Data Engineering

How can I give users permissions to see the objects metadata without access to data

merca — Tue, 29 Nov 2022 06:34:01 GMT

Only permissions I can see are select and this gives access to data and that is very unwanted. I only want users to see the metadata, like table/view/column names and descriptions/comments and location and such but not to see any data.

Re: How can I give users permissions to see the objects metadata without access to data

Geeta1 — Tue, 29 Nov 2022 11:04:17 GMT

Hi @Merca Ovnerud , you have 'READ_METADATA' privilege that you can set for a data object.

Example code in SQL: GRANT READ_METADATA ON SCHEMA schema_name TO user/user_group;

Reference link: https://learn.microsoft.com/en-us/azure/databricks/security/access-control/table-acls/object-privileges

Hope it helps!

Re: How can I give users permissions to see the objects metadata without access to data

merca — Tue, 29 Nov 2022 11:30:56 GMT

Unfortunately I get error on this grant:

`Value 'READ_METADATA' is not a valid permission`

Re: How can I give users permissions to see the objects metadata without access to data

UmaMahesh1 — Tue, 29 Nov 2022 17:57:46 GMT

Hi @Merca Ovnerud

You can try in the same method @Geeta Sai Boddu suggested.

Before trying make sure that your cluster has table access control enabled. Only if your cluster is a shared access cluster, it will be enabled by default.

Also someone with admin privileges must enable table access control to your workspace.

Do check out these prerequisites before running that SQL code.

Re: How can I give users permissions to see the objects metadata without access to data

UmaMahesh1 — Tue, 29 Nov 2022 17:59:28 GMT

Enabling Table Access Control for your workspace : https://learn.microsoft.com/en-us/azure/databricks/administration-guide/access-control/table-acl

Enabling Table ACL for cluster : https://learn.microsoft.com/en-us/azure/databricks/security/access-control/table-acls/table-acl#table-access-control

Re: How can I give users permissions to see the objects metadata without access to data

SS2 — Tue, 29 Nov 2022 18:50:36 GMT

You can refer this as well.

GRANT USAGE ON SCHEMA database TO user

GRANT READ_METADATA ON SCHEMA database TO user

Re: How can I give users permissions to see the objects metadata without access to data

merca — Wed, 30 Nov 2022 04:29:55 GMT

@Uma Maheswara Rao Desula , @Geeta Sai Boddu and @S S ,

Thank you for the responses. I have gotten answer from Databricks and it seems this is not possible and this is something that is investigated as a capability.

Re: How can I give users permissions to see the objects metadata without access to data

RonMoody — Tue, 19 Sep 2023 20:59:36 GMT

Can someone confirm that when using Unity Catalog we cannot restrict a user only for metadata access ?