什么是 ABAC？

Databricks has announced the general availability of three complementary capabilities in Unity Catalog: Attribute-Based Access Control (ABAC) policies for row filtering and column masking, governed tags, and agentic data classification, enabling dynamic, standardized, and automated data governance.

ABAC solves RBAC role explosion by dynamically evaluating user, resource, and environment attributes for fine-grained authorization. The article traces the evolution from DAC to ABAC and provides policy structure and implementation guidance.

Databricks introduces Cross-Engine ABAC, unifying fine-grained access control across multiple data engines with attribute-based, zero-trust policies, supporting Delta Lake, Databricks SQL, and Notebooks, significantly reducing configuration complexity and enhancing security and governance efficiency.

Unity Catalog prevents unauthorized AI agent operations through fine-grained access control, audit logging, and AI-specific governance frameworks, ensuring secure and controllable enterprise AI applications.