Skip to main content

CREDENTIAL_PRIVILEGES

Applies to: check marked yes Databricks Runtime 15.4 and above

INFORMATION_SCHEMA.CREDENTIAL_PRIVILEGES lists principals that have privileges on a credential.

This is an extension to the SQL Standard Information Schema.

note

Currently, users with the MANAGE privilege on an object cannot view all grants for that object in the INFORMATION_SCHEMA. Instead, the INFORMATION_SCHEMA only shows grants their own grants on the object. This behavior will be corrected in the future.

Users with MANAGE privilege can view all grants on an object using SQL commands or Catalog Explorer. See Manage privileges in Unity Catalog.

Definition

The CREDENTIAL_PRIVILEGES relation contains the following columns:

NameData typeNullableDescription
GRANTORSTRINGNoPrincipal that granted the privilege.
GRANTEESTRINGNoPrincipal to which the privilege is granted.
CREDENTIAL_NAMESTRINGNoCredential on which the privilege is granted.
PRIVILEGE_TYPESTRINGNoPrivilege being granted.
IS_GRANTABLESTRINGNoAlways NO. Reserved for future use.
INHERITED_FROMSTRINGYesNoThe ancestor relation that the privilege is inherited from.

Constraints

The following constraints apply to the CREDENTIAL_PRIVILEGES relation:

ClassNameColumn ListDescription
Primary keyMETPRIVS_PKGRANTOR, GRANTEE, CREDENTIAL_NAME, PRIVILEGE_TYPEUnique identifier for the granted privilege.
Foreign keyMETPRIVS_METS_FKCREDENTIAL_NAMEReferences CREDENTIALS

Examples

SQL
> SELECT credential_name, grantee
FROM information_schema.credential_privileges;