---
title: "Databricks"
slug: "databricks"
status: "update"
updated: 2025-07-21T08:41:48Z
published: 2025-07-21T08:41:48Z
canonical: "docs.plainid.io/databricks"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://docs.plainid.io/llms.txt
> Use this file to discover all available pages before exploring further.

# Databricks

This Authorizer supports the **SaaS Authorization Management** pattern. For more details, see the [SaaS Authorization Management documentation](https://docs.plainid.io/v1/docs/saas-policy-management-authorizers).

SaaS Authorization Management provides out-of-the-box support for leading vendors such as Databricks. The Platform enables centralized policy management while supporting distributed deployment across an organization’s technology stack.

Integration is achieved through **Policy Orchestration**, which connects to SaaS vendors using their native APIs. This setup allows PlainID to discover, manage, and synchronize Authorization Policies across systems while leveraging vendor-specific capabilities.

---

## Databricks Overview

**Databricks** is a cloud-based, unified analytics and AI platform. It enables organizations to process large-scale data using multiple programming languages (e.g., Python, SQL, R).

Databricks includes Unity Catalog, which is a centralized data catalog for all objects within Databricks. PlainID supports Policy Orchestration for Databricks only through the usage of Unit Catalog.  

Through integration with PlainID, organizations can:

* Manage Databricks functions through business-driven Policies that enforce row-level filtering and column-level masking.
* Gain centralized visibility and control over row-level access and data masking across Databricks schemas.
* Detect and flag policy drift across Databricks environments to support consistent lifecycle and compliance management.


---

## Databricks Authorization Model

![Databricks Authorization Model](https://cdn.document360.io/726c7002-05a9-480e-b986-42c9e8824acd/Images/Documentation/Group%20289789.png){height="" width=""}


**Flow Description**
In Unity Catalog, access to a securable object (e.g., Table or View) is evaluated through two key mechanisms:

- **Privilege Assignment to Groups**

   - Access is granted when the requesting user or service principal belongs to a group with the required `SELECT` privilege on the securable object, or on a higher-level container such as a schema or catalog.

-  **Policy Enforcement**

   - If row-level or column-level Policies are defined, access is further refined based on the logic embedded in those functions. These Policies dynamically filter rows or mask columns depending on the user’s attributes, group membership, or session context.

:::(Internal) (Gal's comments)
I suggest using “Policies” and find the right place to explain they are defined as “SQL Functions” this way we can be consistent also with general explanations and other vendors.
:::

---

### Databricks Policies

PlainID enables the use of **Databricks Functions** to enforce fine-grained, dynamic access policies Databricks Functions are scalar SQL expressions used to enforce data security policies through column masking and row-level filtering based on user context.

#### Row Filter Functions

Row filters enforce row-level access control by evaluating whether each row in a table should be visible to the querying user. This provides fine-grained access control, ensuring users only see data they’re authorized to view. Row filters return a Boolean value:

* `TRUE` — include the row in query results.
* `FALSE` — exclude the row from query results.

#### Column Mask Functions

Column masking enforce column-level data protection by applying a masking function at query execution. The function replaces each reference to the target column with either the original or a masked value, based on the querying user’s identity or attributes context. Masking ensures privacy and compliance by showing masked values to unauthorized users while preserving access for those permitted.

For details on implementing these policies, see [Data Access Policies](https://docs.plainid.io/v1/docs/data-access-policies).