topic Re: Dashboard sharing in Databriks with Unity Catalog enabled in Get Started Discussions

Dashboard sharing in Databriks with Unity Catalog enabled

ludovic_hall — Tue, 24 Dec 2024 09:49:06 GMT

Hello,

I am planning to deploy a workspace with Unity Catalog enabled. Deploying permissions in one place sounds like a good solution. It can even simplify dataset architecture by masking rows and columns.

As an architect, I’m concerned about the user’s ability to include their own credentials in a shared dashboard (it’s the default behavior). By doing this, the user bypasses the permissions set at the Unity Catalog level. I think it could be really easy for a user to publish a dashboard and push its permissions without understanding the consequences.

So, I would like to disable the ability of users to include credentials in their reports.

It could also be useful to disable, for some users, the sharing dashboard functionality (for maintaining a single source of truth).

I can’t find any documentation talking about that, and it sounds really strange because I see that as a really dangerous pitfall. Am I misunderstanding something?

Regards

Re: Dashboard sharing in Databriks with Unity Catalog enabled

Walter_C — Tue, 24 Dec 2024 12:12:37 GMT

When you mention disable the sharing options do you refer for users inside the workspace or is it specific to users that belongs to the account level but not to the workspace itself?

Re: Dashboard sharing in Databriks with Unity Catalog enabled

ludovic_hall — Mon, 06 Jan 2025 13:23:53 GMT

Hello Walter_C,

Thanks for your reply.

In my opinion, the most important thing is to disable the ability of a user to share a dashboard with their own credentials. It’s about security and compliance with the access rules defined in the Unity Catalog.

Additionally, it could be helpful to disable the sharing functionality for some users. I often see different skill levels, such as power users and curious users. For some users, it could be too easy to share something incorrectly. I want to ensure a verification/publish stream. It's here about governance.

It’s even more critical for external sharing.

Regards,

Re: Dashboard sharing in Databriks with Unity Catalog enabled

Walter_C — Mon, 06 Jan 2025 14:28:14 GMT

I will suggest for you to submit a feature request for this through https://docs.databricks.com/en/resources/ideas.html#ideas