REVOKE access from users

KVNARK
Honored Contributor II

‎01-31-2023 03:33 AM

There is a use-case where we want to REVOKE access from users so that they can't run VACUUM Command on Delta Table.

Can anyone please help here.

Priyanka_Biswas
Databricks Employee
Databricks Employee

‎02-01-2023 12:05 PM

Hello @KVNARK .​ 

We cannot specifically restrict Vacuum operation alone.

You need to remove "MODIFY" access on the table and restrict only to the "Read" (SELECT) operation

Please note if you restrict to only "read" it will also affect all the write, update, merge into, optimize, truncate including "VACUUM" operation.

Ref: https://docs.databricks.com/data-governance/table-acls/object-privileges.html

View solution in original post