topic Permissions needed for creating a new (delta) share in Data Governance

Permissions needed for creating a new (delta) share

pernilak — Tue, 15 Oct 2024 08:45:38 GMT

What permissions are actually needed in order to create a delta share?

I have read that you either need to be metastore admin, or a

User with delegated permissions or ownership on both the share and the recipient objects ((USE SHARE + SET SHARE PERMISSION) or share owner) AND (USE RECIPIENT or recipient owner).

Does this mean that you don't need any permissions on the catalog/schema you are sharing. So If a gave some user this right, he or she could create a share with data he/she does not have access to, and then get access to that data through the share?

Re: Permissions needed for creating a new (delta) share

MoJaMa — Sun, 20 Oct 2024 22:30:07 GMT

Hi,

Hope the doc link helps:

https://docs.databricks.com/en/delta-sharing/create-share.html#requirements

Specifically this statement should alleviate your immediate point.

Have the USE CATALOG and USE SCHEMA privilege on the catalog and schema that contain the table or view, or ownership of the catalog or schema.
Have the SELECT privilege on the table or view