Advanced Configuration for Access Management for Databricks Unity Catalog¶
| Configuration | Description |
|---|---|
| Selective Resource Type Loading | Configure the connector to selectively enable/disable loading of specific resource types when the token has limited permissions |
| Manage Resources List | Configure the connector to manage the resources list in the Databricks Unity Catalog |
| Users, Groups, and Roles Management | Configure the connector to manage the permissions of users, groups, and roles in the Databricks Unity Catalog |
| Create and Manage Principals in Unity Catalog | Configure the connector to create and manage principals in the Databricks Unity Catalog |
| Using Databricks Native Public Group | Configure the connector to use Databricks native public group for managing all groups permissions in Unity Catalog |
| OAuth Authentication | Configure the connector to use OAuth authentication for the Databricks Unity Catalog |
| Azure AD (Entra ID) OAuth authentication | Configure the connector to use Microsoft Entra ID (Azure AD) client credentials for Azure Databricks (azure_oauth) |
| Switching from JDBC to API | Using API to manage the permissions in Unity Catalog |
| Fine Tuning JDBC Connection | Optimizing JDBC connection parameters for Databricks Unity Catalog endpoints. Helps improve connection stability and performance based on your environment and workload requirements. |
| Configure ResourceLoader | Configure resource loader (Only if connector configured to use JDBC) |
| Map principal names for special characters | Configure the connector to replace special characters in user, group, and role names in the Unity Catalog |
| User Email Case Conversion | Configure user email case sensitivity and case conversion (none / lower / upper) when syncing users to Unity Catalog |
| Using the {OWNER} Principal | Use {OWNER} in Access Resource policies so PolicySync grants follow the Unity Catalog resource owner, including after ownership transfer |
| Manage Access Audits | Configure the connector to manage access audits in the Databricks Unity Catalog |
| Multiple MetaStores and Connectors | Recommendations to manage multiple Databricks Unity Catalog MetaStores and multiple Privacera connectors for the same MetaStore |
| Managing Foreign GDC Catalog | Configure the connector to manage Foreign catalog and its resources available in the Databricks Unity Catalog |
| Enable Native Support | Configure the connector to enable native support for Databricks Unity Catalog |
| Enable Secure View | Configure the connector to enable secure view for Databricks Unity Catalog |
| Prevent DBX API throttling | Configure the connector to handle retrying of DBX SCIM API requests and prevent throttling |
| Prevent Thread Pool Stalls | Configure timeouts and enable ThreadPool V2 to Preventing Thread Pool Stalls in Databricks Unity Catalog |
| Manage Permissions List | Configure the connector to manage permissions list in the Databricks Unity Catalog |
| Disable Access Control | Disable access management so PolicySync applies only masking; access policies created in the portal will not grant permissions |
| Use Null by Default in Masking Else Condition | Control whether masking policies use else null or the original column value when no condition matches (default: false, uses original value) |
| Skip Foreign Catalogs in Scheduled Scans | Configure the connector to skip loading foreign catalogs resources during scheduled based resource loading in Databricks Unity Catalog |
| Resource federation synchronization between Unity Catalog and AWS Lakeformation | Synchronize federated catalog resources from Unity catalog to aws lakeformation |
| Configure Event-Driven On-Demand Sync | Enable event-driven synchronization using Azure Event Hub for real-time, targeted policy updates in Databricks Unity Catalog |
| Configure API-Driven On-Demand Sync | Enable API-driven synchronization using the connector REST API for real-time, targeted policy updates in Databricks Unity Catalog |
| Skip Child Resource Loading for On-Demand Sync | Configure on-demand sync to load only requested resources instead of the full subtree (skip unrequested children, retain stored children, honor *) |
| Reusable UDF | Use reusable UDF for row-level filter |
| Microsoft Purview tag sync | Enable Microsoft Purview tag synchronization to pull classifications and tags into OMNI Metadata Service (MDS) |
- Prev topic: Setup
- Next topic: Troubleshooting