Delta Live Tables access control

Note

Access control is available only in the Premium plan or above.

Enabling access control for Delta Live Tables allows pipeline owners to control access to pipelines, including permissions to view pipeline details, start and stop pipeline updates, and manage pipeline settings. This article describes the individual permissions and how to configure pipeline access control.

Delta Live Tables permissions

There are five permissions for Delta Live Tables: No Permissions, Can View, Can Run, Can Manage, and Is Owner. Admins are granted the Can Manage permission by default, and they can assign that permission to non-admin users.

Note

The pipeline owner can be changed only by an admin.

The following table lists the access for each permission. The Admin column specifies access for workspace admins.

Ability	No Permissions	Can View	Can Run	Can manage	Is owner	Admin
View pipeline details and list pipeline		x	x	x	x	x
View Spark UI and driver logs		x	x	x	x	x
Start and stop a pipeline update			x	x	x	x
Stop pipeline clusters directly			x	x	x	x
Edit pipeline settings				x	x	x
Delete the pipeline				x	x	x
Modify pipeline permissions				x	x	x
Change owner						x

Note

• By default, the creator of a pipeline has Is Owner permission.

• Each execution of a pipeline is called an update. Updates assume the permissions of the user with Is owner permission on the pipeline and not the user who started the update. All update actions, for example, fetching notebooks, creating clusters, and running queries, are executed as the pipeline owner.

• Clusters are not re-used between pipeline owners.

• A pipeline owner can only be a workspace user or service principal.

• A pipeline cannot have more than one owner.

• A pipeline owner can be changed only by a workspace admin.

Configure pipeline permissions

You must have Can Manage or Is Owner permission.

1. Go to the details page for a pipeline.

2. Click the Permissions button in the Pipeline Details panel.

3. In the pop-up dialog box, assign permissions by clicking the drop-down menu beside a user’s name.

4. To assign permissions for another user, group, or service principal, click the Select User, Group, or Service Principal drop-down, select the permission, and click the + Add button.

5. Click Save.