https://cybertoolchain.io/tools/immuta New releases and features in Immuta, tracked by The Cyber Toolchain. en Fri, 30 Oct 2026 07:45:13 GMT https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Fri, 30 Oct 2026 07:45:13 GMT Immuta adds custom securables to extend subscription policies to dashboards, files, APIs, and SaaS applications beyond native integrations⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Immuta now supports custom securables, letting you register external assets — dashboards, files, APIs, and SaaS applications — in Immuta and control access to them with subscription policies; your tooling then calls Immuta's APIs or webhooks to retrieve access decisions and enforce them in the target system.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Fri, 16 Oct 2026 07:45:22 GMT Tag-driven domain updates now async (202 Accepted); SAML drops SHA-1 and OpenID Connect drops unsigned 'none' JWT algorithm.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • New and updated SAML IAM configurations no longer support SHA-1; supported signature and digest algorithm values are now `SHA-256` and `SHA-512`.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • The unsigned JWT algorithm (`none`) is no longer available as a supported ID token signing algorithm in OpenID Connect configurations. Breaking changes: • Tag-driven domain update API endpoints now return `202 Accepted` instead of `200 OK`; callers that assume the update is complete when the request returns will behave incorrectly and must be updated to handle the async response. • New or updated SAML IAM configurations can no longer use SHA-1 for signature or digest algorithms; existing configurations using SHA-1 (explicitly or via the previous SHA-1 default) continue to work until further notice but must migrate before a future enforcement step. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Fri, 18 Sep 2026 07:33:50 GMT Immuta Request app now supports multi-user access requests in a single submission⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Supports requesting access for multiple users simultaneously in the Request app, replacing the need to submit separate requests per person.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds hover-over tooltips on user names in the Request app to display each user's email address, helping distinguish users with similar or identical names. Breaking changes: • New Snowflake connections can no longer be created using username/password authentication, following Snowflake's deprecation of that method for service users; existing connections continue to work until Snowflake completes its deprecation phases in October 2026. • Fingerprint-based masking options for Snowflake (format-preserving masking, randomized response masking, and rounding/grouping using a data fingerprint) are deprecated and will be removed from Immuta SaaS on December 15, 2026; tenants without existing policies using these options can no longer create them. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Tue, 15 Sep 2026 07:33:16 GMT Immuta Request app now supports multi-user access requests in a single submission.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds multi-user access requests to the Immuta Request app, letting managers and admins select multiple users in a single request form and submit once instead of once per user.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds email address hover-over on user names in the request form to distinguish between users with similar or identical names. Breaking changes: • Fingerprint-based masking options (format-preserving masking, randomized response masking, and rounding/grouping using a data fingerprint) for Snowflake integrations are deprecated and will be removed from Immuta SaaS on December 15, 2026. Tenants without existing policies using these options can no longer create them. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Thu, 10 Sep 2026 07:33:52 GMT Immuta Request app now supports bulk multi-user access requests and email hover tooltips on user names.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Enables requesting access for multiple users in a single submission via the Immuta Request app, replacing the need to create separate requests per person.⁠︀︄︇︀︅︉︀︅︀︀︃︀︀︅︅︀︅︊︀︄︆︀︃︄⁠ • Adds email address display on hover over user names in the request form to disambiguate users with similar or identical names. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Mon, 07 Sep 2026 07:33:11 GMT Immuta adds intent-based access control for Databricks Unity Catalog, plus metric view subscription policy support. • Introduces intents (public preview) for Databricks Unity Catalog: policy authors configure groups authorized to use an intent and attributes that replace a user's birthright attributes while the intent is active, enabling use-case-driven, auditable access to sensitive data such as PII. • Adds subscription policy support for Databricks Unity Catalog metric views, enabling access provisioning and governance for that object type through existing Immuta policies. Breaking changes: • Immuta will apply a lockout policy to data sources governed by a policy that references a nonexistent column or column tag; previously no lockout applied in these cases. Policies referencing missing columns or column tags will now trigger a lockout on rollout. