Catalog
ReleaseWorth evaluating
MANAGE no longer needs a USAGE grant on the same object
From Databricks release notes
Holding MANAGE on an object stopped requiring the usage privilege on that object; the privileges on its parent container are still required. A behaviour change, so a permission model built before August may now grant more than it reads like.
What to re-read
More from Catalog
- ReleaseUnity Catalog permissions on system.ai now control which AI Functions users can run (GA)
- PreviewFiles API 3.0 for Unity Catalog volumes enters Beta with multipart uploads
- ReleaseService principal OAuth tokens can carry a custom identity claim for per-user row filtering
- ReleaseREAD METADATA privilege now works with every compliance security profile standard