Understand effective permissions behind an access finding
Get a broader view of who can access a Unity Catalog securable, including permissions inherited through its parents.
Trigger
Webhook received
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Action
Get Effective Catalog Permissions
Retrieves effective permissions, including inherited access.
Why this helps
Direct grants alone may not explain why a user or group can access a data object.
- Include inherited privileges in the access picture.
- Tie a browser observation to a specific securable.
- Give reviewers a report to guide follow-up.
Setup
Build it in a few focused steps.
- 1Connect Airtop and Databricks once in the Notis portal.
- 2Create an automation in Automations, New Automation, and name it.
- 3Tell Notis to identify the securable from the Airtop finding and retrieve its effective permissions.
- 4Pick the Notis webhook trigger and choose where run reports should go.
- 5Test with one real access finding and verify the permission scope.
Questions about this workflow
How is this different from a direct grants review?
Effective permissions include privileges conveyed through direct assignments and inheritance.
Will it update access?
No. It retrieves permissions for inspection.
When this happens · Trigger
Do this · Action
Supported Triggers and Actions
Notis builds workflows that link Airtop to Databricks. A trigger fires from one place; an action lands in another.
Airtop triggers
Databricks actions
Recurring trigger
Notis starts this workflow on a schedule, such as daily, weekly, or during business hours.
Add Member to Security Group
Adds a user or group to a Databricks security group.
Webhook trigger
Notis starts this workflow when an external tool or custom backend sends an HTTP request.
Delete Custom LLM Agent
Irreversibly deletes a custom LLM agent and all its associated data.
Create Databricks App
Creates a Databricks app in the workspace.
Delete Databricks App
Deletes a Databricks app and its associated service principal.
Deploy Databricks App
Deploys an app from workspace source code and provisions its compute resources.
Get Databricks App Details
Retrieves an app’s configuration, deployment status, resources, and metadata.
Get Databricks App Permission Levels
Lists the permission levels available for an app.
Get Databricks App Permissions
Retrieves who can access an app and their permission levels.
Connect any two apps with Notis in the middle.
Airtop and Databricks, or any other combination from 1,000+ integrations.
When this happens · Trigger
Do this · Action
Save your first hour today.
7-day trial of any paid plan, with 20$ of usage included.
No card. Works with personal or business Databricks.