Can anyone share Databricks security model documentation or best practice references

[APJESK]

Can anyone share Databricks security model documentation or best-practice references

[Coffee77]

Here is the official documentation of Databricks: https://docs.databricks.com/aws/en/security/  Do you need to dive deeper into any specific area?

[nayan_wylde · Accepted solution]

Here are some authoritative resources and best-practice references for the Databricks security model and governance:

Official Documentation

• Databricks on AWS Security & Compliance
  Covers authentication, access control, networking, encryption, secret management, and compliance frameworks.
  Read here

• Azure Databricks Security & Compliance
  Includes identity management, private connectivity, encryption, and compliance features for Azure environments.
  Read here

Security Best Practices

• Databricks Security Best Practices (Trust Center)
  Provides a checklist, threat models, and Terraform templates for secure deployments across AWS, Azure, and GCP.
  View Best Practices
• Detailed Blog: Security Best Practices for Databricks Lakehouse
  Explains defense-in-depth strategies, identity controls, encryption, and network isolation.
  Read Blog
• AWS-specific Best Practices
  Includes least privilege IAM, encryption, network isolation, and compliance readiness.
  Explore AWS Best Practices

Unity Catalog Governance & Security

• Unity Catalog Best Practices
  Guidelines for identity provisioning, privilege management, and secure object ownership.
  Read here
• Microsoft Learn Path: Implement Data Governance & Security with Unity Catalog
  Step-by-step modules for configuring isolation, lineage, and advanced security.
  Start Learning

Compliance & Governance

• Data Governance with Unity Catalog
  Explains hierarchical privilege models, ABAC, and fine-grained access control.
  Read here

[Raman_Unifeye]

Very broad Qs and you have already received reply for the various reference materials. Please share the specific scenario if you are looking for a pointed guideance from the community 😀

[Shivam7788775]

@APJESK You can refer to the following official documentation and best-practice resources to understand the Databricks security model and governance framework - 

Databricks core security & compliance documentation

• Databricks Security & Compliance (AWS)
  https://docs.databricks.com/en/security/index.html
  Covers authentication, access control, encryption, networking, secrets, and compliance standards.

• Azure Databricks Security & Compliance
  https://learn.microsoft.com/en-us/azure/databricks/security/
  Focuses on identity integration, private networking, encryption, and Azure-specific security features.

• Databricks Trust Center
  https://www.databricks.com/trust
  Central hub for security architecture, certifications, compliance reports, and threat models.

Databricks security best practices

• Databricks Security Best Practices
  Secure your Data Intelligence Platform using best practices | Databricks
  Provides recommended patterns for secure workspace setup, least-privilege access, and infrastructure hardening.

• Unity Catalog best practices
  https://docs.databricks.com/en/data-governance/unity-catalog/best-practices.html
  Guidance on identity provisioning, privilege management, and secure object ownership.

Databricks core governance concepts

• Data governance with Unity Catalog
  https://docs.databricks.com/en/data-governance/unity-catalog/index.html
  Explains hierarchical privileges, ABAC, and centralized governance.

Together, these references provide a comprehensive view of Databricks security across infrastructure, compute, data access, and uc-governance.

[mukul1409]

Sharing a few official Databricks security model and best-practice references that are widely used across enterprise implementations:

🔐 Core Databricks Security Model
Databricks Account & Workspace Architecture
Covers account-level isolation, workspace boundaries, and identity federation
👉 https://docs.databricks.com/en/administration-guide/account-settings/index.html

Identity & Access Management (IAM)
SCIM, Azure AD / AWS IAM / GCP IAM integration, user & group management
👉 https://docs.databricks.com/en/administration-guide/users-groups/index.html

🧱 Unity Catalog (Recommended)
Unity Catalog Security Model
Centralized governance, fine-grained access control (catalog → schema → table → column → row)
👉 https://docs.databricks.com/en/data-governance/unity-catalog/index.html

Best Practices for Unity Catalog
Separation of duties, environment isolation, least-privilege patterns
👉 https://docs.databricks.com/en/data-governance/unity-catalog/best-practices.html

🔑 Data & Compute Security
Cluster & Compute Security
Single-user vs shared clusters, credential passthrough, secure networking
👉 https://docs.databricks.com/en/security/compute.html

Secrets Management
Databricks secrets scopes & external key vault integrations
👉 https://docs.databricks.com/en/security/secrets/index.html

🌐 Network & Compliance
Network Security
VNet injection / Private Link / secure connectivity patterns
👉 https://docs.databricks.com/en/security/network/index.html

Compliance & Certifications
SOC 2, ISO, HIPAA, PCI, GDPR mappings
👉 https://www.databricks.com/trust