|
9 | 9 | - A SQL warehouse for [AWS](https://docs.databricks.com/compute/sql-warehouse/create.html), |
10 | 10 | [Azure](https://learn.microsoft.com/azure/databricks/compute/sql-warehouse/create), or |
11 | 11 | [GCP](https://docs.gcp.databricks.com/compute/sql-warehouse/create.html). |
| 12 | + |
| 13 | + The following video shows how to create a SQL warehouse if you do not already have one available, get its **Server Hostname** and **HTTP Path** values, and set permissions for someone other than the warehouse's owner to use it: |
| 14 | + |
| 15 | + <iframe |
| 16 | + width="560" |
| 17 | + height="315" |
| 18 | + src="https://www.youtube.com/embed/N-Aw9-U3_fE" |
| 19 | + title="YouTube video player" |
| 20 | + frameborder="0" |
| 21 | + allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" |
| 22 | + allowfullscreen |
| 23 | + ></iframe> |
| 24 | + |
12 | 25 | - An all-purpose cluster for [AWS](https://docs.databricks.com/compute/use-compute.html), |
13 | 26 | [Azure](https://learn.microsoft.com/azure/databricks/compute/use-compute), or |
14 | 27 | [GCP](https://docs.gcp.databricks.com/compute/use-compute.html). |
15 | 28 |
|
| 29 | + The following video shows how to create an all-purpose cluster if you do not already have one available, get its **Server Hostname** and **HTTP Path** values, and set permissions for someone other than the cluster's owner to use it: |
| 30 | + |
| 31 | + <iframe |
| 32 | + width="560" |
| 33 | + height="315" |
| 34 | + src="https://www.youtube.com/embed/apgibaelVY0" |
| 35 | + title="YouTube video player" |
| 36 | + frameborder="0" |
| 37 | + allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" |
| 38 | + allowfullscreen |
| 39 | + ></iframe> |
| 40 | + |
16 | 41 | - The SQL warehouse's or cluster's **Server Hostname** and **HTTP Path** values for [AWS](https://docs.databricks.com/integrations/compute-details.html), |
17 | 42 | [Azure](https://learn.microsoft.com/azure/databricks/integrations/compute-details), or |
18 | 43 | [GCP](https://docs.gcp.databricks.com/integrations/compute-details.html). |
|
25 | 50 | for [AWS](https://docs.databricks.com/catalogs/create-catalog.html), |
26 | 51 | [Azure](https://learn.microsoft.com/azure/databricks/catalogs/create-catalog), or |
27 | 52 | [GCP](https://docs.gcp.databricks.com/catalogs/create-catalog.html). |
28 | | - - A schema |
| 53 | + - A schema (formerly known as a database) |
29 | 54 | for [AWS](https://docs.databricks.com/schemas/create-schema.html), |
30 | 55 | [Azure](https://learn.microsoft.com/azure/databricks/schemas/create-schema), or |
31 | 56 | [GCP](https://docs.gcp.databricks.com/schemas/create-schema.html) |
|
34 | 59 | for [AWS](https://docs.databricks.com/tables/managed.html), |
35 | 60 | [Azure](https://learn.microsoft.com/azure/databricks/tables/managed), or |
36 | 61 | [GCP](https://docs.gcp.databricks.com/tables/managed.html) |
37 | | - within that schema. |
| 62 | + within that schema (formerly known as a database). |
| 63 | + |
| 64 | + The following video shows how to create a catalog, schema (formerly known as a database), and a table in Unity Catalog if you do not already have them available, and set privileges for someone other than their owner to use them: |
| 65 | + |
| 66 | + <iframe |
| 67 | + width="560" |
| 68 | + height="315" |
| 69 | + src="https://www.youtube.com/embed/ffNnq-6bpd4" |
| 70 | + title="YouTube video player" |
| 71 | + frameborder="0" |
| 72 | + allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" |
| 73 | + allowfullscreen |
| 74 | + ></iframe> |
38 | 75 |
|
39 | 76 | This table must contain the following column names and their data types: |
40 | 77 |
|
|
86 | 123 | ); |
87 | 124 | ``` |
88 | 125 |
|
| 126 | + <Info> |
| 127 | + In Databricks, a table's _schema_ is different than a _schema_ (formerly known as a database) in a catalog-schema object relationship in Unity Catalog. |
| 128 | + </Info> |
| 129 | + |
89 | 130 | - Within Unity Catalog, a volume |
90 | 131 | for [AWS](https://docs.databricks.com/volumes/utility-commands.html), |
91 | 132 | [Azure](https://learn.microsoft.com/azure/databricks/volumes/utility-commands), |
92 | | - or [GCP](https://docs.gcp.databricks.com/volumes/utility-commands.html) |
93 | | - within the same schema as the table. |
94 | | -- For Databricks personal access token authentication to the workspace, the |
95 | | - Databricks personal access token value for |
96 | | - [AWS](https://docs.databricks.com/dev-tools/auth/pat.html#databricks-personal-access-tokens-for-workspace-users), |
97 | | - [Azure](https://learn.microsoft.com/azure/databricks/dev-tools/auth/pat#azure-databricks-personal-access-tokens-for-workspace-users), or |
98 | | - [GCP](https://docs.gcp.databricks.com/dev-tools/auth/pat.html#databricks-personal-access-tokens-for-workspace-users). |
99 | | - This token must be for the workspace user who |
100 | | - has the appropriate access permissions to the catalog, schema, table, volume, and cluster or SQL warehouse, |
| 133 | + or [GCP](https://docs.gcp.databricks.com/volumes/utility-commands.html). The volume can be in the same |
| 134 | + schema (formerly known as a database) as the table, or the volume and table can be in separate schemas. In either case, both of these |
| 135 | + schemas must share the same parent catalog. |
| 136 | + |
