topic Re: Databricks SQL View with table access control in Data Governance

Databricks SQL View with table access control

LukaszJ — Mon, 27 Jun 2022 07:42:55 GMT

Hello,

I want to grant 'select' option on some columns in my table.

So i created view, and now people can access my view but cannot access the table.

However, they cannot do 'select' on the view, because they do not have privileges to the table.

What can I do in this situation?

Best regards,

Łukasz

Re: Databricks SQL View with table access control

Hubert-Dudek — Mon, 27 Jun 2022 13:58:59 GMT

If the owners are not the same, the user (one which has SELECT on VIEW) must also have SELECT privileges on the underlying table.

Please check that owner of the view and table are the same. If not, please set it to the same owner (user or group).

ALTER SCHEMA <schema-name> OWNER TO `<user-name>@<user-domain>.com`

Re: Databricks SQL View with table access control

01_binary — Tue, 28 Jun 2022 17:44:46 GMT

For best practice, grant usage on database and SELECT on view. They don’t need to have access to table.

Re: Databricks SQL View with table access control

LukaszJ — Wed, 29 Jun 2022 16:18:27 GMT

Dear Hubert,

Thank you for the answer.

To my mind, It does not make sense.

So how can I only share some of the columns in the table with someone?

The problem is that the table is fed frequently. It seems strange to create a new one (without a few columns) after every update of the first one.

Do you have any advice?

Best regards,

Łukasz

Re: Databricks SQL View with table access control

LukaszJ — Wed, 29 Jun 2022 16:20:53 GMT

Dear 01_binary,

I suppose it doesn't work with this combination.

Then the user (who does not have access to the table, but has view access) gets a message that the table is not authorized.

Best regards,

Łukasz

Re: Databricks SQL View with table access control

LukaszJ — Wed, 29 Jun 2022 16:23:05 GMT

Dear Kaniz,

Yes you are right.

I am so sorry for the problem, but I do not have time to answer every day.

However, I will always give an answer, with a slight delay at most.

Best regards,

Łukasz

Re: Databricks SQL View with table access control

NM — Wed, 29 Jun 2022 16:47:24 GMT

In that case, you need to grant SELECT permission on table too. I'm not sure if you can only grant permissions on only some columns. It will be on all columns of the table if permission is given on table.

Re: Databricks SQL View with table access control

LukaszJ — Thu, 07 Jul 2022 11:11:36 GMT

To sum up,

It is not possible to create a view based on a table that someone does not have permission to.

It's a pity, because this option would be very useful to limit access to batch-fed tables.

Thanks all for the help and your time!

Regards,

Łukasz

Re: Databricks SQL View with table access control

Nathan_OB — Wed, 30 Aug 2023 06:29:47 GMT

Thanks for the tip regarding the view and the owner needing to have the same owner - this resolved my issue!!