Centralized management for clusters, security policies, resource allocation, and operational workflows. The mission control for your Delta Lake infrastructure.
Single source of truth for all data assets
Top-level namespace, typically representing a business unit or environment.
production, development, analytics
Logical grouping of related tables and views.
sales, inventory, customers, events
Data objects with schema, partitioning, and properties.
orders, products, daily_summary
Fields with types, constraints, and metadata.
order_id INT, created_at TIMESTAMP
Centralized security policy management
Fine-grained permissions on catalog objects.
GRANT SELECT ON TABLE sales.orders TO ROLE analyst
Automatic data governance enforcement.
CREATE MASKING POLICY mask_ssn AS (ssn VARCHAR) RETURNS VARCHAR BODY = CASE WHEN CURRENT_ROLE() IN ('data_admin') THEN ssn ELSE '***-**-' || RIGHT(ssn, 4) END
Filter rows automatically based on user context.
CREATE ROW ACCESS POLICY regional_access AS (region VARCHAR) RETURNS BOOLEAN BODY = CASE WHEN CURRENT_ROLE() IN ('sales_national') THEN TRUE WHEN CURRENT_ROLE() = 'sales_north' AND region = 'North' THEN TRUE ELSE FALSE END
Secure access to cloud storage and external data.
CREATE STORAGE CREDENTIAL aws_prod TYPE AWS_IAM_ROLE OPTIONS (role_arn = 'arn:aws:iam::123456789012:role/DeltaForgeAccess')
Allocate and control compute resources
Isolated compute environments with dedicated resources.
Track and limit resource consumption.
Prioritize and route queries intelligently.
Understand resource utilization patterns.
Enterprise-grade user and role management
Individual identities with authentication credentials.
Named collections of privileges.
Specific permissions on objects.
-- Create a role hierarchy
CREATE ROLE data_reader;
CREATE ROLE data_analyst;
CREATE ROLE data_engineer;
-- Grant privileges to roles
GRANT USAGE ON SCHEMA analytics TO ROLE data_reader;
GRANT SELECT ON ALL TABLES IN SCHEMA analytics TO ROLE data_reader;
GRANT ROLE data_reader TO ROLE data_analyst;
GRANT CREATE VIEW ON SCHEMA analytics TO ROLE data_analyst;
GRANT ROLE data_analyst TO ROLE data_engineer;
GRANT CREATE TABLE, INSERT, UPDATE ON SCHEMA analytics TO ROLE data_engineer;
-- Assign roles to users
GRANT ROLE data_analyst TO USER alice;
GRANT ROLE data_engineer TO USER bob;
-- Future grants for new tables
GRANT SELECT ON FUTURE TABLES IN SCHEMA analytics TO ROLE data_reader;Secure management of external system credentials
Schedule and manage maintenance tasks
Cron-style scheduling for recurring operations.
Automated optimization and cleanup.
Data protection and disaster recovery.
Health checks and alerting.
Isolate workloads while sharing infrastructure
Complete isolation with separate credentials, billing, and administration.
Logical separation within an account with shared compute.
Compute isolation with shared data access.
Enterprise management for the modern lakehouse.