HOW TO: Enable or Disable File and Result Downloads in Databricks Notebooks (2025)

Databricks Notebooks are a central part of the Databricks platform, allowing data teams to write, run, and share code for data analysis. They're a central spot for data teams to work together. But when you're dealing with super-sensitive data, you might need to limit who can do what. Databricks gives you the flexibility to control what's restricted and who gets access. Normally, Databricks Notebooks lets users download results, export notebook files, and copy data. That's incredibly useful for analysis and sharing, but it brings up some big questions. How do you keep sensitive data safe? How do you control who can access or download Notebook results and files? It's really important to manage Databricks Notebook download permissions. Restricting Databricks Notebook downloads serves a few key purposes. Security is a big part of it, but it is also about complying with regulations, keeping your data organized, and preventing data from being leaked when it is not supposed to.

In this article, we'll provide a thorough step-by-step guide to enabling or disabling these features, which helps keep your Databricks workspace and Notebook data secure and safe. So, if you're looking to secure your data for compliance or to limit who can access it, these steps are straightforward and easy to follow.

What You Need to Know About Databricks Download Permissions

Databricks Notebooks lets users download results and files by default, which makes sense considering how collaborative the platform is. But this also creates some major security concerns. Let's take a closer look at what happens when you first start using the platform.

When Databricks users log in, they can easily export their Databricks Notebook contents or download query results from SQL cells. That's convenient, but it also leaves a big hole for security risks. For example, someone could accidentally—or intentionally—download sensitive info and share it outside the company.

Unrestricted downloads can put your data at risk, especially if users aren't aware of what they're downloading. To stay compliant with regulations like GDPR and HIPAA, you need to have strict controls in place for data access and sharing. It's a big deal—if you don't follow these regulations, you might find yourself facing hefty fines or legal trouble.

Security Risks of Unrestricted Downloads

Let's dive deeper into the risks. Suppose an employee downloads a Databricks Notebook file with results that have personal information in them. If that file ends up in the wrong hands, it could spell disaster. Cybercriminals love easy targets, and unrestricted downloads give them just that.

Even within your organization, there's always the risk of insider threats. A rogue employee with malicious intent could exploit these settings to steal valuable data. Or worse, they might inadvertently leak data by sharing it with unauthorized parties.

To prevent this, you need to tighten control over who can download what. This doesn't mean shutting/locking everything down completely. Instead, it means setting clear rules and enforcing them consistently. With the right approach, you can balance usability and security effectively.

🔮 Step-by-Step Guide to Enable/Disable Databricks Notebook File and Result Download Permissions

Want to decide who can download files and results? Follow these steps to enable or disable permissions. Let's dive right in!

Prerequisites

Make sure you have the necessary Databricks workspace permission before tweaking any settings. You'll need Databricks workspace permission and Databricks admin privileges. Without these, you won't be able to make the changes required. So, log in with your admin credentials, and let's get rolling.

Step 1—Log in to Databricks

First off, sign in to your Databricks account. Use your Databricks admin credentials to make sure you have the right level of permission.

Step 2—Access the Databricks Settings Page

Once you’ve logged in, navigate to the main Databricks workspace menu. From there, go to the Databricks Settings page by right-clicking your Databricks username/user-profile which is located at the top right corner.

Step 3—Navigate to the Databricks Security Tab

Now, look for the Databricks Security tab and click on it. This section contains options for managing permissions, authentication, and other Databricks security-related configurations.

Step 4—Enable or Disable Notebook Results Download

In the Databricks Security tab, scroll down to Egress and Ingress, and look for Notebook Results Download. This setting lets Databricks users download the outputs from their notebook cells if it's turned on. To allow Databricks Notebook downloads, flip the switch on. To disable them, flip it off. Remember, if your Databricks Notebooks handle confidential data, you might want to restrict this option to keep it from leaving the Databricks workspace.

➥ If disabled:

➥ If enabled:

Step 5—Enable or Disable SQL Results Download

Next, look for the SQL Results Download option. It's what lets users export SQL query results directly from SQL cells in notebooks. Just toggle it on to allow download, or off to disable them. Disabling this can be a good idea, especially in shared notebooks where lots of people have access—it helps keep your data safe and prevents leaks. Again, enabling or disabling depends on your specific needs and Databricks security policies.