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Fri, 28 Aug 2026 13:12:08 GMT Immuta adds intent-based access control for Databricks Unity Catalog and expands subscription policy support to metric views. • Introduces intents (public preview for Databricks Unity Catalog): policy authors can grant access based on a user's declared reason for accessing data, replacing birthright attributes with intent-specific attributes while the intent is active — enabling use-case-driven, auditable access to sensitive fields such as PII. • Extends subscription policy support to Databricks Unity Catalog metric views, allowing access provisioning and governance for that object type through existing Immuta subscription policies. Breaking changes: • Lockout policies will now apply to data sources governed by a policy that references a nonexistent column or column tag; previously no lockout was applied in those cases. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Sat, 22 Aug 2026 08:49:15 GMT Immuta adds at-a-glance access request queue metrics for governors and refines Databricks Unity Catalog ingestion logic. • Adds three summary tiles to the Access Requests page showing pending request count, average age of pending requests, and stewards with at least one pending request assigned — with a hover-over breakdown of top individuals or groups by request volume. • Updates Databricks Unity Catalog crawl logic to skip ingestion of catalogs where the Immuta workspace has read-only access and isolated catalogs where the Immuta service principal lacks `MANAGE` permission, filtering them out at ingestion time rather than failing during policy enforcement. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Thu, 06 Aug 2026 10:51:23 GMT Immuta adds connection health states, per-object policy sync toggles, managed groups for policies, and Redshift viewless automated data discovery. • New `ACTIVE`, `INACTIVE`, or `UNHEALTHY` health state display per connection in the Connections UI for Databricks Unity Catalog and Snowflake integrations. • Tag inheritance at the database or schema level, with bulk assignment or removal propagating to all attached data sources. • Data products now support two separate request forms: one for data access requests and one for masking exception requests, each with independent questions and data use agreements. • Automated sensitive data discovery now supported for Immuta's Amazon Redshift viewless integration, covering regex, dictionary, and column-name-regex identifier types. • Snowflake data policy resync now resyncs both data policies and subscription policies when triggered from a data source health check. • Integration settings for Databricks Unity Catalog and Snowflake connections now live directly within the Connections UI rather than in a separate settings area. Breaking changes: • Starting August 26, 2026, Databricks will mask `query_text` in the `query_history` system table by default; Immuta query audit will no longer contain query text and all query audit events will show as `Indeterminant` unless the Immuta service principal is added to the `databricks_pii_access` group in Databricks. • Immuta policy role names used to grant users access to Snowflake data sources will be renamed and recreated as part of the Snowflake integration architecture update rolling out from July 23, 2026 (user role names remain unchanged). • Integration error banners for Snowflake integration validation failures will no longer be displayed; errors will instead appear in the new Connections experience. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Wed, 05 Aug 2026 10:48:42 GMT Immuta adds Connection health dashboards, split data-product request forms, Redshift viewless auto-discovery, and system-managed identity groups. • Adds per-connection health state display (`ACTIVE`, `INACTIVE`, or `UNHEALTHY`) and moves integration settings directly into Connections for Databricks Unity Catalog and Snowflake. • Adds a per-object policy sync toggle in Connections that controls whether Immuta pushes policy down into the platform for a given data object, with a `Custom` label when a child object's setting differs from its parent. • Adds detail pages for leaf data objects in Connections, each including a direct link to the corresponding data source. • Adds bulk and individual tag assignment or removal at the database or schema level, with tags inherited by all attached data sources. • Adds configurable `New` tag behavior in App Settings — enabled for columns and disabled for data sources by default. • Adds force-delete capability for connections in an `UNHEALTHY` state. • Adds automated sensitive data discovery (regex, dictionary, and column-name regex identifiers) to Immuta's Amazon Redshift viewless integration. • Adds three built-in system-managed groups — `All Agents`, `All Users`, and `All Identities` — available for use in both subscription policies and data policies. • Enables separate access request forms and masking exception request forms per data product, with independent questions and data use agreements for each form type. • Manual data policy resync for Snowflake data sources now resyncs both data policies and subscription policies simultaneously. • Improves query performance for Snowflake securables with advanced masking exceptions via a more efficient comparison method. • Starburst (Trino) principal name matching is now case-insensitive by default for all customers as of July 1. Breaking changes: • Immuta will rename Snowflake policy role names as part