← All updates Databricks Update One-Pager Light version
databricks Platform · Updated Aug 17, 2026

Identity attributes in ABAC column mask policies (Beta)

Identity attributes are in Beta.

What it does

Identity attributes are in Beta. You can now write Unity Catalog ABAC column mask policy conditions that target users by attributes synced from your identity provider, such as department or country, in addition to group membership. The has identity attribute value and has identity attribute tag match functions are supported in the WHEN clause of column mask policies.

Why it matters

Overview Identity attributes are nine IdP sourced fields that Databricks stores on an account user: title, userType, locality, region, country, costCenter, organization, division, and department.

Architecture
Databricks Platform → Platform
In short

Identity attributes are in Beta. You can now write Unity Catalog ABAC column mask policy conditions that target users by attributes synced from your identity provider, such as department or country, in addition to group membership.

Read the full documentation ↗
Key takeaway
Identity attributes are in Beta.
2026-08-17-identity-attributes-in-abac-column-mask-policies-beta Generated by the Databricks Updates Agent · browse all updates