An approach that blocks access whenever enforcement can't be assured. For instance, unless a principal is exempt, compute below Databricks Runtime 16.4 can't read tables secured by ABAC.
Read more: Databricks docs
In the Ultra Transcenders books
Each book explains Fail-closed in context, with comparison tables and the common traps.
Terms in this definition
- Principal
A user, group or service principal: anything that can receive a privilege grant.
- Databricks Runtime
The software image, Apache Spark among its core parts, that Azure Databricks installs on compute. Long-term support (LTS) releases are the advised choice when job compute runs production work.
- CRUD
Shorthand for create, read, update and delete, the four basic things you do with data. Data-plane roles in Azure Cosmos DB, for instance, authorise those operations on items.
- ABAC
An access-control approach in Unity Catalog where governed tags determine what a policy covers. A single policy set on a metastore, catalog, schema or table can therefore filter rows, mask columns, or grant or deny access across many objects at once.