External engines authenticate with a scoped Loom API token. The catalog container has internal ingress only — it is never reachable from outside the VNet.
Published tables
Grant mappingUnity Catalog privileges an external engine is subject to, per namespace.
No namespace grants to show yet. Grants appear once the catalog serves at least one namespace.