Step 6—Enable or Disable Databricks Notebook and File exporting

Scroll down to the Databricks Notebook and file exporting option. This setting controls whether Databricks users can export entire notebooks as files (e.g., DBC archive, Source file, IPython Notebook, HTML). Toggle the option on to allow notebook exports or off to restrict them. Limiting notebook exports can prevent proprietary code or sensitive workflows from being shared externally.

➥ If disabled: 

➥ If enabled: 

 Step 7—Enable or Disable Results Table Clipboard Features

Finally, scroll down at the end of the Databricks settings page there you will see the Results table clipboard features option. This option manages whether users can copy data directly from results tables into their clipboard. Like before, use the toggle to turn this feature on or off. Disabling it can reduce the risk of unauthorized copying and sharing of data outside the Databricks workspace.

➥ If disabled: 

➥ If enabled: 

Step 8—Save Changes and Refresh the Page

After making your changes, refresh your browser to confirm that the updated permissions are in effect. Test the settings by logging in as a regular user and trying to download content. If everything looks good, you're all set.

🔮 Step-By-Step Guide to Enable/Disable File Downloads in Databricks Notebooks for Specific User Groups

Managing file download permissions for specific user groups in Databricks helps you control data access at a granular level. Here’s a detailed guide to walk you through the process.

Prerequisites

Just like before, you'll need Databricks workspace permission and Databricks admin privileges. These are essential for managing group-level permissions. Without them, you won't be able to assign or modify permissions for specific user groups.

Step 1—Log in to Databricks

Start by logging into Databricks using your Databricks admin credentials. Head straight to the Databricks Admin Console once you're in. This is where you'll manage user and group permissions.

Step 2—Access the Databricks Settings Page

Once logged in, navigate to the main Databricks workspace menu. From there, go to the Databricks Settings page by right-clicking your username/user-profile located at the top right corner.

Now, look for the Identity and Access tab and click on it. This step gets you closer to controlling those downloads.

Step 3—Navigate to Databricks Access Control Settings

Now head over to the Management and permissions section. Click on the Manage button of the Groups section to open its settings. 

Then, proceed to click on an existing group or create a new one. Once you have clicked on the group name, you can view and edit the current permissions. Look for the Entitlements tab and click on it. This brings up a detailed view of what the group can and cannot do. For example, you can allow unrestricted cluster creation, Databricks SQL access, and Databricks workspace permission. All options are laid out clearly here.

Step 4—Manage Group Permissions

Add or remove groups as needed. Assign permissions accordingly. Think about what each group needs to do.

Step 5—Assign Permission to Databricks Notebook

Now, head back to the Databricks workspace section and click on the notebook you want to assign the permission. Right-click on the notebook or click on the hamburger menu located at the right end of the notebook. You'll see a Share (Permissions) option. Click on that option. This step lets you fine-tune who sees what within specific notebooks.

Step 6—Assign Permissions to User Groups

Once you’ve clicked on Share (Permissions), a dialog box appears. You’ll see a list of users and groups with current access levels. Add the user group you want to manage by typing its name into the search or selection box. Once the group appears, assign the appropriate permission level:

• Can Manage: Full control over the notebook.
• Can View: Read-only access.
• Can Edit: Can make changes but not execute.
• Can Run: Can execute code but not change content.

Adjust permissions based on your organizational policies. It's all about balancing security and usability. Ask yourself: Does this group really need full access, or will read-only suffice?

Step 7—Verify Permissions

After assigning permissions, double-check the settings to confirm everything is configured correctly. Log in as a user from the modified group. Try performing various actions to see if they work as expected. If everything checks out, you've successfully managed group permissions.

To test, try downloading files or running queries. If users get an error message when trying to download something they shouldn’t, you know your settings work.

Sidebar: Why Granular Control Matters

Granular control not only prevents leaks but also improves productivity. When users have a clear idea of what they can and can't do, they don't waste as much time figuring out permissions. That means they spend more time on the work that matters. It might seem like extra work upfront, but it's worth it in the end.

🔮 Bonus—Step-By-Step Guide to Enable/Disable File Uploads in Databricks Using the UI

Controlling file uploads in Databricks is key to maintaining Databricks data security. Let’s dive into how you can manage these settings using the UI, focusing on your specific needs and keeping things straightforward.

Prerequisites

You guessed it—you still need Databricks workspace permission and Databricks admin privileges. These are non-negotiable for adjusting upload settings. Without them, you won't be able to change anything. So, log in with your Databricks admin credentials and get ready to tweak some settings.

