Provisioning Permissions for Unity Catalog Objects

The Calibo Accelerate platform integrates with Unity Catalog in Databricks, to bring features like data discovery, data organization, data governance, data lineage, data versioning, tagging, and audit logs. The 3-tier namespace in Unity Catalog consists of catalog, schema, and table. This helps to organize and manage data with a structured approach. The Calibo Accelerate platform extends support for provisioning of permissions to the Unity Catalog objects at each level of the namespace, thereby providing administrators with fine-grained access control.

Prerequisites

You must complete the following prerequisites before you configure permissions for a user to Unity Catalog objects:

Configure a Unity Catalog-enabled Databricks instance in the data integration section of Cloud Platform Tools & Technologies. See Configuring Databricks for Unity Catalog
Configure a Unity Catalog database using the instance configured in step 1. See Configuring Databricks Unity Catalog as a Data Lake
Ensure that the user to whom you want to assign permissions to Unity Catalog objects, has admin access to the configured Databricks instance.

Assigning permissions to Unity Catalog objects

Assigning permissions to Unity Catalog objects is a two-step process which involves the following:

Create a custom role and assign the required permissions to Unity Catalog objects. See Creating custom role for Databricks.
Assign the custom role to the required user. While creating a custom role, if you did not assign the role to a user, complete the following steps:
1. Sign in to the Calibo Accelerate platform and click Products in the left navigation pane.
2. The user to whom you want to assign the custom role belongs to a team which is assigned to a product. Navigate to that product and click the Teams tab.
3. Click the ellipsis (...) for the user to whom you want to assign the custom role and then click Edit.
4. On the Edit Member/Team screen, do the following:
  1. Under Role, click the dropdown list and select the custom role.
  2. Click Save.