- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-27-2024 06:11 AM
I could be mistaken, but it seem like the systems table contain data of all workspaces, even workspaces that you don't have access to. According to "least principle privilege" idea, I do not think that's a good idea.
If forementioned is correct, has somebody been able to make only the data of the current workspace available?
Or will there be system tables on workspace level.
Accepted Solutions
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-27-2024 06:26 AM
As per documentation it is confirmed that system tables include data from all workspaces in your account, but they can only be accessed by a workspace with Unity Catalog, you can restrict which admins has access to this system tables.
It is not possible to limit system tables to show information only for the specific workspace where the query is being run. System tables are designed to contain operational data for all workspaces in your account deployed within the same cloud region. They are an account-level regionalized concept that is cross-workspace, meaning they include data from all workspaces within the same region and cannot be restricted to a single workspace.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
11-27-2024 06:26 AM
As per documentation it is confirmed that system tables include data from all workspaces in your account, but they can only be accessed by a workspace with Unity Catalog, you can restrict which admins has access to this system tables.
It is not possible to limit system tables to show information only for the specific workspace where the query is being run. System tables are designed to contain operational data for all workspaces in your account deployed within the same cloud region. They are an account-level regionalized concept that is cross-workspace, meaning they include data from all workspaces within the same region and cannot be restricted to a single workspace.

