topic Re: Roles in Databricks in Data Governance

Roles in Databricks

sdheepak — Mon, 19 Aug 2024 15:15:15 GMT

Currently, Databricks allows us to grant access to catalogs, schemas, and objects individually, but this process can be repetitive and time-consuming when managing access for multiple applications across different schemas. A feature that enables the creation of roles that encapsulate a set of permissions (e.g., read, write, manage) at the catalog or schema level would greatly simplify the access management process.

For instance, creating a role such as Application_Admin with permissions to multiple schemas or objects within a catalog and assigning this role to AD groups or service accounts would significantly reduce administrative overhead. This would not only streamline user onboarding and access management but also improve security by providing a standardized method of managing access.

Feature Request:

Ability to create custom roles with predefined permissions.
The ability to assign these roles to AD groups, service accounts, or individual users.
Support for role inheritance where a higher-level role can inherit permissions from lower-level roles.

This feature would help large organizations manage access control in a more efficient and secure manner.

Re: Roles in Databricks

sdheepak — Mon, 19 Aug 2024 15:47:56 GMT

Just now i saw the video , I think this will get resolve the issue

https://www.databricks.com/dataaisummit/session/attribute-based-access-controls-unity-catalog-building-scalable-access

Re: Roles in Databricks

Retired_mod — Tue, 20 Aug 2024 18:58:24 GMT

Hi @sdheepak, we don’t support custom roles today.

Re: Roles in Databricks

Retired_mod — Wed, 21 Aug 2024 09:00:22 GMT

Hi @sdheepak, Thanks for reaching out! Please review the response and let us know which best addresses your question. Your feedback is valuable to us and the community.

If the response resolves your issue, kindly mark it as the accepted solution. This will help close the thread and assist others with similar queries.

We appreciate your participation and are here if you need further assistance!

Re: Roles in Databricks

Retired_mod — Wed, 21 Aug 2024 09:03:47 GMT

Hi @sdheepak, I think you can just use Databricks groups. You can assign permissions to Databricks groups and add AAD groups, service accounts, or users into these groups. Inheritance is supported on Databricks groups.