Databricks makes user-scoped app authorization generally available

Databricks made on-behalf-of-user authorization generally available for apps that access supported platform APIs. Apps can now act with a signed-in user's identity, letting Unity Catalog enforce existing data permissions, row filters and column masks without developers recreating those rules in application code. API scopes separately limit which operations an app may perform; the restricted-query scope permits read-only SQL. Apps can retain their own identity for shared configuration and background work. Workspace administrators can restrict available scopes, but removing a scope does not stop apps already running with it: they cannot restart, deploy or update until that scope is removed.