OBO authorization for Databricks Apps is now GA.
Apps can use the signed-in user's existing Unity Catalog permissions, while API scopes limit what they can do on their behalf.
Build personalized, governed apps without recreating access rules in code: