Catalog created using a service principal isn't visible

[JonLaRose]

When creating a Unity catalog using a service principal token, the created catalog isn't visible or accessible to other users (even admins) via GUI nor CLI.

It seems that only when I change the catalog's ownership to some other user it is visible.

Why is that, and what can I do to make it visible?

[dkushari]

Hi @JonLaRose , When any UC objects are created, they are locked down by default. This means that UC privileges work with explicit permission grants/revokes. At the end of the process (which is run by the SP), give the relevant permission to the desired groups and users. UC Privileges - https://docs.databricks.com/en/data-governance/unity-catalog/manage-privileges/privileges.html#privi...

[JonLaRose]

Thank you @dkushari , but isn't it possible to grant/configure the required permissions at the point of the catalog creation?

[dkushari]

Right after the creation of the catalog, add a new grant statement. Check here please.