Skip to content
Roadmap·Security

OAuth custom identity claims

GA
Last seen at this status: 2026-10-19·22d ago

Lets an application add a custom identity claim to the OAuth token it requests for a service principal and filter rows by that claim in a dynamic view or an ABAC policy with current_oauth_custom_identity_claim(), so one service principal can serve many end users who each see only their own data, with no Databricks user per end user. The claim reaches SQL through JDBC, the SQL Statement Execution API and the Genie Agents API, on a SQL warehouse or Databricks Runtime 19 or above. Released on October 19, 2026 with no preview label.

Status history

  • GA
    2026-10-19 · 22d ago
    Release notes

    Verified on 2026-11-05 against Databricks sources. The note states no tier; the docs page carries no preview label. Hand-written: the title has no status phrase.

Sources (2)

Get Tuesday's version of this

What shipped in Databricks and why it matters, once a week. Free, one-click unsubscribe.

Read past issues first

Statuses and dates come from public Databricks sources only. We do not see the private roadmap Databricks shares with customers. If something looks wrong, report a correction.