Data and AI releases

548 this month · 176 companies

ABAC GRANT policies are generally available for models and services

Generally availableVerified

ABAC GRANT policies for models, model services, model provider services, Model Context Protocol (MCP) services, and agent services are now generally available. These policies dynamically grant Unity Catalog privileges to securable objects whose governed tags match a condition, instead of granting privileges on each object individually.

AI agentsMCPGovernanceObservability

Read on docs.databricks.com

Also shipped Aug 31, 2026Databricks in August 2026 →

More from Unity CatalogEvery Unity Catalog release →

Unity Catalog Skills (Beta)

You can now publish, govern, and share agent skills with Unity Catalog. A skill is a first-class Unity Catalog securable ( catalog.schema.skill ) that follows the SKILL.md specification , so you register it once and control who can discover, use, and update it with the same permissions, tags, and audit that protect your tables.

Beta
Source ↗

Share foreign Delta tables with OpenSharing (Public Preview)

You can now use OpenSharing to share foreign Delta tables, which are Delta-format tables registered in a foreign catalog such as OneLake, a Hive metastore, or AWS Glue. Providers add foreign Delta tables to a share, and recipients access the shared data in read-only format.

Preview
Source ↗

The INSERT, UPDATE, and DELETE privileges are in Beta

The INSERT , UPDATE , and DELETE privileges are in Beta in Unity Catalog. These privileges are least-privilege alternatives to MODIFY that let you grant write access to a table's data without also granting the ability to change its schema or other metadata. The privileges require Databricks Runtime 18.1 or above.

Beta
Source ↗

ABAC DENY policies are in Beta

ABAC DENY policies are in Beta in Unity Catalog. DENY policies can be used to explicitly deny the MANAGE ACCESS CONTROL privilege to prevent specified principals, including object owners, from performing access-management operations. They always take precedence over any grant. For details, see ABAC DENY policies (Beta) .

Beta
Source ↗

External secrets in Unity Catalog (Beta)

External secrets connect a Unity Catalog schema to AWS Secrets Manager. The secrets appear in Unity Catalog as read-only securable objects that you govern with Unity Catalog privileges. Databricks reads their values from AWS Secrets Manager on demand. See External secrets in Unity Catalog .

Beta
Source ↗

Context attributes in ABAC column mask and row filter policies (Beta)

Context attributes for attribute-based access control (ABAC) policies are in Beta. You can now write Unity Catalog ABAC policy conditions that target the context of a request, such as which OAuth application is calling ( request.client_id ) and whether the request runs on behalf of a user ( request.is_on_behalf_of ).

Beta
Source ↗