Spot access grants that need a second look
Get a concise review of direct Databricks grants alongside the Affinity deals and access policy you name.
Trigger
Recurring schedule
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Action
Get Catalog Grants
Retrieves permissions assigned directly to a securable object.
Why this helps
Access reviews become slow when deal context and Unity Catalog permissions live in separate tools.
- Bring pipeline context into a recurring permissions review.
- Review direct grants without implying inherited permissions are included.
- Surface exceptions for a human to assess.
Setup
Build it in a few focused steps.
- 1Connect Affinity and Databricks once in the Notis portal.
- 2Create an automation in Automations, New Automation, with a name and prompt.
- 3Describe the Affinity deal context, Unity Catalog securables, principals, and expected direct privileges to review.
- 4Choose a recurring schedule and the channel for run reports.
- 5Test with one real example and confirm the report distinguishes direct grants from inherited access.
Questions about this workflow
Does this show effective permissions?
No. This action returns direct grants without inherited permissions. Use the report as a direct-grant review, not a complete effective-access audit.
Can the workflow determine the expected access policy from Affinity alone?
No. Name the policy or provide the expected principals and privileges in your instruction. Affinity deal data does not define Databricks permissions by itself.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Affinity to Databricks. A trigger fires from one place; an action lands in another.
Affinity triggers
Databricks actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add Member to Security Group
Adds a user or group to a Databricks security group.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Custom LLM Agent
Irreversibly deletes a custom LLM agent and all its associated data.
Create Databricks App
Creates a Databricks app in the workspace.
Delete Databricks App
Deletes a Databricks app and its associated service principal.
Deploy Databricks App
Deploys an app from workspace source code and provisions its compute resources.
Get Databricks App Details
Retrieves an app’s configuration, deployment status, resources, and metadata.
Get Databricks App Permission Levels
Lists the permission levels available for an app.
Get Databricks App Permissions
Retrieves who can access an app and their permission levels.
Connect any two apps with Notis in the middle.
Affinity and Databricks, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Databricks.