Permissions on Unity Catalog Table Constraints

[RobsonNLPT]

Hi all.

I've used new options to add constraints to UC tables

Even granting permissions to an user (ALL PRIVILEGES) on particular schema we have errors when trying to add PKs. The message doesn't make sense (PERMISSION_DENIED: User is not an owner of Table).The only option to solve this issue is granting ownership on tables he is working.I was expecting ALL PRIVILEGES to cover all DDL operations. Is this an issue on this public preview?

Best

Robson

[saikumar246]

Hi, @RobsonNLPT Thank you for bringing your concern here.

I understand that you are granting (ALL PRIVILEGES) on a particular schema to the user and while that user is trying to add the Primary Key, getting (PERMISSION_DENIED: User is not an owner of Table). It is expected, because in Databricks altering the table, deleting the table or adding the PKs(any alter operations on the table) should need owner privilege on the table. Please see the below link for your reference regarding adding PKs.

https://docs.databricks.com/en/machine-learning/feature-store/uc/feature-tables-uc.html#:~:text=Only...

In Databricks, granting ALL PRIVILEGES on the object means you are granting the below permissions that do not include all the DDL operations.

You can follow this link to understand more about the General Unity Catalog privilege types in the Databricks:- https://docs.databricks.com/en/data-governance/unity-catalog/manage-privileges/privileges.html#gener...

Please leave a like if this answers your question, follow-ups are appreciated.

Regards,

Sai Kumar

[dmart]

So how does one grant these permissions to non-owners?

[ATN]

I think the easiest way would be for a workspace admin to create a identity and access group and add the users and service principals who needs to run DDL operations to that group. Ownership of tables could then be transfered to this group.