Catalog
ReleaseWorth evaluating
ABAC GRANT policies are GA for models and services
From Databricks release notes (AWS)
ABAC GRANT policies are now generally available for models, model services, model provider services, Model Context Protocol services, and agent services. They grant Unity Catalog privileges to securable objects when their governed tags match a condition, instead of granting privileges on each object one by one.
Learners studying Unity Catalog governance should know that tag-based privilege grants can now be used for these model and service objects.
What to re-read
More from Catalog
- ReleaseUnity Catalog permissions on system.ai now control which AI Functions users can run (GA)
- PreviewFiles API 3.0 for Unity Catalog volumes enters Beta with multipart uploads
- ReleaseService principal OAuth tokens can carry a custom identity claim for per-user row filtering
- ReleaseREAD METADATA privilege now works with every compliance security profile standard