LakeSentry Profile, CLI, and API Keys

The Profile page is available from the user menu. It contains user account details, CLI downloads, and API key management for admins and owners.

CLI downloads

LakeSentry publishes CLI binaries when releases are configured for the tenant. The Profile page recommends the best asset for your platform and lists other available downloads.

Use the CLI for scripted exports and automation. After downloading it, create an API key on the same page and configure the CLI with your LakeSentry instance URL and key.

API keys

API keys are personal credentials for CLI and programmatic access. They are available to admins and owners.

When creating a key:

1. Give it a descriptive name such as CLI, CI Pipeline, or Monitoring.
2. Choose an access level (Read, Write, Databricks write, or Admin) appropriate for the integration. The key inherits your LakeSentry role; the create dialog does not let you select a separate role.
3. Copy the generated secret immediately. LakeSentry only shows it once.
4. Store it in a password manager or secret manager.
5. Revoke keys that are no longer used.

Security guidance

• Do not share personal API keys between users.
• Prefer short-lived or purpose-specific keys where possible.
• Rotate keys used by automation on a regular schedule.
• Revoke keys before removing a user.