Step 1—Log in to Databricks

Start by logging into Databricks. Use your admin credentials to sign in.

Step 2—Navigate to the Databricks Security Settings

Navigate to the main Databricks workspace menu. From there, go to the Databricks Settings page by right-clicking your username or user profile, which is located at the top right corner.

Now, look for the Databricks Security tab and click on it.

Step 3—Disable the Upload Data UI

In the Databricks Security tab, scroll down to Egress and Ingress, and look for the Upload data using the Databricks UI option. This controls whether users can upload files through the Databricks interface. Toggle the switch off to disable uploads or turn it on to enable them. Disabling this feature prevents users from uploading files via the UI.

When you toggle the switch, consider what impact this will have on your workflow. If users rely heavily on uploading files, disabling this might slow them down. But if Databricks security is your top concern, it makes sense to limit this functionality.

Optional—Disable the DBFS File Browser

If you want to go further, head over to the Advanced tab.

Scroll down to the end of the page and find the DBFS File Browser setting. This controls browsing and uploading files using the visual interface. Toggle this switch off to prevent users from accessing the Databricks DBFS browser. This adds another layer of Databricks security by stopping unauthorized file uploads.

Disabling the Databricks DBFS File Browser might seem extreme, but it can save you from potential headaches. Think about it: fewer ways to upload files mean fewer chances for something to go wrong. But keep in mind that some users might need this feature for their work. Balance security with usability.

Step 5—Save Changes

Don’t forget to refresh the page to verify that everything works as intended. Testing is crucial here too. Make sure users can't upload files if that's what you intend. If they still can, double-check your settings.

Conclusion

And that’s a wrap! Now that you know how to manage file downloads and results exports in Databricks Notebooks, you can do a better job of managing your data. Controlling access isn't just about toggling settings—you need to enforce proper permissions, audit data movements, and align with compliance requirements. Getting the balance right between letting people get to what they need and keeping it secure is crucial. Too much freedom for your team invites trouble. But if you're too restrictive, productivity can suffer. The goal is to balance your team's workflow with security needs.

In this article, we covered:

• Essentials About Databricks Download Permissions
• Step-by-Step Guide to Enabling or Disabling File and Result Downloads in Databricks Notebooks
• Step-by-Step Guide to Managing File Download Permissions for Specific User Groups in Databricks
• Step-by-Step Guide to Enabling or Disabling File Uploads in Databricks via the UI

… and more!

FAQs

How do I turn off download in Databricks?

To disable the ability for users to download results from notebooks:

1. Click on your username/user-profile located at the top-right corner.
2. Navigate to the Databricks workspace Settings page and go to the Security tab.
3. Scroll down to the Egress and Ingress section, locate the Notebook results download option, and toggle it off.

How to enable Databricks DBFS file browser in Databricks?

To enable the Databricks File System (DBFS) browser:

1. Access the Databricks settings page by clicking on your username and selecting it.
2. Click on the Advanced tab.
3. Find the Databricks DBFS File Browser option and toggle it on.

How do I give permissions in Databricks?

To manage user permissions:

1. Navigate to the Databricks settings page and choose Identity and Access.
2. Select the user or group you want to modify and click the Manage button.
3. Adjust permissions as needed and save your changes.

What are the permissions for Databricks data access?

Databricks provides various permission levels to control data access:

➥ Can Manage: Full control.

➥ Can View: Read-only.

➥ Can Edit: Edit but not execute.

➥ Can Manage: Full control, including managing permissions and deleting content.

Can I restrict downloads for only certain notebooks instead of all notebooks?

Currently, Databricks allows you to disable download capabilities at the workspace level. To restrict downloads for specific notebooks, you can manage permissions by:

1. Navigating to the specific notebook.
2. Clicking on Share (or Permissions).
3. Adjusting user or group permissions to limit access

How do I know if a user has attempted to download data they shouldn't have?

Databricks provides audit logs where you can track user activities, including attempts to download data. Check these logs for any unauthorized actions.

Are there any programmatic ways to manage download permissions?

Currently, managing download permissions is primarily done through the Databricks UI. However, you can use the Databricks REST API to manage permissions programmatically. This includes using the Permissions API to set permissions for notebooks, clusters, and other Databricks workspace objects, as well as automating permission management by integrating API calls into your workflows.