Now GA: Building permission-aware Databricks Apps with on-behalf-of-user authorization
Databricks Apps now supports on-behalf-of-user authorization for permission-aware AI applications
Databricks Apps has reached general availability with on-behalf-of-user (OBO) authorization, allowing apps to inherit the calling user's permissions rather than running with service account credentials. This matters for enterprise AI applications where data governance and row-level security must be preserved end-to-end. It's an incremental platform feature rather than a major strategic shift.