Permissions needed for creating a new (delta) share

[pernilak]

What permissions are actually needed in order to create a delta share?

I have read that you either need to be metastore admin, or a

• User with delegated permissions or ownership on both the share and the recipient objects ((USE SHARE + SET SHARE PERMISSION) or share owner) AND (USE RECIPIENT or recipient owner).

Does this mean that you don't need any permissions on the catalog/schema you are sharing. So If a gave some user this right, he or she could create a share with data he/she does not have access to, and then get access to that data through the share?

[MoJaMa]

Hi, 

Hope the doc link helps:

https://docs.databricks.com/en/delta-sharing/create-share.html#requirements

Specifically this statement should alleviate your immediate point.

• Have the USE CATALOG and USE SCHEMA privilege on the catalog and schema that contain the table or view, or ownership of the catalog or schema.

• Have the SELECT privilege on the table or view