Databricks 以 Unity Catalog 治理 Genie Agents，确保按用户权限过滤数据
Genie Agents 以用户身份查询，治理由 Unity Catalog 强制，安全边界在数据层而非模型层。
Genie Agents 是 Databricks 的 AI 代理，能同时分析表格、指标和文档。它直接以当前用户的身份运行，查询结果受 Unity Catalog 中既有权限的约束，如行过滤和列掩码。企业无需额外设置，就能让代理安全访问混合数据，避免模型层成为安全漏洞。
正文摘录
Genie Agents can reason over your tables, metrics, and documents all at once to provide context and permissions-aware insights • Ground Genie Agents in structured data (Managed Tables, External Tables, Foreign Tables, Views, Metric Views, and Materialized Views) and unstructured files (Unity Catalog Volumes) so one agent can answer across all of it. • Agent governance lives in the catalog layer, not at the model layer. Governance scales with the agent instead of growing out of control. • With Automatic Identity Management (AIM), Object Privileges, ABAC, Row Filters, and Column Masks in Unity Catalog, Genie Agents run as the user’s identity, and every answer is filtered by that user's permissions. Building an agent to automate simple business tasks can be easy. But creating one that actuall…