diff --git a/NEXT_CHANGELOG.md b/NEXT_CHANGELOG.md
index b4585a98d..d3aaf9bd4 100644
--- a/NEXT_CHANGELOG.md
+++ b/NEXT_CHANGELOG.md
@@ -11,3 +11,4 @@
 ### Internal Changes
 
 ### API Changes
+* Added `ExternalAccessEnabled` field to `catalog.UpdateMetastore` struct to support controlling non-DBR client access to metastore entities.
diff --git a/service/catalog/metastores_usage_test.go b/service/catalog/metastores_usage_test.go
index 8304b2bbd..588880d09 100755
--- a/service/catalog/metastores_usage_test.go
+++ b/service/catalog/metastores_usage_test.go
@@ -227,6 +227,7 @@ func ExampleMetastoresAPI_Update_metastores() {
 
 	_, err = w.Metastores.Update(ctx, catalog.UpdateMetastore{
 		Id:      created.MetastoreId,
+		ExternalAccessEnabled: true,
 		NewName: fmt.Sprintf("sdk-%x", time.Now().UnixNano()),
 	})
 	if err != nil {
diff --git a/service/catalog/model.go b/service/catalog/model.go
index d5bc4af35..27110bbbc 100755
--- a/service/catalog/model.go
+++ b/service/catalog/model.go
@@ -5572,6 +5572,10 @@ type UpdateMetastore struct {
 	DeltaSharingRecipientTokenLifetimeInSeconds int64 `json:"delta_sharing_recipient_token_lifetime_in_seconds,omitempty"`
 	// The scope of Delta Sharing enabled for the metastore.
 	DeltaSharingScope UpdateMetastoreDeltaSharingScope `json:"delta_sharing_scope,omitempty"`
+
+   // Whether to allow non-DBR clients to directly access entities under the
+   // metastore.
+   ExternalAccessEnabled bool `json:"external_access_enabled,omitempty"`
 	// Unique ID of the metastore.
 	Id string `json:"-" url:"-"`
 	// New name for the metastore.