Unable to access the databricks Views from SQL Endpoint

Question

Unable to access the databricks Views from SQL Endpoint

veerabhadra reddy kovvuri 181

User have access to SQL and Workspace in databricks
Databricks have RWX permission on the respective Views location in ADLS
These views are created from a parquet file.
User is given ALL Privileges on the DB and views.

But still, the user is getting the same error.
Error getting sample datajava.lang.SecurityException: User does not have permission SELECT on any file. at org.apache.spark.sql.hive.thriftserver.HiveThriftServerErrors$.runningQueryError(HiveThriftServerErrors.s'. (35) (SQLExecDirectW)

Databricks Admin users are not having any problem reading these View.

PRADEEPCHEEKATLA 91,581 Reputation points Moderator

2022-07-27T10:01:09.063+00:00

Hello @veerabhadra reddy kovvuri ,

Thanks for the question and using MS Q&A platform.

Can you please share the permissions available on the database by running this command: SHOW GRANTS user@ssss .com ON DATABASE default;?

Meanwhile, you may checkout the Azure Databricks - Data access control.
veerabhadra reddy kovvuri 181 Reputation points

2022-07-27T14:09:53.153+00:00

Hi @PRADEEPCHEEKATLA

We have recreated the View from the Parquet file and ran some commands to give the user access to the DB. The attachment shows what access has been granted and error he is facing after providing access to it.
PRADEEPCHEEKATLA 91,581 Reputation points Moderator

2022-08-05T09:16:29.997+00:00

Hello @veerabhadra reddy kovvuri ,

Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Answer accepted by question author

0 additional answers

Your answer

PRADEEPCHEEKATLA 91,581 Reputation points Moderator

2022-07-27T10:01:09.063+00:00

Hello @veerabhadra reddy kovvuri ,

Thanks for the question and using MS Q&A platform.

Can you please share the permissions available on the database by running this command: SHOW GRANTS user@ssss .com ON DATABASE default;?

Meanwhile, you may checkout the Azure Databricks - Data access control.
veerabhadra reddy kovvuri 181 Reputation points

2022-07-27T14:09:53.153+00:00

Hi @PRADEEPCHEEKATLA

We have recreated the View from the Parquet file and ran some commands to give the user access to the DB. The attachment shows what access has been granted and error he is facing after providing access to it.
PRADEEPCHEEKATLA 91,581 Reputation points Moderator

2022-08-05T09:16:29.997+00:00

Hello @veerabhadra reddy kovvuri ,

Just checking in to see if the below answer helped. If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Answer 1

PRADEEPCHEEKATLA 91,581 Moderator

Hello @veerabhadra reddy kovvuri ,

If you want to use a CTAS (CREATE TABLE AS SELECT) statement to create the table, the administrator should grant you SELECT privileges on the filesystem: "GRANT SELECT ON ANY FILE TO user1".

For more details, refer to Table creation fails with security exception.

veerabhadra reddy kovvuri 181 Reputation points

2023-08-21T13:27:06.66+00:00

Hi @PRADEEPCHEEKATLA ,

is it possible to grant select on required files ? instead of granting on any file ? because we could see that user is abled to read data in parquet file from other storage locations where the SPN is having access to.
PRADEEPCHEEKATLA 91,581 Reputation points Moderator

2023-08-22T06:56:24.65+00:00

Hello @veerabhadra reddy kovvuri ,

The scope of your question is different compared to the original scope of the question asked.

I would recommend creating a new thread on the same forum with as much details about your issue as possible. That would make sure that your issue has better visibility in the community.

Share via

Unable to access the databricks Views from SQL Endpoint

0 additional answers

Your answer