Skip to main content

Privacera Documentation

Table of Contents

Databricks Unity Catalog connector for PolicySync on Privacera Platform

This topic shows how to configure access control for Databricks Unity Catalog.

Generalized approach for implementing PolicySync

To help you reach compliance, Privacera PolicySync distributes your defined access management policies to the third-party datasources you connect to Privacera.

Use this generalized approach for implementing PolicySync.

  1. Understand how PolicySync works and how it is configured. See PolicySync design and configuration on Privacera Platform.PolicySync design and configuration on Privacera Platform

  2. Decide which PolicySync topology best suits your needs:

  3. Create the required, basic PolicySync configuration. See PolicySync design and configuration on Privacera PlatformPolicySync design and configuration on Privacera Platform

  4. Examine the BASIC and ADVANCED properties, decide which features you want to implement, and set the necessary values in the YAML property file.

Connector name: databricks-sql-analytics

When you create the connector as detailed in PolicySync design and configuration on Privacera Platform, use the following reserved word for the name of the connector:PolicySync design and configuration on Privacera Platform

In formal syntax shown in PolicySync design and configuration on Privacera Platform replace <ConnectorName> with the above and in the example in PolicySync design and configuration on Privacera Platform, replace postgres with the above.PolicySync design and configuration on Privacera PlatformPolicySync design and configuration on Privacera Platform

Prerequisites

Ensure the following prerequisites are met:

  • The value of the Databricks Unity Catalog Workspace URL to connect to.

  • The value of the Databricks personal access token.

  • Determine if your personal access token gives you account admin privileges in Databricks Unity Catalog. By default, PrivaceraCloud assumes that the token does not. If it does, you will need to set the field Enable if the personal access token has account admin privileges to true.

  • Look at the BASIC fields in the table to see if there are other fields you might want to configure, such as catalog names or table names. You can always configure fields after making the initial connection.