Skip to content
Notis

Understand effective access to a Databricks securable

See direct and inherited permissions alongside the access guidance your team follows, then send one report for review.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Get Effective Catalog Permissions

Retrieves effective permissions, including inherited access.

Why this helps

Inherited access can make a permissions review harder to understand when the relevant policy and grants are reviewed separately.

  • Bring published policy context into an access review.
  • Retrieve effective permissions, including inherited grants.
  • Identify possible mismatches for a person to assess.

Setup

Build it in a few focused steps.

  • 1Connect Agenty and Databricks once in the Notis portal.
  • 2Create an automation in Automations, New Automation, or tell Notis in plain language.
  • 3Specify the policy pages to inspect and the securable whose effective permissions Databricks should retrieve.
  • 4Pick the webhook trigger and choose where run reports should go.
  • 5Test with one real securable and verify inherited permissions appear in the report.

Questions about this workflow

How is this different from a direct grants review?

This workflow retrieves effective permissions, which include permissions inherited from parent securables.

Will it revoke access that looks inconsistent?

No. It reports the information for review and does not change permissions.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Agenty to Databricks. A trigger fires from one place; an action lands in another.

Agenty triggers

Databricks actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Add Member to Security Group

Adds a user or group to a Databricks security group.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Delete Custom LLM Agent

Irreversibly deletes a custom LLM agent and all its associated data.

ActionInstant

Create Databricks App

Creates a Databricks app in the workspace.

ActionInstant

Delete Databricks App

Deletes a Databricks app and its associated service principal.

ActionInstant

Deploy Databricks App

Deploys an app from workspace source code and provisions its compute resources.

ActionInstant

Get Databricks App Details

Retrieves an app’s configuration, deployment status, resources, and metadata.

ActionInstant

Get Databricks App Permission Levels

Lists the permission levels available for an app.

ActionInstant

Get Databricks App Permissions

Retrieves who can access an app and their permission levels.

ActionInstant

Connect any two apps with Notis in the middle.

Agenty and Databricks, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Databricks.