isaac_gritz
Databricks Employee
Databricks Employee

‎04-12-2023 12:09 AM

  1. For securing access to buckets, folders, and blobs in S3/ADLS/GCS: (see above)
  2. For database, tables:
    1. Use cluster entitlements (AWS | Azure | GCP) to turn off unrestricted cluster access to groups. Or restrict them only to Databricks SQL.
      1. For using SQL/Python within notebooks but restricting access to Databases/Tables
        1. Create a cluster that has Shared Access mode (AWS | Azure | GCP) enabled
        2. Provide access to that cluster or policy using Cluster ACLs (AWS | Azure | GCP)
        3. Use SQL GRANT statements (AWS | Azure | GCP) to grant/revoke permissions
      2. For using Databricks SQL but restricting access to Databases/Tables
        1. Databricks SQL Warehouses automatically have Shared Access mode enabled
        2. Use the Databricks SQL UI or SQL (AWS | Azure | GCP) to grant/revoke access to Databases, Tables
  3. Fine-grained access control
    1. Row and column level security and dynamic data masking can be administered using Dynamic View Functions (AWS | Azure | GCP)