topic Re: Can't able to run following queries in Data Engineering

Can't able to run following queries

deficiant_codge — Wed, 19 Oct 2022 13:38:03 GMT

I cannot able to run following queries

ALTER TABLE iot_events ADD ATTRIBUTE pii ON email

ALTER TABLE users ADD ATTRIBUTE pii ON phone

GRANT SELECT ON DATABASE iot_data

HAVING ATTRIBUTE NOT IN (pii)

TO product_managers

and

GRANT SELECT ON iot_events TO engineers

GRANT SELECT(date, country) ON iot_events TO marketing

Anything i am missing?

Re: Can't able to run following queries

karthik_p — Wed, 19 Oct 2022 13:53:14 GMT

@Rahul Mishra I have tried above and did not work for me, but you can create view and try below queries to mask your columns or row Create views | Databricks on AWS

Re: Can't able to run following queries

deficiant_codge — Wed, 19 Oct 2022 14:09:08 GMT

View part also worked for me but i want to control the grant part and don't wanna create view

Re: Can't able to run following queries

deficiant_codge — Wed, 19 Oct 2022 14:10:15 GMT

Thing is create view is not a unique feature of unity catalog but this grant part is actually is so i wanna implement that

Re: Can't able to run following queries

karthik_p — Wed, 19 Oct 2022 14:20:20 GMT

@Kaniz Fatma can anyone from data Bircks help on why attribute-based access control function is not working in unity catalog @Rahul Mishra

below commands

ALTER TABLE iot_events ADD ATTRIBUTE pii ON email

ALTER TABLE users ADD ATTRIBUTE pii ON phone

GRANT SELECT ON DATABASE iot_data

HAVING ATTRIBUTE NOT IN (pii)

TO product_managers

Re: Can't able to run following queries

deficiant_codge — Thu, 20 Oct 2022 10:47:07 GMT

@Kaniz Fatma even the support page is not working it's redirecting me again and again to the same page

Re: Can't able to run following queries

Sumit_Kumar — Thu, 11 May 2023 18:52:49 GMT

Hi @Kaniz Fatma, I am getting below error while creating ATTRIBUTE-

%sql

CREATE ATTRIBUTE pii;

Output:

ParseException:

[PARSE_SYNTAX_ERROR] Syntax error at or near 'ATTRIBUTE'(line 1, pos 7)

== SQL ==

CREATE ATTRIBUTE pii

-------^^^

Re: Can't able to run following queries

Sumit_Kumar — Fri, 12 May 2023 14:28:58 GMT

Hi @Kaniz Fatma , Thank you for your response.

Are you saying that "attribute" is nothing but a column name in a table?

I was under impression that attribute is like a tag which we should create before using it against a table's column(s). Sharing my reference below -

https://blog.cellenza.com/en/data/row-and-column-level-security-with-databricks/

https://www.databricks.com/blog/2021/05/26/introducing-databricks-unity-catalog-fine-grained-governance-for-data-and-ai-on-the-lakehouse.html

In either way, I am confused. I have tried to execute below command as per above databricks documentation, hoping it will create attribute, but its failing. Can you pls give an example how can we create a PII tag/attribute on a set of columns in databricks table?

[In below c_phone is a column containing sensitive data in customers table]

SQL> ALTER TABLE customers ADD ATTRIBUTE pii ON c_phone

Output:

ParseException:

[PARSE_SYNTAX_ERROR] Syntax error at or near 'ATTRIBUTE'(line 1, pos 48)

== SQL ==

ALTER TABLE iotsamples.tpch.customer_events ADD ATTRIBUTE pii ON c_phone

------------------------------------------------^^^