See direct grants behind an AgentQL data finding
Notis can use an AgentQL finding to retrieve direct grants on the relevant Unity Catalog object, then report what it found.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Get Catalog Grants
Retrieves permissions assigned directly to a securable object.
Why this helps
Direct grants can be hard to distinguish from inherited access when a research question turns into an access check.
- See direct assignments without inherited permissions
- Tie a grant review to the relevant finding
- Reduce back and forth during access checks
Setup
Build it in a few focused steps.
- 1Connect AgentQL and Databricks once in the Notis portal.
- 2Create an automation in Automations, New Automation.
- 3In one instruction, identify the securable from the research and retrieve its direct grants.
- 4Choose the Notis webhook trigger and set the run report destination.
- 5Test with one real securable and check the grant results.
Questions about this workflow
Are inherited permissions included?
No. This action returns privileges directly assigned to principals and excludes inherited permissions.
Can the automation determine the securable on its own?
Only if AgentQL's returned data identifies it or your instruction supplies enough context.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Agentql to Databricks. A trigger fires from one place; an action lands in another.
Agentql triggers
Databricks actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add Member to Security Group
Adds a user or group to a Databricks security group.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Custom LLM Agent
Irreversibly deletes a custom LLM agent and all its associated data.
Create Databricks App
Creates a Databricks app in the workspace.
Delete Databricks App
Deletes a Databricks app and its associated service principal.
Deploy Databricks App
Deploys an app from workspace source code and provisions its compute resources.
Get Databricks App Details
Retrieves an app’s configuration, deployment status, resources, and metadata.
Get Databricks App Permission Levels
Lists the permission levels available for an app.
Get Databricks App Permissions
Retrieves who can access an app and their permission levels.
Connect any two apps with Notis in the middle.
Agentql and Databricks, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Databricks.