of the new Snowflake integration architecture rollout (beginning July 23, 2026); existing policy roles will be recreated under new names. User role names remain unchanged and there is no downtime. • Starting August 26, 2026, Databricks will mask `query_text` in the `query_history` system table by default; Immuta's Databricks Unity Catalog query audit will lose query text and all affected events will show as `Indeterminant` unless the Immuta service principal is added to the `databricks_pii_access` group. • Immuta will no longer display integration error banners when integration validation fails; error messages will only be available through the new Connections experience. • When a data source is disabled, Immuta now revokes data owners' Immuta-managed grants in the data platform (behavior change release; on by default August 1, enabled for all accounts September 1). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Mon, 03 Aug 2026 11:45:51 GMT • Adds integration health states (ACTIVE, INACTIVE, UNHEALTHY) displayed per connection for Databricks Unity Catalog and Snowflake, giving admins at-a-glance integration status. • Adds per-object policy sync toggle in Connections, letting admins enable or disable policy push to the platform for individual data objects with visibility into child object configuration. • Adds automated sensitive data discovery for Immuta's Amazon Redshift viewless integration, supporting regex, dictionary, and column name regex identifier types. • Adds tag ingestion support for Databricks Unity Catalog foreign catalogs (Lakehouse Federation) by falling back to system.information_schema tag views. • Enables case-insensitive Starburst (Trino) principal name matching for more reliable user and service account identification. Breaking changes: • Immuta policy role names used to grant users access to Snowflake data sources will be renamed as part of the Snowflake integration architecture update rolling out from July 23, 2026; existing policy roles will be recreated under new names. • Integration error banners for Snowflake integration validation failures are removed; these messages are now only available through the new Connections experience. • When a data source is disabled, Immuta now revokes data owners' Immuta-managed grants in the data platform (behavior change release; on by default 8/1, enabled for all 9/1). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Sat, 01 Aug 2026 18:29:58 GMT Immuta adds richer Connections controls, split request forms for data products, Redshift viewless data discovery, and new managed identity groups. • Adds integration health states (ACTIVE, INACTIVE, UNHEALTHY) and per-connection settings directly within Connections for Databricks Unity Catalog and Snowflake. • Introduces per-object policy sync toggle to control whether Immuta pushes policies down to a given data object, with visibility into child object configuration and a Custom label when child settings differ from the parent. • Adds individual detail pages for leaf data objects, including a direct link to the corresponding data source. • Enables bulk or individual tag assignment and removal at the database or schema level, with tag inheritance flowing to all attached data sources. • Makes the behavior of the New tag configurable in App Settings (default: enabled for columns, disabled for data sources). • Allows force-deletion of connections in an UNHEALTHY state. • Supports two distinct request forms per data product — one for data access requests and one for masking exception requests — each with independent questions and data use agreements. • Introduces three built-in, system-managed groups — All Agents, All Users, and All Identities — available for use in subscription and data policies. • Expands Unity Catalog tag ingestion to include foreign catalogs created via Lakehouse Federation, using system.information_schema tag views as a fallback. • Improves Snowflake manual policy resync to synchronize both data policies and subscription policies in a single operation. • Delivers query performance improvements for Snowflake securables that have policies with advanced masking exceptions. • Treats Starburst (Trino) principal names as case-insensitive when matching to Immuta users and service accounts. Breaking changes: • Immuta policy role names used to grant users access to Snowflake data sources will be renamed as part of the Snowflake integration architecture update rolling out beginning July 23, 2026; existing policy roles will be recreated under new names. • Integration error banners for Snowflake validation failures will no longer be displayed; error details are now available only through the new Connections experience. • When a data source is disabled, Immuta now revokes data owners' Immuta-managed grants in the data platform (behavior change release, on by default 8/1). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Thu, 30 Jul 2026 15:46:29 GMT • Expands automated sensitive data discovery (regex, dictionary, and column-name regex identifiers) to Immuta's Amazon Redshift viewless integration. • Snowflake integration error messages are moved out of error banners and into the connections experience. Breaking changes: • Immuta policy role names used to grant users access to Snowflake data sources will be renamed as part of the Snowflake integration architecture update rolling out from July 23, 2026. