Skip to content
Notis

Review direct Unity Catalog grants in context

See direct privilege assignments for the securable related to an Airtop finding, then decide what needs attention.

Trigger

Webhook received

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

Action

Get Catalog Grants

Retrieves permissions assigned directly to a securable object.

Why this helps

Access checks can miss the difference between direct grants and permissions inherited elsewhere.

  • Retrieve direct assignments without conflating them with inherited permissions.
  • Use a browser finding to focus the securable under review.
  • Get a run report for follow-up.

Setup

Build it in a few focused steps.

  • 1Connect Airtop and Databricks once in the Notis portal.
  • 2Create an automation in Automations, New Automation, and name it.
  • 3Tell Notis to identify the securable from the Airtop finding and retrieve its direct grants.
  • 4Pick the Notis webhook trigger and choose where run reports should go.
  • 5Test with one real access finding and verify the securable and grants.

Questions about this workflow

Does this return inherited permissions too?

No. This action returns direct privilege assignments only.

Can it revoke a grant?

No. It only retrieves grant information for review.

When this happens · Trigger

Do this · Action

Supported Triggers and Actions

Notis builds workflows that link Airtop to Databricks. A trigger fires from one place; an action lands in another.

Airtop triggers

Databricks actions

Recurring trigger

Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.

TriggerScheduled

Add Member to Security Group

Adds a user or group to a Databricks security group.

ActionInstant

Webhook trigger

Notis starts this workflow when an external tool or custom backend sends an HTTP request.

TriggerInstant

Delete Custom LLM Agent

Irreversibly deletes a custom LLM agent and all its associated data.

ActionInstant

Create Databricks App

Creates a Databricks app in the workspace.

ActionInstant

Delete Databricks App

Deletes a Databricks app and its associated service principal.

ActionInstant

Deploy Databricks App

Deploys an app from workspace source code and provisions its compute resources.

ActionInstant

Get Databricks App Details

Retrieves an app’s configuration, deployment status, resources, and metadata.

ActionInstant

Get Databricks App Permission Levels

Lists the permission levels available for an app.

ActionInstant

Get Databricks App Permissions

Retrieves who can access an app and their permission levels.

ActionInstant

Connect any two apps with Notis in the middle.

Airtop and Databricks, or any other combination from 1,000+ integrations.

When this happens · Trigger

Do this · Action

Save your first hour today.

7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Databricks.