com.databricks.sdk.service.catalog

Interface PoliciesService

@Generated
public interface PoliciesService

Attribute-Based Access Control (ABAC) provides high leverage governance for enforcing compliance policies in Unity Catalog. With ABAC policies, access is controlled in a hierarchical and scalable manner, based on data attributes rather than specific resources, enabling more flexible and comprehensive access control. ABAC policies in Unity Catalog support conditions on securable properties, governance tags, and environment contexts. Callers must have the `MANAGE` privilege on a securable to view, create, update, or delete ABAC policies.

This is the high-level interface, that contains generated methods.

Evolving: this interface is under development. Method signatures may change.

Method Summary

Modifier and Type	Method and Description
PolicyInfo	createPolicy(CreatePolicyRequest createPolicyRequest) Creates a new policy on a securable.
DeletePolicyResponse	deletePolicy(DeletePolicyRequest deletePolicyRequest) Delete an ABAC policy defined on a securable.
PolicyInfo	getPolicy(GetPolicyRequest getPolicyRequest) Get the policy definition on a securable
ListPoliciesResponse	listPolicies(ListPoliciesRequest listPoliciesRequest) List all policies defined on a securable.
PolicyInfo	updatePolicy(UpdatePolicyRequest updatePolicyRequest) Update an ABAC policy on a securable.

Method Detail

createPolicy

PolicyInfo createPolicy(CreatePolicyRequest createPolicyRequest)

Creates a new policy on a securable. The new policy applies to the securable and all its descendants.

deletePolicy

DeletePolicyResponse deletePolicy(DeletePolicyRequest deletePolicyRequest)

Delete an ABAC policy defined on a securable.

getPolicy

PolicyInfo getPolicy(GetPolicyRequest getPolicyRequest)

Get the policy definition on a securable

listPolicies

ListPoliciesResponse listPolicies(ListPoliciesRequest listPoliciesRequest)

List all policies defined on a securable. Optionally, the list can include inherited policies defined on the securable's parent schema or catalog.

PAGINATION BEHAVIOR: The API is by default paginated, a page may contain zero results while still providing a next_page_token. Clients must continue reading pages until next_page_token is absent, which is the only indication that the end of results has been reached.

updatePolicy

PolicyInfo updatePolicy(UpdatePolicyRequest updatePolicyRequest)

Update an ABAC policy on a securable.