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Tue, 28 Jul 2026 16:00:18 GMT Immuta adds separate access/masking request forms, Redshift viewless auto-discovery, managed groups for policies, and OAuth 2.0 for Alation. • Adds separate access and masking exception request forms for data products, allowing stewards to configure independent questions and data use agreements per request type. • Expands automated sensitive data discovery to Immuta's Amazon Redshift viewless integration, automatically tagging matching columns using regex, dictionary, and column-name regex identifiers. • Introduces three built-in Immuta managed groups — All Agents, All Users, and All Identities — available for authoring subscription and data policies without manual group management. • Adds OAuth 2.0 authentication support for Immuta's Alation integration alongside existing API key authentication, eliminating recurring token refresh requirements. • Extends Snowflake manual policy resync to cover both data policies and subscription policies when triggered from a data source health check. • Enables Unity Catalog tag ingestion for foreign catalogs (Lakehouse Federation) by falling back to system.information_schema tag views when per-catalog views are unsupported. • Embeds Immuta documentation and an AI-powered chatbot directly in the Immuta UI, accessible from the top menu Documentation icon. Breaking changes: • Immuta policy role names used to grant users access to Snowflake data sources will be renamed as part of the Snowflake integration architecture update rolling out beginning July 23, 2026; policy roles will be recreated under new names. • Integration error banners for Snowflake integration validation failures will no longer be displayed; errors will only be available through the connections experience. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Fri, 24 Jul 2026 15:22:16 GMT • Adds separate request forms for data products: one for data access requests and one for masking exception requests, each with independent questions and data use agreements. • Expands Snowflake manual policy resync to cover both data policies and subscription policies simultaneously. • Adds automated sensitive data discovery (regex, dictionary, and column-name identifiers) for the Amazon Redshift viewless integration. • Adds OAuth 2.0 authentication support to the Alation integration, eliminating repeated token refresh cycles required by API key authentication. • Embeds Immuta documentation and an AI-powered chatbot directly in the Immuta UI via a new Documentation icon in the top menu. • Starburst (Trino) principal name matching is now case-insensitive, enabled by default for all customers as of July 1. Breaking changes: • Snowflake integration architecture update (rolling out July 23, 2026): Immuta policy role names used to grant users access to Snowflake data sources will be changed and recreated; any automation or tooling that references specific policy role names by their current values will need to be updated. • Immuta will no longer display integration error banners when integration validation fails for Snowflake; errors will only be visible through the connections experience. • When a data source is disabled in Immuta, Immuta now revokes data owners' Immuta-managed grants in the data platform (behavior change releasing 8/1 by default, 9/1 for all). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Thu, 23 Jul 2026 15:49:38 GMT Immuta adds separate access/masking request forms, managed groups for policies, Redshift viewless discovery, and OAuth 2.0 for Alation. • Adds separate access and masking exception request forms for data products, allowing stewards to configure independent questions and data use agreements per request type. • Introduces three built-in system-managed groups (All Agents, All Users, All Identities) for writing subscription and data policies without manual membership management. • Enables automated sensitive data discovery for Amazon Redshift viewless integration, supporting regex, dictionary, and column name regex identifiers with automatic tag application. • Adds OAuth 2.0 authentication support for the Alation integration, eliminating the need to manually rotate expiring access tokens. • Expands Databricks Unity Catalog tag ingestion to support foreign catalogs (created via Lakehouse Federation) by falling back to system.information_schema tag views. • Snowflake data policy resync now resyncs both data policies and subscription policies when triggered from a health check. • Introduces case-insensitive Starburst (Trino) principal name matching, now on by default for all customers not opted out. • Adds in-product documentation search and AI-powered chatbot accessible from the top menu in the Immuta UI. • Improves query performance for Snowflake policies with advanced masking exceptions using a more efficient comparison method. Breaking changes: • Immuta will update Snowflake policy role names used to grant users access to Snowflake data sources as part of the architecture rollout beginning July 23, 2026; policy roles will be recreated under new names (user role names remain unchanged). • Integration error banners for Snowflake integration validation failures will no longer be displayed in the UI; error messages will instead be available through the connections experience. