Access
-
End-to-End Production Access Investigation from Namespace to Audit Trail
POST_START End-to-End Production Access Investigation from Namespace to Audit Trail I recently needed to investigate access to the production catalog in Databricks Unity Catalog. My goal was to understand who had access to what, what actions they could perform, and how their interactions were recorded in the audit trail. This is a common task when…
A1, Access, audit, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, End-to-End, investigation, Lakehouse, namespace, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, trail, unity catalog -
Granting Read-Only Access to a Production Volume
POST_START Granting Read-Only Access to a Production Volume I recently needed to grant read-only access to a production volume in Databricks Unity Catalog so that the data analysts could explore the data without modifying it. The volume in question was production.files.landing, and the target principal was the data_analysts group. Granting Read-Only Access I started by…
A1, Access, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, granting, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, read-only, sql, unity catalog, Volume. -
Removing Write Access from a Production External Location
POST_START Removing Write Access from a Production External Location I recently had the task of securing a production external location in Databricks Unity Catalog. The location, named production_raw, was being used by several teams, but we needed to remove write access for a legacy ingestion service to prevent accidental or unauthorized data modifications. Understanding the…
A1, Access, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, External, Lakehouse, location, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, removing, sql, unity catalog, Write -
Granting Read Access to a Governed Production External Location
POST_START Granting Read Access to a Governed Production External Location I recently had the task of granting read access to a governed production external location in Databricks Unity Catalog. The location, named production_raw, is used by data engineers to access raw data stored in an S3 bucket. My goal was to ensure that the data_engineers…
A1, Access, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, External, governed, granting, Lakehouse, location, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, read, sql, unity catalog -
Investigating a Specific User During a Production Access Incident
POST_START Investigating a Specific User During a Production Access Incident I was called in to investigate a potential access incident involving a user with the email address engineer@example.com. The incident report mentioned that a user might have accessed production data, and I needed to trace their activity using Databricks Unity Catalog’s audit logs. I started…
A1, Access, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, during, education, incident, investigating, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, Specific, sql, unity catalog, user -
Granting Controlled Execute Access to a Governance Function
POST_START Granting Controlled Execute Access to a Governance Function I recently had the task of granting controlled access to a governance function within our Unity Catalog setup. The goal was to ensure that only specific teams could execute a function called region_filter while maintaining strict access controls. I needed to follow a precise process to…
A1, Access, category:business, category:education, category:software, category:technology, coding, controlled, data engineering, data governance, databricks, education, execute, function, Governance, granting, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, unity catalog -
Building Least-Privilege Analyst Access to a Production Sales Table
POST_START Building Least-Privilege Analyst Access to a Production Sales Table I recently had the task of granting analysts access to a production sales table while ensuring that they had the minimum necessary privileges. This was a critical step in maintaining data security and compliance within our organization. I started by understanding the structure of the…
A1, Access, analyst, building, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, Lakehouse, least-privilege, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sales, sql, table, unity catalog -
Implementing Row-Level Access Control with Row Filters
POST_START Implementing Row-Level Access Control with Row Filters I recently needed to implement row-level access control for a sales team in Databricks. The goal was to ensure that only members of the ‘global_sales’ account group could see all customer data, while others could only access data for Germany. I decided to use Unity Catalog’s row…
A1, Access, category:business, category:education, category:software, category:technology, coding, control, data engineering, data governance, databricks, education, filters, implementing, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, row, row-level, sql, unity catalog
