Abstract: Various example embodiments described herein provide for systems, methods, devices, instructions, and the like for linking a data system, such as a database system, to a catalog external to the data system. In particular, some example embodiments provide a catalog linked database (CLD) that enables automatic synchronization between a database system and an external catalog that is external to the database system.

Abstract: Provided herein are systems, methods, and computer-storage media for vending scoped storage credentials. A catalog of a catalog service account is associated with a storage integration that specifies a set of storage credentials and a set of allowed storage locations. A data object is stored under the catalog, the data object including a location identifying a storage location of the data object at a storage layer. A request associated with the data object is detected. A scoped storage credential is generated from the set of storage credentials based on the request, the scoped storage credential associated with at least one allowed storage location. The scoped storage credential is provided to a compute engine for access to the storage location at the storage layer, the storage layer separate from a metadata layer of the catalog service account.

Abstract: Provided herein are systems, methods, and computer-storage media for managing data object access in a catalog service account. The method includes detecting, at a catalog service account, by a catalog manager (CM), a user request to access a data object. The user request includes identification information of the user and a principal role associated with the user. The CM retrieves one or more catalog roles from a first catalog of the catalog service account. The one or more catalog roles correspond to the principal role. The CM determines a set of hierarchical data objects based on the user request. The set of hierarchical data objects comprise the data object. The CM performs a determination of whether access privileges of the set of hierarchical data objects and access privileges of the one or more catalog roles allow access to the data object. The CM grants access to the data object based on the determination.

Abstract: Provided herein are systems, methods, and computer-storage media for managing data object access in a catalog service account. The method includes detecting, at a catalog service account, by a catalog manager (CM), a user request to access a data object. The user request includes identification information of the user and a principal role associated with the user. The CM retrieves one or more catalog roles from a first catalog of the catalog service account. The one or more catalog roles correspond to the principal role. The CM determines a set of hierarchical data objects based on the user request. The set of hierarchical data objects comprise the data object. The CM performs a determination of whether access privileges of the set of hierarchical data objects and access privileges of the one or more catalog roles allow access to the data object. The CM grants access to the data object based on the determination.