topic Apply row filter on system table (audit) in Data Governance

Apply row filter on system table (audit)

jonasmw94kv — Wed, 12 Mar 2025 13:24:48 GMT

Hello!

Our team wish to implement just-in-time access to the audit log, where we thought we could use row filter for the audit log, such that the different teams can see their own events, and afterwards revoke their right to see it.

Upon first inspection, when applying a row filter to the system.access.audit table, we get the following error:

[ROW_LEVEL_SECURITY_UNSUPPORTED_PROVIDER] Failed to execute ALTER TABLE command because assigning row level security policy is not supported for target data source with table provider: "deltasharing". SQLSTATE: 0A000

What is a good way to be able to do this? Could it be possible to stream events from the audit log, to log-tables that is owned per team for instance? Or do we have to batch it? Seems a bit unnecessary.

Thanks!

Re: Apply row filter on system table (audit)

noorbasha534 — Wed, 12 Mar 2025 14:24:40 GMT

we are also looking for a similar functionality 🙂 to give just that access what is needed for the projects

Re: Apply row filter on system table (audit)

MariuszK — Wed, 12 Mar 2025 18:06:22 GMT

You can create a view in another catalog and apply there row level security.

Re: Apply row filter on system table (audit)

jonasmw94kv — Thu, 13 Mar 2025 08:02:21 GMT

Thank you @MariuszK, that works as a nice solution