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Mon, 20 Jul 2026 13:25:23 GMT Immuta adds managed groups for agentic policies, Redshift viewless discovery, Delta Sharing enforcement, and OAuth 2.0 for Alation. • Adds three built-in system-managed groups (All Agents, All Users, All Identities) usable in subscription and data policies to enforce system-wide access rules without manual group management. • Supports row filtering and column masking on Unity Catalog managed, external, and foreign tables in Databricks Delta Sharing shares. • Adds OAuth 2.0 authentication option for Immuta's Alation integration, eliminating recurring API key rotation requirements. • Extends Databricks Unity Catalog tag ingestion to foreign catalogs (Lakehouse Federation) by falling back to system.information_schema tag views. • Embeds Immuta documentation and an AI-powered chatbot directly in the Immuta UI, accessible from the top menu Documentation icon. • Introduces case-insensitive Starburst (Trino) principal name matching when mapping Trino principals to Immuta users and service accounts. Breaking changes: • Snowflake policy role names will be renamed as part of the back-end architecture update rolling out beginning July 23, 2026; existing policy roles will be recreated under new names (user role names remain unchanged). • Integration error banners for Snowflake integration validation failures will no longer be displayed in the existing location; errors are now only available through the new connections experience. • When a data source is disabled in Immuta, data owners' Immuta-managed grants in the data platform will be revoked (behavior change release: on by default 8/1, enabled for all 9/1). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Sat, 18 Jul 2026 14:45:24 GMT • Supports automated sensitive data discovery (regex, dictionary, and column-name regex identifiers) for the Amazon Redshift viewless integration. • Embeds Immuta documentation and an AI-powered chatbot directly in the Immuta UI for in-product search. Breaking changes: • When a data source is disabled, Immuta will revoke data owners' Immuta-managed grants in the data platform (opt-in 6/30–7/31, on by default 8/1, enforced for all 9/1) — workflows that depend on owners retaining access after disabling a source will break. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Fri, 17 Jul 2026 15:07:25 GMT Immuta adds managed groups for system-wide policies, automated Redshift discovery, OAuth 2.0 for Alation, and Delta Sharing row/column enforcement. • Automated sensitive data discovery now available for Immuta's Amazon Redshift viewless integration, supporting regex, dictionary, and column-name-regex identifiers. • Row filtering and column masking now enforced for Databricks Delta Sharing recipients on Unity Catalog managed, external, and foreign tables. • Manual data policy resync in Snowflake data source health checks now resyncs both data policies and subscription policies. • Integration error banners replaced by error visibility through the new connections experience. • Snowflake back-end architecture update improves efficiency and performance at higher scale for the Snowflake integration. • Documentation embedded directly in the Immuta UI with AI-powered chatbot accessible from the top menu. • Improved query performance for Snowflake policies that include advanced masking exceptions via a more efficient comparison method. Breaking changes: • Immuta policy role names used to grant users access to Snowflake data sources will be renamed as part of the Snowflake architecture update beginning July 23, 2026; existing policy roles will be recreated under new names. • When a data source is disabled in Immuta, Immuta-managed grants for data owners in the data platform will be revoked (behavior change release: on by default 8/1, enabled for all 9/1). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Thu, 16 Jul 2026 15:28:35 GMT Immuta adds automated Redshift data discovery, built-in managed groups, Delta Sharing row/column masking, Teradata hashing, and OAuth 2.0 for Alation. • Introduces three built-in Immuta-managed groups — All Agents, All Users, and All Identities — available for use in subscription and data policies without manual membership management. • Enables row filtering and column masking (subscription and data policies) on Unity Catalog managed, external, and foreign tables in Databricks Delta Sharing shares. • Supports OAuth 2.0 authentication for Immuta's Alation integration alongside existing API key authentication, eliminating recurring token rotation. • Extends Immuta's Databricks Unity Catalog tag ingestion to foreign catalogs (Lakehouse Federation) by falling back to system.information_schema tag views. • Adds constant and hash masking support for Immuta's Teradata integration, expanding beyond existing null masking. • Slack and Microsoft Teams notifications for the Request app are now generally available, delivering real-time alerts for approvals, data access changes, and requests. • Extends Microsoft Teams Request app notifications to the Asia Pacific region (previously North America and Europe only). • Embeds Immuta documentation and an AI-powered documentation chatbot directly in the Immuta UI via a Documentation icon in the top menu. • Immuta's Starburst (Trino) integration now treats Trino principal names as case-insensitive when matching users and service accounts. Breaking changes: • Beginning August 1, disabling a data source in Immuta will revoke data owners' Immuta-managed grants in the data platform for that data source; previously, disabling a data source did not remove those grants. • Beginning August 1, Starburst (Trino) principal name matching becomes case-insensitive for all accounts; setups relying on case-sensitive principal name matching will be affected. