The control plane is the single place you manage your catalog, your roles, and your compute workers. It runs on your infrastructure. Your data stays on your storage.
Metadata about your platform, not your data
Schemas, tables, columns, views, and pipelines, along with the storage credentials that point to them.
Users, built-in and custom roles, and GRANT or REVOKE on catalog objects.
An audit log of who did what, and a registry of compute workers with heartbeats.
Cron-scheduled SQL and pipeline runs, with run history.
Roles and grants, enforced by the SQL engine before any read or write
Identities that authenticate to the control plane and act on its behalf.
Built-in administrative roles, plus your own custom roles.
GRANT and REVOKE at schema and table level.
You install and operate the control plane. There is no managed service to depend on.