Databricks releases, every cloud

1. Metastore-level ABAC policies are in Beta

   Applies across every catalog in the metastore. Replaces per-catalog policy setup.

   #Security#Unity Catalog
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown) Sep 17, 2026
2. ABAC DENY policies are in Beta

   Explicitly deny MANAGE ACCESS CONTROL privilege, taking precedence over grants.

   #Security#Unity Catalog
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown) Sep 8, 2026
3. Connect to the Databricks Genie app in Microsoft Teams with your workspace URL (Public Preview)

   Replaces server hostname with workspace URL for connection.

   #Genie#Integrations
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown) Aug 24, 2026
4. The INSERT, UPDATE, and DELETE privileges are in Beta

   Require Databricks Runtime 18.1 or above, alternative to MODIFY privilege.

   #Security#Unity Catalog
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown) Aug 24, 2026
5. Serverless outbound Private Service Connect to customer-managed resources (Public Preview)

   Keeps traffic off the public internet, adding network-layer defense against data exfiltration through customer-managed Google Cloud service attachment.

   #Networking#Security
   AWS(not on this cloud)Azure(not on this cloud)GCP, read it on their docsSAP(unknown) Aug 6, 2026
6. Role-based access control (RBAC) is in Public Preview

   Lets users assume a role with limited permissions. Requires account and workspace admin setup.

   #Security#Unity Catalog
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) Jul 22, 2026
7. Run the change, do not just read it. Hands-on labs in your own Databricks workspace, graded when you submit. Browse labs
8. Custom URLs for your Databricks account (Public Preview)

   Replaces default URL, requires claim and enable process.

   #Security
   AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP(not on this cloud) Jul 15, 2026
9. Block specific internet destinations in network policies (Public Preview)

   Blocks destinations regardless of network access mode, enforced through REST API.

   #Networking#Security
   AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) Jun 23, 2026
10. Connect to Databricks from Microsoft Excel (Public Preview)

    Imports data from tables or Metric Views, executes SQL queries in Excel.

    #Integrations
    AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP(not on this cloud) Mar 2, 2026
11. Schedule data refreshes in Google Sheets (Public Preview)

    Refreshes occur hourly, daily, or weekly.

    #Integrations
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(not on this cloud) Mar 2, 2026
12. HITRUST compliance controls (Public Preview)

    Manages risk and demonstrates security and privacy compliance. Requires enabling in settings.

    #Security
    AWS, read it on their docsAzure(not on this cloud)GCP, read it on their docsSAP(unknown) Feb 26, 2026
13. Context based ingress control is now in Public Preview

    Enables account admins to set allow and deny rules based on identity, request type, and network source.

    #Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown) Dec 17, 2025
14. Automatic email notifications for expiring personal access tokens (Public Preview)

    Sends emails 7 days before token expiration.

    #Security
    AWS, read it on their docsAzure, read it on their docsGCP, read it on their docsSAP(unknown) Nov 20, 2025

Headlines, dates and product areas are Databricks' own, and every item links to the note it came from. The one-line summaries are ours.