Secrets in Unity Catalog

Secrets in Unity Catalog is a Databricks data governance capability, introduced July 2026.

Secrets stored and governed as securable objects in Unity Catalog, using the three-level namespace (catalog.schema.secret) and the same privileges and auditing as any other data asset.

• Your API keys finally get the same treatment as your tables: a secret becomes a first-class Unity Catalog securable at catalog.schema.secret, so the GRANTs and audit logs you already use for data now cover credentials - no more workspace-scoped secret scopes off to the side. 🔗
• It entered Public Preview on July 10, 2026, replacing off-to-the-side workspace secret scopes with a first-class governed securable. 🔗

⚠ Limitations: Not supported on SQL warehouses or in global/cluster init scripts; retrieval needs Databricks Runtime-backed notebooks and jobs. They don't appear in global search, BROWSE on a catalog doesn't apply, and there's no information schema yet; the API needs the unity-catalog OAuth scope. Capped at 100 secrets per schema and 1,000 per metastore. 🔗

Category

Data governance

Introduced

July 2026🔗

Also known as

Unity Catalog secrets, UC secrets

Verified

2026-07-23