if any user has only permission 'select table' in unityCatalog but not having permission to ext loc

[RakeshRakesh_De]

Hi,

Suppose one use having access 'Select' permission the table but user not having any permission to table external location in the 'external location'..  User will be able to read the data from table?? if yes how can user will be able to read the when underlying file will not be having access??

#unitycatalog  #AccessControl

[Kaniz · Accepted solution]

Hi @RakeshRakesh_De, In Databricks, a user can read data from a table even if they don’t have direct access to the underlying files in the external location. This is possible because of the way Databricks manages permissions and access to data.

Here’s how it works:

1. An external location in Databricks is a securable object that combines a storage path with a storage....
2. After an external location is created, you can grant access to it to account-level principals (users....
3. A user or group with permission to use an external location can access any storage path within the l....
4. To further refine access control, you can use GRANT on external tables to encapsulate access to indi....

So, even if a user doesn’t have direct access to the files in the external location, they can still read the data from a table if they have been granted the ‘Select’ permission on that table. The ‘Select’ permission allows the user to read the data from the table, while the actual access to ....

[Kaniz · Accepted solution]

Thank you for posting your question in our community! We are happy to assist you.

To help us provide you with the most accurate information, could you please take a moment to review the responses and select the one that best answers your question?

This will also help other community members who may have similar questions in the future. Thank you for your participation and let us know if you need any further assistance! 
 

[RakeshRakesh_De]

Hi @Kaniz , thanks for response.. Why the hyperlink command not showing full?