Restrict User to see schema using "all purpose compute"
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-27-2024 06:36 AM
Scenario
- Under Hive Metastore four diff schema exist S1,S2,S3 and S4
- User1 want access to schema S1 but not allowed to see other 3 Schema which can be done using grant permission simple and easy case
- Same User1 has access to workspace. Now same user using workspace to create pyspark using any "all purpose compute" can see all 4 schema. which is not visible if use SQL End point
- Table Access Control already enabled under security setting.
Problem Statement :
Using SQL end point restrict schema level access is possible but can it possible to restrict using "All purpose compute" cluster ??
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
09-29-2024 08:38 PM
The best option for Governance is to upgrade to Unity Catalog.
This is alternate, not the best.
-
The cluster must be enabled for table access control.
https://docs.databricks.com/en/data-governance/table-acls/object-privileges.html#requirements
~