Databricks releases, every cloud
| Release | Date | ||||
|---|---|---|---|---|---|
| Metastore-level ABAC policies are in Beta Applies across every catalog in the metastore. Replaces per-catalog policy setup. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Sep 17, 2026 |
| ABAC DENY policies are in Beta Explicitly deny MANAGE ACCESS CONTROL privilege, taking precedence over grants. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Sep 8, 2026 |
| Private network gateway is in Beta Connects serverless compute to VNet and on-premises systems through a managed gateway. Enabled from account console Previews page. | Not on AWS | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Sep 3, 2026 |
| Private network gateway is in Private Preview Connects serverless compute to VPC and on-premises systems through a managed gateway, reusing existing network connectivity configuration. | On AWS, read it on their docs | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Aug 24, 2026 |
| The INSERT, UPDATE, and DELETE privileges are in Beta Require Databricks Runtime 18.1 or above, alternative to MODIFY privilege. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Aug 24, 2026 |
| Role-based access control (RBAC) is in Public Preview Lets users assume a role with limited permissions. Requires account and workspace admin setup. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Not on SAP | Jul 22, 2026 |
| Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs | |||||
| Custom URLs for your Azure Databricks account (Public Preview) Replaces default Azure Databricks URL with a custom domain. | Not on AWS | On Azure, read it on their docs | Not on GCP | Not on SAP | Jul 15, 2026 |
| Block specific internet destinations in network policies (Public Preview) Blocks destinations regardless of network access mode, enforced through REST API. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Not on SAP | Jun 23, 2026 |
| Intra-VNet NSG rule hardening for Azure Databricks is now in Public Preview Restricts workspace traffic to host and worker subnet CIDRs. Applies to classic compute plane workspaces. | Not on AWS | On Azure, read it on their docs | Not on GCP | Not on SAP | Jun 1, 2026 |
| Inbound Private Link for performance-intensive services (Public Preview) Enables private connectivity for Zerobus Ingest and Lakebase Autoscaling. | On AWS, read it on their docs | On Azure, read it on their docs | Not on GCP | Not on SAP | Mar 9, 2026 |
| Context based ingress control is now in Public Preview Enables account admins to set allow and deny rules based on identity, request type, and network source. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Dec 17, 2025 |
| Automatic email notifications for expiring personal access tokens (Public Preview) Sends emails 7 days before token expiration. | On AWS, read it on their docs | On Azure, read it on their docs | On GCP, read it on their docs | Unknown on SAP | Nov 20, 2025 |
| TISAX compliance controls (Public Preview) Enhances workspace compliance based on ISO/IEC 27001 and VDA ISA requirements. | Not on AWS | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Nov 13, 2025 |
| C5 and K-FSI compliance standards (Public Preview) Adds German and Korean financial regulations compliance. Requires public preview setup. | Not on AWS | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Nov 6, 2025 |
| List MCP servers in Azure Databricks Marketplace (Public Preview) Allows distribution of AI tools and connection to external data sources, requires provider listing. | Not on AWS | On Azure, read it on their docs | Not on GCP | Unknown on SAP | Nov 6, 2025 |
- Metastore-level ABAC policies are in Beta
Applies across every catalog in the metastore. Replaces per-catalog policy setup.
- ABAC DENY policies are in Beta
Explicitly deny MANAGE ACCESS CONTROL privilege, taking precedence over grants.
- Private network gateway is in Beta
Connects serverless compute to VNet and on-premises systems through a managed gateway. Enabled from account console Previews page.
- Private network gateway is in Private Preview
Connects serverless compute to VPC and on-premises systems through a managed gateway, reusing existing network connectivity configuration.
- The INSERT, UPDATE, and DELETE privileges are in Beta
Require Databricks Runtime 18.1 or above, alternative to MODIFY privilege.
- Role-based access control (RBAC) is in Public Preview
Lets users assume a role with limited permissions. Requires account and workspace admin setup.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
- Custom URLs for your Azure Databricks account (Public Preview)
Replaces default Azure Databricks URL with a custom domain.
- Block specific internet destinations in network policies (Public Preview)
Blocks destinations regardless of network access mode, enforced through REST API.
AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) - Intra-VNet NSG rule hardening for Azure Databricks is now in Public Preview
Restricts workspace traffic to host and worker subnet CIDRs. Applies to classic compute plane workspaces.
- Inbound Private Link for performance-intensive services (Public Preview)
Enables private connectivity for Zerobus Ingest and Lakebase Autoscaling.
- Context based ingress control is now in Public Preview
Enables account admins to set allow and deny rules based on identity, request type, and network source.
- Automatic email notifications for expiring personal access tokens (Public Preview)
Sends emails 7 days before token expiration.
- TISAX compliance controls (Public Preview)
Enhances workspace compliance based on ISO/IEC 27001 and VDA ISA requirements.
- C5 and K-FSI compliance standards (Public Preview)
Adds German and Korean financial regulations compliance. Requires public preview setup.
- List MCP servers in Azure Databricks Marketplace (Public Preview)
Allows distribution of AI tools and connection to external data sources, requires provider listing.
Headlines, dates and product areas are Databricks' own, and every item links to the note it came from. The one-line summaries are ours.