Databricks Unity Catalog

Use Databricks’ access request destinations to configure the access request links with data in Databricks and provide data consumers with a button to request access. You may also opt to add the access request links to data object descriptions.

Requirements

• Databricks Unity Catalog connection registered in Immuta

• Databricks user with at least one of the following privileges on all the data objects you want to add access request links to:

  • The object owner

  • MANAGE privilege on the object

  • Metastore admin

Set up access request links

1. In Databricks, grant your data consumers the BROWSE privilege for any data you want them to be able to request access for.

   1. You must grant BROWSE on the catalog to allow users to request access to any data in the catalog: GRANT BROWSE ON CATALOG {catalog name} TO account users;

2. Follow the Databricks documentation to Configure access request destinations for every data object you want data consumers to be able to request access for. Insert the access request link for each asset in the Redirect URL field.

After completing the initial setup, add configuring the access request links to your data engineering pipelines.

Databricks Unity Catalog consideration

Databricks Unity Catalog does not have a dedicated location for the masking exception request button, so requestType should not be included in the access request link. This way, data consumers can re-request access to the same object through the same Request access button and choose a masking exception instead of, or in addition to, an access request.