Databricks releases, every cloud
| Release | Date | ||||
|---|---|---|---|---|---|
| Metastore-level ABAC policies are in Beta Applies across every catalog in the metastore. Replaces per-catalog policy setup. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Sep 17, 2026 |
| ABAC DENY policies are in Beta Explicitly deny MANAGE ACCESS CONTROL privilege, taking precedence over grants. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Sep 8, 2026 |
| Private network gateway is in Beta Connects serverless compute to VNet and on-premises systems through a managed gateway. Enabled from account console Previews page. | Not on AWS | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Sep 3, 2026 |
| Private network gateway is in Private Preview Connects serverless compute to VPC and on-premises systems through a managed gateway, reusing existing network connectivity configuration. | On AWS, read it on their docs | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Aug 24, 2026 |
| The INSERT, UPDATE, and DELETE privileges are in Beta Require Databricks Runtime 18.1 or above, alternative to MODIFY privilege. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Aug 24, 2026 |
| Governance Hub is in Beta Enables monitoring of data health and AI usage, requires account admin enablement from Previews page. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Not on SAP | Jul 22, 2026 |
| Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs | |||||
| Role-based access control (RBAC) is in Public Preview Lets users assume a role with limited permissions. Requires account and workspace admin setup. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Not on SAP | Jul 22, 2026 |
| Custom URLs for your Azure Databricks account (Public Preview) Replaces default Azure Databricks URL with a custom domain. | Not on AWS | On Azure, read it on their docs | Not on GCP | Not on SAP | Jul 15, 2026 |
| Block specific internet destinations in network policies (Public Preview) Blocks destinations regardless of network access mode, enforced through REST API. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Not on SAP | Jun 23, 2026 |
| Managed disaster recovery is now in Public Preview Replicates metadata, table data, and workspace assets to a secondary region. Requires account team enablement. | On AWS, read it on their docs | On Azure, read it on their docs | Not on GCP | Not on SAP | Jun 12, 2026 |
| Mission Critical add-on is now in Public Preview Unlocks managed disaster recovery and ESC for a single compute rate, enabled per workspace. | On AWS, read it on their docs | On Azure, read it on their docs | Not on GCP | Not on SAP | Jun 12, 2026 |
| Intra-VNet NSG rule hardening for Azure Databricks is now in Public Preview Restricts workspace traffic to host and worker subnet CIDRs. Applies to classic compute plane workspaces. | Not on AWS | On Azure, read it on their docs | Not on GCP | Not on SAP | Jun 1, 2026 |
| Inbound Private Link for performance-intensive services (Public Preview) Enables private connectivity for Zerobus Ingest and Lakebase Autoscaling. | On AWS, read it on their docs | On Azure, read it on their docs | Not on GCP | Not on SAP | Mar 9, 2026 |
| Context based ingress control is now in Public Preview Enables account admins to set allow and deny rules based on identity, request type, and network source. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Dec 17, 2025 |
| Automatic email notifications for expiring personal access tokens (Public Preview) Sends emails 7 days before token expiration. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Nov 20, 2025 |
| TISAX compliance controls (Public Preview) Enhances workspace compliance based on ISO/IEC 27001 and VDA ISA requirements. | Not on AWS | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Nov 13, 2025 |
| C5 and K-FSI compliance standards (Public Preview) Adds German and Korean financial regulations compliance. Requires public preview setup. | Not on AWS | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Nov 6, 2025 |
- Metastore-level ABAC policies are in Beta
Applies across every catalog in the metastore. Replaces per-catalog policy setup.
- ABAC DENY policies are in Beta
Explicitly deny MANAGE ACCESS CONTROL privilege, taking precedence over grants.
- Private network gateway is in Beta
Connects serverless compute to VNet and on-premises systems through a managed gateway. Enabled from account console Previews page.
- Private network gateway is in Private Preview
Connects serverless compute to VPC and on-premises systems through a managed gateway, reusing existing network connectivity configuration.
- The INSERT, UPDATE, and DELETE privileges are in Beta
Require Databricks Runtime 18.1 or above, alternative to MODIFY privilege.
- Governance Hub is in Beta
Enables monitoring of data health and AI usage, requires account admin enablement from Previews page.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
- Role-based access control (RBAC) is in Public Preview
Lets users assume a role with limited permissions. Requires account and workspace admin setup.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Custom URLs for your Azure Databricks account (Public Preview)
Replaces default Azure Databricks URL with a custom domain.
- Block specific internet destinations in network policies (Public Preview)
Blocks destinations regardless of network access mode, enforced through REST API.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Managed disaster recovery is now in Public Preview
Replicates metadata, table data, and workspace assets to a secondary region. Requires account team enablement.
- Mission Critical add-on is now in Public Preview
Unlocks managed disaster recovery and ESC for a single compute rate, enabled per workspace.
- Intra-VNet NSG rule hardening for Azure Databricks is now in Public Preview
Restricts workspace traffic to host and worker subnet CIDRs. Applies to classic compute plane workspaces.
- Inbound Private Link for performance-intensive services (Public Preview)
Enables private connectivity for Zerobus Ingest and Lakebase Autoscaling.
- Context based ingress control is now in Public Preview
Enables account admins to set allow and deny rules based on identity, request type, and network source.
- Automatic email notifications for expiring personal access tokens (Public Preview)
Sends emails 7 days before token expiration.
- TISAX compliance controls (Public Preview)
Enhances workspace compliance based on ISO/IEC 27001 and VDA ISA requirements.
- C5 and K-FSI compliance standards (Public Preview)
Adds German and Korean financial regulations compliance. Requires public preview setup.
Headlines, dates and product areas are Databricks' own, from the release notes published for each cloud, and every item links to the note it came from. The one-line summaries are ours. Not a Databricks product and not affiliated with Databricks, Inc.