Databricks Unity Catalog Gains ABAC DENY Policies (Beta)
Databricks Unity Catalog now includes ABAC DENY policies in Beta, enhancing granular access control. These policies explicitly deny the MANAGE ACCESS CONTROL privilege, preventing specified principals, including object owners, from performing access-management operations. This feature is significant for organizations requiring stricter governance, as DENY policies always take precedence over any existing grants.
Features (1) ›
- Introduce ABAC DENY Policies in Unity Catalog (Beta)
ABAC DENY policies are now available in Beta within Unity Catalog. These policies explicitly prevent specified principals, including object owners, from performing access-management operations, always taking precedence over any grants.
https://docs.databricks.com/aws/en/release-notes/product/2026/september#abac-deny-policies-are-in-beta
Related releases
- Databricks Enhances Genie Agents with GA APIs and Unity Catalog Function Tools Databricks Release Notes ·
- Schema-level HTTP connections in Databricks Unity Catalog are now GA Databricks Release Notes ·
- Databricks Unity Gateway Achieves General Availability for Enterprise AI Governance Databricks Release Notes ·
- Databricks Unity Gateway Reaches General Availability for Enterprise AI Governance Databricks Release Notes ·
- Databricks ABAC GRANT Policies Now Cover Unity Gateway Resources (Beta) Databricks Release Notes ·
- Databricks Unity Catalog ABAC Policies Now Cover Unity Gateway Resources (Beta) Databricks Release Notes ·