topic Re: Unity catalog management in Data Governance

Unity catalog management

APJESK — Sat, 14 Feb 2026 22:54:54 GMT

How is Unity Catalog managed in real time at an enterprise scale, including workspace-level restrictions, privilege-based ACLs, row- and column-level security, ABAC, and tag-driven governance, and which languages or tools are used to manage the entire data governance lifecycle?

Re: Unity catalog management

szymon_dybczak — Sun, 15 Feb 2026 17:00:09 GMT

Hi @APJESK ,

The most common approach I've seen in enterprise is to use terraform to govern Unity Catalog. Below you can find a good series of articles that introduce this concept:

https://pl.seequality.net/terra-dbx-p1/

Databricks terraform provider is regular updated, so you can use it to automated even newly added features in UC like ABAC:

https://www.linkedin.com/pulse/unity-catalog-abac-setup-terraform-kristian-johannesen-ei8ze?utm_source=share&utm_medium=member_android&utm_campaign=share_via

Re: Unity catalog management

SarthakManalwar — Wed, 11 Mar 2026 07:49:13 GMT

At an enterprise scale, Unity Catalog is centrally managed using a hub-and-spoke model where catalogs are isolated via workspace bindings to restrict specific data to designated environments.

Security is enforced through strict privilege-based Access Control Lists (ACLs) applied to hierarchical objects (Metastore, catalog, schema, table) using standard GRANT and REVOKE controls.

Fine-grained access, such as row-level filtering and column-level masking, is implemented dynamically using SQL functions evaluated against the querying user's identity.

Attribute-Based Access Control (ABAC) and tag-driven governance are handled by assigning metadata tags to data assets, allowing access policies or discovery to be automated based on data classification.

The entire data governance lifecycle is predominantly managed using Terraform (Infrastructure as Code) for automation, alongside SQL, Python (Databricks SDK), and Databricks REST APIs.

Re: Unity catalog management

APJESK — Sat, 04 Apr 2026 21:10:29 GMT

Thank you... Which roles ( workspace admin or Metastore Admin) are recommended to securely create and manage Unity Catalog objects (Storage Credentials, External Locations, Catalogs, Schemas, and Delta Sharing)?” and why ?