[Feedback Requested] Data Domains, and how your organization uses them
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-14-2025 12:08 PM
Hi everyone,
As part of our plans to improve the Discover Page, one of the next items we are looking into is building out Domains.
1. How have are your organizations using Data Domains today?
2. Can you share an example of your domain (and subdomain) organization in use, or planned in your organization?
3. Do you use Domains Owners as targets for RBAC? and do you plan on using Domains for ABAC in the future?
- Labels:
-
Unity Catalog
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-14-2025 12:56 PM
Hello @PeterWang
Good day!!
Good to see that databricks tries to improve everyday and its always day1 at databricks.
I think Abac would be ideal if domains are used. again its upto you tho.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-14-2025 01:02 PM - edited 07-14-2025 01:03 PM
Hi Khaja,
Can you give an example of how you would expect ABAC to work with Domains?
And do you have domains already implemented in your organization? if so, can you give an example of how you have broken down the data into domains?
Thanks for helping to make the product better!
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-14-2025 11:30 PM
Hello @PeterWang
unfortunately I dont work in any organization as of now, I was working as SE(databricks) with MSFT. (Laid off in june)
But I have seen many cases where RBAC sometimes is bottleneck.
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
07-18-2025 09:32 PM
Hi @PeterWang,
One of my clients in the financial services space groups their data using a domain-centric approach like customer, deposit, wealth, and credit.
We tag tables and views with these domains and use that for RBAC, so access is granted based on the domain.
Since we already rely on tags, I think moving towards ABAC in the future would make things more scalable and easier to manage in the long run.