ABAC DENY policies are in Beta in Unity Catalog.
ABAC DENY policies are in Beta in Unity Catalog. DENY policies can be used to explicitly deny the MANAGE ACCESS CONTROL privilege to prevent specified principals, including object owners, from performing access management operations. They always take precedence over any grant.
DENY policies are attached at the catalog or schema level and deny the MANAGE ACCESS CONTROL privilege on the supported securable types.
ABAC DENY policies are in Beta in Unity Catalog. DENY policies can be used to explicitly deny the MANAGE ACCESS CONTROL privilege to prevent specified principals, including object owners, from performing access management operations.
Read the full documentation ↗