Catalog owner cannot create table?

[hdu]

I transfered the owner of pre-created datasets (catalogs and schemas) by workspace admin to a service principle.

ALTER CATALOG xyz OWNER TO `sp`;

I think as the owner, the job owned by `sp`, should be able to create table in all schemas under catalog xyz. however I got the error: PERMISSION_DENIED, user do not have CREATE TABLE.... 

My question is the owner of catalog does not propagate to schema and table?

[szymon_dybczak · Accepted solution]

Hi @hdu ,

Below is an excerpt from documentation: 

"Owners of an object are automatically granted all privileges on that object. In addition, object owners can grant privileges on the object itself and on all of its child objects. This means that owners of a schema do not automatically have all privileges on the tables in the schema, but they can grant themselves privileges on the tables in the schema."

So as an owner you have ability  to grant yourself required permission, but you don't have them granted automatically.

https://learn.microsoft.com/en-us/azure/databricks/data-governance/unity-catalog/manage-privileges/o...