databricks Databricks Release Notes ·

Databricks Enables Materialized View & Streaming Table Refresh with ABAC Policies

securitydatabricksgaengineermedia
feature

Databricks now allows refreshing pipeline-managed materialized views and streaming tables even when the pipeline owner or run-as identity is subject to attribute-based access control (ABAC) policies. Previously, this process required exempting the pipeline owner from all applicable ABAC policies, which created operational overhead. This enhancement simplifies security management for data engineers and architects by removing that restriction. Policies are evaluated using the pipeline owner's identity, and users can add the owner to ABAC policy `EXCEPT` clauses for unmasked data or use the `TO` clause for filtered data.

Enhancements (1)
  • Refresh Materialized Views & Streaming Tables with ABAC Policies

    Databricks has removed the previous requirement that pipeline owners be exempt from ABAC policies to refresh materialized views or streaming tables. This allows refreshes to proceed even when the pipeline owner or run-as identity is subject to attribute-based access control. Policies are evaluated using the pipeline owner's identity during the refresh process.

Read the original announcement →

https://docs.databricks.com/aws/en/release-notes/product/2026/august#refresh-materialized-views-and-streaming-tables-without-exempting-the-pipeline-owner-from-abac-policies

Related releases