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Wed, 15 Jul 2026 22:57:45 GMT Immuta adds automated Redshift discovery, built-in managed groups, OAuth for Alation, Delta Sharing masking, and Teams/Slack notifications. • Introduces three built-in system-managed groups — All Agents, All Users, and All Identities — usable in both subscription and data policies without manual membership management. • Supports OAuth 2.0 authentication for Immuta's Alation integration, eliminating the need for recurring API key rotation. • Enables row filtering and column masking on Unity Catalog managed, external, and foreign tables in Databricks Delta Sharing shares (now GA for all accounts). • Adds Slack and Microsoft Teams notifications for the Request app (generally available), delivering event-driven alerts for approvals, data access changes, and requests. • Expands Microsoft Teams Request app notifications to the Asia Pacific region (public preview). • Adds constant and hash masking support for Teradata in addition to existing null masking, improving cross-platform masking policy consistency. • Enhances Review Assist (AI-powered access request recommendation engine) to incorporate request form responses as contextual input for its analysis. • Embeds Immuta documentation and an AI-powered documentation chatbot directly in the Immuta UI via a Documentation icon in the top menu. • Starburst (Trino) principal name matching is now case-insensitive by default, enabling more reliable user and service account identification. Breaking changes: • When a data source is disabled in Immuta, Immuta now revokes data owners' Immuta-managed grants in the data platform; previously, disabling a data source did not remove those grants (on by default 8/1, enabled for all 9/1). Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Wed, 15 Jul 2026 01:23:04 GMT • Adds automated sensitive data discovery for the Amazon Redshift viewless integration, supporting regex, dictionary, and column name regex identifier types with automatic tag application. • Adds Slack and Microsoft Teams event-driven notifications for the Request app (approvals, access changes, requests), now generally available. • Expands Teradata integration masking support to include constant and hash masking in addition to existing null masking. • Revokes data owner grants when a data source is disabled (behavior change rolling out via opt-in period starting June 30). • Review Assist now incorporates request form responses as additional context in its AI-powered access request recommendations. Breaking changes: • When a data source is disabled in Immuta, Immuta now revokes data owners' Immuta-managed grants in the data platform — previously, disabling a data source did not remove those grants. This change follows the behavior change release process (on by default: 8/1; enabled for all: 9/1). • Starburst (Trino) principal name matching is now case-insensitive; previously, Trino principals had to match the exact capitalization of the corresponding user or service account in Immuta. This is on by default starting 7/1 and enabled for all accounts on 8/1. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta https://documentation.immuta.com/saas/releases/index https://documentation.immuta.com/saas/releases/index Mon, 13 Jul 2026 10:07:04 GMT Immuta adds automated Redshift discovery, managed policy groups, Alation OAuth 2.0, Delta Sharing masking, and Teams/Slack notifications. • Adds automated sensitive data discovery (regex, dictionary, and column name regex identifiers) for the Amazon Redshift viewless integration, auto-tagging matching columns. • Introduces three built-in Immuta-managed groups — All Agents, All Users, and All Identities — usable in subscription and data policies without manual membership management. • Enables case-insensitive Starburst (Trino) principal name matching for more reliable user and service account identification (on by default 7/1, mandatory 8/1). • Revokes data owner grants when a data source is disabled in Immuta (behavior change: opt-in 6/30, on by default 8/1, mandatory 9/1). • Extends Unity Catalog tag ingestion to foreign catalogs (Lakehouse Federation) by leveraging system.information_schema tag views as a fallback. • Embeds Immuta documentation and an AI-powered chatbot directly in the Immuta UI via a Documentation icon in the top menu. • Adds OAuth 2.0 authentication support for the Alation integration, eliminating recurring API key rotation alongside the existing API key method. • Supports row filtering and column masking on Unity Catalog managed, external, and foreign tables in Databricks Delta Sharing shares. • Slack and Microsoft Teams notifications for the Request app are now generally available, delivering event-driven alerts for approvals, access changes, and requests. • Extends Request app Microsoft Teams notifications to the Asia Pacific region (previously North America and Europe only). • Adds constant and hash masking support for Immuta's Teradata integration, complementing existing null masking. • Review Assist (AI-powered access request recommendation engine) now incorporates request form responses as additional context for recommendations. Full history on Cyber Toolchain: https://cybertoolchain.io/tools/immuta