Apply row filter on system table (audit)

[jonasmw94kv]

Hello!

Our team wish to implement just-in-time access to the audit log, where we thought we could use row filter for the audit log, such that the different teams can see their own events, and afterwards revoke their right to see it.

Upon first inspection, when applying a row filter to the system.access.audit table, we get the following error:

[ROW_LEVEL_SECURITY_UNSUPPORTED_PROVIDER] Failed to execute ALTER TABLE command because assigning row level security policy is not supported for target data source with table provider: "deltasharing". SQLSTATE: 0A000

What is a good way to be able to do this? Could it be possible to stream events from the audit log, to log-tables that is owned per team for instance? Or do we have to batch it? Seems a bit unnecessary.

Thanks!

[noorbasha534]

we are also looking for a similar functionality 🙂 to give just that access what is needed for the projects

[MariuszK · Accepted solution]

You can create a view in another catalog and apply there row level security.

[jonasmw94kv]

Thank you @MariuszK, that works as a nice solution