Unity Catalog Volumes for Non-Table File Management: Managed/External, Permissions, and Operations

Unity Catalog Volumes lets you govern files that cannot be structured as Delta Lake tables — raw CSV/JSON/Parquet files, images, ML model artifacts, configuration files, and so on. You can apply UC permission control, auditing, and lineage to the non-table files that used to be managed via DBFS or direct cloud-storage mounts.

This article walks through an overview of Volumes, the difference between Managed and External, SQL/Python examples for creating and operating them, a comparison with DBFS, the permission model, and the points the exam tends to test.

Volumes Overview

A Volume is an object in the Unity Catalog namespace (Catalog → Schema → Volume) and acts as a container for files. While tables manage structured data as rows and columns, Volumes manage files and directories.

• Path format: /Volumes/<catalog>/<schema>/<volume>/<path>
• Access methods: Spark API / dbutils / SQL / REST API / Unity Catalog UI
• Permission control: READ VOLUME (read) / WRITE VOLUME (write)
• Auditing: every file operation is recorded in the audit log

Managed Volume vs External Volume

CREATE VOLUME Syntax

-- Create a Managed Volume
CREATE VOLUME prod.raw.landing_files
COMMENT 'Managed Volume for landing CSV and JSON files';

-- Create an External Volume
-- An External Location and Storage Credential must exist first
CREATE EXTERNAL VOLUME prod.raw.external_landing
LOCATION 's3://my-bucket/landing/'
COMMENT 'External Volume pointing at an existing S3 bucket';

-- Check the Volume
SHOW VOLUMES IN prod.raw;

-- Volume details
DESCRIBE VOLUME prod.raw.landing_files;

-- Drop the Volume
DROP VOLUME prod.raw.landing_files;

File Operations

Files inside a Volume can be operated on via SQL, dbutils, or the Python API.

-- SQL: list files
LIST '/Volumes/prod/raw/landing_files/2026/03/';

-- SQL: upload a file (from a notebook)
PUT '/Volumes/prod/raw/landing_files/config.json'
  OVERWRITE;

-- SQL: delete a file
REMOVE '/Volumes/prod/raw/landing_files/old_data.csv';

# Python / dbutils: list files
files = dbutils.fs.ls("/Volumes/prod/raw/landing_files/")
for f in files:
    print(f.name, f.size)

# Python: read a file
df = spark.read.csv(
    "/Volumes/prod/raw/landing_files/sales_2026.csv",
    header=True,
    inferSchema=True
)

# Python: write a file
df.write.mode("overwrite").parquet(
    "/Volumes/prod/raw/landing_files/output/"
)

# Python: copy a file
dbutils.fs.cp(
    "/Volumes/prod/raw/landing_files/config.json",
    "/Volumes/prod/raw/landing_files/backup/config.json"
)

Comparison with DBFS

Volumes Permission Model

Permissions on a Volume are granted at the volume level. You cannot set per-file permissions; READ/WRITE at the volume level is the finest granularity.

-- Grant read access
GRANT READ VOLUME ON VOLUME prod.raw.landing_files TO `data-analysts`;

-- Grant write access
GRANT WRITE VOLUME ON VOLUME prod.raw.landing_files TO `data-engineers`;

-- Grant the privilege to create Volumes (schema level)
GRANT CREATE VOLUME ON SCHEMA prod.raw TO `data-engineers`;

-- Check the privileges
SHOW GRANTS ON VOLUME prod.raw.landing_files;

READ VOLUME allows reading and listing files, while WRITE VOLUME allows writing and deleting files. Note that these are independent of the table SELECT permission: reading files via a Volume requires READ VOLUME, and querying a table requires SELECT.

Real-world Use Cases

• Landing zone: receive CSV/JSON files from external systems into a Volume and ingest them with Auto Loader
• ML artifacts: store trained models and scoring result files in a Volume
• Configuration files: centrally manage ETL pipeline parameter files (YAML/JSON)
• Images/PDFs: share unstructured data across teams under UC governance

Points the Exam Tests

• The difference in DROP behavior between Managed Volume and External Volume
• That Volume paths differ from DBFS paths (/Volumes/...)
• The granularity of READ VOLUME and WRITE VOLUME (per volume)
• That External Volume requires an External Location to be created first
• Why Volumes is recommended over DBFS (governance, auditing, cross-workspace access)

Check Your Understanding

Frequently Asked Questions