Introducing Governance Hub: Intelligent, account-level governance over your Databricks estate

Summary

Databricks introduces Governance Hub, a beta account-level interface for platform and governance teams overseeing estates spanning hundreds of workspaces and multiple regions. It consolidates data health, access, AI usage, and cost information across AWS, Azure, and GCP, replacing scattered system tables, workspace views, and third-party tools with drill-downs for metadata gaps, principal access, token and model activity, and untagged spend. The hub also integrates with Genie, allowing users to ask governance questions in natural language and receive answers and recommendations grounded in governance data; future actions such as configuring policies and alerts are described as planned. Account admins enable it from the Account Console, with access varying by role and existing permissions respected, while upcoming features include performance and security insights and delegated recommendations.

Context

Teams governing Databricks estates across hundreds of workspaces and multiple regions often cannot access account-wide insights into data health, AI usage, access, and cost. When information is available, it is scattered across system tables, workspace-level views, and third-party tools, making tasks such as finding metadata gaps, tracing access, and attributing spend difficult.

Approach / What changed

Governance Hub provides a centralized account-level view across AWS, Azure, and GCP, with drill-downs for asset metadata, data quality, principal access, AI Gateway traffic, and cost attribution. It integrates with Genie for natural-language questions and recommendations grounded in governance data. Account admins enable it from the Account Console, and the hub uses existing permissions with role-specific access.

Takeaways

• The Data page shows asset counts and the percentages that are tagged, owned, and classified, then drills into missing tags or descriptions and supports governed-tag policy management.
• Access Insights presents a principal-centric view of direct grants, inherited group access, and owned objects across the account, with filters for catalog and privilege.
• The AI page tracks token consumption, model activity, per-user spend, and guardrail coverage, while the Cost page surfaces untagged resources and supports Explorer breakdowns by product, workspace, resource, or tag.

Related reading