cancel
Showing results for 
Search instead for 
Did you mean: 
Get Started Discussions
Start your journey with Databricks by joining discussions on getting started guides, tutorials, and introductory topics. Connect with beginners and experts alike to kickstart your Databricks experience.
cancel
Showing results for 
Search instead for 
Did you mean: 

if any user has only permission 'select table' in unityCatalog but not having permission to ext loc

RakeshRakesh_De
New Contributor III

Hi,

Suppose one use having access 'Select' permission the table but user not having any permission to table external location in the 'external location'..  User will be able to read the data from table?? if yes how can user will be able to read the when underlying file will not be having access??

 

#unitycatalog  #AccessControl

2 ACCEPTED SOLUTIONS

Accepted Solutions

Kaniz
Community Manager
Community Manager

Hi @RakeshRakesh_De, In Databricks, a user can read data from a table even if they don’t have direct access to the underlying files in the external location. This is possible because of the way Databricks manages permissions and access to data.

 

Here’s how it works:

  1. An external location in Databricks is a securable object that combines a storage path with a storage....
  2. After an external location is created, you can grant access to it to account-level principals (users....
  3. A user or group with permission to use an external location can access any storage path within the l....
  4. To further refine access control, you can use GRANT on external tables to encapsulate access to indi....

So, even if a user doesn’t have direct access to the files in the external location, they can still read the data from a table if they have been granted the ‘Select’ permission on that table. The ‘Select’ permission allows the user to read the data from the table, while the actual access to ....

View solution in original post

Kaniz
Community Manager
Community Manager

Thank you for posting your question in our community! We are happy to assist you.

To help us provide you with the most accurate information, could you please take a moment to review the responses and select the one that best answers your question?

This will also help other community members who may have similar questions in the future. Thank you for your participation and let us know if you need any further assistance! 
 

View solution in original post

3 REPLIES 3

Kaniz
Community Manager
Community Manager

Hi @RakeshRakesh_De, In Databricks, a user can read data from a table even if they don’t have direct access to the underlying files in the external location. This is possible because of the way Databricks manages permissions and access to data.

 

Here’s how it works:

  1. An external location in Databricks is a securable object that combines a storage path with a storage....
  2. After an external location is created, you can grant access to it to account-level principals (users....
  3. A user or group with permission to use an external location can access any storage path within the l....
  4. To further refine access control, you can use GRANT on external tables to encapsulate access to indi....

So, even if a user doesn’t have direct access to the files in the external location, they can still read the data from a table if they have been granted the ‘Select’ permission on that table. The ‘Select’ permission allows the user to read the data from the table, while the actual access to ....

Kaniz
Community Manager
Community Manager

Thank you for posting your question in our community! We are happy to assist you.

To help us provide you with the most accurate information, could you please take a moment to review the responses and select the one that best answers your question?

This will also help other community members who may have similar questions in the future. Thank you for your participation and let us know if you need any further assistance! 
 

RakeshRakesh_De
New Contributor III

Hi @Kaniz , thanks for response.. Why the hyperlink command not showing full?

Join 100K+ Data Experts: Register Now & Grow with Us!

Excited to expand your horizons with us? Click here to Register and begin your journey to success!

Already a member? Login and join your local regional user group! If there isn’t one near you, fill out this form and we’ll create one for you to join!