authorization
-
Reviewing Authorization on a Production Volume
POST_START Reviewing Authorization on a Production Volume Starting the Review I started my morning by reviewing the authorization settings on a production volume that our team had recently deployed. This volume, named production.files.landing, is used to store raw data ingested from various sources. Understanding who has access and what permissions they have is crucial for…
A1, authorization, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, Reviewing, sql, unity catalog, Volume. -
Investigating Grant and Revoke Activity During an Authorization Incident
POST_START Investigating Grant and Revoke Activity During an Authorization Incident I recently encountered an authorization incident where a user had access to data they shouldn’t have. I needed to trace the source of the unauthorized access by investigating grant and revoke activity in the Unity Catalog. I started by querying the audit logs for any…
A1, Activity, authorization, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, during, education, grant, incident, investigating, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, revoke, sql, unity catalog -
Removing Direct Table Access During an Authorization Cleanup
POST_START Removing Direct Table Access During an Authorization Cleanup I recently had the task of cleaning up our authorization setup in Databricks Unity Catalog. As part of this process, I needed to remove direct table access for a group of users who were no longer part of our active team. The first step was to…
A1, Access, authorization, category:business, category:education, category:software, category:technology, cleanup, coding, data engineering, data governance, databricks, direct, during, education, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, removing, sql, table, unity catalog -
Performing a Production Unity Catalog Authorization Review
POST_START Performing a Production Unity Catalog Authorization Review I was tasked with reviewing the authorization settings for the production catalog in our Unity Catalog environment. This was part of a routine security audit to ensure that only the right users had access to the right resources. I started by checking the grants at the catalog…
A1, authorization, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, performing, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, review, sql, unity catalog -
Investigating an Authorization Failure After a Table Rename
POST_START Investigating an Authorization Failure After a Table Rename I recently encountered an issue where a user was unable to access a table after it was renamed in the production environment. The user reported an authorization failure when trying to query the table, but the table itself was visible in the metadata. I needed to…
A1, after, authorization, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, failure, investigating, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, rename, sql, table, unity catalog -
Investigating an Authorization Failure After a Schema Move
POST_START Investigating an Authorization Failure After a Schema Move I was working on a data pipeline that recently moved several schemas from the default catalog to the production catalog. After the move, some users started reporting authorization errors when trying to access the schemas. I needed to investigate why this was happening and figure out…
A1, after, authorization, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, failure, investigating, Lakehouse, move, paragraph ordering, paragraph structure, paragraphorder, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, schema, sql, unity catalog -
Finding Production Tables with Broad SELECT Authorization
POST_START Finding Production Tables with Broad SELECT Authorization I recently needed to identify which tables in the production catalog have broad SELECT access across the organization. This is a common task when setting up data access policies or auditing permissions. I decided to use the Unity Catalog metadata tables to find this information efficiently. Querying…
A1, authorization, broad, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, finding, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, select, sql, tables, unity catalog -
Comparing Authorization Between Development and Production Catalogs
POST_START Comparing Authorization Between Development and Production Catalogs I recently needed to understand the authorization differences between our development and production catalogs in Unity Catalog. This was important because we were planning to move some data from the development environment to production, and we wanted to ensure that the access controls were properly aligned with…
A1, authorization, between, catalogs, category:business, category:education, category:software, category:technology, coding, Comparing, data engineering, data governance, databricks, development, education, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, sql, unity catalog -
Investigating Production Authorization End to End from Identity Through Catalog, Schema, Table, and Policy Access
POST_START Investigating Production Authorization End to End from Identity Through Catalog, Schema, Table, and Policy Access I started my day by reviewing the latest authorization logs for the production catalog. My task was to understand how a user was able to access a specific table in the production environment. I needed to trace the authorization…
A1, authorization, category:business, category:education, category:software, category:technology, coding, data engineering, data governance, databricks, education, end, identity, investigating, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, schema, sql, table, through, unity catalog -
Troubleshooting Function Authorization Used by Production Row Filters and Column Masks
POST_START Troubleshooting Function Authorization Used by Production Row Filters and Column Masks I recently encountered an issue where certain production row filters and column masks were not applying correctly in our Databricks environment. The root cause seemed to be related to function authorization—specifically, the production.security.email_mask function that was used to mask email addresses in sensitive…
A1, authorization, category:business, category:education, category:software, category:technology, coding, column, data engineering, data governance, databricks, education, filters, function, Lakehouse, paragraph ordering, paragraph structure, paragraphorder, production, profession:cloud engineer, profession:data analyst, profession:data engineer, profession:data scientist, profession:database administrator, profession:software engineer, profession:solution architect, progressive learning, row, sql, troubleshooting, unity catalog, Used
