cancel
Showing results for 
Search instead for 
Did you mean: 
Administration & Architecture
Explore discussions on Databricks administration, deployment strategies, and architectural best practices. Connect with administrators and architects to optimize your Databricks environment for performance, scalability, and security.
cancel
Showing results for 
Search instead for 
Did you mean: 

Lakehouse federation -' on behalf of ' queries

SanthoshKumarK
New Contributor

Is it possible to achieve the following in a lake-house federation setup using Azure Databricks?

1. Establish an external connection (EC1) to an external data source (EDS) using the credentials of user U1.
2. Create a foreign catalog (FC1) utilizing EC1.
3. Grant access to the Microsoft Entra ID group (UG1) for FC1.
4. User U2, a member of UG1, queries data from FC1.
5. The external data source (EDS) receives the data fetch query as if it were from user U1, not U2.
6. Is there a way to configure the system so that EDS recognizes the query as coming from U2 instead of U1, similar to an ‘on behalf of’ authorization mechanism?

If this setup is not feasible, what is the closest solution to accurately reflect the querying user in the audit records of the external data source (EDS)?

 

0 REPLIES 0

Connect with Databricks Users in Your Area

Join a Regional User Group to connect with local Databricks users. Events will be happening in your city, and you won’t want to miss the chance to attend and share knowledge.

If there isn’t a group near you, start one and help create a community that brings people together.

Request a New Group