| 137 | + The following video shows how to create a catalog, schema (formerly known as a database), and a volume in Unity Catalog if you do not already have them available, and set privileges for someone other than their owner to use them: |
| 138 | + |
| 139 | + <iframe |
| 140 | + width="560" |
| 141 | + height="315" |
| 142 | + src="https://www.youtube.com/embed/yF9DJphhQQc" |
| 143 | + title="YouTube video player" |
| 144 | + frameborder="0" |
| 145 | + allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" |
| 146 | + allowfullscreen |
| 147 | + ></iframe> |
| 148 | + |
101 | 149 | - For Databricks managed service principal authentication (using Databricks OAuth M2M) to the workspace: |
102 | 150 |
|
103 | 151 | - A Databricks managed service principal. |
104 | | - This service principal must have the appropriate access permissions to the catalog, schema, table, volume, and cluster or SQL warehouse. |
| 152 | + This service principal must have the appropriate access permissions to the catalog, schema (formerly known as a database), table, volume, and cluster or SQL warehouse. |
105 | 153 | - The service principal's **UUID** (or **Client ID** or **Application ID**) value. |
106 | 154 | - The OAuth **Secret** value for the service principal. |
107 | 155 |
|
|
110 | 158 | [GCP](https://docs.gcp.databricks.com/dev-tools/auth/oauth-m2m.html). |
111 | 159 |
|
112 | 160 | <Note> |
113 | | - For Azure Databricks, this connector only supports Databricks managed service principals. |
| 161 | + For Azure Databricks, this connector only supports Databricks managed service principals for authentication. |
114 | 162 | Microsoft Entra ID managed service principals are not supported. |
115 | 163 | </Note> |
116 | 164 |
|
117 | | - The following video shows how to create a Databricks managed service principal: |
| 165 | + The following video shows how to create a Databricks managed service principal if you do not already have one available: |
118 | 166 |
|
119 | 167 | <iframe |
120 | 168 | width="560" |
|
126 | 174 | allowfullscreen |
127 | 175 | ></iframe> |
128 | 176 |
|
| 177 | +- For Databricks personal access token authentication to the workspace, the |
| 178 | + Databricks personal access token value for |
| 179 | + [AWS](https://docs.databricks.com/dev-tools/auth/pat.html#databricks-personal-access-tokens-for-workspace-users), |
| 180 | + [Azure](https://learn.microsoft.com/azure/databricks/dev-tools/auth/pat#azure-databricks-personal-access-tokens-for-workspace-users), or |
| 181 | + [GCP](https://docs.gcp.databricks.com/dev-tools/auth/pat.html#databricks-personal-access-tokens-for-workspace-users). |
| 182 | + This token must be for the workspace user who |
| 183 | + has the appropriate access permissions to the catalog, schema (formerly known as a database), table, volume, and cluster or SQL warehouse, |
| 184 | + |
| 185 | + The following video shows how to create a Databricks personal access token if you do not already have one available: |
| 186 | + |
| 187 | + <iframe |
| 188 | + width="560" |
| 189 | + height="315" |
| 190 | + src="https://www.youtube.com/embed/OzEU2miAS6I" |
| 191 | + title="YouTube video player" |
| 192 | + frameborder="0" |
| 193 | + allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" |
| 194 | + allowfullscreen |
| 195 | + ></iframe> |
| 196 | + |
129 | 197 | - The Databricks workspace user or Databricks managed service principal must have the following _minimum_ set of permissions and privileges to write to an |
130 | 198 | existing volume or table in Unity Catalog: |
131 | 199 |
|
|
140 | 208 | - To access a Unity Catalog volume, the following privileges: |
141 | 209 |
|
142 | 210 | - `USE CATALOG` on the volume's parent catalog in Unity Catalog. |
143 | | - - `USE SCHEMA` on the volume's parent schema in Unity Catalog. |
| 211 | + - `USE SCHEMA` on the volume's parent schema (formerly known as a database) in Unity Catalog. |
144 | 212 | - `READ VOLUME` and `WRITE VOLUME` on the volume. |
145 | 213 |
|
146 | 214 | Learn how to check and set Unity Catalog privileges for |
147 | 215 | [AWS](https://docs.databricks.com/data-governance/unity-catalog/manage-privileges/index.html#show-grant-and-revoke-privileges), |
148 | 216 | [Azure](https://learn.microsoft.com/azure/databricks/data-governance/unity-catalog/manage-privileges/#grant), or |
149 | 217 | [GCP](https://docs.gcp.databricks.com/data-governance/unity-catalog/manage-privileges/index.html#show-grant-and-revoke-privileges). |
150 | 218 |
|
151 | | - The following videos shows how to grant a Databricks managed service principal privileges to a Unity Catalog volume: |
152 | | - |
153 | | - <iframe |
154 | | - width="560" |
155 | | - height="315" |
156 | | - src="https://www.youtube.com/embed/DykQRxgh2aQ" |
157 | | - title="YouTube video player" |
158 | | - frameborder="0" |
159 | | - allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture" |
160 | | - allowfullscreen |
161 | | - ></iframe> |
162 | | - |
163 | 219 | - To access a Unity Catalog table, the following privileges: |
164 | 220 |
|
165 | 221 | - `USE CATALOG` on the table's parent catalog in Unity Catalog. |
166 | | - - `USE SCHEMA` on the tables's parent schema in Unity Catalog. |
| 222 | + - `USE SCHEMA` on the tables's parent schema (formerly known as a database) in Unity Catalog. |
167 | 223 | - `MODIFY` and `SELECT` on the table. |
168 | 224 |
|
169 | 225 | Learn how to check and set Unity Catalog privileges for |
|
0 commit comments