Catalog owner cannot create table?

hdu — Wed, 04 Dec 2024 15:31:59 GMT

I transfered the owner of pre-created datasets (catalogs and schemas) by workspace admin to a service principle.

ALTER CATALOG xyz OWNER TO `sp`;

I think as the owner, the job owned by `sp`, should be able to create table in all schemas under catalog xyz. however I got the error: PERMISSION_DENIED, user do not have CREATE TABLE....

My question is the owner of catalog does not propagate to schema and table?

Re: Catalog owner cannot create table?

szymon_dybczak — Wed, 04 Dec 2024 16:48:45 GMT

Hi @hdu ,

Below is an excerpt from documentation:

"Owners of an object are automatically granted all privileges on that object. In addition, object owners can grant privileges on the object itself and on all of its child objects. This means that owners of a schema do not automatically have all privileges on the tables in the schema, but they can grant themselves privileges on the tables in the schema."

So as an owner you have ability to grant yourself required permission, but you don't have them granted automatically.

https://learn.microsoft.com/en-us/azure/databricks/data-governance/unity-catalog/manage-privileges/ownership#owner-privileges

topic Re: Catalog owner cannot create table? in Data Governance

Catalog owner cannot create table?

Re: Catalog owner cannot create table?