ABAC GRANT policies are generally available for models and services

GAAug 31, 2026VerifiedAdded Sep 22, 2026

ABAC GRANT policies for models, model services, model provider services, Model Context Protocol (MCP) services, and agent services are now generally available. These policies dynamically grant Unity Catalog privileges to securable objects whose governed tags match a condition, instead of granting privileges on each object individually.

AI agents MCP Governance Observability

Read Databricks's release notes

https://docs.databricks.com/aws/en/release-notes/product/2026/august#abac-grant-policies-are-generally-available-for-models-and-services

Summaries of vendors' own notes. Product names and logos belong to their owners; logos via logo.dev.

More Unity Catalog releases

Unity CatalogAug 28, 2026

Unity Catalog Skills (Beta)

You can now publish, govern, and share agent skills with Unity Catalog. A skill is a first-class Unity Catalog securable ( catalog.schema.skill ) that follows the SKILL.md specification , so you register it once and control who can discover, use, and update it with the same permissions, tags, and audit that protect your tables.

BetaAI agentsMCPGovernanceSource

Unity CatalogAug 27, 2026

Share foreign Delta tables with OpenSharing (Public Preview)

You can now use OpenSharing to share foreign Delta tables, which are Delta-format tables registered in a foreign catalog such as OneLake, a Hive metastore, or AWS Glue. Providers add foreign Delta tables to a share, and recipients access the shared data in read-only format.

PreviewGovernanceObservabilitySource

Unity CatalogAug 24, 2026

Secrets in Unity Catalog will soon be available by default for workspaces with the compliance security profile enabled

Secrets in Unity Catalog will be available by default for workspaces with the compliance security profile enabled in late September 2026. Store, govern, and access secrets as securable objects in Unity Catalog.

UpdateGovernanceSecurityObservabilitySource

Unity CatalogAug 24, 2026

The INSERT, UPDATE, and DELETE privileges are in Beta

The INSERT , UPDATE , and DELETE privileges are in Beta in Unity Catalog. These privileges are least-privilege alternatives to MODIFY that let you grant write access to a table's data without also granting the ability to change its schema or other metadata. The privileges require Databricks Runtime 18.1 or above.

BetaGovernanceObservabilitySource

Unity CatalogSep 8, 2026

ABAC DENY policies are in Beta

ABAC DENY policies are in Beta in Unity Catalog. DENY policies can be used to explicitly deny the MANAGE ACCESS CONTROL privilege to prevent specified principals, including object owners, from performing access-management operations. They always take precedence over any grant. For details, see ABAC DENY policies (Beta) .

BetaGovernanceObservabilitySource

Unity CatalogSep 9, 2026

External secrets in Unity Catalog (Beta)

External secrets connect a Unity Catalog schema to AWS Secrets Manager. The secrets appear in Unity Catalog as read-only securable objects that you govern with Unity Catalog privileges. Databricks reads their values from AWS Secrets Manager on demand. See External secrets in Unity Catalog .

BetaGovernanceSecurityObservabilitySource

Unity CatalogAug 21, 2026

Context attributes in ABAC column mask and row filter policies (Beta)

Context attributes for attribute-based access control (ABAC) policies are in Beta. You can now write Unity Catalog ABAC policy conditions that target the context of a request, such as which OAuth application is calling ( request.client_id ) and whether the request runs on behalf of a user ( request.is_on_behalf_of ).

BetaAI agentsSQLGovernanceSource

Unity CatalogSep 11, 2026

Sharing foreign Iceberg tables with OpenSharing is now generally available

Sharing and reading foreign Iceberg tables with OpenSharing is now generally available. Providers can share Iceberg tables federated from foreign Iceberg catalogs using Lakehouse Federation, including to recipients using external Iceberg clients.

GAGovernanceApache IcebergObservabilitySource

Also shipped on Aug 31, 2026

Google Cloud BigQueryAug 31, 2026

You can now create, store , and manage pipelines in Git folders

You can now create, store , and manage pipelines in Git folders. This feature is in Preview .

PreviewData integrationSource

Google Cloud BigQueryAug 31, 2026

BigQuery now supports TabFM , Google's pre-trained foundation model for tabular data

BigQuery now supports TabFM , Google's pre-trained foundation model for tabular data. TabFM enables zero-shot regression and classification through in-context learning. It delivers high-accuracy predictions on structured data without requiring model training or hyperparameter tuning.

PreviewSQLGovernancePerformanceSource

Google Cloud BigQueryAug 31, 2026

Using folders to create, store, and manage pipelines is generally available

Using folders to create, store, and manage pipelines is generally available .

GAData integrationSource

Google Cloud BigQueryAug 31, 2026

You can now create an identity column , sometimes referred to as an auto-incrementing column, on a table

You can now create an identity column , sometimes referred to as an auto-incrementing column, on a table. You can use identity columns to create and maintain primary keys on your tables. When you insert a row into a table that has an identity column, BigQuery generates a unique integer value for that column. This feature is in Preview .

PreviewSQLSecuritySource

Google Cloud BigQueryAug 31, 2026

BigQuery Graph is generally available (GA)

BigQuery Graph is generally available (GA). BigQuery Graph now includes support for the CALL graph query statement , and the following path inspection GQL functions : IS_ACYCLIC IS_SIMPLE IS_TRAIL .

GASQLSource

Snowflake Snowflake Native Apps and MarketplaceAug 31, 2026

app.yml for Snowflake App Runtime (Preview)

Snowflake App Runtime projects use a single app.yml file to describe both deployment and the remote build. Include version: 2 at the top of the file. snow app setup writes this file for new projects.

PreviewSource