← Back to all products
€39
Unity Catalog Governance Pack
Production-ready governance templates for Databricks Unity Catalog. Implement enterprise-grade data governance in hours, not months. RBAC, data classification, GDPR/CCPA compliance, security patterns, automation, and Terraform deployment.
DatabricksUnity CatalogTerraformGDPRCCPASecurity
📁 File Structure 23 files
unity-catalog-governance-pack/
├── README.md
├── LICENSE
│
├── rbac/
│ ├── role_definitions.yaml
│ ├── permission_matrix.yaml
│ ├── setup_roles.sql
│ ├── setup_roles.py
│ └── audit_permissions.py
│
├── classification/
│ ├── classification_framework.yaml
│ ├── apply_tags.sql
│ ├── pii_scanner.py
│ ├── pii_patterns.yaml
│ └── classification_report.py
│
├── compliance/
│ ├── gdpr/
│ │ ├── right_to_deletion.py
│ │ ├── data_portability.py
│ │ ├── consent_tracking.sql
│ │ └── data_subject_request.py
│ └── ccpa/
│ ├── do_not_sell.py
│ └── data_disclosure.py
│
├── security/
│ ├── row_level_security.sql
│ └── column_masking.sql
│
├── automation/
│ ├── tag_propagation.py
│ ├── governance_scanner.py
│ ├── policy_enforcer.py
│ └── governance_dashboard.py
│
└── terraform/
└── main.tf
📖 Documentation Preview README excerpt
Overview
A complete, ready-to-deploy governance framework for Databricks Unity Catalog environments covering RBAC, data classification, compliance, security, automation, and IaC.
What's Included
- RBAC — Five-tier role hierarchy (admin, engineer, analyst, viewer, service_account) with SQL and Python automation
- Data Classification — Four-tier framework (Public, Internal, Confidential, Restricted) with automated PII scanning
- Compliance — GDPR (right to erasure, data portability, consent tracking) and CCPA (opt-out, data disclosure)
- Security — Row-level security, column masking (SHA-256, redaction, partial), network isolation guides
- Automation — Tag propagation, governance scanner, policy enforcer, dashboard metrics
- Terraform — Complete IaC module for deploying the entire governance framework
Deployment Timeline
Phase 1: Foundation (Week 1) — Deploy Terraform, configure RBAC. Phase 2: Classification (Week 2) — PII scanning, tagging. Phase 3: Compliance (Week 3) — GDPR/CCPA handlers. Phase 4: Automation (Week 4) — Scanner, enforcer, dashboards.
📄 Code Sample .yaml preview
rbac/role_definitions.yaml
# Unity Catalog RBAC - Role Definitions
# ========================================
# Five-tier role hierarchy for enterprise data governance.
# Customize members and descriptions for your organization.
metadata:
version: "1.0.0"
organization: "your-org"
last_updated: "2026-01-01"
description: "Role hierarchy for Unity Catalog governance"
# Role hierarchy (highest to lowest privilege)
# Each role inherits permissions from all roles below it.
roles:
admin:
level: 5
display_name: "Data Platform Admin"
description: >
Full metastore and catalog management. Can create/drop
catalogs, manage groups, configure storage credentials.
inherits_from: ["engineer"]
group_name: "uc-admins"
max_members: 5
requires_approval: true
mfa_required: true
engineer:
level: 4
display_name: "Data Engineer"
description: >
Create and modify schemas, tables, views, and functions.
Can manage Delta table properties, run OPTIMIZE and VACUUM.
inherits_from: ["analyst"]
group_name: "uc-engineers"
... remaining roles in full product