databricks Databricks Release Notes ·

Databricks Unity Catalog adds context attributes for ABAC column masks and row filters (Beta)

securitydatabrickspreviewengineerdatabricks-unity-catalog
feature announcement

Databricks Unity Catalog now supports context attributes for attribute-based access control (ABAC) policies, currently in Beta. This enhancement allows policy conditions to target the specific context of a data request, such as the calling OAuth application or if the request is on behalf of a user. Developers can use `has_context_attribute` and `has_context_attribute_value` functions within row filter and column mask policies. This enables more granular control, for example, restricting an agent's data access while allowing the user full access when querying directly.

Features (1)
  • Support for context attributes in Unity Catalog ABAC policies (Beta)

    Databricks Unity Catalog now allows ABAC policy conditions to target request contexts, such as the OAuth application client ID or if a request runs on behalf of a user. The `has_context_attribute` and `has_context_attribute_value` functions are available for row filter and column mask policies to enable more granular data access control.

Read the original announcement →

https://docs.databricks.com/aws/en/release-notes/product/2026/august#context-attributes-in-abac-column-mask-and-row-filter-policies-beta

Related releases