Permissions needed for creating a new (delta) share

pernilak
New Contributor III

‎10-15-2024 01:45 AM

What permissions are actually needed in order to create a delta share?

I have read that you either need to be metastore admin, or a

  • User with delegated permissions or ownership on both the share and the recipient objects ((USE SHARE + SET SHARE PERMISSION) or share owner) AND (USE RECIPIENT or recipient owner).

Does this mean that you don't need any permissions on the catalog/schema you are sharing. So If a gave some user this right, he or she could create a share with data he/she does not have access to, and then get access to that data through the share?

Labels:
0 Kudos

MoJaMa
Databricks Employee
Databricks Employee

‎10-20-2024 03:30 PM

Hi, 

Hope the doc link helps:

https://docs.databricks.com/en/delta-sharing/create-share.html#requirements

Specifically this statement should alleviate your immediate point.

  • Have the USE CATALOG and USE SCHEMA privilege on the catalog and schema that contain the table or view, or ownership of the catalog or schema.

  • Have the SELECT privilege on the table or view

 

0 Kudos