Lakenautlearn
Home Learning paths 8 Certifications 5 Concept graph 163 Resources News In preview 51 Renames 18 End of support 22
Paths
SQL & Python FoundationsLakehouse FoundationsData EngineeringGovernance & SecurityPlatform & AdministrationSQL & AnalyticsMachine LearningGenerative AI
Foundations
SQL9Python / PySpark7
Workspace
Workspace10Catalog15Jobs & Pipelines15Compute9Discover2
SQL
SQL Editor4Dashboards4Genie Agents8Alerts2Query History4SQL Warehouses4
Data engineering
Runs1Data Ingestion7Delta Lake13Streaming5Data Quality3Ecosystem & Tools1
AI / ML
Playground2Agents7Unity Gateway5Experiments10Features4Models3Serving6AI Search3
More
Content on GitHub
Independent project. Databricks and product names are trademarks of their owners.
Lakenaut/News/ABAC gains DENY policies, and they beat every grant
Preview8 Sept 2026· Databricks release notes

ABAC gains DENY policies, and they beat every grant

A DENY policy blocks MANAGE ACCESS CONTROL for the principals it names, and it always wins over a grant that would allow it. Beta. It is the first ABAC construct that can take something away rather than hand it out.

Read the original

What to re-read

ABAC policies in Unity CatalogPrivileges: GRANT, REVOKE, and DENYCatalog Data Engineer Professional
PrivacyCookie policyLegal noticeRSSllms.txtGitHubr/lakenaut
© 2026 Lakenaut · Independent project by Fernando De Nitto. Not affiliated with Databricks.
↑↓ move↵ openesc close

Keyboard shortcuts

⌘K / /Search
?This dialog
tLight / dark theme
[Show or hide the sidebar
g hGo home
g pGo to paths
g cGo to certifications
g gGo to the graph
g nGo to news
j / kNext / previous concept in the path
eJump to the exam callout
Cookies, briefly

This site needs no cookies to be read. We would like to count which pages people actually reach, with a tool that does set one. It runs only if you say yes, and you can change your mind from the footer. What we set, exactly.