Authorization Rules

Owned by Ciprian LUCACI
Last updated: Jun 28, 2023
2 min read

Lakehouse Monitor follows closely the rules applied by Databricks for each user according to the authorization groups and the particular settings for each user.

 

Authorization rules implemented in the Reports section are the following: 

  • job reports // costs and telemetry panels - show jobs that are seen by the current logged in user in Databricks or jobs that don't exist anymore in Databricks, but still are in Lakehouse Monitor database 

  • all purpose clusters // clusters tab - cost and time left panels - show clusters that are seen by the current logged in user in Databricks or clusters that don't exist anymore in Databricks, but exist in Lakehouse Monitor database 

  • all purpose clusters // jobs tab - right panel - show jobs that ran on all purpose clusters that are seen by the current logged in user in Databricks or jobs that don't exist anymore in Databricks, but are in Lakehouse Monitor database 

  • all purpose clusters // notebooks tab - right panel - show notebooks that ran on all purpose clusters that are seen by the current logged in user in Databricks 

  • all purpose clusters // jobs and notebooks distribution left panel - show jobs/notebooks that ran on all purpose clusters that are seen by the current logged in user in Databricks or jobs that don't exist anymore in Databricks, but are in Lakehouse Monitor database with and the number of runs on all purpose clusters (job X ran 3 times, one time on cluster A and twice on cluster B where A and B are authorized or not)

  • delta live tables - show Delta Live Tables pipelines that are seen by the current logged in user in Databricks or pipelines that don't exist anymore in Databricks, but Lakehouse Monitor database has gather in the past telemetry for updates

 

Deployment configuration also supports showing or hiding already deleted jobs. Use configuration flag SHOW_DELETED_JOBS (default false) that filters jobs.