Role-based access control (RBAC) is in Public Preview

PreviewJul 22, 2026VerifiedAdded Sep 22, 2026

Role-based access control (RBAC) is now in Public Preview. RBAC lets users assume a role in Databricks using only that role's permissions for the duration of the session instead of their own accumulated permissions. This enables exclusive access.

Security

Read Databricks's release notes

https://docs.databricks.com/aws/en/release-notes/product/2026/july#role-based-access-control-rbac-is-in-public-preview

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More Unity Catalog releases

Unity CatalogJul 22, 2026

Databricks-hosted sample datasets available in the samples catalog

The sample datasets /databricks-datasets mounted to DBFS are now also available in the samples catalog as samples.databricks.datasets , made available through OpenSharing. The datasets volume hosts a collection of Databricks-provided datasets that you can use to build and test data pipelines.

UpdateGovernanceData integrationObservabilitySource

Unity CatalogJul 22, 2026

Governance Hub is in Beta

Governance Hub is in Beta . Governance Hub is a centralized, account-level UI in the account console for monitoring governance across your Databricks account. It provides a unified view of data health and coverage, AI usage and spend, and cost drivers, with prioritized insights and recommendations. All views respect existing permissions.

BetaGovernanceSecurityPricingSource

Unity CatalogJul 22, 2026

Automated setup for S3 external locations

You can now create an S3 external location using automated setup, the recommended method for connecting an S3 bucket to Databricks. Automated setup uses AWS IAM temporary delegation to configure your external location and provision all required resources, including the IAM role, storage credential, and external location.

UpdateSecuritySource

Unity CatalogJul 24, 2026

Governed tags system table is in Beta

The system.tags.governed_tags system table is in Beta . This table contains a record for each governed tag key in your account, including customer-created and system-generated tags. Use it to programmatically determine which tags in your account are governed. See Governed tags system table reference .

BetaGovernanceSource

Unity CatalogJul 28, 2026

Python UDTFs in Unity Catalog are now generally available

Registering Python user-defined table functions (UDTFs) in Unity Catalog is now generally available in Databricks Runtime 18. A Unity Catalog Python UDTF is a governed function that returns a table, invoked in the FROM clause of a SQL statement to return multiple rows and columns.

GASQLGovernanceObservabilitySource

Unity CatalogJul 16, 2026

Scala and Java UDFs in Unity Catalog are now generally available

Register Scala and Java user-defined functions (UDFs) in Unity Catalog and reuse them across notebooks, jobs, and SQL warehouses with Unity Catalog governance. Reuse existing JVM logic and get better performance than Python UDFs on all compute, including serverless. See Scala and Java user-defined functions (UDFs) in Unity Catalog .

GASQLGovernanceNotebooksSource

Unity CatalogJul 15, 2026

Data Classification is now available by default for additional compliance standards

Data Classification is now available by default for workspaces with the compliance security profile enabled and either C5, TISAX, or IRAP controls selected.

UpdateGovernanceSecuritySource

Unity CatalogJul 14, 2026

Request for Access will soon be enabled by default for all workspaces

In an upcoming release, Request for Access will be enabled by default for all workspaces, and access requests will be routed to the owner of the requested Unity Catalog object via email. You can configure access request destinations at any time in the metastore settings. The legacy workspace-level access request settings will be deprecated.

UpdateGovernanceObservabilitySource

Also shipped on Jul 22, 2026

Snowflake SnowflakeJul 22, 2026

External OAuth and configurable scopes for MCP servers (General availability)

Two new hierarchical parameters let you bind MCP servers to your organization’s existing identity provider (IdP) and control which OAuth scopes MCP clients discover. This enables MCP clients such as Claude, Cursor, and ChatGPT to authenticate against your corporate IdP instead of Snowflake OAuth.

GALLMsMCPSecuritySource

OpenAI OpenAI APIJul 22, 2026

OpenAI API adds hard spend limits for organizations and projects

A monthly cap makes affected API requests return 429 once tracked spend reaches the limit. Spend alerts can warn before traffic is interrupted.

PricingDeveloper toolsSource

Vercel AI SDK and AI GatewayJul 22, 2026

AI Gateway now supports streaming transcription

AI Gateway now supports streaming transcription . Previously, transcription required a complete audio file and returned the full transcript in a single response. Now you can stream audio in as it's captured and get transcript updates back as the model produces them, keeping latency low for uses like live captioning and voice input.

BetaAI agentsStreamingDeveloper toolsSource

Supabase SupabaseJul 22, 2026

Extension version pinning in CREATE or ALTER EXTENSION deprecated

Specifying an explicit version in CREATE or ALTER EXTENSION is deprecated. From 2026-08-05 the version clause is ignored and the extension's default version is installed, with a warning.

DeprecationSource

Snowflake Cortex CodeJul 22, 2026

CoCo Desktop v1.20.0

CoCo Desktop v1.20.0 focuses on a smoother, more reliable chat: This release also fixes a chat-memory crash during long editing sessions, stops plan cards from stacking up in the transcript, and corrects the Manage Connections radio buttons in light and dark themes. For more information, see Cortex Code Desktop v1.20.0 release notes .

UpdatePricingCoding agentsSource

Snowflake SnowflakeJul 22, 2026

Refresh multiple dynamic tables in one ALTER statement

You can now refresh multiple dynamic tables in a single ALTER DYNAMIC TABLE ... REFRESH statement by supplying a comma-separated list of table names. Snowflake merges the upstream dependencies of every listed dynamic table into one pipeline and refreshes all of them at a single data timestamp. Shared upstreams refresh exactly once.

UpdateStreamingData integrationSource