Enable table access control for your workspace

Table access control lets you programmatically grant and revoke access to your data using the Databricks view-based access control model. Table access control requires the Premium plan and above.

This article describes how to enable and enforce Python and SQL table access control for your Databricks workspace.

For information about how to enable table access control on a cluster, see Enable Hive metastore table access control on a cluster (legacy). To learn how to set privileges on a data object once table access control is enabled, see Hive metastore privileges and securable objects (legacy).

Another approach to securing table access from clusters is SQL-only table access control, which does not require enablement using the options described in this article.

Requirements

This feature requires the Premium plan and above.

Enable table access control for your workspace

  1. Go to the Admin Console.

  2. Click the Workspace Settings tab.

  3. Click the Cluster, Pool and Jobs Access Control toggle.

  4. Click Confirm.

  5. Click the Table Access Control toggle.

  6. Click Confirm.

Enforce table access control

To ensure that your users access only the data that you want them to, you must restrict your users to clusters with table access control enabled. In particular, you should ensure that:

  • Users do not have permission to create clusters. If they create a cluster without table access control, they can access any data from that cluster.

    Disable cluster create permission

  • Users do not have Can Attach To permission for any cluster that is not enabled for table access control.

See Cluster access control for more information.