topic Catalog created using a service principal isn't visible in Data Governance

Catalog created using a service principal isn't visible

JonLaRose — Tue, 28 May 2024 13:35:49 GMT

When creating a Unity catalog using a service principal token, the created catalog isn't visible or accessible to other users (even admins) via GUI nor CLI.

It seems that only when I change the catalog's ownership to some other user it is visible.

Why is that, and what can I do to make it visible?

Re: Catalog created using a service principal isn't visible

dkushari — Tue, 28 May 2024 15:18:24 GMT

Hi @JonLaRose , When any UC objects are created, they are locked down by default. This means that UC privileges work with explicit permission grants/revokes. At the end of the process (which is run by the SP), give the relevant permission to the desired groups and users. UC Privileges - https://docs.databricks.com/en/data-governance/unity-catalog/manage-privileges/privileges.html#privilege-types-by-securable-object-in-unity-catalog

Re: Catalog created using a service principal isn't visible

JonLaRose — Tue, 28 May 2024 15:22:36 GMT

Thank you @dkushari , but isn't it possible to grant/configure the required permissions at the point of the catalog creation?

Re: Catalog created using a service principal isn't visible

dkushari — Tue, 28 May 2024 15:27:22 GMT

Right after the creation of the catalog, add a new grant statement. Check here please.