https://community.databricks.com/t5/data-governance/restrict-user-to-see-schema-using-quot-all-purpose-compute-quot/m-p/92245#M2160 <P>The best option for Governance is to upgrade to Unity Catalog.&nbsp;</P> <P>This is alternate, not the best.</P> <UL class="simple"> <LI> <P>The cluster must be enabled for<SPAN>&nbsp;</SPAN><A class="reference internal" href="https://docs.databricks.com/en/data-governance/table-acls/table-acl.html#table-access-control" target="_blank"><SPAN class="std std-ref">table access control</SPAN></A>.</P> </LI> </UL> <P><A href="https://docs.databricks.com/en/data-governance/table-acls/object-privileges.html#requirements" target="_blank">https://docs.databricks.com/en/data-governance/table-acls/object-privileges.html#requirements</A></P> Mon, 30 Sep 2024 03:38:57 GMT gchandra 2024-09-30T03:38:57Z https://community.databricks.com/t5/data-governance/restrict-user-to-see-schema-using-quot-all-purpose-compute-quot/m-p/92032#M2154 <P>Scenario&nbsp;</P><UL><LI>Under Hive Metastore four diff schema exist S1,S2,S3 and S4&nbsp;</LI></UL><OL><LI>User1 want access to schema S1 but not allowed to see other 3 Schema which can be done using grant permission simple and easy case&nbsp;</LI><LI>Same User1 has access to workspace. Now same user using workspace to create pyspark using any "all purpose compute" can see all 4 schema. which is not visible if use SQL End point&nbsp;</LI><LI>Table Access Control already enabled under security setting.&nbsp;</LI></OL><P>Problem Statement :</P><P>Using SQL end point restrict schema level access is possible but can it possible to restrict using "All purpose compute" cluster ??</P> Fri, 27 Sep 2024 13:36:30 GMT https://community.databricks.com/t5/data-governance/restrict-user-to-see-schema-using-quot-all-purpose-compute-quot/m-p/92032#M2154 robbinbajaj 2024-09-27T13:36:30Z https://community.databricks.com/t5/data-governance/restrict-user-to-see-schema-using-quot-all-purpose-compute-quot/m-p/92245#M2160 <P>The best option for Governance is to upgrade to Unity Catalog.&nbsp;</P> <P>This is alternate, not the best.</P> <UL class="simple"> <LI> <P>The cluster must be enabled for<SPAN>&nbsp;</SPAN><A class="reference internal" href="https://docs.databricks.com/en/data-governance/table-acls/table-acl.html#table-access-control" target="_blank"><SPAN class="std std-ref">table access control</SPAN></A>.</P> </LI> </UL> <P><A href="https://docs.databricks.com/en/data-governance/table-acls/object-privileges.html#requirements" target="_blank">https://docs.databricks.com/en/data-governance/table-acls/object-privileges.html#requirements</A></P> Mon, 30 Sep 2024 03:38:57 GMT https://community.databricks.com/t5/data-governance/restrict-user-to-see-schema-using-quot-all-purpose-compute-quot/m-p/92245#M2160 gchandra 2024-09-30T03:38:57Z