See direct Unity Catalog grants beside an abuse report
Notis can retrieve direct grants for the securable named in a report request and summarize the findings with the report details.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Get Catalog Grants
Retrieves permissions assigned directly to a securable object.
Why this helps
A report can prompt an access review, but checking direct grants separately adds another task and another place to keep track.
- Retrieve direct privilege assignments for a specified securable.
- Keep the report and grant findings together in a review summary.
- Reduce the steps required to start an access review.
Setup
Build it in a few focused steps.
- 1Connect Abuselpdb and Databricks once in the Notis portal.
- 2Create an automation in Automations, New Automation, and give it a name.
- 3In one instruction, ask Notis to summarize submitted abuse reports and retrieve direct grants for the Databricks securable included in each request.
- 4Pick the webhook trigger and choose where run reports should go.
- 5Test with one real report and a securable you can inspect.
Questions about this workflow
Does this include inherited permissions?
No. The direct grants action returns privileges assigned directly to the securable. Use an effective permissions lookup when inherited permissions are needed.
Can the workflow identify a Databricks securable from an IP address alone?
No. The webhook request needs to include the securable because the available action requires one.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Abuselpdb to Databricks. A trigger fires from one place; an action lands in another.
Abuselpdb triggers
Databricks actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add Member to Security Group
Adds a user or group to a Databricks security group.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Custom LLM Agent
Irreversibly deletes a custom LLM agent and all its associated data.
Create Databricks App
Creates a Databricks app in the workspace.
Delete Databricks App
Deletes a Databricks app and its associated service principal.
Deploy Databricks App
Deploys an app from workspace source code and provisions its compute resources.
Get Databricks App Details
Retrieves an app’s configuration, deployment status, resources, and metadata.
Get Databricks App Permission Levels
Lists the permission levels available for an app.
Get Databricks App Permissions
Retrieves who can access an app and their permission levels.
Connect any two apps with Notis in the middle.
Abuselpdb and Databricks, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Databricks.